$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/44213fe5-ccf1-31e5-af09-d84820c70b85.roa File: 44213fe5-ccf1-31e5-af09-d84820c70b85.roa (raw, json) Hash identifier: PRSkxX9tm681rAXM0m1FHfp/uhoyfT7WRm6+JOiK9iA= Subject key identifier: 6C:B2:7E:28:D9:76:40:E1:B1:15:F7:9F:F7:6B:EB:04:6C:39:48:FB Certificate issuer: /CN=64e40858-5cbf-4756-8298-1db55fc66d82 Certificate serial: 010D0C9F4328584DE5C38F4A84B06DB1A22AD600 Authority key identifier: 7D:A4:50:27:DF:44:D3:CB:6C:9C:6B:9B:CC:4B:99:72:B3:93:A7:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/44213fe5-ccf1-31e5-af09-d84820c70b85.roa Signing time: Wed 20 May 2026 15:15:43 +0000 ROA not before: Wed 20 May 2026 15:15:43 +0000 ROA not after: Tue 18 Aug 2026 15:15:43 +0000 asID: 21859 IP address blocks: 23.154.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/64e40858-5cbf-4756-8298-1db55fc66d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/64e40858-5cbf-4756-8298-1db55fc66d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e5:c3:8f:4a:84:b0:6d:b1:a2:2a:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64e40858-5cbf-4756-8298-1db55fc66d82 Validity Not Before: May 20 15:15:43 2026 GMT Not After : Aug 18 15:15:43 2026 GMT Subject: CN=c88e738d-a868-4052-99c0-1f4c2f41b3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4f:83:29:62:35:8e:9e:b7:9c:fd:7a:7d:06: 98:3f:1d:f4:c4:e1:4f:d3:3d:30:bb:c9:5d:f0:49: 0c:77:55:3f:84:1b:f9:bf:b1:65:25:4b:a8:8c:0e: ae:83:f4:0c:62:b1:0f:bf:5f:63:10:9a:c9:c6:4b: 96:81:5d:43:ec:ab:b2:3c:1a:fe:65:bd:6a:ea:d4: a0:22:a7:c3:ac:14:a3:5e:7a:0a:ae:69:24:99:b2: c3:a9:98:d2:f9:8b:ab:e2:6d:2c:19:a8:c2:71:60: cc:0b:60:71:d4:57:da:4c:b9:50:7e:95:84:af:fc: d7:a6:bf:16:75:c6:d7:f9:68:4d:a8:60:1b:44:98: 2d:6c:59:50:5e:f4:6e:61:6c:80:1e:ce:3b:af:b2: b7:20:dc:7f:4f:c6:97:6d:8d:08:47:7f:d3:c0:6c: 54:eb:6e:cc:05:53:54:30:b5:c5:8a:4a:81:cc:90: 43:bb:cb:da:74:b4:90:52:2b:23:5f:1f:36:1f:10: 99:87:90:e1:41:b2:db:44:b7:c9:fa:f3:c0:80:ae: 47:d5:7f:65:76:1e:80:87:e3:a5:44:02:b1:0d:bb: 2e:a9:7c:62:da:7f:96:e7:c5:13:f3:3d:af:53:68: 8d:db:62:08:67:0b:38:90:5f:a8:7d:5b:a6:97:02: d0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B2:7E:28:D9:76:40:E1:B1:15:F7:9F:F7:6B:EB:04:6C:39:48:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/44213fe5-ccf1-31e5-af09-d84820c70b85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/64e40858-5cbf-4756-8298-1db55fc66d82.crl X509v3 Authority Key Identifier: keyid:7D:A4:50:27:DF:44:D3:CB:6C:9C:6B:9B:CC:4B:99:72:B3:93:A7:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82.cer sbgp-ipAddrBlock: critical IPv4: 23.154.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:40:38:f4:13:d8:e1:83:86:fd:11:8b:f9:9d:c3:c0:9a:a6: a9:5d:87:04:ae:db:b1:0d:5e:75:74:c1:e3:ec:e6:cd:2c:e5: 11:d2:18:89:96:36:6a:2f:be:79:0e:70:2e:2d:10:c8:4a:33: d2:ec:3d:a9:ea:54:d9:7a:74:ee:e1:dc:05:a7:04:27:33:bb: 90:f5:8f:90:30:3c:5e:f8:6f:00:7d:6e:79:e9:95:e2:cd:c3: e3:e5:ee:77:4a:67:98:ef:12:91:e4:57:63:8f:eb:65:f3:cb: ea:4a:9f:b5:b2:68:78:d0:6a:55:b5:b6:fd:b9:f5:ff:5e:63: 96:e6:31:47:4c:b2:29:26:32:45:b2:a4:b6:81:74:f2:8b:cc: 40:c8:cb:a9:0c:8f:42:21:64:a2:19:67:ce:ba:f4:9e:f5:fb: d8:a0:f3:9f:1f:af:c9:77:d7:4b:c0:ba:ca:b3:4d:ed:a1:9a: 51:88:c2:69:77:f5:ca:6f:7a:22:ac:bd:e9:e8:5a:b6:47:e5: 2d:68:06:28:92:6b:38:81:d5:d8:fe:01:a3:97:18:e2:4c:19: 89:0c:5a:8c:42:f6:18:09:dd:bb:c2:0d:60:93:07:0b:fd:a3: 01:8a:dd:65:50:32:4f:96:26:56:0d:6a:50:d9:cd:2a:ed:72: 38:13:4d:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3lw49KhLBtsaIq1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRlNDA4NTgtNWNiZi00NzU2LTgyOTgtMWRiNTVmYzY2 ZDgyMB4XDTI2MDUyMDE1MTU0M1oXDTI2MDgxODE1MTU0M1owLzEtMCsGA1UEAxMk Yzg4ZTczOGQtYTg2OC00MDUyLTk5YzAtMWY0YzJmNDFiM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE+DKWI1jp63nP16fQaYPx30xOFP0z0wu8ld 8EkMd1U/hBv5v7FlJUuojA6ug/QMYrEPv19jEJrJxkuWgV1D7KuyPBr+Zb1q6tSg IqfDrBSjXnoKrmkkmbLDqZjS+Yur4m0sGajCcWDMC2Bx1FfaTLlQfpWEr/zXpr8W dcbX+WhNqGAbRJgtbFlQXvRuYWyAHs47r7K3INx/T8aXbY0IR3/TwGxU627MBVNU MLXFikqBzJBDu8vadLSQUisjXx82HxCZh5DhQbLbRLfJ+vPAgK5H1X9ldh6Ah+Ol RAKxDbsuqXxi2n+W58UT8z2vU2iN22IIZws4kF+ofVumlwLQnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyyfijZdkDhsRX3n/dr6wRsOUj7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NGU0 MDg1OC01Y2JmLTQ3NTYtODI5OC0xZGI1NWZjNjZkODIvNDQyMTNmZTUtY2NmMS0z MWU1LWFmMDktZDg0ODIwYzcwYjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjRlNDA4NTgtNWNiZi00NzU2LTgy OTgtMWRiNTVmYzY2ZDgyLzY0ZTQwODU4LTVjYmYtNDc1Ni04Mjk4LTFkYjU1ZmM2 NmQ4Mi5jcmwwHwYDVR0jBBgwFoAUfaRQJ99E08tsnGubzEuZcrOTpzgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82NGU0MDg1OC01Y2JmLTQ3NTYtODI5OC0xZGI1 NWZjNjZkODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5qUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlAOPQT2OGDhv0Ri/mdw8CapqldhwSu27ENXnV0wePs5s0s5RHSGImW NmovvnkOcC4tEMhKM9LsPanqVNl6dO7h3AWnBCczu5D1j5AwPF74bwB9bnnpleLN w+Pl7ndKZ5jvEpHkV2OP62Xzy+pKn7WyaHjQalW1tv259f9eY5bmMUdMsikmMkWy pLaBdPKLzEDIy6kMj0IhZKIZZ8669J71+9ig858fr8l310vAusqzTe2hmlGIwml3 9cpveiKsvenoWrZH5S1oBiiSaziB1dj+AaOXGOJMGYkMWoxC9hgJ3bvCDWCTBwv9 owGK3WVQMk+WJlYNalDZzSrtcjgTTQQ= -----END CERTIFICATE-----Generated at Sun May 24 13:09:34 2026 by rpki-client