$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a/bab30281-ddab-371f-a142-2ea350fb226a.roa File: bab30281-ddab-371f-a142-2ea350fb226a.roa (raw, json) Hash identifier: RdmROtBdY5ILBlyyiLtoebCh0bInKztYiHokHrZ6Z3U= Subject key identifier: C9:E8:47:94:FC:AC:45:8E:4D:83:8D:DD:AD:57:E3:F1:CA:97:EA:CA Certificate issuer: /CN=31737d94-3b81-41f9-b1fb-fbdeacfc665a Certificate serial: 010D0C9F4328584DE1B06435799D1DCA9D617480 Authority key identifier: 64:16:61:31:56:4D:3B:26:BC:59:4C:81:89:7D:A2:8A:C2:C5:A7:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a/bab30281-ddab-371f-a142-2ea350fb226a.roa Signing time: Tue 19 May 2026 04:13:52 +0000 ROA not before: Tue 19 May 2026 04:13:52 +0000 ROA not after: Wed 12 Aug 2026 01:14:58 +0000 asID: 402495 IP address blocks: 23.158.100.0/24 maxlen: 24 2602:f3c7::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a/31737d94-3b81-41f9-b1fb-fbdeacfc665a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a/31737d94-3b81-41f9-b1fb-fbdeacfc665a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:b0:64:35:79:9d:1d:ca:9d:61:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31737d94-3b81-41f9-b1fb-fbdeacfc665a Validity Not Before: May 19 04:13:52 2026 GMT Not After : Aug 12 01:14:58 2026 GMT Subject: CN=b9be3de1-be4c-4bea-b4e0-1ddd8962114d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:08:6b:3c:d6:90:55:64:7f:3f:a6:02:cc:87: a2:af:06:24:40:0a:ae:3b:61:13:c1:d6:68:d3:ed: f7:df:11:db:a2:16:d7:49:0f:6f:9c:8d:78:34:3d: 92:de:43:ba:64:88:f7:55:7d:80:0a:69:8e:13:74: 0f:d1:a7:50:79:fe:af:a2:dd:5f:49:fd:92:50:23: c9:0a:9f:f5:b1:bc:fa:71:32:3a:3b:09:82:b4:ad: 15:6c:12:66:8c:1b:84:90:82:66:71:e5:cf:37:0d: 8a:1d:ad:2b:c0:74:76:71:17:0d:8e:07:47:41:bb: dc:71:eb:1b:af:33:49:cb:0c:dd:92:9d:48:03:4a: c8:33:3e:18:75:30:4c:07:bf:a6:b5:47:be:8d:02: b5:d8:13:4b:0f:2f:e6:a8:14:d5:f9:d0:93:ca:5e: a4:09:35:c3:10:ae:2f:f1:d4:d0:76:73:83:74:8b: 11:09:6e:06:2c:37:45:6f:fe:3d:02:09:f5:12:56: ce:aa:c7:28:86:ec:f0:5f:96:34:e6:1b:01:52:87: 1c:97:82:c4:91:d1:e4:b4:7b:89:e7:56:40:5c:24: eb:94:2b:ff:ac:13:76:53:34:2f:14:87:93:60:33: e7:19:ae:61:94:88:50:75:13:1e:5f:73:5e:46:5d: d6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E8:47:94:FC:AC:45:8E:4D:83:8D:DD:AD:57:E3:F1:CA:97:EA:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a/bab30281-ddab-371f-a142-2ea350fb226a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a/31737d94-3b81-41f9-b1fb-fbdeacfc665a.crl X509v3 Authority Key Identifier: keyid:64:16:61:31:56:4D:3B:26:BC:59:4C:81:89:7D:A2:8A:C2:C5:A7:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a.cer sbgp-ipAddrBlock: critical IPv4: 23.158.100.0/24 IPv6: 2602:f3c7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:41:16:18:b6:6d:60:11:b1:72:4b:d6:f9:3e:4d:63:93:17: 35:de:ee:8b:42:20:ee:79:38:43:40:85:30:30:33:97:fc:e1: 13:74:34:f5:53:39:dd:ea:a2:7e:e7:cb:7f:e0:78:88:cd:4b: 00:bf:ea:ee:2c:63:3d:c2:62:67:79:b5:cd:79:59:2a:41:ba: ff:a3:39:c1:c4:71:d9:a2:fc:49:2f:8d:39:77:55:1d:03:37: 72:8f:fd:bd:47:2a:4d:e5:11:62:85:81:81:d9:f9:23:e6:fa: 7f:82:57:71:e6:48:3e:21:92:37:c1:07:2a:a1:b2:82:1e:7b: d1:06:da:6e:16:81:01:c6:bb:f1:f4:9e:54:9e:dc:43:62:a0: 15:67:63:4c:6e:81:53:e9:1c:c5:95:5b:3b:ba:fb:de:28:0c: 86:46:fd:2d:eb:6b:50:0b:fe:f2:2f:65:46:f2:5b:0c:a1:7e: b5:f2:b7:db:c3:7f:d2:7b:74:ac:3c:71:e8:54:47:db:a6:47: f3:7a:82:54:7f:21:a4:6c:1d:5d:6a:85:9c:c7:a2:b3:a7:3b: fe:c3:cf:cd:8d:f6:36:86:77:b2:92:0d:36:25:4f:5f:1e:fc: ce:56:14:dd:28:1e:f1:a7:80:63:2a:f7:96:dd:81:97:40:e8: f6:35:71:0d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE3hsGQ1eZ0dyp1hdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzE3MzdkOTQtM2I4MS00MWY5LWIxZmItZmJkZWFjZmM2 NjVhMB4XDTI2MDUxOTA0MTM1MloXDTI2MDgxMjAxMTQ1OFowLzEtMCsGA1UEAxMk YjliZTNkZTEtYmU0Yy00YmVhLWI0ZTAtMWRkZDg5NjIxMTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArghrPNaQVWR/P6YCzIeirwYkQAquO2ETwdZo 0+333xHbohbXSQ9vnI14ND2S3kO6ZIj3VX2ACmmOE3QP0adQef6vot1fSf2SUCPJ Cp/1sbz6cTI6OwmCtK0VbBJmjBuEkIJmceXPNw2KHa0rwHR2cRcNjgdHQbvccesb rzNJywzdkp1IA0rIMz4YdTBMB7+mtUe+jQK12BNLDy/mqBTV+dCTyl6kCTXDEK4v 8dTQdnODdIsRCW4GLDdFb/49Agn1ElbOqscohuzwX5Y05hsBUoccl4LEkdHktHuJ 51ZAXCTrlCv/rBN2UzQvFIeTYDPnGa5hlIhQdRMeX3NeRl3WXQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMnoR5T8rEWOTYON3a1X4/HKl+rKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zMTcz N2Q5NC0zYjgxLTQxZjktYjFmYi1mYmRlYWNmYzY2NWEvYmFiMzAyODEtZGRhYi0z NzFmLWExNDItMmVhMzUwZmIyMjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzE3MzdkOTQtM2I4MS00MWY5LWIx ZmItZmJkZWFjZmM2NjVhLzMxNzM3ZDk0LTNiODEtNDFmOS1iMWZiLWZiZGVhY2Zj NjY1YS5jcmwwHwYDVR0jBBgwFoAUZBZhMVZNOya8WUyBiX2iisLFp8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zMTczN2Q5NC0zYjgxLTQxZjktYjFmYi1mYmRl YWNmYzY2NWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF55kMA4E AgACMAgDBgAmAvPHADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCfQRYYtm1gEbFyS9b5Pk1jkxc13u6LQiDu eThDQIUwMDOX/OETdDT1Uznd6qJ+58t/4HiIzUsAv+ruLGM9wmJnebXNeVkqQbr/ oznBxHHZovxJL405d1UdAzdyj/29RypN5RFihYGB2fkj5vp/gldx5kg+IZI3wQcq obKCHnvRBtpuFoEBxrvx9J5UntxDYqAVZ2NMboFT6RzFlVs7uvveKAyGRv0t62tQ C/7yL2VG8lsMoX618rfbw3/Se3SsPHHoVEfbpkfzeoJUfyGkbB1daoWcx6Kzpzv+ w8/NjfY2hneykg02JU9fHvzOVhTdKB7xp4BjKveW3YGXQOj2NXEN -----END CERTIFICATE-----Generated at Sat Jun 6 10:48:18 2026 by rpki-client