$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8/ffb6295a-6e48-338c-8cff-918305705e3a.roa File: ffb6295a-6e48-338c-8cff-918305705e3a.roa (raw, json) Hash identifier: GKHnXsjpe4CHvAIJGWtmH1pNIptGLqVdAocJo66J0iI= Subject key identifier: AE:F6:B5:B4:58:6E:1A:80:6F:65:10:51:C3:CC:EB:69:A9:54:BB:90 Certificate issuer: /CN=7a12a63a-9232-4346-a38f-de5bc5c7bbc8 Certificate serial: 010D0C9F4328584D9B85524878E97E3A6B0F4400 Authority key identifier: 80:AC:38:B5:C9:72:85:2F:C3:C3:2C:C5:DA:1A:C1:AC:01:C5:C2:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8/ffb6295a-6e48-338c-8cff-918305705e3a.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 152918 IP address blocks: 23.131.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:52:48:78:e9:7e:3a:6b:0f:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a12a63a-9232-4346-a38f-de5bc5c7bbc8 Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=8e553595-600f-43ee-85bf-9ad0cc10ca7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1d:e9:4a:42:d1:86:2b:c2:71:51:0c:2f:72: 16:d4:33:99:9a:1e:6f:6f:de:4b:3d:80:e2:d0:b8: 39:80:39:df:48:04:03:1c:fc:ed:c6:68:9f:de:f2: 36:a3:d3:0f:78:21:0d:81:48:3d:10:c3:e7:f2:38: c2:9d:ad:6c:61:6f:de:c5:20:1d:8c:90:db:04:d5: 16:72:3b:db:13:e2:18:d7:c1:f5:be:90:3c:37:1f: 8e:29:72:7c:cf:36:4e:a8:af:43:88:cc:8a:bc:a2: de:a8:c3:ae:6d:84:d7:24:1c:b5:66:6e:84:6c:12: d8:a4:11:76:d4:ef:b3:ee:eb:e3:e9:02:c6:1b:c8: 75:7d:5f:8f:9b:6b:b5:ee:af:0b:79:d7:b5:7c:c0: 90:78:ea:a1:59:50:49:cc:c8:0c:2f:fb:d3:59:86: ce:2f:eb:f3:93:67:f9:ef:ac:3e:7f:d0:f9:48:4d: 59:05:58:ec:da:20:19:33:58:b1:a2:37:40:a5:68: 17:26:1a:33:a5:4e:55:e2:fa:28:67:0c:15:6e:1e: 55:c3:23:b0:73:c4:41:22:6e:88:32:10:20:ac:22: f5:9c:ac:38:41:ef:3c:b5:1c:6e:ff:a9:58:44:42: 7a:cb:73:8a:95:72:a8:0b:0f:23:e0:9d:e0:81:a6: 96:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F6:B5:B4:58:6E:1A:80:6F:65:10:51:C3:CC:EB:69:A9:54:BB:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8/ffb6295a-6e48-338c-8cff-918305705e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8.crl X509v3 Authority Key Identifier: keyid:80:AC:38:B5:C9:72:85:2F:C3:C3:2C:C5:DA:1A:C1:AC:01:C5:C2:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8.cer sbgp-ipAddrBlock: critical IPv4: 23.131.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:cb:7a:49:a2:cb:56:b6:c4:80:7c:89:88:a3:17:82:1c:48: b6:21:b6:ca:be:b3:a9:31:ac:8e:82:24:f1:b9:8e:db:88:72: 13:bd:0a:10:08:9c:68:70:93:5c:1e:f1:1f:a6:5c:1f:2c:f6: 77:68:f5:54:57:1a:58:e2:14:70:59:1c:97:54:50:de:ae:7c: 50:e9:0e:38:81:f6:f6:48:2a:21:19:e1:00:07:0a:2c:4f:75: 08:6d:fe:1d:83:b6:31:1b:08:78:92:cf:15:01:75:e6:84:fa: e5:47:ff:0b:61:f5:ac:ba:54:0e:9c:a8:12:7c:c9:15:46:e9: 3e:82:46:a1:9d:10:7a:ce:95:af:d0:41:37:97:f8:e8:4c:2d: 4b:d3:7a:d8:5e:76:bb:fc:8f:50:79:68:e4:75:f4:6c:58:4d: 48:f2:1d:9b:da:f4:01:7f:63:7e:f0:6c:db:2c:52:f6:a7:6c: 70:99:8a:f5:c5:b2:48:1f:23:e6:e9:ef:5f:93:68:87:bc:8c: 8d:e3:c5:71:ca:6a:45:6f:ef:d7:ee:de:71:ab:9c:75:38:40: 3f:e7:8f:73:43:ea:68:45:35:24:1b:c1:88:98:81:db:2e:8e: 87:d8:e0:e4:8c:ca:fb:28:70:ae:7d:b5:96:cb:28:a9:0a:46: 85:7c:57:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhVJIeOl+OmsPRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExMmE2M2EtOTIzMi00MzQ2LWEzOGYtZGU1YmM1Yzdi YmM4MB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk OGU1NTM1OTUtNjAwZi00M2VlLTg1YmYtOWFkMGNjMTBjYTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR3pSkLRhivCcVEML3IW1DOZmh5vb95LPYDi 0Lg5gDnfSAQDHPztxmif3vI2o9MPeCENgUg9EMPn8jjCna1sYW/exSAdjJDbBNUW cjvbE+IY18H1vpA8Nx+OKXJ8zzZOqK9DiMyKvKLeqMOubYTXJBy1Zm6EbBLYpBF2 1O+z7uvj6QLGG8h1fV+Pm2u17q8Lede1fMCQeOqhWVBJzMgML/vTWYbOL+vzk2f5 76w+f9D5SE1ZBVjs2iAZM1ixojdApWgXJhozpU5V4vooZwwVbh5VwyOwc8RBIm6I MhAgrCL1nKw4Qe88tRxu/6lYREJ6y3OKlXKoCw8j4J3ggaaWfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK72tbRYbhqAb2UQUcPM62mpVLuQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83YTEy YTYzYS05MjMyLTQzNDYtYTM4Zi1kZTViYzVjN2JiYzgvZmZiNjI5NWEtNmU0OC0z MzhjLThjZmYtOTE4MzA1NzA1ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2ExMmE2M2EtOTIzMi00MzQ2LWEz OGYtZGU1YmM1YzdiYmM4LzdhMTJhNjNhLTkyMzItNDM0Ni1hMzhmLWRlNWJjNWM3 YmJjOC5jcmwwHwYDVR0jBBgwFoAUgKw4tclyhS/DwyzF2hrBrAHFwtQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83YTEyYTYzYS05MjMyLTQzNDYtYTM4Zi1kZTVi YzVjN2JiYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4PcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLLekmiy1a2xIB8iYijF4IcSLYhtsq+s6kxrI6CJPG5jtuIchO9ChAI nGhwk1we8R+mXB8s9ndo9VRXGljiFHBZHJdUUN6ufFDpDjiB9vZIKiEZ4QAHCixP dQht/h2DtjEbCHiSzxUBdeaE+uVH/wth9ay6VA6cqBJ8yRVG6T6CRqGdEHrOla/Q QTeX+OhMLUvTethedrv8j1B5aOR19GxYTUjyHZva9AF/Y37wbNssUvanbHCZivXF skgfI+bp71+TaIe8jI3jxXHKakVv79fu3nGrnHU4QD/nj3ND6mhFNSQbwYiYgdsu jofY4OSMyvsocK59tZbLKKkKRoV8V+Y= -----END CERTIFICATE-----Generated at Wed May 13 09:22:01 2026 by rpki-client