$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/9afa84bd-048d-391e-a763-87af06db7f3c.roa File: 9afa84bd-048d-391e-a763-87af06db7f3c.roa (raw, json) Hash identifier: 8dggX+7mAE32sfh6H9LnyQKfX1VcVAjFGKNOJFj8nh4= Subject key identifier: 22:8F:23:23:96:2E:8E:AC:2F:E1:05:88:16:2A:9C:C9:8A:EE:B7:BB Certificate issuer: /CN=8e562ad4-986c-42b2-bce3-9cc48f5f64de Certificate serial: 010D0C9F4328584DAA437333C60FD79BE6DF2CC0 Authority key identifier: 98:7C:66:96:69:F8:0F:38:D6:A3:B4:70:DF:0F:0D:51:08:B1:87:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/9afa84bd-048d-391e-a763-87af06db7f3c.roa Signing time: Wed 29 Apr 2026 07:44:54 +0000 ROA not before: Wed 29 Apr 2026 07:44:54 +0000 ROA not after: Tue 28 Jul 2026 07:44:54 +0000 asID: 153771 IP address blocks: 23.130.100.0/24 maxlen: 24 2602:f778::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/8e562ad4-986c-42b2-bce3-9cc48f5f64de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/8e562ad4-986c-42b2-bce3-9cc48f5f64de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:43:73:33:c6:0f:d7:9b:e6:df:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e562ad4-986c-42b2-bce3-9cc48f5f64de Validity Not Before: Apr 29 07:44:54 2026 GMT Not After : Jul 28 07:44:54 2026 GMT Subject: CN=b75dfcef-423b-4fe8-ab17-04c4b61862f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5c:ad:03:2c:cb:c7:cb:5d:7e:89:7e:79:e9: b9:f7:bc:d7:b5:8f:83:16:98:26:59:b4:3c:04:c5: 56:e0:b7:8c:65:f3:62:60:14:04:b6:f0:d7:5a:7e: b2:cc:9d:23:9b:be:01:ff:16:7d:e3:7b:24:44:68: af:18:6f:0e:7b:0b:0c:d9:90:9a:64:03:34:95:e7: cf:bc:f8:71:db:86:40:7e:83:01:70:f2:7b:39:74: 2a:fc:46:d0:b7:63:32:6e:74:49:69:c8:c2:ef:b1: 07:8a:c1:e4:86:e6:30:9e:d6:02:08:91:e7:c7:1f: a3:cf:93:e4:b3:99:00:13:96:66:6c:c8:fe:84:29: 3f:25:e7:f7:4d:d0:55:c0:56:98:23:34:56:2e:6e: 42:89:a8:38:82:60:11:c6:44:69:58:4a:ba:30:9e: 3e:9b:60:25:a3:c4:e4:23:c1:00:12:d0:0d:d4:c8: 1f:98:49:98:10:d5:76:a0:de:42:73:29:30:62:bf: 82:fd:75:7b:64:d4:22:f9:d0:f7:c6:15:a8:19:68: bc:da:5d:38:63:80:02:33:6d:07:06:27:91:42:31: 32:08:83:b1:4d:f4:a2:90:2f:35:0b:4c:f2:30:1f: 06:1f:a5:f3:86:48:36:23:99:b2:45:9f:0c:95:65: ee:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8F:23:23:96:2E:8E:AC:2F:E1:05:88:16:2A:9C:C9:8A:EE:B7:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/9afa84bd-048d-391e-a763-87af06db7f3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/8e562ad4-986c-42b2-bce3-9cc48f5f64de.crl X509v3 Authority Key Identifier: keyid:98:7C:66:96:69:F8:0F:38:D6:A3:B4:70:DF:0F:0D:51:08:B1:87:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de.cer sbgp-ipAddrBlock: critical IPv4: 23.130.100.0/24 IPv6: 2602:f778::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:82:0d:f2:76:67:f2:1c:79:00:70:e4:7d:97:a6:5c:44:df: 52:12:39:12:d3:91:f6:0b:5d:38:ad:47:93:8b:02:6d:ce:6e: 5e:77:19:76:47:3d:67:ba:66:45:39:ef:44:16:b6:ce:ac:5f: e3:f5:b8:54:08:59:c8:a0:76:53:77:86:c1:76:58:bf:2f:65: 66:1e:33:3a:af:a0:4f:09:19:4d:81:af:41:80:83:f0:71:44: 45:cd:7c:9a:ae:d0:44:b6:4a:61:f7:9a:62:99:22:dd:8d:0d: ff:d8:1c:28:3b:34:f4:03:f9:b6:9f:d6:16:cc:77:93:e7:4f: 1a:1a:85:c3:72:7b:1c:74:70:ad:3f:ae:04:fa:ec:62:70:a9: d7:c8:ba:f3:bf:c9:57:4e:69:89:7b:e1:66:c8:7d:41:da:e0: 81:b4:b6:c8:db:bb:5e:42:c1:6a:80:08:e2:03:d8:fe:cb:09: fa:f4:f7:37:46:4f:d2:53:d4:bd:5b:de:e4:06:5f:98:64:d2: c0:b6:2e:80:ec:09:9c:d4:0d:ed:b8:68:02:bb:46:b4:14:67: 14:5c:73:a4:9a:b1:b7:6d:c4:8a:81:7f:a0:ec:e3:92:4c:f4: 31:f2:5a:12:69:3b:b4:47:f4:5d:b0:75:0b:40:dc:e4:76:f1: cf:8d:da:fc -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2qQ3Mzxg/Xm+bfLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1NjJhZDQtOTg2Yy00MmIyLWJjZTMtOWNjNDhmNWY2 NGRlMB4XDTI2MDQyOTA3NDQ1NFoXDTI2MDcyODA3NDQ1NFowLzEtMCsGA1UEAxMk Yjc1ZGZjZWYtNDIzYi00ZmU4LWFiMTctMDRjNGI2MTg2MmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFytAyzLx8tdfol+eem597zXtY+DFpgmWbQ8 BMVW4LeMZfNiYBQEtvDXWn6yzJ0jm74B/xZ943skRGivGG8OewsM2ZCaZAM0lefP vPhx24ZAfoMBcPJ7OXQq/EbQt2MybnRJacjC77EHisHkhuYwntYCCJHnxx+jz5Pk s5kAE5ZmbMj+hCk/Jef3TdBVwFaYIzRWLm5Ciag4gmARxkRpWEq6MJ4+m2Alo8Tk I8EAEtAN1MgfmEmYENV2oN5CcykwYr+C/XV7ZNQi+dD3xhWoGWi82l04Y4ACM20H BieRQjEyCIOxTfSikC81C0zyMB8GH6Xzhkg2I5myRZ8MlWXupQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCKPIyOWLo6sL+EFiBYqnMmK7re7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZTU2 MmFkNC05ODZjLTQyYjItYmNlMy05Y2M0OGY1ZjY0ZGUvOWFmYTg0YmQtMDQ4ZC0z OTFlLWE3NjMtODdhZjA2ZGI3ZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGU1NjJhZDQtOTg2Yy00MmIyLWJj ZTMtOWNjNDhmNWY2NGRlLzhlNTYyYWQ0LTk4NmMtNDJiMi1iY2UzLTljYzQ4ZjVm NjRkZS5jcmwwHwYDVR0jBBgwFoAUmHxmlmn4DzjWo7Rw3w8NUQixhy0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZTU2MmFkNC05ODZjLTQyYjItYmNlMy05Y2M0 OGY1ZjY0ZGUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4JkMA4E AgACMAgDBgAmAvd4ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlgg3ydmfyHHkAcOR9l6ZcRN9SEjkS05H2 C104rUeTiwJtzm5edxl2Rz1numZFOe9EFrbOrF/j9bhUCFnIoHZTd4bBdli/L2Vm HjM6r6BPCRlNga9BgIPwcURFzXyartBEtkph95pimSLdjQ3/2BwoOzT0A/m2n9YW zHeT508aGoXDcnscdHCtP64E+uxicKnXyLrzv8lXTmmJe+FmyH1B2uCBtLbI27te QsFqgAjiA9j+ywn69Pc3Rk/SU9S9W97kBl+YZNLAti6A7Amc1A3tuGgCu0a0FGcU XHOkmrG3bcSKgX+g7OOSTPQx8loSaTu0R/RdsHULQNzkdvHPjdr8 -----END CERTIFICATE-----Generated at Wed May 13 02:27:35 2026 by rpki-client