$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/d2afa191-abdb-30af-b5a2-fcae4e03229f.roa File: d2afa191-abdb-30af-b5a2-fcae4e03229f.roa (raw, json) Hash identifier: 2sDhfhAiD/mFT+K4aiHWoD+nHbTDzCmsJS6OhH+pGfk= Subject key identifier: E9:2C:65:F3:7F:7E:30:37:E2:2D:03:CB:76:1A:3A:BB:17:87:4F:6F Certificate issuer: /CN=9c2da67c-11a4-4c1b-b100-46b8c2dd97ae Certificate serial: 010D0C9F4328584E0B49558F09C9589E864DC780 Authority key identifier: 6C:28:27:9E:B3:F4:1C:22:41:34:D4:47:8A:4A:6D:BF:AA:E6:64:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/d2afa191-abdb-30af-b5a2-fcae4e03229f.roa Signing time: Wed 03 Jun 2026 01:50:10 +0000 ROA not before: Wed 03 Jun 2026 01:50:10 +0000 ROA not after: Tue 01 Sep 2026 01:50:10 +0000 asID: 402585 IP address blocks: 23.159.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0b:49:55:8f:09:c9:58:9e:86:4d:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c2da67c-11a4-4c1b-b100-46b8c2dd97ae Validity Not Before: Jun 3 01:50:10 2026 GMT Not After : Sep 1 01:50:10 2026 GMT Subject: CN=0d85310d-fedd-4cd1-8087-261c095a767d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:38:de:73:7c:e4:a6:70:64:e0:b8:3c:40:56: d9:a5:f6:20:f1:f7:1a:1d:2b:3f:27:57:38:ef:07: 48:50:fa:ab:71:2b:d9:00:d1:20:69:77:01:c9:f7: 76:13:3f:8d:a3:c9:43:af:8f:48:95:7c:1f:d9:5c: 60:9e:87:dc:d5:e6:f0:65:5e:5e:49:64:d3:0b:68: be:73:d7:ad:2c:62:d2:93:b2:2b:41:45:53:f3:8a: 0d:f8:0c:38:ac:ec:60:d1:ac:d7:5b:58:94:c0:2d: c7:39:4a:59:7a:55:25:71:f4:2d:af:3b:ea:85:6f: df:2e:07:be:86:e9:cc:e5:60:ae:db:31:c4:36:f6: cd:c7:d2:09:55:60:6b:77:3f:d2:e5:38:55:73:5d: 17:c3:81:28:56:14:94:25:99:25:7f:8b:84:aa:97: 0c:0e:5a:83:94:ad:a5:53:c2:f1:67:0a:33:ed:38: 6f:c7:4d:c1:30:ed:9f:3f:f1:e9:d3:bc:44:7b:5e: 88:28:d9:81:31:a0:f5:d7:62:52:a5:53:e9:f9:e7: bd:fe:d7:ed:ac:97:a1:ff:3b:7a:18:7e:fc:0a:29: ce:4a:db:03:52:62:8a:36:69:06:82:e4:6d:fb:c7: 28:56:b0:62:08:38:38:ee:f9:fd:70:df:b9:89:7a: 26:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2C:65:F3:7F:7E:30:37:E2:2D:03:CB:76:1A:3A:BB:17:87:4F:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/d2afa191-abdb-30af-b5a2-fcae4e03229f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.crl X509v3 Authority Key Identifier: keyid:6C:28:27:9E:B3:F4:1C:22:41:34:D4:47:8A:4A:6D:BF:AA:E6:64:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.cer sbgp-ipAddrBlock: critical IPv4: 23.159.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:37:ec:d9:47:03:75:6c:a4:71:27:f8:1a:59:f3:a0:bb:d2: 61:b2:bc:bb:81:c8:c2:49:d7:4d:60:92:10:d8:a2:bf:58:bc: 0c:07:e4:6d:55:d1:4d:b8:59:67:49:1d:6c:c4:1e:bf:c0:9c: 58:5c:e9:c4:7b:0a:53:20:a7:23:9a:d5:ac:88:f7:57:03:4d: 04:10:a9:04:4b:e4:90:40:3a:f8:0a:e3:7f:3a:62:4b:b8:0a: fa:ac:b5:8f:27:8a:da:2e:16:c2:c3:aa:f3:43:db:86:c2:45: 2f:fd:2c:2c:c9:d2:b1:5e:d7:8e:ae:2e:4e:88:a7:c6:5f:0c: 1e:7e:e9:01:a2:e8:a4:92:1b:dc:8e:cf:5c:d7:66:17:9b:fe: 47:1a:1a:5e:44:9e:90:44:91:85:95:97:c3:fa:34:ae:0e:69: 46:a3:51:c2:91:13:45:7f:fc:22:95:e9:05:27:d5:3f:21:b0: 6a:2d:64:67:fb:90:a8:69:ce:83:ff:3d:e2:b0:b4:de:65:fd: 86:24:79:41:50:0a:18:d8:af:09:92:47:0d:05:b4:88:09:c0: 23:8f:f8:56:9e:64:d7:42:42:2a:84:a4:fb:6c:09:92:06:b3: c8:12:35:8c:03:83:91:ac:3a:75:29:76:dd:43:18:b9:49:35: 8b:c3:43:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4LSVWPCclYnoZNx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMyZGE2N2MtMTFhNC00YzFiLWIxMDAtNDZiOGMyZGQ5 N2FlMB4XDTI2MDYwMzAxNTAxMFoXDTI2MDkwMTAxNTAxMFowLzEtMCsGA1UEAxMk MGQ4NTMxMGQtZmVkZC00Y2QxLTgwODctMjYxYzA5NWE3NjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjjec3zkpnBk4Lg8QFbZpfYg8fcaHSs/J1c4 7wdIUPqrcSvZANEgaXcByfd2Ez+No8lDr49IlXwf2Vxgnofc1ebwZV5eSWTTC2i+ c9etLGLSk7IrQUVT84oN+Aw4rOxg0azXW1iUwC3HOUpZelUlcfQtrzvqhW/fLge+ hunM5WCu2zHENvbNx9IJVWBrdz/S5ThVc10Xw4EoVhSUJZklf4uEqpcMDlqDlK2l U8LxZwoz7Thvx03BMO2fP/Hp07xEe16IKNmBMaD112JSpVPp+ee9/tftrJeh/zt6 GH78CinOStsDUmKKNmkGguRt+8coVrBiCDg47vn9cN+5iXom1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOksZfN/fjA34i0Dy3YaOrsXh09vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85YzJk YTY3Yy0xMWE0LTRjMWItYjEwMC00NmI4YzJkZDk3YWUvZDJhZmExOTEtYWJkYi0z MGFmLWI1YTItZmNhZTRlMDMyMjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOWMyZGE2N2MtMTFhNC00YzFiLWIx MDAtNDZiOGMyZGQ5N2FlLzljMmRhNjdjLTExYTQtNGMxYi1iMTAwLTQ2YjhjMmRk OTdhZS5jcmwwHwYDVR0jBBgwFoAUbCgnnrP0HCJBNNRHikptv6rmZCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi85YzJkYTY3Yy0xMWE0LTRjMWItYjEwMC00NmI4 YzJkZDk3YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF598MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACM37NlHA3VspHEn+BpZ86C70mGyvLuByMJJ101gkhDYor9YvAwH5G1V 0U24WWdJHWzEHr/AnFhc6cR7ClMgpyOa1ayI91cDTQQQqQRL5JBAOvgK4386Yku4 CvqstY8nitouFsLDqvND24bCRS/9LCzJ0rFe146uLk6Ip8ZfDB5+6QGi6KSSG9yO z1zXZheb/kcaGl5EnpBEkYWVl8P6NK4OaUajUcKRE0V//CKV6QUn1T8hsGotZGf7 kKhpzoP/PeKwtN5l/YYkeUFQChjYrwmSRw0FtIgJwCOP+FaeZNdCQiqEpPtsCZIG s8gSNYwDg5GsOnUpdt1DGLlJNYvDQ28= -----END CERTIFICATE-----Generated at Sat Jun 6 12:04:24 2026 by rpki-client