$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6f71acdb-298c-4b21-93cf-54605ad5edc5/542eea28-2288-3ba5-859c-5a77bd129bff.roa File: 542eea28-2288-3ba5-859c-5a77bd129bff.roa (raw, json) Hash identifier: kJplVmf56tQTbY6QnE1WwMjzvyhmHEbhZ07ns8kmc4k= Subject key identifier: 1A:36:B1:AC:59:00:97:5E:B1:43:63:CD:BA:E5:56:49:28:34:7B:57 Certificate issuer: /CN=6f71acdb-298c-4b21-93cf-54605ad5edc5 Certificate serial: 010D0C9F4328584DBA3ADEF4DEE2A13CA521C680 Authority key identifier: BC:B1:D1:06:9A:6B:14:36:16:87:1C:98:34:18:D1:B1:74:C8:40:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6f71acdb-298c-4b21-93cf-54605ad5edc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6f71acdb-298c-4b21-93cf-54605ad5edc5/542eea28-2288-3ba5-859c-5a77bd129bff.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 401766 IP address blocks: 23.169.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6f71acdb-298c-4b21-93cf-54605ad5edc5/6f71acdb-298c-4b21-93cf-54605ad5edc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6f71acdb-298c-4b21-93cf-54605ad5edc5/6f71acdb-298c-4b21-93cf-54605ad5edc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6f71acdb-298c-4b21-93cf-54605ad5edc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:de:f4:de:e2:a1:3c:a5:21:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f71acdb-298c-4b21-93cf-54605ad5edc5 Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=284c41c3-f607-4c05-9367-887451f344ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:78:e4:a0:38:91:e5:ac:fc:b3:d3:15:28:ab: 2c:75:91:bd:23:39:e0:7e:bb:77:ce:c7:fb:4a:69: 17:29:b1:02:c1:22:a0:9c:d9:bb:b5:21:56:27:a3: 1a:9c:a2:91:77:e0:bb:dc:bf:f6:a2:b1:fa:58:7e: b8:4a:73:06:c8:0d:e4:75:13:73:ef:18:d3:66:a4: e1:db:b3:ae:68:89:52:45:5e:3b:cc:16:ff:84:b1: b8:7b:4c:be:89:20:ca:8e:24:6c:59:e3:d7:40:5d: 0e:8c:f3:c4:c2:63:82:01:52:65:a0:ac:78:da:c5: a0:90:f2:70:00:f7:c7:2f:b8:c0:b9:0f:fb:0b:d3: 77:4a:9d:06:10:74:ac:37:3e:04:9a:13:cb:1a:10: 22:06:94:cd:41:bd:20:06:75:4a:d1:08:bd:66:84: 63:a1:07:d0:f9:ac:fb:74:9c:79:2c:22:7a:98:7a: a1:34:92:8d:78:3e:5a:d4:dd:01:0f:6c:f6:f7:e3: a4:44:09:61:9e:76:88:62:06:45:6d:b6:90:f3:9b: 09:c9:ae:ab:6c:d3:04:8b:73:b9:41:05:b7:27:f8: 33:6e:25:f4:29:0a:19:d7:43:db:87:34:ce:e7:97: b1:af:b3:c9:c4:3f:cb:df:d9:22:a3:84:8c:36:41: 6c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:36:B1:AC:59:00:97:5E:B1:43:63:CD:BA:E5:56:49:28:34:7B:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6f71acdb-298c-4b21-93cf-54605ad5edc5/542eea28-2288-3ba5-859c-5a77bd129bff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6f71acdb-298c-4b21-93cf-54605ad5edc5/6f71acdb-298c-4b21-93cf-54605ad5edc5.crl X509v3 Authority Key Identifier: keyid:BC:B1:D1:06:9A:6B:14:36:16:87:1C:98:34:18:D1:B1:74:C8:40:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6f71acdb-298c-4b21-93cf-54605ad5edc5.cer sbgp-ipAddrBlock: critical IPv4: 23.169.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:87:b3:52:60:ee:16:f1:e8:da:c7:ec:de:b2:57:f5:b2:a2: 02:09:d4:77:64:e3:02:23:48:4a:7d:0c:40:8f:8f:6f:a1:29: 67:66:46:a9:09:34:cb:47:f0:52:2c:2e:18:fc:ae:ae:f8:33: 59:c7:d1:fe:9b:82:e5:34:c8:46:e7:94:c3:85:66:25:7a:94: d3:53:a5:b0:34:a7:b3:52:6d:fe:51:96:b4:91:cf:66:31:57: 0b:79:0f:d0:71:be:49:c7:13:ed:63:d6:0f:2c:7f:7b:46:f8: 03:20:f1:b6:94:5c:8c:a5:f9:62:4d:d4:ae:65:7e:3c:e4:82: 5d:96:00:bc:24:77:43:98:14:8b:01:d9:01:0e:9e:fd:df:81: e2:c2:82:06:e8:0e:96:36:39:0d:ee:8f:f8:b6:62:88:70:0e: 7d:48:a1:5e:f9:7d:c5:cc:70:b6:70:1b:db:0d:40:1f:0c:2a: 96:18:25:ec:00:3a:ce:e1:cc:02:94:29:d7:3c:fa:15:ab:81: 73:71:dc:c2:03:a6:d5:95:f6:ff:a3:ea:7a:c7:38:9e:e8:a5: 29:5e:37:2d:39:16:0d:e5:5d:4e:18:76:e4:41:d7:29:70:58: 7e:15:af:a0:dc:83:ab:4d:b0:67:1a:09:af:ac:83:7c:2a:e2: 62:2c:f8:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26Ot703uKhPKUhxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY3MWFjZGItMjk4Yy00YjIxLTkzY2YtNTQ2MDVhZDVl ZGM1MB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk Mjg0YzQxYzMtZjYwNy00YzA1LTkzNjctODg3NDUxZjM0NGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3jkoDiR5az8s9MVKKssdZG9Izngfrt3zsf7 SmkXKbECwSKgnNm7tSFWJ6ManKKRd+C73L/2orH6WH64SnMGyA3kdRNz7xjTZqTh 27OuaIlSRV47zBb/hLG4e0y+iSDKjiRsWePXQF0OjPPEwmOCAVJloKx42sWgkPJw APfHL7jAuQ/7C9N3Sp0GEHSsNz4EmhPLGhAiBpTNQb0gBnVK0Qi9ZoRjoQfQ+az7 dJx5LCJ6mHqhNJKNeD5a1N0BD2z29+OkRAlhnnaIYgZFbbaQ85sJya6rbNMEi3O5 QQW3J/gzbiX0KQoZ10PbhzTO55exr7PJxD/L39kio4SMNkFs3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBo2saxZAJdesUNjzbrlVkkoNHtXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82Zjcx YWNkYi0yOThjLTRiMjEtOTNjZi01NDYwNWFkNWVkYzUvNTQyZWVhMjgtMjI4OC0z YmE1LTg1OWMtNWE3N2JkMTI5YmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNmY3MWFjZGItMjk4Yy00YjIxLTkz Y2YtNTQ2MDVhZDVlZGM1LzZmNzFhY2RiLTI5OGMtNGIyMS05M2NmLTU0NjA1YWQ1 ZWRjNS5jcmwwHwYDVR0jBBgwFoAUvLHRBpprFDYWhxyYNBjRsXTIQKYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82ZjcxYWNkYi0yOThjLTRiMjEtOTNjZi01NDYw NWFkNWVkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6lwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOHs1Jg7hbx6NrH7N6yV/WyogIJ1Hdk4wIjSEp9DECPj2+hKWdmRqkJ NMtH8FIsLhj8rq74M1nH0f6bguU0yEbnlMOFZiV6lNNTpbA0p7NSbf5RlrSRz2Yx Vwt5D9BxvknHE+1j1g8sf3tG+AMg8baUXIyl+WJN1K5lfjzkgl2WALwkd0OYFIsB 2QEOnv3fgeLCggboDpY2OQ3uj/i2YohwDn1IoV75fcXMcLZwG9sNQB8MKpYYJewA Os7hzAKUKdc8+hWrgXNx3MIDptWV9v+j6nrHOJ7opSleNy05Fg3lXU4YduRB1ylw WH4Vr6Dcg6tNsGcaCa+sg3wq4mIs+Io= -----END CERTIFICATE-----Generated at Wed May 13 14:35:52 2026 by rpki-client