$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b404b454-9c30-4034-9607-35f217ad2f6b/9fd17006-afcb-3662-afca-7f13e5817654.roa File: 9fd17006-afcb-3662-afca-7f13e5817654.roa (raw, json) Hash identifier: AmJm5xRh3okrtVMsbSN6VSKJEmFLWXjeOwNnwqXPiwk= Subject key identifier: 8C:FB:BA:D4:E1:2F:F6:92:BC:C0:F1:12:0B:A3:04:8E:95:94:AB:52 Certificate issuer: /CN=b404b454-9c30-4034-9607-35f217ad2f6b Certificate serial: 010D0C9F4328584DD39BEE79EA14BB696CDA3380 Authority key identifier: DE:7C:99:66:B0:65:F3:5B:37:6F:A9:E4:C7:76:7C:47:49:0F:44:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b404b454-9c30-4034-9607-35f217ad2f6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b404b454-9c30-4034-9607-35f217ad2f6b/9fd17006-afcb-3662-afca-7f13e5817654.roa Signing time: Thu 14 May 2026 03:11:19 +0000 ROA not before: Thu 14 May 2026 03:11:19 +0000 ROA not after: Wed 12 Aug 2026 03:11:19 +0000 asID: 13795 IP address blocks: 23.152.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b404b454-9c30-4034-9607-35f217ad2f6b/b404b454-9c30-4034-9607-35f217ad2f6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b404b454-9c30-4034-9607-35f217ad2f6b/b404b454-9c30-4034-9607-35f217ad2f6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b404b454-9c30-4034-9607-35f217ad2f6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:9b:ee:79:ea:14:bb:69:6c:da:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b404b454-9c30-4034-9607-35f217ad2f6b Validity Not Before: May 14 03:11:19 2026 GMT Not After : Aug 12 03:11:19 2026 GMT Subject: CN=32e84f8b-e4fb-4925-925f-44b42a94fd63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1f:05:ef:0d:aa:ec:2e:e4:0b:aa:8d:ee:ed: de:ae:55:ef:7a:36:82:ae:18:8a:e5:69:24:c0:d4: 44:49:2c:83:ef:43:2d:a9:70:71:44:bd:6f:18:ec: 54:65:59:9a:c5:61:51:e1:19:4d:3d:4d:32:f8:d7: 46:1b:83:a6:1c:1a:ae:f7:e6:65:68:e4:7b:aa:d6: a7:c1:74:ae:e2:ae:38:8d:87:ee:40:9a:ae:8a:87: 65:ac:9a:ed:ea:29:0d:ee:a5:87:7a:5e:41:07:8f: 84:4e:f7:21:6a:63:69:55:6f:79:39:29:c8:c6:83: 3c:1b:b8:87:8a:bf:0b:b4:ec:2f:1d:10:f9:67:12: bf:6d:0a:9b:14:a4:73:43:3a:fe:c4:27:e0:4d:77: 16:e9:e4:cc:83:c7:e7:65:ee:67:cf:13:b3:7f:c6: 6b:b4:9a:c5:b5:fc:37:05:14:b0:d7:cf:d6:e8:4a: e5:e2:6c:99:5e:ae:9f:49:6d:72:1b:28:58:9a:26: 42:27:5d:82:cf:ce:b9:4f:f8:66:05:ca:1b:23:02: 9e:81:fc:d6:f5:ff:d4:7f:b2:e3:ea:a1:76:c5:03: cc:31:0a:98:83:ba:66:98:56:92:83:81:f9:bb:70: bd:e0:b1:8c:05:af:31:05:85:82:ad:35:4e:3a:19: d7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FB:BA:D4:E1:2F:F6:92:BC:C0:F1:12:0B:A3:04:8E:95:94:AB:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b404b454-9c30-4034-9607-35f217ad2f6b/9fd17006-afcb-3662-afca-7f13e5817654.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b404b454-9c30-4034-9607-35f217ad2f6b/b404b454-9c30-4034-9607-35f217ad2f6b.crl X509v3 Authority Key Identifier: keyid:DE:7C:99:66:B0:65:F3:5B:37:6F:A9:E4:C7:76:7C:47:49:0F:44:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b404b454-9c30-4034-9607-35f217ad2f6b.cer sbgp-ipAddrBlock: critical IPv4: 23.152.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:59:e2:a6:eb:65:b3:84:0c:9b:05:b4:9d:6d:67:d5:14:81: bd:8e:9d:ea:d5:3d:ac:36:f9:81:80:4f:26:e1:72:40:e4:53: f6:39:89:8f:65:eb:82:0d:0f:97:be:fe:82:c3:d1:87:5d:c3: 38:11:c0:4f:3e:13:62:4d:09:0c:57:a6:7b:35:e0:01:74:3d: 6f:ad:a2:fd:39:5a:3c:36:4c:76:1d:4e:5d:ed:c5:fd:e3:a4: cf:4f:ca:5a:2b:6c:32:f8:ce:9e:a9:cf:0b:da:72:d5:c0:11: 5f:f0:5d:93:49:2a:b8:19:1a:e2:56:3c:b1:cc:36:0f:3d:5c: a6:9e:15:66:56:29:95:dc:a4:37:2b:e9:11:3b:47:49:23:5c: d7:00:70:24:2f:f2:38:7a:ec:bc:34:31:69:b7:9c:f5:61:dc: 58:4f:fa:bc:f9:59:89:a9:ee:4c:37:62:9c:1d:45:4f:33:7b: 62:fe:f8:fc:e4:cd:ad:86:5d:ff:98:f4:31:86:54:15:82:c0: f7:a7:ee:42:2d:4b:b5:73:58:19:1f:18:6c:d1:89:07:2f:8d: 32:63:54:33:2d:c0:98:d6:6f:11:13:df:c9:c0:6b:86:c7:2e: d1:25:ed:c7:e9:79:a6:f4:b1:55:3a:e3:88:cf:f8:39:27:e3: 10:19:8c:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Tm+556hS7aWzaM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQwNGI0NTQtOWMzMC00MDM0LTk2MDctMzVmMjE3YWQy ZjZiMB4XDTI2MDUxNDAzMTExOVoXDTI2MDgxMjAzMTExOVowLzEtMCsGA1UEAxMk MzJlODRmOGItZTRmYi00OTI1LTkyNWYtNDRiNDJhOTRmZDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx8F7w2q7C7kC6qN7u3erlXvejaCrhiK5Wkk wNRESSyD70MtqXBxRL1vGOxUZVmaxWFR4RlNPU0y+NdGG4OmHBqu9+ZlaOR7qtan wXSu4q44jYfuQJquiodlrJrt6ikN7qWHel5BB4+ETvchamNpVW95OSnIxoM8G7iH ir8LtOwvHRD5ZxK/bQqbFKRzQzr+xCfgTXcW6eTMg8fnZe5nzxOzf8ZrtJrFtfw3 BRSw18/W6Erl4myZXq6fSW1yGyhYmiZCJ12Cz865T/hmBcobIwKegfzW9f/Uf7Lj 6qF2xQPMMQqYg7pmmFaSg4H5u3C94LGMBa8xBYWCrTVOOhnXbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIz7utThL/aSvMDxEgujBI6VlKtSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iNDA0 YjQ1NC05YzMwLTQwMzQtOTYwNy0zNWYyMTdhZDJmNmIvOWZkMTcwMDYtYWZjYi0z NjYyLWFmY2EtN2YxM2U1ODE3NjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjQwNGI0NTQtOWMzMC00MDM0LTk2 MDctMzVmMjE3YWQyZjZiL2I0MDRiNDU0LTljMzAtNDAzNC05NjA3LTM1ZjIxN2Fk MmY2Yi5jcmwwHwYDVR0jBBgwFoAU3nyZZrBl81s3b6nkx3Z8R0kPRIswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iNDA0YjQ1NC05YzMwLTQwMzQtOTYwNy0zNWYy MTdhZDJmNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5iQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNZ4qbrZbOEDJsFtJ1tZ9UUgb2OnerVPaw2+YGATybhckDkU/Y5iY9l 64IND5e+/oLD0YddwzgRwE8+E2JNCQxXpns14AF0PW+tov05Wjw2THYdTl3txf3j pM9PylorbDL4zp6pzwvactXAEV/wXZNJKrgZGuJWPLHMNg89XKaeFWZWKZXcpDcr 6RE7R0kjXNcAcCQv8jh67Lw0MWm3nPVh3FhP+rz5WYmp7kw3YpwdRU8ze2L++Pzk za2GXf+Y9DGGVBWCwPen7kItS7VzWBkfGGzRiQcvjTJjVDMtwJjWbxET38nAa4bH LtEl7cfpeab0sVU644jP+Dkn4xAZjAA= -----END CERTIFICATE-----Generated at Thu May 21 21:32:51 2026 by rpki-client