$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/70dae8bc-c10e-3297-8a58-04ae61176f17.roa File: 70dae8bc-c10e-3297-8a58-04ae61176f17.roa (raw, json) Hash identifier: 1rMC8FCtCvSdffZOR8v4Eletc2+6tENWbI2fJho78uQ= Subject key identifier: 0A:52:F7:DD:B0:03:27:18:F8:F0:7B:15:82:C3:13:B7:A9:9D:97:BC Certificate issuer: /CN=2a576405-6d12-4321-8aff-11069dafb9f1 Certificate serial: 010D0C9F4328584DD35000924D4DFE9915DD5C00 Authority key identifier: BB:4D:83:61:A4:90:4F:28:37:18:5F:95:D5:B1:1A:01:1F:4B:15:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/70dae8bc-c10e-3297-8a58-04ae61176f17.roa Signing time: Thu 14 May 2026 00:38:20 +0000 ROA not before: Thu 14 May 2026 00:38:20 +0000 ROA not after: Wed 12 Aug 2026 00:38:20 +0000 asID: 402334 IP address blocks: 23.158.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:50:00:92:4d:4d:fe:99:15:dd:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a576405-6d12-4321-8aff-11069dafb9f1 Validity Not Before: May 14 00:38:20 2026 GMT Not After : Aug 12 00:38:20 2026 GMT Subject: CN=edf783c6-9116-4ce3-8087-78fa2abd0f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f5:cc:d9:e8:70:82:0f:1a:b4:6a:57:7f:6c: bc:31:4d:03:e7:54:d1:7c:cb:42:60:76:e9:52:b7: 29:91:1e:ca:5b:9f:4b:ce:ea:2a:ea:38:96:c5:ed: 5f:73:3e:1f:73:a8:08:fd:d7:aa:d6:c3:1c:77:5e: eb:9b:28:61:ed:e6:23:0e:64:21:6d:c4:3a:70:86: 9d:ae:6c:d9:e6:60:1c:33:b1:44:33:b9:95:73:5c: 55:6f:56:9c:f2:65:d1:9d:7d:61:94:7b:4e:bc:cf: 62:ce:a4:38:e4:dc:1d:82:f1:1c:ac:39:8a:2e:ea: e2:3d:05:53:49:28:41:ea:02:4d:ae:b7:c2:88:6d: 77:22:57:2b:85:59:2a:29:01:85:dd:04:b1:8a:2a: 35:cd:bc:11:9d:89:1c:2b:05:1f:26:68:c2:92:a9: 3d:ee:f5:f4:67:0f:93:4a:4c:8f:c7:72:83:4a:1f: ce:38:a8:b9:e3:09:9a:38:ce:9f:f0:80:66:6c:23: e0:d4:87:50:ed:b4:25:ce:64:38:fc:da:7d:f8:9a: 74:3b:70:51:a9:e1:3b:55:cf:bc:a6:31:9f:92:da: 47:85:35:a6:ca:e7:db:e3:ab:88:a8:50:72:e0:d1: 77:6f:8f:c9:ca:f3:0e:d9:ae:7c:e4:08:fc:87:67: bb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:52:F7:DD:B0:03:27:18:F8:F0:7B:15:82:C3:13:B7:A9:9D:97:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/70dae8bc-c10e-3297-8a58-04ae61176f17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.crl X509v3 Authority Key Identifier: keyid:BB:4D:83:61:A4:90:4F:28:37:18:5F:95:D5:B1:1A:01:1F:4B:15:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer sbgp-ipAddrBlock: critical IPv4: 23.158.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:45:ff:58:27:56:c1:b8:ff:37:6a:44:45:3c:4f:78:4b:af: d2:4a:76:3a:53:7d:31:9e:4c:f6:58:c7:c5:9f:c5:48:cd:ba: 9e:ba:33:d8:29:07:4f:59:7d:22:6a:16:a6:20:0d:f2:ef:cd: d0:1c:f6:34:aa:e3:01:86:2d:25:72:80:03:09:12:d3:c3:ec: a0:63:64:dd:18:46:a1:e4:dd:39:61:3c:8b:ec:33:0e:3f:40: 52:8d:02:01:c6:9e:40:95:ed:da:4e:09:dd:3d:e6:3c:dc:eb: 1a:e9:1c:59:6d:ba:20:b6:06:8d:22:89:49:66:6e:20:21:f7: cc:72:f0:c2:26:23:55:b8:b7:a9:86:16:8c:79:5e:44:a4:97: e7:36:3c:3f:98:d3:54:62:d2:d5:b8:9e:de:b3:54:e8:12:a0: 4e:68:70:3a:84:c1:71:d3:d3:4b:a6:2e:17:0d:2b:81:10:f6: 01:c0:2a:8f:1f:f6:76:6a:d9:8e:bd:8b:3c:ce:e8:88:cd:65: 06:92:ce:f1:cb:6e:57:d3:aa:e9:17:49:07:4f:ab:1a:e9:07: cb:70:c8:a1:6f:b6:f3:1d:a1:0f:d6:cb:58:b9:42:31:3a:59: d2:33:7d:1b:66:30:30:8e:ac:4c:6f:b9:3d:1e:f4:d8:b5:66: aa:93:72:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3TUACSTU3+mRXdXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1NzY0MDUtNmQxMi00MzIxLThhZmYtMTEwNjlkYWZi OWYxMB4XDTI2MDUxNDAwMzgyMFoXDTI2MDgxMjAwMzgyMFowLzEtMCsGA1UEAxMk ZWRmNzgzYzYtOTExNi00Y2UzLTgwODctNzhmYTJhYmQwZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfXM2ehwgg8atGpXf2y8MU0D51TRfMtCYHbp UrcpkR7KW59Lzuoq6jiWxe1fcz4fc6gI/deq1sMcd17rmyhh7eYjDmQhbcQ6cIad rmzZ5mAcM7FEM7mVc1xVb1ac8mXRnX1hlHtOvM9izqQ45NwdgvEcrDmKLuriPQVT SShB6gJNrrfCiG13IlcrhVkqKQGF3QSxiio1zbwRnYkcKwUfJmjCkqk97vX0Zw+T SkyPx3KDSh/OOKi54wmaOM6f8IBmbCPg1IdQ7bQlzmQ4/Np9+Jp0O3BRqeE7Vc+8 pjGfktpHhTWmyufb46uIqFBy4NF3b4/JyvMO2a585Aj8h2e7ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApS992wAycY+PB7FYLDE7epnZe8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yYTU3 NjQwNS02ZDEyLTQzMjEtOGFmZi0xMTA2OWRhZmI5ZjEvNzBkYWU4YmMtYzEwZS0z Mjk3LThhNTgtMDRhZTYxMTc2ZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmE1NzY0MDUtNmQxMi00MzIxLThh ZmYtMTEwNjlkYWZiOWYxLzJhNTc2NDA1LTZkMTItNDMyMS04YWZmLTExMDY5ZGFm YjlmMS5jcmwwHwYDVR0jBBgwFoAUu02DYaSQTyg3GF+V1bEaAR9LFUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yYTU3NjQwNS02ZDEyLTQzMjEtOGFmZi0xMTA2 OWRhZmI5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF54UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5F/1gnVsG4/zdqREU8T3hLr9JKdjpTfTGeTPZYx8WfxUjNup66M9gp B09ZfSJqFqYgDfLvzdAc9jSq4wGGLSVygAMJEtPD7KBjZN0YRqHk3TlhPIvsMw4/ QFKNAgHGnkCV7dpOCd095jzc6xrpHFltuiC2Bo0iiUlmbiAh98xy8MImI1W4t6mG Fox5XkSkl+c2PD+Y01Ri0tW4nt6zVOgSoE5ocDqEwXHT00umLhcNK4EQ9gHAKo8f 9nZq2Y69izzO6IjNZQaSzvHLblfTqukXSQdPqxrpB8twyKFvtvMdoQ/Wy1i5QjE6 WdIzfRtmMDCOrExvuT0e9Ni1ZqqTcrk= -----END CERTIFICATE-----Generated at Thu Jun 4 05:11:36 2026 by rpki-client