$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f710d44-4a34-4e9d-af9f-8179f05b2c43/8c1db093-7263-3b18-8cbb-59e8fd3e6acd.roa File: 8c1db093-7263-3b18-8cbb-59e8fd3e6acd.roa (raw, json) Hash identifier: Vd8Bp41Pv3hB25qa0EH9Don7Pjf8cUrh0Uo+8r6OJLc= Subject key identifier: 33:D4:38:26:E9:BC:81:E1:85:65:6B:03:FC:77:4C:DA:E7:66:69:0F Certificate issuer: /CN=3f710d44-4a34-4e9d-af9f-8179f05b2c43 Certificate serial: 010D0C9F4328584DE5A2E8FB4EFB676D0C00D8C0 Authority key identifier: D3:38:92:33:28:E9:3C:25:6C:D7:CB:B3:B0:E5:2D:6C:D8:AD:88:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f710d44-4a34-4e9d-af9f-8179f05b2c43.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f710d44-4a34-4e9d-af9f-8179f05b2c43/8c1db093-7263-3b18-8cbb-59e8fd3e6acd.roa Signing time: Wed 20 May 2026 14:09:56 +0000 ROA not before: Wed 20 May 2026 14:09:56 +0000 ROA not after: Tue 18 Aug 2026 14:09:56 +0000 asID: 402515 IP address blocks: 23.158.140.0/24 maxlen: 24 2602:f3c1::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f710d44-4a34-4e9d-af9f-8179f05b2c43/3f710d44-4a34-4e9d-af9f-8179f05b2c43.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f710d44-4a34-4e9d-af9f-8179f05b2c43/3f710d44-4a34-4e9d-af9f-8179f05b2c43.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f710d44-4a34-4e9d-af9f-8179f05b2c43.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e5:a2:e8:fb:4e:fb:67:6d:0c:00:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f710d44-4a34-4e9d-af9f-8179f05b2c43 Validity Not Before: May 20 14:09:56 2026 GMT Not After : Aug 18 14:09:56 2026 GMT Subject: CN=d2a7d0ef-0a82-417b-9f3a-cc36c890a7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:17:4a:a4:06:5a:24:60:c8:59:d2:62:4d:cb: e0:2a:45:54:42:9f:a8:dc:ff:2e:39:a4:83:19:5d: ef:cb:dd:24:89:ac:ec:b8:a5:e4:bb:0a:32:70:6a: 8c:97:34:ea:15:ca:d8:26:93:2a:33:9c:f1:35:77: 6c:bf:a2:3e:47:5b:06:3b:d9:9f:49:e4:0e:26:77: 31:68:9d:bf:98:88:37:99:ee:08:86:00:0c:9a:7d: 01:56:15:4b:08:c3:64:7f:5a:97:30:fb:bc:2e:9a: 43:bd:d3:5c:17:74:d2:78:29:32:74:7a:a0:e1:7f: ce:68:ec:c3:9b:6b:ac:b7:71:4c:d1:73:c1:52:f9: fd:bf:13:3d:32:b2:27:1d:32:6a:40:12:ec:2d:14: 84:3c:26:1b:cf:88:7c:24:e3:a5:b4:a9:d9:b7:df: f8:af:08:db:e0:02:24:ec:58:d2:4b:9f:a6:d2:ba: 3f:86:d4:81:c4:43:23:fb:ce:01:d7:1c:08:0f:c6: e1:79:4c:dc:f9:b8:56:24:5b:6f:3b:a1:36:a5:07: 4c:d5:72:24:60:62:a5:7e:7b:ef:63:5d:ed:d6:7d: ae:df:d5:00:00:d1:5e:8d:0c:d5:f1:04:6b:63:72: 2a:14:68:c1:2d:3f:3b:6d:33:fa:92:f7:04:0e:ac: 08:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D4:38:26:E9:BC:81:E1:85:65:6B:03:FC:77:4C:DA:E7:66:69:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f710d44-4a34-4e9d-af9f-8179f05b2c43/8c1db093-7263-3b18-8cbb-59e8fd3e6acd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f710d44-4a34-4e9d-af9f-8179f05b2c43/3f710d44-4a34-4e9d-af9f-8179f05b2c43.crl X509v3 Authority Key Identifier: keyid:D3:38:92:33:28:E9:3C:25:6C:D7:CB:B3:B0:E5:2D:6C:D8:AD:88:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f710d44-4a34-4e9d-af9f-8179f05b2c43.cer sbgp-ipAddrBlock: critical IPv4: 23.158.140.0/24 IPv6: 2602:f3c1::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:58:2e:86:8e:92:c7:3f:29:b6:36:72:5d:fd:da:f2:d5:a8: 86:de:3e:c9:08:62:22:e6:54:c2:c8:b4:49:b0:ec:68:ac:f4: 31:60:94:0c:43:d7:30:1f:42:53:4a:cd:ea:bf:ed:fa:98:0b: 04:fa:3e:d0:d2:3d:bd:d6:ba:ae:78:30:60:1c:e4:bf:45:1f: e0:58:e1:ed:6a:1f:18:d3:ab:6d:78:95:9e:24:e3:4a:a1:77: 87:13:5c:19:61:dd:9e:e5:fd:e6:9a:be:9c:67:04:0c:1f:bb: 18:e9:bc:61:d0:38:4d:5e:93:ad:73:8d:fb:87:d4:c7:5e:22: 4d:7f:6e:29:b1:fd:9a:80:b1:87:e2:2c:6d:02:c6:81:69:22: 6d:fa:9f:c5:c5:cf:a5:6a:58:ed:44:b3:6c:ad:aa:6a:ca:d7: e0:ae:40:0a:1c:3e:8f:e0:1c:a8:81:6e:a6:e9:45:7e:2e:cc: 19:05:84:b7:f5:fe:2f:1b:16:d6:70:e8:8d:b0:99:c0:01:08: fb:61:c7:19:8d:ea:79:89:81:1f:06:1b:73:ee:a7:f5:1f:6d: 62:fc:81:6a:b0:d1:dc:52:7b:c8:05:26:58:7a:48:75:f5:2f: 59:eb:f8:c5:b2:41:2f:6e:3c:f2:2b:2f:80:b8:51:37:22:d1: d7:e7:f8:06 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE3louj7TvtnbQwA2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y3MTBkNDQtNGEzNC00ZTlkLWFmOWYtODE3OWYwNWIy YzQzMB4XDTI2MDUyMDE0MDk1NloXDTI2MDgxODE0MDk1NlowLzEtMCsGA1UEAxMk ZDJhN2QwZWYtMGE4Mi00MTdiLTlmM2EtY2MzNmM4OTBhN2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBdKpAZaJGDIWdJiTcvgKkVUQp+o3P8uOaSD GV3vy90kiazsuKXkuwoycGqMlzTqFcrYJpMqM5zxNXdsv6I+R1sGO9mfSeQOJncx aJ2/mIg3me4IhgAMmn0BVhVLCMNkf1qXMPu8LppDvdNcF3TSeCkydHqg4X/OaOzD m2ust3FM0XPBUvn9vxM9MrInHTJqQBLsLRSEPCYbz4h8JOOltKnZt9/4rwjb4AIk 7FjSS5+m0ro/htSBxEMj+84B1xwID8bheUzc+bhWJFtvO6E2pQdM1XIkYGKlfnvv Y13t1n2u39UAANFejQzV8QRrY3IqFGjBLT87bTP6kvcEDqwIhQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDPUOCbpvIHhhWVrA/x3TNrnZmkPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zZjcx MGQ0NC00YTM0LTRlOWQtYWY5Zi04MTc5ZjA1YjJjNDMvOGMxZGIwOTMtNzI2My0z YjE4LThjYmItNTllOGZkM2U2YWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvM2Y3MTBkNDQtNGEzNC00ZTlkLWFm OWYtODE3OWYwNWIyYzQzLzNmNzEwZDQ0LTRhMzQtNGU5ZC1hZjlmLTgxNzlmMDVi MmM0My5jcmwwHwYDVR0jBBgwFoAU0ziSMyjpPCVs18uzsOUtbNitiG4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zZjcxMGQ0NC00YTM0LTRlOWQtYWY5Zi04MTc5 ZjA1YjJjNDMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF56MMA4E AgACMAgDBgAmAvPBADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLWC6GjpLHPym2NnJd/dry1aiG3j7JCGIi 5lTCyLRJsOxorPQxYJQMQ9cwH0JTSs3qv+36mAsE+j7Q0j291rqueDBgHOS/RR/g WOHtah8Y06tteJWeJONKoXeHE1wZYd2e5f3mmr6cZwQMH7sY6bxh0DhNXpOtc437 h9THXiJNf24psf2agLGH4ixtAsaBaSJt+p/Fxc+laljtRLNsrapqytfgrkAKHD6P 4ByogW6m6UV+LswZBYS39f4vGxbWcOiNsJnAAQj7YccZjep5iYEfBhtz7qf1H21i /IFqsNHcUnvIBSZYekh19S9Z6/jFskEvbjzyKy+AuFE3ItHX5/gG -----END CERTIFICATE-----Generated at Sat Jun 6 12:04:30 2026 by rpki-client