$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/e5bda029-e609-35c9-a1c2-cb30b5a56807.roa File: e5bda029-e609-35c9-a1c2-cb30b5a56807.roa (raw, json) Hash identifier: nGcApKkPXxBCBkQamsk/guf32lVisDSW3gBfUqBMUdE= Subject key identifier: A5:69:AB:72:40:DA:14:E4:9D:EF:23:4B:48:93:80:6A:CB:73:04:49 Certificate issuer: /CN=cdbe5dd4-b9fa-4021-87a1-3002f80cc449 Certificate serial: 010D0C9F4328584DB34038B6DE9B0824191AE470 Authority key identifier: 8F:E0:86:0F:8B:FB:5A:AD:69:DE:14:F1:B7:49:0D:90:6A:61:C3:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/e5bda029-e609-35c9-a1c2-cb30b5a56807.roa Signing time: Sat 02 May 2026 13:00:31 +0000 ROA not before: Sat 02 May 2026 13:00:31 +0000 ROA not after: Fri 31 Jul 2026 13:00:31 +0000 asID: 979 IP address blocks: 23.140.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b3:40:38:b6:de:9b:08:24:19:1a:e4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdbe5dd4-b9fa-4021-87a1-3002f80cc449 Validity Not Before: May 2 13:00:31 2026 GMT Not After : Jul 31 13:00:31 2026 GMT Subject: CN=d232b2b7-5eda-46e5-8c94-03e8acae920b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:82:6b:c7:0d:07:80:73:5c:73:3a:a4:fd:92: 6f:46:1c:76:de:c7:c0:c6:55:be:4d:99:1b:72:8f: c8:52:a1:7c:5e:c9:2b:b2:5c:2c:00:0f:ba:35:f0: ee:c2:42:d6:9e:10:5c:1f:7a:4c:4e:67:f9:87:4c: 30:56:8d:59:fc:20:27:8a:44:7a:40:9d:50:f0:2e: 8c:ae:54:07:01:65:50:ca:6d:06:b1:8e:9f:d8:41: c6:87:e3:37:d9:8e:65:3d:0d:e6:a0:6e:b4:9f:26: b3:24:2e:58:0a:71:90:38:1c:49:e9:5e:cb:af:e5: 57:52:9d:83:e9:3b:e1:a5:b9:f3:3d:ac:d1:8d:4d: bf:9f:b5:fc:a3:3a:56:18:48:fb:93:59:2c:d0:33: ab:92:fb:1f:f5:5d:0c:1e:84:40:ab:9c:5a:5a:dc: 90:f6:ff:b3:92:e1:73:c5:92:75:51:4b:1f:dc:09: ac:de:db:a2:aa:89:b0:73:00:b3:71:d6:2e:26:7a: 0c:98:3a:8c:ff:06:cb:91:4d:6b:3e:d7:58:25:e4: db:2c:20:38:dd:2f:82:79:45:37:d9:b5:9f:71:9d: fa:74:ce:73:d3:76:3b:68:3e:df:67:17:c2:32:4b: 69:9c:3a:aa:d8:3f:b7:98:55:e0:65:c6:dd:de:bf: 6d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:69:AB:72:40:DA:14:E4:9D:EF:23:4B:48:93:80:6A:CB:73:04:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/e5bda029-e609-35c9-a1c2-cb30b5a56807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.crl X509v3 Authority Key Identifier: keyid:8F:E0:86:0F:8B:FB:5A:AD:69:DE:14:F1:B7:49:0D:90:6A:61:C3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer sbgp-ipAddrBlock: critical IPv4: 23.140.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:0b:9a:60:92:70:73:df:42:39:01:f9:6a:02:49:e1:4d:5e: 52:99:19:6b:67:ec:a6:3f:9a:3a:0d:86:49:b2:c0:70:46:c2: 9b:3d:8e:b9:1c:d7:5b:9c:d7:71:21:5a:ee:73:20:12:82:ff: 18:34:05:75:27:03:cc:04:05:65:ca:e1:90:e0:aa:3d:d2:ee: 8d:d1:b8:c8:88:1e:be:41:ef:9c:3a:e4:13:c9:fb:7e:3f:8b: c2:5d:ee:f4:9c:5b:70:6c:8b:7d:e6:dd:69:c9:b6:c1:9f:aa: d6:02:09:e8:69:3b:43:0e:df:1f:2f:c9:2e:57:6e:95:35:66: 99:79:b8:e1:93:e2:a2:61:47:ea:9e:bd:5c:73:24:be:19:47: a7:72:f7:6a:2e:0c:9c:b2:51:41:c6:28:39:fc:aa:87:29:20: 02:07:83:56:ca:b5:10:3a:0c:0b:b0:63:eb:45:45:e9:f8:e6: be:f1:bc:dc:4d:88:ac:b0:36:5d:58:cc:94:c4:45:dd:70:9e: 48:42:0e:ee:b4:a8:0e:22:1a:a0:d4:0b:ee:e5:ab:b5:1a:1f: d6:6c:9f:e8:83:ae:fb:9a:e1:9f:81:1a:95:ac:b3:47:65:2e: 23:88:8b:5b:ba:bf:b4:d9:da:65:df:97:8e:df:9d:bf:dd:da: 2a:b4:b8:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2zQDi23psIJBka5HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RiZTVkZDQtYjlmYS00MDIxLTg3YTEtMzAwMmY4MGNj NDQ5MB4XDTI2MDUwMjEzMDAzMVoXDTI2MDczMTEzMDAzMVowLzEtMCsGA1UEAxMk ZDIzMmIyYjctNWVkYS00NmU1LThjOTQtMDNlOGFjYWU5MjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oJrxw0HgHNcczqk/ZJvRhx23sfAxlW+TZkb co/IUqF8XskrslwsAA+6NfDuwkLWnhBcH3pMTmf5h0wwVo1Z/CAnikR6QJ1Q8C6M rlQHAWVQym0GsY6f2EHGh+M32Y5lPQ3moG60nyazJC5YCnGQOBxJ6V7Lr+VXUp2D 6TvhpbnzPazRjU2/n7X8ozpWGEj7k1ks0DOrkvsf9V0MHoRAq5xaWtyQ9v+zkuFz xZJ1UUsf3Ams3tuiqomwcwCzcdYuJnoMmDqM/wbLkU1rPtdYJeTbLCA43S+CeUU3 2bWfcZ36dM5z03Y7aD7fZxfCMktpnDqq2D+3mFXgZcbd3r9tjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVpq3JA2hTkne8jS0iTgGrLcwRJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZGJl NWRkNC1iOWZhLTQwMjEtODdhMS0zMDAyZjgwY2M0NDkvZTViZGEwMjktZTYwOS0z NWM5LWExYzItY2IzMGI1YTU2ODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2RiZTVkZDQtYjlmYS00MDIxLTg3 YTEtMzAwMmY4MGNjNDQ5L2NkYmU1ZGQ0LWI5ZmEtNDAyMS04N2ExLTMwMDJmODBj YzQ0OS5jcmwwHwYDVR0jBBgwFoAUj+CGD4v7Wq1p3hTxt0kNkGphwyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZGJlNWRkNC1iOWZhLTQwMjEtODdhMS0zMDAy ZjgwY2M0NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4yUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8LmmCScHPfQjkB+WoCSeFNXlKZGWtn7KY/mjoNhkmywHBGwps9jrkc 11uc13EhWu5zIBKC/xg0BXUnA8wEBWXK4ZDgqj3S7o3RuMiIHr5B75w65BPJ+34/ i8Jd7vScW3Bsi33m3WnJtsGfqtYCCehpO0MO3x8vyS5XbpU1Zpl5uOGT4qJhR+qe vVxzJL4ZR6dy92ouDJyyUUHGKDn8qocpIAIHg1bKtRA6DAuwY+tFRen45r7xvNxN iKywNl1YzJTERd1wnkhCDu60qA4iGqDUC+7lq7UaH9Zsn+iDrvua4Z+BGpWss0dl LiOIi1u6v7TZ2mXfl47fnb/d2iq0uOU= -----END CERTIFICATE-----Generated at Wed May 13 05:27:43 2026 by rpki-client