$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/d68b1747-8766-30c7-9761-0368f3106f64.roa File: d68b1747-8766-30c7-9761-0368f3106f64.roa (raw, json) Hash identifier: z3/0wXc2XqfKFf3LE06750aRxEg/d4DS74KCl5IBQjA= Subject key identifier: 32:CB:FA:37:E9:9A:1E:84:48:44:6F:F7:13:C0:F1:60:85:9E:C3:B8 Certificate issuer: /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7 Certificate serial: 010D0C9F4328584D93254CE75A0A58E0C6F8CFC0 Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/d68b1747-8766-30c7-9761-0368f3106f64.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 30690 IP address blocks: 23.171.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:4c:e7:5a:0a:58:e0:c6:f8:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=613b7dac-cbcc-4ac4-bb03-e795d84a1109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0b:5a:3c:aa:34:ae:71:29:ff:5c:8c:05:53: d7:15:2e:70:5d:45:17:31:98:2b:cb:04:a9:5d:4d: f0:4f:5c:df:83:e5:e3:2c:e8:2e:8d:30:21:d5:e9: f6:03:34:94:64:c8:35:e9:06:f4:27:ff:8c:14:59: 86:1f:16:d1:d1:ea:a3:d0:c2:f3:45:0b:f3:9a:52: 12:0c:99:ce:26:0d:47:be:7a:ba:23:ed:0b:79:69: 94:47:f1:18:31:2b:be:3a:4b:28:b0:0c:9e:1a:0c: 84:e3:2d:2e:b2:57:a6:42:86:ff:a4:a7:ef:d3:dc: 82:8c:b4:53:de:7c:76:63:c0:50:a6:a2:49:9a:aa: 19:70:30:9d:99:dd:fe:8c:86:3c:fd:5f:bc:40:de: b9:68:50:1c:18:c7:ab:e1:50:56:ba:8c:02:04:4d: 5f:47:75:2c:4b:db:c3:62:48:a0:4d:74:5d:db:bb: cc:ed:1c:b6:8f:91:91:f8:9b:50:b8:ab:bc:24:94: 57:f3:df:a5:f4:d0:a0:a5:f5:40:66:28:31:09:13: db:7c:21:1f:41:8c:63:40:eb:bc:f1:ab:2c:3f:a4: 8f:c4:cd:88:25:34:da:0e:9f:a8:11:a3:90:cb:de: 1b:52:c0:90:aa:8a:e6:cb:1c:f1:46:57:77:da:de: 1f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CB:FA:37:E9:9A:1E:84:48:44:6F:F7:13:C0:F1:60:85:9E:C3:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/d68b1747-8766-30c7-9761-0368f3106f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl X509v3 Authority Key Identifier: keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer sbgp-ipAddrBlock: critical IPv4: 23.171.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a2:cd:43:f7:68:18:d1:e1:1b:8c:48:c4:bb:98:90:56:89: 63:99:f6:7c:47:5f:cc:84:c3:cd:a4:96:a4:5c:30:79:7c:86: 4b:86:73:a1:a8:88:cd:b4:d3:0a:66:76:be:8e:3f:c3:0c:37: 68:e8:87:de:1c:52:05:68:d2:36:e6:ad:b4:96:20:14:93:75: f2:73:83:13:cb:1d:a8:df:27:da:8f:7e:b2:33:3b:8a:6e:77: ed:47:66:4b:08:bf:7d:a7:17:06:d8:fc:4b:e5:1a:7f:78:0c: 38:8a:ea:3c:53:d6:0b:44:0b:fb:c4:e3:15:98:ae:31:a2:0f: 40:47:d5:d9:b0:7b:5d:80:40:2c:06:19:26:f9:d9:49:06:52: cc:d7:59:69:8a:67:3f:14:c2:df:a2:94:ab:a6:69:2f:3d:b8: 48:16:40:cd:ef:98:81:f7:a5:26:90:75:20:c4:c6:20:18:74: 23:22:3c:9c:84:4e:21:66:1e:26:2f:a5:04:9d:28:7d:b8:a9: d1:b7:3a:8c:bc:6c:4e:86:d0:e4:dc:e1:7f:a3:11:4f:5e:24: a2:03:0e:eb:5e:8f:53:f9:f0:2a:19:65:70:bd:c7:1f:d9:60: e2:ce:ab:76:cc:f1:93:73:77:1f:8a:12:ba:cd:49:49:34:00: f7:be:d0:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJUznWgpY4Mb4z8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmMyM2EtZTQyMi00YzYxLWEyNWEtYjczYjA5NjNi NmY3MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NjEzYjdkYWMtY2JjYy00YWM0LWJiMDMtZTc5NWQ4NGExMTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQtaPKo0rnEp/1yMBVPXFS5wXUUXMZgrywSp XU3wT1zfg+XjLOgujTAh1en2AzSUZMg16Qb0J/+MFFmGHxbR0eqj0MLzRQvzmlIS DJnOJg1Hvnq6I+0LeWmUR/EYMSu+OksosAyeGgyE4y0uslemQob/pKfv09yCjLRT 3nx2Y8BQpqJJmqoZcDCdmd3+jIY8/V+8QN65aFAcGMer4VBWuowCBE1fR3UsS9vD YkigTXRd27vM7Ry2j5GR+JtQuKu8JJRX89+l9NCgpfVAZigxCRPbfCEfQYxjQOu8 8assP6SPxM2IJTTaDp+oEaOQy94bUsCQqormyxzxRld32t4fFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLL+jfpmh6ESERv9xPA8WCFnsO4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMzVm YzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNiMDk2M2I2ZjcvZDY4YjE3NDctODc2Ni0z MGM3LTk3NjEtMDM2OGYzMTA2ZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjM1ZmMyM2EtZTQyMi00YzYxLWEy NWEtYjczYjA5NjNiNmY3L2IzNWZjMjNhLWU0MjItNGM2MS1hMjVhLWI3M2IwOTYz YjZmNy5jcmwwHwYDVR0jBBgwFoAUjS9eZJw3d6zMTnUYB7+cZ2lqHf4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMzVmYzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNi MDk2M2I2ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6tIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6izUP3aBjR4RuMSMS7mJBWiWOZ9nxHX8yEw82klqRcMHl8hkuGc6Go iM200wpmdr6OP8MMN2joh94cUgVo0jbmrbSWIBSTdfJzgxPLHajfJ9qPfrIzO4pu d+1HZksIv32nFwbY/EvlGn94DDiK6jxT1gtEC/vE4xWYrjGiD0BH1dmwe12AQCwG GSb52UkGUszXWWmKZz8Uwt+ilKumaS89uEgWQM3vmIH3pSaQdSDExiAYdCMiPJyE TiFmHiYvpQSdKH24qdG3Ooy8bE6G0OTc4X+jEU9eJKIDDutej1P58CoZZXC9xx/Z YOLOq3bM8ZNzdx+KErrNSUk0APe+0K4= -----END CERTIFICATE-----Generated at Thu Apr 30 13:47:38 2026 by rpki-client