$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/cf5393fa-35d4-31bb-8298-3a8383155b2e.roa File: cf5393fa-35d4-31bb-8298-3a8383155b2e.roa (raw, json) Hash identifier: NW2M04NAp2DcmDDutFDUQAk6xyxarHfBGsrtpkACdis= Subject key identifier: 1C:8E:8D:0F:98:B6:5A:F2:06:C0:44:D0:28:B2:B1:6A:49:63:12:8C Certificate issuer: /CN=ad39bc90-e9cf-4125-abe6-f75d99b1ca1c Certificate serial: 010D0C9F4328584DB0758CECB25444E971E18A80 Authority key identifier: 67:E1:A5:81:53:3B:4A:F3:41:9C:6C:CD:B6:19:CD:F3:1E:9D:5F:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/cf5393fa-35d4-31bb-8298-3a8383155b2e.roa Signing time: Fri 01 May 2026 13:00:30 +0000 ROA not before: Fri 01 May 2026 13:00:30 +0000 ROA not after: Thu 30 Jul 2026 13:00:30 +0000 asID: 212238 IP address blocks: 23.143.68.0/24 maxlen: 24 2602:f5c8::/41 maxlen: 44 2602:f5c8::/44 maxlen: 47 2602:f5c8:20::/44 maxlen: 46 2602:f5c8:80::/41 maxlen: 44 2602:f5c8:e0::/44 maxlen: 46 2602:f5c8:f0::/44 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b0:75:8c:ec:b2:54:44:e9:71:e1:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad39bc90-e9cf-4125-abe6-f75d99b1ca1c Validity Not Before: May 1 13:00:30 2026 GMT Not After : Jul 30 13:00:30 2026 GMT Subject: CN=fb47ebf7-8eb6-482c-86ea-2dc8f6f4b687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ac:2b:8a:7a:7b:e5:40:50:59:ba:df:6a:94: ba:69:6b:88:87:eb:2f:68:1f:99:01:67:af:3c:20: c1:59:3a:73:14:74:25:36:15:8c:63:2b:ae:bb:e9: ee:8f:f1:5c:78:d3:95:d5:f0:12:89:af:ca:f3:c6: c0:83:c8:0c:7f:df:6e:06:9d:46:8c:b7:1d:db:2c: f8:cf:c8:ff:c0:d5:b1:e6:de:14:6a:2d:79:ae:e1: c9:13:14:1c:1a:41:c4:2f:d8:37:57:40:c6:05:38: 46:89:29:3f:e9:da:b7:e4:53:8c:2e:9f:21:e7:af: 78:b5:43:98:a2:7e:1a:91:39:eb:9c:43:cf:25:5e: 11:e4:d1:bb:e4:6d:e6:14:29:51:1c:ec:5c:72:e4: 78:25:8a:ce:41:85:e0:dd:20:31:a3:8b:4a:6c:7d: c5:7a:b3:9e:07:65:9d:4b:57:b1:24:50:8a:cf:64: 1c:80:6c:9e:c3:8d:51:1d:a6:79:3a:a4:5e:67:09: f7:e4:a7:31:05:71:36:9c:c1:1a:b2:3a:d3:d4:8d: cf:7f:7d:42:43:13:b0:35:eb:fa:21:ec:42:91:cc: 6a:41:89:8f:93:d7:78:11:0b:3b:47:15:09:23:ed: cb:b2:b2:92:3b:fe:b6:d2:5d:d9:2c:c7:30:7f:e8: 89:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8E:8D:0F:98:B6:5A:F2:06:C0:44:D0:28:B2:B1:6A:49:63:12:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/cf5393fa-35d4-31bb-8298-3a8383155b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.crl X509v3 Authority Key Identifier: keyid:67:E1:A5:81:53:3B:4A:F3:41:9C:6C:CD:B6:19:CD:F3:1E:9D:5F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer sbgp-ipAddrBlock: critical IPv4: 23.143.68.0/24 IPv6: 2602:f5c8::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:23:a0:d4:8c:e9:6f:9a:b7:4f:1f:3e:59:80:de:9e:f6:91: 38:ba:e2:b4:9e:82:2f:d0:73:e1:28:a0:4e:ff:e9:2d:aa:c8: cd:60:07:ce:2a:67:3e:76:49:07:df:4c:9e:ee:1b:6a:ee:47: 7e:40:58:13:6b:5d:3b:13:e6:a5:66:90:0c:d1:06:bc:26:d1: dc:8b:4a:a0:08:39:7a:6e:c6:f6:4e:ad:e5:0f:89:97:02:70: 48:a0:90:63:83:29:3a:07:e6:f9:9e:2f:6c:7e:cb:e9:7d:d0: b4:c0:ea:5f:93:d8:33:08:27:fd:b6:8e:75:2d:28:01:3e:df: 1e:2f:d7:65:f4:31:25:e5:9b:bf:87:f2:4e:ff:32:80:ed:db: 03:df:c8:60:ab:4b:55:32:64:20:d0:89:43:62:e9:18:3d:ca: 06:37:99:bf:d7:65:5c:55:f0:1d:c7:80:7b:a2:7a:3f:1d:b5: cb:23:9f:20:2a:52:87:9b:b6:13:e6:fb:58:a4:01:af:8f:6f: b3:f7:0c:36:63:6a:2e:9c:be:0d:af:59:3a:f9:5e:f0:89:d4: de:4e:c9:ca:8b:16:a1:6d:27:f4:bc:4c:89:3f:f4:0c:3a:16: 26:38:62:71:27:44:6b:5b:80:09:0b:65:fe:2b:09:67:b0:85: d8:1f:79:5e -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2wdYzsslRE6XHhioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQzOWJjOTAtZTljZi00MTI1LWFiZTYtZjc1ZDk5YjFj YTFjMB4XDTI2MDUwMTEzMDAzMFoXDTI2MDczMDEzMDAzMFowLzEtMCsGA1UEAxMk ZmI0N2ViZjctOGViNi00ODJjLTg2ZWEtMmRjOGY2ZjRiNjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqwrinp75UBQWbrfapS6aWuIh+svaB+ZAWev PCDBWTpzFHQlNhWMYyuuu+nuj/FceNOV1fASia/K88bAg8gMf99uBp1GjLcd2yz4 z8j/wNWx5t4Uai15ruHJExQcGkHEL9g3V0DGBThGiSk/6dq35FOMLp8h5694tUOY on4akTnrnEPPJV4R5NG75G3mFClRHOxccuR4JYrOQYXg3SAxo4tKbH3FerOeB2Wd S1exJFCKz2QcgGyew41RHaZ5OqReZwn35KcxBXE2nMEasjrT1I3Pf31CQxOwNev6 IexCkcxqQYmPk9d4EQs7RxUJI+3LsrKSO/620l3ZLMcwf+iJAQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFByOjQ+YtlryBsBE0CiysWpJYxKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZDM5 YmM5MC1lOWNmLTQxMjUtYWJlNi1mNzVkOTliMWNhMWMvY2Y1MzkzZmEtMzVkNC0z MWJiLTgyOTgtM2E4MzgzMTU1YjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWQzOWJjOTAtZTljZi00MTI1LWFi ZTYtZjc1ZDk5YjFjYTFjL2FkMzliYzkwLWU5Y2YtNDEyNS1hYmU2LWY3NWQ5OWIx Y2ExYy5jcmwwHwYDVR0jBBgwFoAUZ+GlgVM7SvNBnGzNthnN8x6dX6EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZDM5YmM5MC1lOWNmLTQxMjUtYWJlNi1mNzVk OTliMWNhMWMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF49EMA4E AgACMAgDBgAmAvXIADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZI6DUjOlvmrdPHz5ZgN6e9pE4uuK0noIv 0HPhKKBO/+ktqsjNYAfOKmc+dkkH30ye7htq7kd+QFgTa107E+alZpAM0Qa8JtHc i0qgCDl6bsb2Tq3lD4mXAnBIoJBjgyk6B+b5ni9sfsvpfdC0wOpfk9gzCCf9to51 LSgBPt8eL9dl9DEl5Zu/h/JO/zKA7dsD38hgq0tVMmQg0IlDYukYPcoGN5m/12Vc VfAdx4B7ono/HbXLI58gKlKHm7YT5vtYpAGvj2+z9ww2Y2ounL4Nr1k6+V7widTe TsnKixahbSf0vEyJP/QMOhYmOGJxJ0RrW4AJC2X+KwlnsIXYH3le -----END CERTIFICATE-----Generated at Wed May 13 09:10:09 2026 by rpki-client