$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa/0decc770-7996-3ee0-b8a1-f6778d297f96.roa File: 0decc770-7996-3ee0-b8a1-f6778d297f96.roa (raw, json) Hash identifier: XYVqhs9pfV/fYGXaV6knRp0pCzSA+nzHRkCZWvIlkfQ= Subject key identifier: 14:77:80:7A:B8:AB:A4:AF:97:42:89:28:AA:5A:75:D1:BA:07:DC:24 Certificate issuer: /CN=43379ab9-295c-4f8d-ac17-431c5c7004aa Certificate serial: 010D0C9F4328584DFEEBC0BE4B9B3F30D6DB7380 Authority key identifier: 0D:6F:8F:C3:21:98:89:1F:27:96:A0:80:A4:F3:F8:FC:D6:53:E3:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa/0decc770-7996-3ee0-b8a1-f6778d297f96.roa Signing time: Fri 29 May 2026 15:31:55 +0000 ROA not before: Fri 29 May 2026 15:31:55 +0000 ROA not after: Thu 27 Aug 2026 15:31:55 +0000 asID: 153771 IP address blocks: 23.176.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa/43379ab9-295c-4f8d-ac17-431c5c7004aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa/43379ab9-295c-4f8d-ac17-431c5c7004aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fe:eb:c0:be:4b:9b:3f:30:d6:db:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43379ab9-295c-4f8d-ac17-431c5c7004aa Validity Not Before: May 29 15:31:55 2026 GMT Not After : Aug 27 15:31:55 2026 GMT Subject: CN=42db27bd-3f9a-4536-aed4-9b56a2cc82c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:99:0a:fc:b6:43:66:b1:04:3f:87:da:ac: fa:a5:63:55:79:25:d9:20:77:6a:4e:91:8a:c2:b3: 51:21:19:73:45:ab:dd:ac:af:f1:cb:8e:b6:fd:b2: 92:6a:10:84:3a:eb:d5:b1:5f:10:e2:91:d1:cc:2a: 66:3e:3b:f0:3a:76:b3:47:c6:45:31:fe:a3:2c:e9: 4a:41:10:21:51:78:5a:dc:fa:10:eb:23:c1:ef:3d: 21:6c:52:95:10:95:8d:14:40:98:31:9b:47:da:de: 44:f6:f7:40:61:3b:b2:eb:3c:ab:bd:37:2b:7c:c6: 16:b4:bc:7e:54:c4:fb:e9:54:b1:10:0e:36:a0:ab: 38:7f:62:5a:3b:cf:a4:ba:7b:e3:d8:6b:62:b8:42: 6b:89:28:ca:2f:2c:14:2f:fd:4d:64:b5:b3:17:5a: 69:81:7e:a2:41:45:71:80:43:c1:8d:6e:6a:0f:81: 55:93:c9:9c:be:0b:14:5d:79:3b:9c:36:8b:6e:12: 7e:de:22:31:ff:a4:10:9f:1b:c0:fa:bb:c3:d0:cb: c0:42:4b:51:9d:87:ce:96:4e:81:25:30:36:51:5e: d0:bc:20:37:e2:32:0f:5a:e6:ff:a5:64:ce:a3:05: b6:df:19:75:c4:34:75:a7:c0:d1:1d:e5:6e:b0:dd: 4c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:77:80:7A:B8:AB:A4:AF:97:42:89:28:AA:5A:75:D1:BA:07:DC:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa/0decc770-7996-3ee0-b8a1-f6778d297f96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa/43379ab9-295c-4f8d-ac17-431c5c7004aa.crl X509v3 Authority Key Identifier: keyid:0D:6F:8F:C3:21:98:89:1F:27:96:A0:80:A4:F3:F8:FC:D6:53:E3:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa.cer sbgp-ipAddrBlock: critical IPv4: 23.176.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:67:2e:ba:e5:1c:02:1f:9f:2a:1c:3d:0c:61:f4:6f:04:a7: eb:49:2b:4b:c3:49:6a:f8:50:44:4f:04:c1:bb:69:ec:3b:7d: 07:85:55:6d:ba:17:5e:51:95:43:c2:55:d8:e3:66:49:9e:91: a4:a8:2f:b5:ba:aa:79:59:aa:8b:cc:d0:92:04:e5:a3:90:7d: 36:89:a2:fa:49:8c:74:3d:d0:ca:07:9e:f2:24:df:0c:82:f1: fa:01:7f:aa:a1:56:b3:e6:29:d3:c1:f4:2b:74:48:40:ca:67: 39:7d:4c:f0:9a:73:e5:57:8b:b1:8c:ef:27:dc:08:4d:c3:ca: 33:19:d9:21:c9:03:c8:0b:6d:ea:88:d1:e8:c7:66:6b:77:88: 6c:d0:e1:12:52:e5:58:bb:fb:34:cd:54:81:1b:27:d8:f5:11: 29:1c:42:fc:59:0c:bf:cb:78:de:4f:af:a2:e2:47:46:f6:e2: da:62:30:0e:83:2d:e0:fb:bb:6e:b1:b9:fc:49:86:9f:66:6f: b0:97:df:6e:c9:42:c7:f2:9e:34:28:b1:25:2b:f6:b3:c5:26: 70:00:a3:13:6a:32:fd:b3:fe:df:31:82:4c:f0:f3:67:8f:98: eb:89:f9:4e:0d:b3:0d:76:c0:fa:20:95:0c:8e:d4:b4:a4:ac: c2:ba:61:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3+68C+S5s/MNbbc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMzNzlhYjktMjk1Yy00ZjhkLWFjMTctNDMxYzVjNzAw NGFhMB4XDTI2MDUyOTE1MzE1NVoXDTI2MDgyNzE1MzE1NVowLzEtMCsGA1UEAxMk NDJkYjI3YmQtM2Y5YS00NTM2LWFlZDQtOWI1NmEyY2M4MmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAmZCvy2Q2axBD+H2qz6pWNVeSXZIHdqTpGK wrNRIRlzRavdrK/xy462/bKSahCEOuvVsV8Q4pHRzCpmPjvwOnazR8ZFMf6jLOlK QRAhUXha3PoQ6yPB7z0hbFKVEJWNFECYMZtH2t5E9vdAYTuy6zyrvTcrfMYWtLx+ VMT76VSxEA42oKs4f2JaO8+kunvj2GtiuEJriSjKLywUL/1NZLWzF1ppgX6iQUVx gEPBjW5qD4FVk8mcvgsUXXk7nDaLbhJ+3iIx/6QQnxvA+rvD0MvAQktRnYfOlk6B JTA2UV7QvCA34jIPWub/pWTOowW23xl1xDR1p8DRHeVusN1MPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBR3gHq4q6Svl0KJKKpaddG6B9wkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80MzM3 OWFiOS0yOTVjLTRmOGQtYWMxNy00MzFjNWM3MDA0YWEvMGRlY2M3NzAtNzk5Ni0z ZWUwLWI4YTEtZjY3NzhkMjk3Zjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDMzNzlhYjktMjk1Yy00ZjhkLWFj MTctNDMxYzVjNzAwNGFhLzQzMzc5YWI5LTI5NWMtNGY4ZC1hYzE3LTQzMWM1Yzcw MDRhYS5jcmwwHwYDVR0jBBgwFoAUDW+PwyGYiR8nlqCApPP4/NZT40IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80MzM3OWFiOS0yOTVjLTRmOGQtYWMxNy00MzFj NWM3MDA0YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7BYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRnLrrlHAIfnyocPQxh9G8Ep+tJK0vDSWr4UERPBMG7aew7fQeFVW26 F15RlUPCVdjjZkmekaSoL7W6qnlZqovM0JIE5aOQfTaJovpJjHQ90MoHnvIk3wyC 8foBf6qhVrPmKdPB9Ct0SEDKZzl9TPCac+VXi7GM7yfcCE3DyjMZ2SHJA8gLbeqI 0ejHZmt3iGzQ4RJS5Vi7+zTNVIEbJ9j1ESkcQvxZDL/LeN5Pr6LiR0b24tpiMA6D LeD7u26xufxJhp9mb7CX327JQsfynjQosSUr9rPFJnAAoxNqMv2z/t8xgkzw82eP mOuJ+U4Nsw12wPoglQyO1LSkrMK6YV0= -----END CERTIFICATE-----Generated at Thu Jun 4 07:08:25 2026 by rpki-client