$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/28b7558c-0a86-30e8-a429-1570b46f2dc7.roa File: 28b7558c-0a86-30e8-a429-1570b46f2dc7.roa (raw, json) Hash identifier: 6Z/oLPyCoiyHEbpiWkl0e2E5JIJ5cdiiRYY4aXqy27g= Subject key identifier: FF:9D:35:E3:B6:64:56:20:27:6D:9E:25:F3:55:97:7D:26:17:C8:C8 Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281 Certificate serial: 010D0C9F4328584E04361BE59716A2C3245E1A80 Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/28b7558c-0a86-30e8-a429-1570b46f2dc7.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 20473 IP address blocks: 23.154.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:1b:e5:97:16:a2:c3:24:5e:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281 Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=0a537b34-2118-4e52-9b82-8d9143d04900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4e:8e:09:ed:86:20:c2:17:e2:e2:95:20:10: 74:bc:cc:7d:39:30:76:48:17:88:22:e6:60:79:b4: 60:06:2b:24:f1:e3:66:a2:d2:e9:94:49:31:ca:71: eb:cd:4d:94:60:a4:b8:d2:a5:ef:4c:58:a0:4b:bf: 06:c0:19:65:db:f2:a1:98:3a:78:55:e1:65:8b:a5: 4f:24:e8:7f:8c:0d:2d:20:43:11:19:98:f5:97:0d: 54:6a:56:2d:5a:01:3b:eb:66:1a:60:e6:ff:52:40: 72:18:89:e7:cb:26:29:75:e4:42:1a:c6:69:23:a8: 9b:49:3c:24:1b:72:09:a6:e4:41:0e:50:6a:f8:13: 3c:0b:29:af:fe:3b:d0:b9:9a:e5:3b:67:23:cc:4f: 60:ef:23:d4:b7:64:33:4c:4d:71:bf:3e:43:38:ba: 20:96:df:11:c1:e0:aa:03:ae:b3:16:99:84:1d:a2: 5a:ff:7b:64:92:6d:ad:58:fe:92:f6:8e:38:84:df: 5d:18:70:99:ee:55:5c:5b:17:2a:66:73:44:09:e6: af:2a:a4:c3:cf:e2:92:bd:32:31:80:17:55:10:8c: 24:82:0d:74:40:bc:ca:54:b1:8a:db:b5:0a:21:6a: 1c:e6:09:4e:78:58:e0:8e:7d:33:8c:63:d3:07:29: 31:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9D:35:E3:B6:64:56:20:27:6D:9E:25:F3:55:97:7D:26:17:C8:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/28b7558c-0a86-30e8-a429-1570b46f2dc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl X509v3 Authority Key Identifier: keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer sbgp-ipAddrBlock: critical IPv4: 23.154.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:52:58:ab:ae:ed:5c:02:25:8a:4a:13:83:0b:cf:a8:98:2f: 13:b8:e2:d4:aa:98:79:9b:4e:8f:5d:5d:37:49:a7:5d:53:0f: e3:08:83:6a:4f:6c:13:3e:bd:0b:89:20:d0:fd:5f:7e:4d:e2: 7c:55:fa:a2:1d:2c:dd:32:78:59:89:47:f4:94:15:af:af:ac: c8:86:c0:fc:86:3d:3b:9e:ee:f8:70:2c:a1:43:28:f1:fd:eb: 45:1d:1f:8e:83:83:f4:bd:f6:70:a6:75:3f:36:05:79:5a:21: c5:ca:31:8b:6c:46:9f:a0:cc:99:12:06:ba:f3:b4:0e:26:b9: f6:92:37:4b:5b:fd:54:7f:0f:60:09:f1:f1:96:4d:7f:8d:3d: 51:4f:02:c2:06:07:ad:9e:83:da:ef:1b:87:6e:36:98:85:0b: 4b:36:13:f1:4f:43:e6:eb:03:77:cd:19:af:71:0f:d3:90:07: d1:14:5a:ec:9b:ff:ea:75:81:e8:2d:41:5e:e7:68:67:de:b1: 93:29:a2:49:f3:16:2e:86:86:9f:b1:63:ca:70:2f:6e:95:a2: 7f:0a:5f:ab:6f:38:f0:7d:87:67:e5:38:a8:11:ff:1d:76:d8: 08:fc:55:32:9a:6f:ef:52:6f:46:f1:82:11:53:f0:09:04:b8: ed:e8:b1:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENhvllxaiwyReGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1 MjgxMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk MGE1MzdiMzQtMjExOC00ZTUyLTliODItOGQ5MTQzZDA0OTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2U6OCe2GIMIX4uKVIBB0vMx9OTB2SBeIIuZg ebRgBisk8eNmotLplEkxynHrzU2UYKS40qXvTFigS78GwBll2/KhmDp4VeFli6VP JOh/jA0tIEMRGZj1lw1UalYtWgE762YaYOb/UkByGInnyyYpdeRCGsZpI6ibSTwk G3IJpuRBDlBq+BM8Cymv/jvQuZrlO2cjzE9g7yPUt2QzTE1xvz5DOLoglt8RweCq A66zFpmEHaJa/3tkkm2tWP6S9o44hN9dGHCZ7lVcWxcqZnNECeavKqTDz+KSvTIx gBdVEIwkgg10QLzKVLGK27UKIWoc5glOeFjgjn0zjGPTBykx6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+dNeO2ZFYgJ22eJfNVl30mF8jIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvMjhiNzU1OGMtMGE4Ni0z MGU4LWE0MjktMTU3MGI0NmYyZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0 ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5pYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBSWKuu7VwCJYpKE4MLz6iYLxO44tSqmHmbTo9dXTdJp11TD+MIg2pP bBM+vQuJIND9X35N4nxV+qIdLN0yeFmJR/SUFa+vrMiGwPyGPTue7vhwLKFDKPH9 60UdH46Dg/S99nCmdT82BXlaIcXKMYtsRp+gzJkSBrrztA4mufaSN0tb/VR/D2AJ 8fGWTX+NPVFPAsIGB62eg9rvG4duNpiFC0s2E/FPQ+brA3fNGa9xD9OQB9EUWuyb /+p1gegtQV7naGfesZMpoknzFi6Ghp+xY8pwL26Von8KX6tvOPB9h2flOKgR/x12 2Aj8VTKab+9Sb0bxghFT8AkEuO3osRE= -----END CERTIFICATE-----Generated at Wed Jun 3 20:18:45 2026 by rpki-client