$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/cf57be58-bf9f-36ed-8c8d-829a5f932254.roa File: cf57be58-bf9f-36ed-8c8d-829a5f932254.roa (raw, json) Hash identifier: X2Kj/suEcPkABrMh5gVgyyWjP62Ndarz2DWl4wKtCqw= Subject key identifier: 03:96:95:0B:FC:24:AB:18:44:E3:FD:D7:84:01:9C:69:38:AE:FF:BD Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584DC6CAFCDFEC891DC70183BD00 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/cf57be58-bf9f-36ed-8c8d-829a5f932254.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 23428 IP address blocks: 23.136.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:ca:fc:df:ec:89:1d:c7:01:83:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=a90af159-b11d-44d5-9b2d-9709585b8031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:20:5f:d5:ac:fc:18:a3:ef:7e:9a:8a:17:f8: ea:1d:c1:53:31:ec:b8:70:d5:c7:2a:5a:5e:6a:85: a5:35:a7:63:aa:da:64:d0:b3:a0:94:39:50:da:99: f5:86:e2:20:64:a9:9e:e6:8e:a7:58:b2:03:4f:bb: 78:ab:a4:93:28:2b:78:7c:f3:f1:20:52:ff:34:93: ba:75:a2:46:ea:df:32:d0:02:93:f3:f5:62:32:ed: 34:a7:f2:ee:4c:46:a9:44:76:89:d7:c7:d8:87:b5: 28:7a:75:74:5b:e3:3f:6e:fb:06:54:b5:37:1f:de: 81:58:c7:af:f1:b3:02:b0:83:4f:cd:1b:08:4e:b2: da:f1:24:ef:d2:e0:bb:c6:22:ca:17:db:93:3c:a0: e7:e6:15:01:01:61:79:fe:09:62:ac:65:56:69:4d: 0c:c4:13:37:ab:cd:95:e1:a3:4f:b8:3a:b2:ea:94: a6:56:1e:ae:6b:11:b1:4f:81:9e:c2:35:e6:19:7e: 93:21:10:a6:9e:9a:f0:9d:15:55:e3:43:5c:0e:8d: d1:e3:dc:6e:3b:a7:25:90:2a:48:74:73:d2:e9:22: d8:2f:f6:c3:44:e8:c8:0a:7d:ff:c1:09:e5:ad:3d: cb:0f:8c:9b:14:64:9e:18:b4:df:f6:44:c7:6b:c9: 20:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:96:95:0B:FC:24:AB:18:44:E3:FD:D7:84:01:9C:69:38:AE:FF:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/cf57be58-bf9f-36ed-8c8d-829a5f932254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 23.136.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:cd:4e:6b:2d:53:6b:81:ed:e9:8a:bc:54:94:e1:2c:6d:4a: 28:9b:b2:19:e9:12:d6:b7:65:9f:8e:e8:18:f5:25:1c:26:58: a8:8c:a2:39:ff:75:d1:d5:09:54:3c:06:8d:64:23:60:18:55: 39:f7:13:f3:ba:47:53:96:e6:a2:c3:b5:65:0b:98:5e:ad:b2: 53:6a:5f:20:b8:32:93:b8:78:aa:ea:56:0b:5e:cc:da:d3:b1: 63:26:fb:70:b8:57:bb:1d:c3:13:87:46:e5:fd:73:0a:f5:a0: 1c:b1:62:b7:8e:83:8a:7d:59:36:7c:cf:dd:d2:59:87:b2:85: ba:fd:0a:5b:19:2a:0d:87:21:51:b2:26:15:e9:d0:45:6d:b9: 36:fe:92:5e:cd:78:cd:31:e3:a9:6d:3f:0c:ea:f2:7c:6a:b0: 67:98:83:21:57:fb:22:1a:59:67:ce:25:cc:16:5f:20:dd:2e: 93:b3:72:00:1b:2b:e3:f3:b9:0c:31:94:d8:72:fe:1d:66:27: e4:1e:86:15:98:22:da:48:37:75:74:e9:54:9d:cf:56:4e:1f: d4:cf:ae:09:fa:80:50:ed:9f:42:84:f2:e8:e6:4b:18:36:10: 3a:e1:90:66:31:b0:b8:36:9a:73:c4:ea:5d:0a:16:a8:1a:1a: 6f:0f:1c:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Gyvzf7IkdxwGDvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk YTkwYWYxNTktYjExZC00NGQ1LTliMmQtOTcwOTU4NWI4MDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSBf1az8GKPvfpqKF/jqHcFTMey4cNXHKlpe aoWlNadjqtpk0LOglDlQ2pn1huIgZKme5o6nWLIDT7t4q6STKCt4fPPxIFL/NJO6 daJG6t8y0AKT8/ViMu00p/LuTEapRHaJ18fYh7UoenV0W+M/bvsGVLU3H96BWMev 8bMCsINPzRsITrLa8STv0uC7xiLKF9uTPKDn5hUBAWF5/glirGVWaU0MxBM3q82V 4aNPuDqy6pSmVh6uaxGxT4GewjXmGX6TIRCmnprwnRVV40NcDo3R49xuO6clkCpI dHPS6SLYL/bDROjICn3/wQnlrT3LD4ybFGSeGLTf9kTHa8kgJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOWlQv8JKsYROP914QBnGk4rv+9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvY2Y1N2JlNTgtYmY5Zi0z NmVkLThjOGQtODI5YTVmOTMyMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4jpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbNTmstU2uB7emKvFSU4SxtSiibshnpEta3ZZ+O6Bj1JRwmWKiMojn/ ddHVCVQ8Bo1kI2AYVTn3E/O6R1OW5qLDtWULmF6tslNqXyC4MpO4eKrqVgtezNrT sWMm+3C4V7sdwxOHRuX9cwr1oByxYreOg4p9WTZ8z93SWYeyhbr9ClsZKg2HIVGy JhXp0EVtuTb+kl7NeM0x46ltPwzq8nxqsGeYgyFX+yIaWWfOJcwWXyDdLpOzcgAb K+PzuQwxlNhy/h1mJ+QehhWYItpIN3V06VSdz1ZOH9TPrgn6gFDtn0KE8ujmSxg2 EDrhkGYxsLg2mnPE6l0KFqgaGm8PHMg= -----END CERTIFICATE-----Generated at Wed May 13 04:04:45 2026 by rpki-client