$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3/035ffd39-1a72-349c-a0e6-876140194bdd.roa File: 035ffd39-1a72-349c-a0e6-876140194bdd.roa (raw, json) Hash identifier: Rb0M8uSVhOv5iIwCcP+s3hZKpeuoyCLPJfTRRgILP6o= Subject key identifier: 20:72:96:80:AB:65:51:F4:44:75:72:27:2D:7E:3C:FE:AF:2C:BC:32 Certificate issuer: /CN=4acd1d4c-d0c2-4520-9ddb-f466e3339ce3 Certificate serial: 010D0C9F4328584DCF2B1EBC3B6C744511F40A40 Authority key identifier: 05:3F:7A:43:24:90:34:BD:18:8A:A2:86:A5:E5:EA:5A:9C:4D:D0:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3/035ffd39-1a72-349c-a0e6-876140194bdd.roa Signing time: Tue 12 May 2026 13:00:30 +0000 ROA not before: Tue 12 May 2026 13:00:30 +0000 ROA not after: Mon 10 Aug 2026 13:00:30 +0000 asID: 398915 IP address blocks: 23.172.104.0/24 maxlen: 24 2607:7a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2b:1e:bc:3b:6c:74:45:11:f4:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4acd1d4c-d0c2-4520-9ddb-f466e3339ce3 Validity Not Before: May 12 13:00:30 2026 GMT Not After : Aug 10 13:00:30 2026 GMT Subject: CN=38538270-29ac-4c65-8345-0921423b3a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:80:36:a0:80:e0:f2:e7:b5:bd:b6:66:97:3c: 16:f1:bd:51:ae:3d:0c:cb:46:89:b6:11:2b:fa:c5: ac:0b:9f:65:80:66:e7:ba:0e:17:9b:ad:16:64:85: 89:34:b3:4d:73:95:04:c1:a7:3e:51:f9:a0:2b:9d: dd:44:cb:b8:e3:5f:23:e9:df:68:b4:6a:8d:c0:f5: 3e:54:41:52:ec:79:37:67:23:52:56:77:8c:26:81: 89:67:83:bd:24:31:6a:4a:45:fa:0b:43:11:68:1c: c1:b9:6a:ea:db:93:ab:3d:9c:d7:d2:1b:b0:5b:c8: 9f:e0:7a:ef:e8:8b:f7:a0:60:76:da:d2:46:71:95: 1a:ee:ce:1d:4e:1f:d0:17:6d:55:d5:c9:4d:63:e9: 16:06:d1:22:6d:05:ff:6e:23:94:55:8a:ab:9a:59: 0e:42:26:b6:f6:fb:b3:f4:e7:ff:16:ee:af:97:b3: 2c:ad:c1:dd:df:49:50:3e:e4:66:ae:f0:e1:58:08: 6a:5d:fc:cd:13:70:b9:1f:7b:1a:e3:7b:20:fb:96: c0:05:ba:a9:1e:04:5b:4b:50:97:c6:b7:f9:11:f6: 8c:8f:6e:9f:4f:d9:a6:ec:30:bb:55:63:be:f2:2f: c1:1b:9f:2c:18:58:10:b3:b3:ec:99:59:55:5e:bc: c5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:72:96:80:AB:65:51:F4:44:75:72:27:2D:7E:3C:FE:AF:2C:BC:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3/035ffd39-1a72-349c-a0e6-876140194bdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3.crl X509v3 Authority Key Identifier: keyid:05:3F:7A:43:24:90:34:BD:18:8A:A2:86:A5:E5:EA:5A:9C:4D:D0:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3.cer sbgp-ipAddrBlock: critical IPv4: 23.172.104.0/24 IPv6: 2607:7a40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:31:a5:91:93:b7:33:d0:df:e5:14:e5:4c:75:4c:6f:d9:1b: 24:35:d5:11:4c:e6:26:67:b1:c4:8a:ba:fb:a4:b5:0c:20:fc: 85:ae:be:85:cf:d1:55:58:54:f1:50:6b:a8:e9:e5:40:06:08: cc:51:e6:7f:ad:fa:76:da:fe:cd:99:27:38:a6:d9:8c:35:d2: b1:31:c7:c7:56:02:9d:90:cf:5e:e7:ee:e4:82:3d:e5:bc:cb: 47:d6:c7:52:34:c5:a6:96:9e:f8:39:6c:22:e0:9f:6b:49:fb: 95:71:fc:7d:05:8a:2b:21:0c:32:1b:d1:ce:2b:eb:76:22:56: 41:af:28:22:e0:5a:72:45:72:b8:d3:af:eb:75:4f:d5:06:85: 2f:f4:d1:fb:4b:40:30:9e:b4:c5:1e:70:33:7c:4f:cb:74:fa: 8e:cb:e3:e8:7e:7e:06:2d:15:9c:be:23:b2:67:39:36:84:0d: 37:4d:75:9a:0c:7d:05:e3:5b:61:22:93:17:d9:7d:d5:4d:48: 6a:42:d1:86:08:60:ef:54:6e:55:7c:b1:85:da:0f:c3:50:7e: 57:94:ef:73:7a:28:c3:f6:83:ac:b2:30:d3:02:68:d7:c2:dc: 92:e7:8a:b0:55:26:76:fe:29:03:72:43:8c:fd:51:67:30:95: 2f:7b:ce:ee -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE3PKx68O2x0RRH0CkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFjZDFkNGMtZDBjMi00NTIwLTlkZGItZjQ2NmUzMzM5 Y2UzMB4XDTI2MDUxMjEzMDAzMFoXDTI2MDgxMDEzMDAzMFowLzEtMCsGA1UEAxMk Mzg1MzgyNzAtMjlhYy00YzY1LTgzNDUtMDkyMTQyM2IzYTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIA2oIDg8ue1vbZmlzwW8b1Rrj0My0aJthEr +sWsC59lgGbnug4Xm60WZIWJNLNNc5UEwac+UfmgK53dRMu4418j6d9otGqNwPU+ VEFS7Hk3ZyNSVneMJoGJZ4O9JDFqSkX6C0MRaBzBuWrq25OrPZzX0huwW8if4Hrv 6Iv3oGB22tJGcZUa7s4dTh/QF21V1clNY+kWBtEibQX/biOUVYqrmlkOQia29vuz 9Of/Fu6vl7MsrcHd30lQPuRmrvDhWAhqXfzNE3C5H3sa43sg+5bABbqpHgRbS1CX xrf5EfaMj26fT9mm7DC7VWO+8i/BG58sGFgQs7PsmVlVXrzFyQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFCByloCrZVH0RHVyJy1+PP6vLLwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80YWNk MWQ0Yy1kMGMyLTQ1MjAtOWRkYi1mNDY2ZTMzMzljZTMvMDM1ZmZkMzktMWE3Mi0z NDljLWEwZTYtODc2MTQwMTk0YmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGFjZDFkNGMtZDBjMi00NTIwLTlk ZGItZjQ2NmUzMzM5Y2UzLzRhY2QxZDRjLWQwYzItNDUyMC05ZGRiLWY0NjZlMzMz OWNlMy5jcmwwHwYDVR0jBBgwFoAUBT96QySQNL0YiqKGpeXqWpxN0EgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80YWNkMWQ0Yy1kMGMyLTQ1MjAtOWRkYi1mNDY2 ZTMzMzljZTMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF6xoMA0E AgACMAcDBQAmB3pAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHkxpZGTtzPQ3+UU5Ux1TG/ZGyQ11RFM5iZn scSKuvuktQwg/IWuvoXP0VVYVPFQa6jp5UAGCMxR5n+t+nba/s2ZJzim2Yw10rEx x8dWAp2Qz17n7uSCPeW8y0fWx1I0xaaWnvg5bCLgn2tJ+5Vx/H0FiishDDIb0c4r 63YiVkGvKCLgWnJFcrjTr+t1T9UGhS/00ftLQDCetMUecDN8T8t0+o7L4+h+fgYt FZy+I7JnOTaEDTdNdZoMfQXjW2EikxfZfdVNSGpC0YYIYO9UblV8sYXaD8NQfleU 73N6KMP2g6yyMNMCaNfC3JLnirBVJnb+KQNyQ4z9UWcwlS97zu4= -----END CERTIFICATE-----Generated at Wed May 13 11:40:52 2026 by rpki-client