$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/0f0b6b28-4fd9-341d-b09c-debd722a166c.roa File: 0f0b6b28-4fd9-341d-b09c-debd722a166c.roa (raw, json) Hash identifier: KANMZRXY4VIibYWiEIwg1iJdyV/kH+l2YnGi77F/6Mc= Subject key identifier: 65:D7:60:99:96:80:06:16:E4:2C:5F:ED:63:D0:89:BD:61:B2:DE:1F Certificate issuer: /CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Certificate serial: 010D0C9F4328584DAF102EF4D4AFF93EC770C480 Authority key identifier: 59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/0f0b6b28-4fd9-341d-b09c-debd722a166c.roa Signing time: Fri 01 May 2026 01:00:24 +0000 ROA not before: Fri 01 May 2026 01:00:24 +0000 ROA not after: Thu 30 Jul 2026 01:00:24 +0000 asID: 22223 IP address blocks: 162.211.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:10:2e:f4:d4:af:f9:3e:c7:70:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Validity Not Before: May 1 01:00:24 2026 GMT Not After : Jul 30 01:00:24 2026 GMT Subject: CN=f54e7a0a-7377-41d9-b8d5-6c4d705eb009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8b:4f:78:9e:73:5b:20:48:c2:3a:28:66:51: 8f:14:81:d5:1a:1a:20:7f:17:d4:da:ad:ae:9a:67: a1:67:21:75:e3:14:7e:0a:8f:1e:50:60:6c:96:32: e0:7c:32:f2:70:1c:36:cf:3d:41:2b:0b:96:82:47: b9:87:37:9c:f7:13:f4:30:e7:1f:35:34:d1:3c:d4: 05:41:d8:80:65:a9:b4:94:d3:ce:79:88:5f:53:76: 4f:c3:9e:2d:63:7d:e5:87:bb:3c:84:9e:03:ff:55: f8:9b:f1:45:50:4e:f8:ca:72:64:0c:ff:26:31:c8: ed:fc:d3:88:3f:a2:d9:08:ba:38:c5:d8:23:89:47: d6:1b:6e:d0:f5:d4:4f:f1:49:f1:97:86:10:e1:51: 1f:fa:83:5e:4c:2f:74:62:d6:38:38:6d:30:d0:26: fb:05:15:b7:86:64:3a:dc:ed:ff:16:fa:88:0f:33: 07:52:1b:69:23:4d:e2:e4:2f:29:a5:25:91:ff:33: ef:eb:62:cd:b6:59:0c:61:bf:9b:46:74:d4:07:a2: c0:79:83:1e:d1:d2:83:be:23:59:ad:77:9a:2f:bd: d4:77:6f:72:72:5e:d4:4d:15:2b:59:fb:6f:f2:5e: dc:5e:b4:f2:d1:ba:0f:78:31:61:8f:95:58:27:ac: bb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D7:60:99:96:80:06:16:E4:2C:5F:ED:63:D0:89:BD:61:B2:DE:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/0f0b6b28-4fd9-341d-b09c-debd722a166c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl X509v3 Authority Key Identifier: keyid:59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer sbgp-ipAddrBlock: critical IPv4: 162.211.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:3f:de:85:5e:4f:0c:13:86:4c:44:2c:44:10:d6:da:82:33: b5:9a:69:b2:13:ec:9e:0e:d4:07:74:85:70:07:46:96:50:7f: 7c:5d:2e:66:91:1a:90:ad:4f:b8:cf:6f:1d:e9:1c:d8:dd:dc: 77:94:3b:75:9a:1f:43:76:fc:a6:26:f0:3e:d9:65:64:e9:a2: 77:54:7c:ef:7c:1e:9a:27:08:6c:92:84:7f:74:57:d8:75:1d: a1:e0:91:2f:18:1b:38:18:16:87:0e:52:5a:2e:50:a4:79:7d: 7a:45:1a:bd:32:08:45:02:18:a0:2b:cb:68:9f:b1:df:1c:76: 8f:42:e5:34:5f:c0:e0:c6:23:f0:70:86:b6:67:14:00:97:36: 39:49:97:4c:45:f0:72:29:c5:2d:68:3d:d6:12:79:44:90:45: 54:b0:e2:cb:b9:50:c9:64:4b:76:61:61:53:b9:fc:e2:0d:f3: dc:12:48:93:91:fc:fe:8e:67:7c:fa:13:1f:4c:27:a7:e2:80: 34:ae:b6:76:ba:70:2e:a5:db:8d:7e:54:a9:6d:c2:e3:a3:e3: 11:49:61:7f:03:f6:75:10:d6:f6:aa:76:b3:ae:5c:55:67:b7: d9:32:19:45:3e:78:7c:6f:5f:b8:cc:05:a4:29:5d:01:b1:1a: b0:53:3c:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vEC701K/5PsdwxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzYmYxNDktM2U4OS00Y2E0LWI5NmQtOTE4YzJlYWI4 N2Q4MB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk ZjU0ZTdhMGEtNzM3Ny00MWQ5LWI4ZDUtNmM0ZDcwNWViMDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YtPeJ5zWyBIwjooZlGPFIHVGhogfxfU2q2u mmehZyF14xR+Co8eUGBsljLgfDLycBw2zz1BKwuWgke5hzec9xP0MOcfNTTRPNQF QdiAZam0lNPOeYhfU3ZPw54tY33lh7s8hJ4D/1X4m/FFUE74ynJkDP8mMcjt/NOI P6LZCLo4xdgjiUfWG27Q9dRP8Unxl4YQ4VEf+oNeTC90YtY4OG0w0Cb7BRW3hmQ6 3O3/FvqIDzMHUhtpI03i5C8ppSWR/zPv62LNtlkMYb+bRnTUB6LAeYMe0dKDviNZ rXeaL73Ud29ycl7UTRUrWftv8l7cXrTy0boPeDFhj5VYJ6y7mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXXYJmWgAYW5Cxf7WPQib1hst4fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNi ZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThjMmVhYjg3ZDgvMGYwYjZiMjgtNGZkOS0z NDFkLWIwOWMtZGViZDcyMmExNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDIzYmYxNDktM2U4OS00Y2E0LWI5 NmQtOTE4YzJlYWI4N2Q4L2QyM2JmMTQ5LTNlODktNGNhNC1iOTZkLTkxOGMyZWFi ODdkOC5jcmwwHwYDVR0jBBgwFoAUWdolHf/bCSCEwSKLLyC+KA2QoukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNiZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThj MmVhYjg3ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotMMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQ/3oVeTwwThkxELEQQ1tqCM7WaabIT7J4O1Ad0hXAHRpZQf3xdLmaR GpCtT7jPbx3pHNjd3HeUO3WaH0N2/KYm8D7ZZWTpondUfO98HponCGyShH90V9h1 HaHgkS8YGzgYFocOUlouUKR5fXpFGr0yCEUCGKAry2ifsd8cdo9C5TRfwODGI/Bw hrZnFACXNjlJl0xF8HIpxS1oPdYSeUSQRVSw4su5UMlkS3ZhYVO5/OIN89wSSJOR /P6OZ3z6Ex9MJ6figDSutna6cC6l241+VKltwuOj4xFJYX8D9nUQ1vaqdrOuXFVn t9kyGUU+eHxvX7jMBaQpXQGxGrBTPCU= -----END CERTIFICATE-----Generated at Wed May 13 05:02:30 2026 by rpki-client