$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/087748f0-1dfe-3009-a1dc-390079e6b5d8.roa File: 087748f0-1dfe-3009-a1dc-390079e6b5d8.roa (raw, json) Hash identifier: AYexrvnVr4BNPnnW7CIRGmbC80DIqYW31KXcmJWFKWc= Subject key identifier: E9:0A:20:30:AC:2C:EF:21:A2:C8:D1:27:69:14:E3:75:06:88:B7:CE Certificate issuer: /CN=25a4f200-c007-4476-b7c6-b306830b991d Certificate serial: 010D0C9F4328584D8AC535B9EBD44D91562EF080 Authority key identifier: A0:D9:04:58:93:D9:D7:A8:E8:A0:7A:B2:03:B4:16:8A:D8:17:22:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/087748f0-1dfe-3009-a1dc-390079e6b5d8.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 36303 IP address blocks: 23.169.104.0/24 maxlen: 24 167.253.29.0/24 maxlen: 24 2602:fabe::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:35:b9:eb:d4:4d:91:56:2e:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a4f200-c007-4476-b7c6-b306830b991d Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=986da80e-a006-47bb-86f5-e40b4d6c56a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:92:1a:9b:19:96:66:f7:02:ad:bc:7b:93:d8: be:5f:82:97:e6:da:07:b6:c0:b8:33:3f:c5:68:51: db:39:9d:3a:c6:c7:32:93:bf:cf:97:fb:61:b0:2a: 4b:12:15:4e:4f:20:1a:97:5b:72:b2:17:b1:ca:6f: c1:e2:94:48:29:f0:4b:aa:5e:64:dc:6e:b5:0b:f5: cb:4e:6d:3f:b0:81:70:d7:2e:f9:b0:be:bb:ff:2e: 65:b3:63:b8:de:c5:29:f1:df:7b:72:1f:b0:9e:bd: bc:77:21:d5:04:5e:a2:43:2e:1d:ea:f7:4e:36:70: b4:32:a8:9a:3e:fd:a1:8b:98:50:63:72:39:65:2e: 35:5c:3a:b8:b3:00:80:9c:0b:9b:96:84:bb:cf:f3: fa:ea:50:0c:f9:ad:6f:4c:81:a3:88:3b:16:40:43: eb:69:79:26:86:85:86:6a:f0:b6:66:6a:d1:9e:02: 1d:44:66:e8:ec:f6:7a:45:d4:a6:e5:89:e9:b8:c6: 02:3c:cf:47:a6:90:1f:ae:49:3e:c3:f0:80:44:c5: 5b:dd:cb:12:16:b0:23:c2:f4:03:52:02:57:15:64: 1e:42:88:ea:d6:39:a0:bc:10:1f:1f:c2:e4:44:79: 99:67:c2:d4:4b:c2:1a:c1:f0:d3:43:57:6b:c6:0e: 6f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0A:20:30:AC:2C:EF:21:A2:C8:D1:27:69:14:E3:75:06:88:B7:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/087748f0-1dfe-3009-a1dc-390079e6b5d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.crl X509v3 Authority Key Identifier: keyid:A0:D9:04:58:93:D9:D7:A8:E8:A0:7A:B2:03:B4:16:8A:D8:17:22:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer sbgp-ipAddrBlock: critical IPv4: 23.169.104.0/24 167.253.29.0/24 IPv6: 2602:fabe::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f9:77:d1:b4:2e:e4:5c:72:a9:91:6c:ee:86:e3:fc:40:08: a5:5d:14:0c:6a:31:2d:ae:c2:ee:1f:69:1c:0b:ba:43:53:45: 9b:a7:16:c5:9b:17:5a:91:5e:dc:79:69:ab:55:6a:ea:be:53: f9:2e:9d:ee:00:70:33:81:d1:4b:13:79:5d:2d:f2:7a:17:9f: c7:96:d8:9b:57:d4:5a:20:ec:da:bd:37:aa:d8:90:0c:a4:76: 27:34:6c:af:d5:75:37:3b:0f:ad:b4:50:6f:a1:3b:b9:3c:70: 75:3a:fd:d2:ee:ae:ef:2d:4f:df:88:28:8c:1d:da:92:d1:c9: d1:c1:d9:20:3b:7b:44:b6:17:dc:26:53:44:c0:70:b4:ba:75: 9f:e2:a4:50:d3:04:70:5b:b7:5d:8b:c7:24:c3:ea:d5:33:c2: f5:9c:4a:dc:8a:05:8c:a8:e8:54:bb:a2:1e:56:e3:f9:59:ee: 8d:a0:58:5e:3d:9d:da:48:a2:98:14:e9:61:10:34:b4:b6:d2: 75:c6:df:99:e3:2a:14:28:eb:7f:d2:15:d9:00:52:eb:2b:ba: 96:84:7c:0b:5b:89:55:b2:ea:79:4c:9a:09:7b:45:73:96:c4: c5:eb:b7:32:c1:48:e3:41:1d:94:81:35:5f:87:aa:93:58:ec: 3e:9a:92:4f -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE2KxTW569RNkVYu8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVhNGYyMDAtYzAwNy00NDc2LWI3YzYtYjMwNjgzMGI5 OTFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk OTg2ZGE4MGUtYTAwNi00N2JiLTg2ZjUtZTQwYjRkNmM1NmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZIamxmWZvcCrbx7k9i+X4KX5toHtsC4Mz/F aFHbOZ06xscyk7/Pl/thsCpLEhVOTyAal1tyshexym/B4pRIKfBLql5k3G61C/XL Tm0/sIFw1y75sL67/y5ls2O43sUp8d97ch+wnr28dyHVBF6iQy4d6vdONnC0Mqia Pv2hi5hQY3I5ZS41XDq4swCAnAubloS7z/P66lAM+a1vTIGjiDsWQEPraXkmhoWG avC2ZmrRngIdRGbo7PZ6RdSm5YnpuMYCPM9HppAfrkk+w/CARMVb3csSFrAjwvQD UgJXFWQeQojq1jmgvBAfH8LkRHmZZ8LUS8IawfDTQ1drxg5vPQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFOkKIDCsLO8hosjRJ2kU43UGiLfOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNWE0 ZjIwMC1jMDA3LTQ0NzYtYjdjNi1iMzA2ODMwYjk5MWQvMDg3NzQ4ZjAtMWRmZS0z MDA5LWExZGMtMzkwMDc5ZTZiNWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjVhNGYyMDAtYzAwNy00NDc2LWI3 YzYtYjMwNjgzMGI5OTFkLzI1YTRmMjAwLWMwMDctNDQ3Ni1iN2M2LWIzMDY4MzBi OTkxZC5jcmwwHwYDVR0jBBgwFoAUoNkEWJPZ16jooHqyA7QWitgXIuwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNWE0ZjIwMC1jMDA3LTQ0NzYtYjdjNi1iMzA2 ODMwYjk5MWQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6loAwQA p/0dMA4EAgACMAgDBgAmAvq+ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAK+XfRtC7kXHKpkWzuhuP8QAil XRQMajEtrsLuH2kcC7pDU0WbpxbFmxdakV7ceWmrVWrqvlP5Lp3uAHAzgdFLE3ld LfJ6F5/HltibV9RaIOzavTeq2JAMpHYnNGyv1XU3Ow+ttFBvoTu5PHB1Ov3S7q7v LU/fiCiMHdqS0cnRwdkgO3tEthfcJlNEwHC0unWf4qRQ0wRwW7ddi8ckw+rVM8L1 nErcigWMqOhUu6IeVuP5We6NoFhePZ3aSKKYFOlhEDS0ttJ1xt+Z4yoUKOt/0hXZ AFLrK7qWhHwLW4lVsup5TJoJe0VzlsTF67cywUjjQR2UgTVfh6qTWOw+mpJP -----END CERTIFICATE-----Generated at Wed May 13 06:51:09 2026 by rpki-client