$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/6a40e835-1ddb-37bc-b760-33cd5c4d7920.roa File: 6a40e835-1ddb-37bc-b760-33cd5c4d7920.roa (raw, json) Hash identifier: ETejk+/hIZrYb0WueUQzOsEEISBlaa8G//1/W9ldryM= Subject key identifier: CB:C8:93:8C:C7:01:94:AC:A6:EE:EF:B4:5E:FD:6E:75:66:60:82:77 Certificate issuer: /CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8 Certificate serial: 010D0C9F4328584D9ADA3FC15C30A1572348C800 Authority key identifier: 27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/6a40e835-1ddb-37bc-b760-33cd5c4d7920.roa Signing time: Thu 23 Apr 2026 19:15:48 +0000 ROA not before: Thu 23 Apr 2026 19:15:48 +0000 ROA not after: Wed 22 Jul 2026 19:15:38 +0000 asID: 32002 IP address blocks: 23.157.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:da:3f:c1:5c:30:a1:57:23:48:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8 Validity Not Before: Apr 23 19:15:48 2026 GMT Not After : Jul 22 19:15:38 2026 GMT Subject: CN=0f7cdfff-b9a0-40fd-b9b9-fa109c9a0600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:40:5d:ee:51:0a:57:17:a6:90:c0:eb:e5:f2: ef:ec:88:86:d5:3c:52:9e:62:b0:bb:ed:b1:fa:bb: 87:7f:aa:60:5a:c7:06:7f:63:bf:43:cd:55:34:5b: d0:62:c2:4e:a4:05:da:d3:97:8f:e1:41:d3:8c:d0: 65:e3:b7:39:b4:8b:e5:3c:9c:ed:41:a6:ad:91:f8: 11:09:e1:32:58:c9:c6:ef:3d:68:d0:f1:84:36:d1: fb:2b:14:62:28:b2:04:f9:6f:b1:4a:d9:c1:08:0d: b6:db:4e:5b:5e:1c:e5:7d:3d:d8:9b:b3:fb:0e:1a: a0:32:92:f8:a6:1c:3b:c1:ed:dd:eb:26:45:e8:fe: 8c:ca:2b:95:13:c4:26:25:31:5e:bc:e4:9e:ce:34: 71:7d:e6:bf:5f:88:96:36:ca:49:1f:09:91:9b:75: 70:00:46:89:f1:9e:af:e6:05:73:23:3c:2d:ca:b1: 22:10:6d:89:59:9a:46:9a:75:2a:a7:df:00:22:8c: 99:b0:ff:34:d5:77:eb:b6:a3:2c:e4:e6:c5:ab:79: 62:fd:d2:bb:c3:58:fd:f3:49:5e:32:a9:46:71:5b: 09:d7:99:89:ee:79:df:87:88:01:17:05:d2:d0:85: 28:bf:84:f4:88:2e:78:21:60:cf:b6:88:e4:80:bc: d4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C8:93:8C:C7:01:94:AC:A6:EE:EF:B4:5E:FD:6E:75:66:60:82:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/6a40e835-1ddb-37bc-b760-33cd5c4d7920.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl X509v3 Authority Key Identifier: keyid:27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer sbgp-ipAddrBlock: critical IPv4: 23.157.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:95:25:9a:bf:18:f6:26:28:6c:96:b4:72:1a:f9:cb:b8:20: a7:33:59:0a:73:14:d4:df:9a:8b:80:9c:37:8f:4a:c5:02:03: 69:33:6e:d4:5f:fb:16:9e:6f:6d:af:85:df:02:66:65:bd:13: 96:71:9b:11:d1:a3:cc:a5:1a:c9:d3:ab:80:2c:ce:e0:6e:5e: 5a:58:3d:2a:8f:ec:42:26:48:64:54:3e:70:66:23:8d:35:83: ae:cb:60:47:d5:1f:40:80:15:af:8d:d2:b8:6e:c4:2f:76:43: 4f:d2:02:77:56:de:96:86:65:d7:88:a4:60:28:50:45:45:35: 25:51:7a:54:a6:96:59:8b:7f:54:73:6f:8b:04:cb:a7:7a:39: 81:48:05:f1:01:af:63:c4:b8:81:28:0f:83:bc:8b:2c:d3:7b: d0:0b:aa:12:5c:6f:2a:4c:3e:71:11:44:2a:7d:1a:07:1b:5e: 08:44:a0:37:0a:c4:99:e9:43:44:ea:2e:96:fe:85:17:e7:a2: a3:25:e7:c2:9e:ee:c2:76:7b:ac:91:84:43:ae:d5:f4:7e:be: 31:75:78:a2:06:e1:ad:df:23:52:1f:27:ca:92:16:5a:6b:97: 19:fd:13:a9:4a:71:4f:0d:3b:58:f2:b5:04:6c:1f:06:08:c5: ae:fb:04:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2a2j/BXDChVyNIyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThiODRlMmItYWZiZS00YjM1LWIwMDUtZTBkZmNhMmUy M2Q4MB4XDTI2MDQyMzE5MTU0OFoXDTI2MDcyMjE5MTUzOFowLzEtMCsGA1UEAxMk MGY3Y2RmZmYtYjlhMC00MGZkLWI5YjktZmExMDljOWEwNjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kBd7lEKVxemkMDr5fLv7IiG1TxSnmKwu+2x +ruHf6pgWscGf2O/Q81VNFvQYsJOpAXa05eP4UHTjNBl47c5tIvlPJztQaatkfgR CeEyWMnG7z1o0PGENtH7KxRiKLIE+W+xStnBCA22205bXhzlfT3Ym7P7DhqgMpL4 phw7we3d6yZF6P6MyiuVE8QmJTFevOSezjRxfea/X4iWNspJHwmRm3VwAEaJ8Z6v 5gVzIzwtyrEiEG2JWZpGmnUqp98AIoyZsP801XfrtqMs5ObFq3li/dK7w1j980le MqlGcVsJ15mJ7nnfh4gBFwXS0IUov4T0iC54IWDPtojkgLzUTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvIk4zHAZSspu7vtF79bnVmYIJ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hOGI4 NGUyYi1hZmJlLTRiMzUtYjAwNS1lMGRmY2EyZTIzZDgvNmE0MGU4MzUtMWRkYi0z N2JjLWI3NjAtMzNjZDVjNGQ3OTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYThiODRlMmItYWZiZS00YjM1LWIw MDUtZTBkZmNhMmUyM2Q4L2E4Yjg0ZTJiLWFmYmUtNGIzNS1iMDA1LWUwZGZjYTJl MjNkOC5jcmwwHwYDVR0jBBgwFoAUJyaHnCMjdlLoJfSaxiQ6/6bmTi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hOGI4NGUyYi1hZmJlLTRiMzUtYjAwNS1lMGRm Y2EyZTIzZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF51kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqVJZq/GPYmKGyWtHIa+cu4IKczWQpzFNTfmouAnDePSsUCA2kzbtRf +xaeb22vhd8CZmW9E5ZxmxHRo8ylGsnTq4AszuBuXlpYPSqP7EImSGRUPnBmI401 g67LYEfVH0CAFa+N0rhuxC92Q0/SAndW3paGZdeIpGAoUEVFNSVRelSmllmLf1Rz b4sEy6d6OYFIBfEBr2PEuIEoD4O8iyzTe9ALqhJcbypMPnERRCp9GgcbXghEoDcK xJnpQ0TqLpb+hRfnoqMl58Ke7sJ2e6yRhEOu1fR+vjF1eKIG4a3fI1IfJ8qSFlpr lxn9E6lKcU8NO1jytQRsHwYIxa77BKk= -----END CERTIFICATE-----Generated at Thu May 7 03:12:25 2026 by rpki-client