$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/432814c4-a5fa-341c-bc25-4c1b6fddaa27.roa File: 432814c4-a5fa-341c-bc25-4c1b6fddaa27.roa (raw, json) Hash identifier: t1wKevaXIvN9VbgHEml0qFmBk+MI/FfhQn/8jlpKfsY= Subject key identifier: AD:B2:E8:9C:85:EC:C3:88:53:3F:AB:A2:AE:F7:17:4E:BF:91:40:0E Certificate issuer: /CN=2a576405-6d12-4321-8aff-11069dafb9f1 Certificate serial: 010D0C9F4328584DD34FDCE94EE369919D2A21E0 Authority key identifier: BB:4D:83:61:A4:90:4F:28:37:18:5F:95:D5:B1:1A:01:1F:4B:15:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/432814c4-a5fa-341c-bc25-4c1b6fddaa27.roa Signing time: Thu 14 May 2026 00:38:03 +0000 ROA not before: Thu 14 May 2026 00:38:03 +0000 ROA not after: Wed 12 Aug 2026 00:38:03 +0000 asID: 402333 IP address blocks: 23.158.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:4f:dc:e9:4e:e3:69:91:9d:2a:21:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a576405-6d12-4321-8aff-11069dafb9f1 Validity Not Before: May 14 00:38:03 2026 GMT Not After : Aug 12 00:38:03 2026 GMT Subject: CN=7ca588d0-6e28-456b-a51c-9bfcf051e7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0e:d9:d0:3b:4b:79:a8:b6:5a:a7:78:09:53: de:7b:cc:48:31:d3:76:9f:f4:fe:e0:42:58:f3:81: 88:41:1b:e7:6d:b8:14:6c:6a:18:a6:22:37:8d:90: 6b:0a:02:7d:a0:c5:40:03:84:fd:a2:be:76:22:4a: 24:91:a7:24:f2:05:f3:71:5a:19:84:fb:2e:0b:fc: a9:7d:aa:e0:71:13:b5:1f:4c:14:b6:50:cd:e5:a5: 14:5b:9a:68:42:77:ef:64:92:e6:58:51:07:2b:64: b6:7a:a6:c4:37:14:3e:57:dc:0b:8d:9a:de:0b:f8: be:fb:51:0b:86:82:83:47:cd:65:f6:87:ec:84:8e: 1b:54:60:38:08:c0:bb:e9:5d:d5:62:43:d5:55:12: df:e6:4e:f6:d3:5a:dd:49:8b:c0:54:9b:ee:72:4d: 9d:76:48:bb:51:6c:0e:8c:33:a4:7e:09:bb:7d:bd: e3:bb:69:c4:a4:c1:83:64:4b:6c:a5:a6:61:7a:17: 2e:e3:50:79:9a:c2:8a:ae:66:22:36:7b:32:f2:ee: d0:61:83:18:ca:05:6d:fa:e6:15:8a:65:cf:ad:16: ec:79:e4:ed:4e:3b:0a:d5:90:50:f0:f5:86:63:d7: 47:3c:a6:34:77:31:86:37:3d:90:b8:88:85:67:f8: d8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B2:E8:9C:85:EC:C3:88:53:3F:AB:A2:AE:F7:17:4E:BF:91:40:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/432814c4-a5fa-341c-bc25-4c1b6fddaa27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.crl X509v3 Authority Key Identifier: keyid:BB:4D:83:61:A4:90:4F:28:37:18:5F:95:D5:B1:1A:01:1F:4B:15:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer sbgp-ipAddrBlock: critical IPv4: 23.158.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:81:50:1b:8a:a1:9d:14:23:a5:12:3f:57:90:33:55:df:f5: 44:56:91:42:d4:f7:19:7f:4e:46:07:01:e4:85:0b:18:d8:87: 5d:13:2b:4a:11:7f:75:9f:b6:ba:c7:6c:71:bc:be:45:09:a4: 35:22:46:a3:79:f8:9e:b4:56:aa:2a:fa:2c:12:38:3d:c1:0d: 75:98:c9:5e:89:c3:90:f0:8e:d5:af:a0:51:d8:cb:66:f7:73: 90:1e:71:1e:ba:5c:9b:b6:ba:1f:34:0d:3c:88:df:20:ba:a5: 53:c9:1e:90:7b:f7:6b:58:9d:3f:cb:0a:79:78:60:43:55:fc: f1:f0:b4:6b:73:fe:de:ab:05:6b:67:26:e1:0f:4e:7e:cc:da: fb:50:ef:45:4b:82:66:e8:8d:63:1f:f6:f4:40:de:b2:32:43: 82:86:e7:fb:10:40:0f:0a:8f:13:fc:8c:43:d2:78:ec:97:7d: d3:8d:b1:f2:f7:1e:3b:55:94:8b:18:4c:0d:b3:66:19:d8:ad: f0:35:09:4e:f9:94:2b:c6:f6:41:a9:9a:03:89:81:13:29:b3: f9:65:48:ce:67:cd:09:1f:0b:eb:b9:6c:cd:6d:8b:c3:8e:29: 8a:02:a4:19:8e:f0:ba:89:ae:2b:52:a7:54:d3:af:d4:54:91: e6:dd:5a:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3TT9zpTuNpkZ0qIeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1NzY0MDUtNmQxMi00MzIxLThhZmYtMTEwNjlkYWZi OWYxMB4XDTI2MDUxNDAwMzgwM1oXDTI2MDgxMjAwMzgwM1owLzEtMCsGA1UEAxMk N2NhNTg4ZDAtNmUyOC00NTZiLWE1MWMtOWJmY2YwNTFlN2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA7Z0DtLeai2Wqd4CVPee8xIMdN2n/T+4EJY 84GIQRvnbbgUbGoYpiI3jZBrCgJ9oMVAA4T9or52Ikokkack8gXzcVoZhPsuC/yp fargcRO1H0wUtlDN5aUUW5poQnfvZJLmWFEHK2S2eqbENxQ+V9wLjZreC/i++1EL hoKDR81l9ofshI4bVGA4CMC76V3VYkPVVRLf5k7201rdSYvAVJvuck2ddki7UWwO jDOkfgm7fb3ju2nEpMGDZEtspaZhehcu41B5msKKrmYiNnsy8u7QYYMYygVt+uYV imXPrRbseeTtTjsK1ZBQ8PWGY9dHPKY0dzGGNz2QuIiFZ/jYqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2y6JyF7MOIUz+roq73F06/kUAOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yYTU3 NjQwNS02ZDEyLTQzMjEtOGFmZi0xMTA2OWRhZmI5ZjEvNDMyODE0YzQtYTVmYS0z NDFjLWJjMjUtNGMxYjZmZGRhYTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmE1NzY0MDUtNmQxMi00MzIxLThh ZmYtMTEwNjlkYWZiOWYxLzJhNTc2NDA1LTZkMTItNDMyMS04YWZmLTExMDY5ZGFm YjlmMS5jcmwwHwYDVR0jBBgwFoAUu02DYaSQTyg3GF+V1bEaAR9LFUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yYTU3NjQwNS02ZDEyLTQzMjEtOGFmZi0xMTA2 OWRhZmI5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF54UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISBUBuKoZ0UI6USP1eQM1Xf9URWkULU9xl/TkYHAeSFCxjYh10TK0oR f3WftrrHbHG8vkUJpDUiRqN5+J60Vqoq+iwSOD3BDXWYyV6Jw5DwjtWvoFHYy2b3 c5AecR66XJu2uh80DTyI3yC6pVPJHpB792tYnT/LCnl4YENV/PHwtGtz/t6rBWtn JuEPTn7M2vtQ70VLgmbojWMf9vRA3rIyQ4KG5/sQQA8KjxP8jEPSeOyXfdONsfL3 HjtVlIsYTA2zZhnYrfA1CU75lCvG9kGpmgOJgRMps/llSM5nzQkfC+u5bM1ti8OO KYoCpBmO8LqJritSp1TTr9RUkebdWpc= -----END CERTIFICATE-----Generated at Thu Jun 4 03:20:24 2026 by rpki-client