$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/089d5c01-cfcf-37d2-9dfa-f966a06817c1.roa File: 089d5c01-cfcf-37d2-9dfa-f966a06817c1.roa (raw, json) Hash identifier: 2MW+NDEnPEKdVCbrgLQs3Zv7Wb6upAUZkSEkMAYKRFQ= Subject key identifier: A6:4D:9C:0B:06:80:C8:A8:C9:CE:5A:F7:1A:3B:91:19:CE:F8:BB:CA Certificate issuer: /CN=0be8264a-e514-463e-8183-9b3e83f9438d Certificate serial: 010D0C9F4328584D8EF994EFC3F955030C1DF580 Authority key identifier: EA:36:C0:3A:42:78:09:A6:73:76:62:12:55:20:CE:23:38:29:78:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/089d5c01-cfcf-37d2-9dfa-f966a06817c1.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 400333 IP address blocks: 23.130.120.0/24 maxlen: 24 23.130.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/0be8264a-e514-463e-8183-9b3e83f9438d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/0be8264a-e514-463e-8183-9b3e83f9438d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:94:ef:c3:f9:55:03:0c:1d:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0be8264a-e514-463e-8183-9b3e83f9438d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=e1c9b3b9-e07f-41aa-8d60-c799733d41fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:43:ab:82:65:f5:04:46:f4:56:9f:04:57:ab: 85:e8:b1:5e:f6:de:9a:d9:76:e6:c2:b9:e5:a3:d2: 19:26:4e:b5:93:89:6b:1b:ae:42:05:e5:34:40:33: 27:f6:a7:81:db:dc:cd:b3:16:e2:04:6c:b9:c7:44: f1:83:79:ac:38:d4:07:7e:38:fc:17:c4:8f:05:d0: 92:1e:6d:49:f9:de:aa:2c:f5:9a:d4:dd:7c:17:9e: 76:e3:26:d4:81:d4:0c:68:01:67:de:1f:bf:5a:61: 33:b3:89:7e:11:51:74:6c:0d:47:d7:4b:71:06:d9: f7:09:87:23:9a:14:0d:87:4c:82:0f:2d:85:34:9d: 7c:48:6d:05:77:28:5d:62:69:02:f3:36:08:06:73: e4:71:32:8d:7d:4b:4a:c4:b9:1d:0b:e3:bf:ea:49: db:69:ef:1e:3b:91:c3:a8:ec:84:e4:f3:6d:d4:94: 07:c7:3d:d6:1f:19:7e:27:a2:00:a4:bb:24:80:fd: 45:a9:61:a6:cc:64:19:03:76:38:63:d5:86:05:0b: c5:7c:45:0e:6b:6f:3a:fe:d7:2b:29:ea:d9:86:f4: e7:71:d4:19:5a:06:00:49:2c:b4:4a:31:7a:34:3b: 94:3c:fe:a3:ef:f3:9b:a6:82:04:de:aa:43:f1:3f: 34:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4D:9C:0B:06:80:C8:A8:C9:CE:5A:F7:1A:3B:91:19:CE:F8:BB:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/089d5c01-cfcf-37d2-9dfa-f966a06817c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/0be8264a-e514-463e-8183-9b3e83f9438d.crl X509v3 Authority Key Identifier: keyid:EA:36:C0:3A:42:78:09:A6:73:76:62:12:55:20:CE:23:38:29:78:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d.cer sbgp-ipAddrBlock: critical IPv4: 23.130.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:2c:7a:e8:f5:1f:4d:87:3a:f7:21:bf:cb:b1:f6:a2:cd:22: 54:40:3b:08:f3:92:ec:b5:9f:91:76:c1:8f:d6:42:30:cb:62: d8:ed:9a:b7:a0:31:71:2e:15:a5:b2:ff:ed:01:ed:93:f3:0a: 9e:a9:71:48:61:55:50:a2:a7:c7:bc:f5:4f:dd:de:22:3d:57: de:1a:8e:1f:61:71:6a:f2:0f:1d:cc:72:b9:dd:2f:a3:66:b7: c9:6c:96:7d:e5:52:14:fd:d8:81:a0:93:59:ab:6a:df:cd:65: 1c:ea:2f:23:68:75:a2:d8:38:d5:b7:5a:c2:21:32:14:72:ac: 53:c4:f2:80:11:c7:2f:38:ac:72:9b:82:e1:a1:6f:a8:cc:42: 8c:ad:78:e9:b1:42:bc:58:4f:5c:46:c4:15:d9:eb:70:d6:df: 72:bb:73:00:10:45:3c:a2:76:71:92:6d:07:cb:c0:ea:a8:75: bb:a6:38:84:d6:f6:0c:64:34:09:35:d6:75:ae:0a:f5:60:07: c4:bb:95:10:1c:19:ef:14:f6:c3:b5:93:24:01:32:b6:d1:c0: 5d:f6:12:08:b3:ec:88:9e:84:66:77:be:de:30:80:4f:a6:a8: 32:53:94:d6:02:2a:06:b6:33:b3:95:9e:69:02:11:e3:45:d4: 31:87:aa:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+ZTvw/lVAwwd9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJlODI2NGEtZTUxNC00NjNlLTgxODMtOWIzZTgzZjk0 MzhkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZTFjOWIzYjktZTA3Zi00MWFhLThkNjAtYzc5OTczM2Q0MWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30OrgmX1BEb0Vp8EV6uF6LFe9t6a2Xbmwrnl o9IZJk61k4lrG65CBeU0QDMn9qeB29zNsxbiBGy5x0Txg3msONQHfjj8F8SPBdCS Hm1J+d6qLPWa1N18F5524ybUgdQMaAFn3h+/WmEzs4l+EVF0bA1H10txBtn3CYcj mhQNh0yCDy2FNJ18SG0FdyhdYmkC8zYIBnPkcTKNfUtKxLkdC+O/6knbae8eO5HD qOyE5PNt1JQHxz3WHxl+J6IApLskgP1FqWGmzGQZA3Y4Y9WGBQvFfEUOa286/tcr KerZhvTncdQZWgYASSy0SjF6NDuUPP6j7/ObpoIE3qpD8T80wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZNnAsGgMioyc5a9xo7kRnO+LvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYmU4 MjY0YS1lNTE0LTQ2M2UtODE4My05YjNlODNmOTQzOGQvMDg5ZDVjMDEtY2ZjZi0z N2QyLTlkZmEtZjk2NmEwNjgxN2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGJlODI2NGEtZTUxNC00NjNlLTgx ODMtOWIzZTgzZjk0MzhkLzBiZTgyNjRhLWU1MTQtNDYzZS04MTgzLTliM2U4M2Y5 NDM4ZC5jcmwwHwYDVR0jBBgwFoAU6jbAOkJ4CaZzdmISVSDOIzgpeA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYmU4MjY0YS1lNTE0LTQ2M2UtODE4My05YjNl ODNmOTQzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF4J4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgseuj1H02HOvchv8ux9qLNIlRAOwjzkuy1n5F2wY/WQjDLYtjtmreg MXEuFaWy/+0B7ZPzCp6pcUhhVVCip8e89U/d3iI9V94ajh9hcWryDx3McrndL6Nm t8lsln3lUhT92IGgk1mrat/NZRzqLyNodaLYONW3WsIhMhRyrFPE8oARxy84rHKb guGhb6jMQoyteOmxQrxYT1xGxBXZ63DW33K7cwAQRTyidnGSbQfLwOqodbumOITW 9gxkNAk11nWuCvVgB8S7lRAcGe8U9sO1kyQBMrbRwF32Egiz7IiehGZ3vt4wgE+m qDJTlNYCKga2M7OVnmkCEeNF1DGHqus= -----END CERTIFICATE-----Generated at Wed May 13 07:33:00 2026 by rpki-client