$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa File: 724dc813-9136-3075-bcba-f77834af4133.roa (raw, json) Hash identifier: UjmLk5KVwVS4LgcJzqQwDeniMKDvsNd2cRelE+6dAdc= Subject key identifier: E6:37:C2:6E:3E:C0:6F:40:CD:41:57:6A:CB:50:E4:BC:5B:7A:37:E8 Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F4328584DA6B0117D4DA02279F9C65FAC Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 923 IP address blocks: 23.144.156.0/24 maxlen: 24 207.167.121.0/24 maxlen: 24 2602:fbf5::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:11:7d:4d:a0:22:79:f9:c6:5f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=587e84c3-8135-402d-af8c-0f554bc98d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a8:1f:80:23:b8:a8:c3:a5:83:4e:37:cc:d4: 24:80:0f:ca:53:9d:11:07:7e:7d:ff:53:79:35:d6: 6a:43:8b:8f:10:bd:1f:54:15:c0:39:c1:f2:97:c6: 29:c8:34:fe:c4:10:b7:c8:a0:81:db:f3:1f:af:7f: f4:93:87:e3:dd:d8:c1:b6:43:61:0f:3f:29:69:24: 45:31:79:14:0c:82:1c:52:18:81:07:43:dc:48:3f: f8:6d:32:76:dd:07:a5:70:e4:eb:e2:f3:cc:9f:3e: ae:68:ce:8d:76:64:bc:6d:0f:0e:cd:c8:8e:ad:33: 31:f7:6e:4f:88:83:69:37:59:03:d0:9f:4f:02:cc: 72:2f:c5:95:ee:61:92:4d:05:6a:d0:27:16:16:30: f7:fb:33:5f:48:a6:a4:85:bc:65:20:f1:ca:16:45: f1:1b:55:90:d4:8b:e0:23:b0:11:3f:4d:fe:7a:3a: 14:89:f6:e8:69:ec:ad:94:e4:1a:b0:1d:cb:95:97: a1:16:ed:ef:3f:e9:fb:2e:e5:14:c8:ce:4a:76:89: ea:5d:c1:0c:2a:4b:9c:38:fb:70:9a:3e:f5:6a:c0: cf:72:87:b0:d3:41:01:73:cb:7e:5f:30:ff:77:31: c3:0b:bb:83:4e:85:9a:4d:e9:ab:dd:e3:d0:b3:08: 29:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:37:C2:6E:3E:C0:6F:40:CD:41:57:6A:CB:50:E4:BC:5B:7A:37:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv4: 23.144.156.0/24 207.167.121.0/24 IPv6: 2602:fbf5::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:b9:8d:10:e2:d5:b3:26:73:c0:89:28:ff:dd:0a:1a:9d:85: 1c:d0:6c:b4:bb:28:b5:3e:50:19:3f:88:94:69:db:0a:f7:99: 72:16:f6:f1:bf:90:99:b3:1f:c6:c6:88:24:8f:50:a1:43:2d: 19:3a:fc:b8:58:4f:e5:79:d4:72:b5:57:ad:5e:72:2e:cb:f2: 6a:40:7a:47:f8:6d:2f:36:6d:c1:8d:d9:94:e7:ae:ee:65:b9: ea:1e:a8:c4:5f:42:c4:f8:4c:02:ba:42:28:e3:b7:f2:e1:30: 35:ec:62:25:0e:2a:0b:11:5d:4e:a2:26:8a:0a:5d:80:8e:8d: b6:5e:5f:50:78:34:ef:e9:ae:72:7c:9a:36:1d:97:b8:7a:05: 18:74:ae:d8:07:04:08:4d:e3:50:6d:0e:a7:64:e4:69:65:47: 00:be:d6:ef:4f:5d:0c:aa:66:15:ac:13:f1:cc:83:f4:ee:63: d3:56:e4:27:8d:e1:0b:ce:7a:84:91:45:ff:6b:e3:3e:04:c8: 1a:2e:f5:39:2d:3e:ce:07:e1:e1:97:53:02:87:a2:08:ea:22: 26:be:21:24:33:da:df:cf:1b:41:97:12:51:2b:87:76:20:42: 54:a9:fd:6b:1f:6d:0a:08:1f:39:41:88:7c:56:c6:fb:5d:6b: fe:ea:10:15 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE2msBF9TaAiefnGX6wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NTg3ZTg0YzMtODEzNS00MDJkLWFmOGMtMGY1NTRiYzk4ZDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6gfgCO4qMOlg043zNQkgA/KU50RB359/1N5 NdZqQ4uPEL0fVBXAOcHyl8YpyDT+xBC3yKCB2/Mfr3/0k4fj3djBtkNhDz8paSRF MXkUDIIcUhiBB0PcSD/4bTJ23QelcOTr4vPMnz6uaM6NdmS8bQ8OzciOrTMx925P iINpN1kD0J9PAsxyL8WV7mGSTQVq0CcWFjD3+zNfSKakhbxlIPHKFkXxG1WQ1Ivg I7ARP03+ejoUifboaeytlOQasB3LlZehFu3vP+n7LuUUyM5KdonqXcEMKkucOPtw mj71asDPcoew00EBc8t+XzD/dzHDC7uDToWaTemr3ePQswgppwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFOY3wm4+wG9AzUFXastQ5LxbejfoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvNzI0ZGM4MTMtOTEzNi0z MDc1LWJjYmEtZjc3ODM0YWY0MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5CcAwQA z6d5MA4EAgACMAgDBgQmAvv1ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAWuY0Q4tWzJnPAiSj/3QoanYUc 0Gy0uyi1PlAZP4iUadsK95lyFvbxv5CZsx/Gxogkj1ChQy0ZOvy4WE/ledRytVet XnIuy/JqQHpH+G0vNm3BjdmU567uZbnqHqjEX0LE+EwCukIo47fy4TA17GIlDioL EV1OoiaKCl2Ajo22Xl9QeDTv6a5yfJo2HZe4egUYdK7YBwQITeNQbQ6nZORpZUcA vtbvT10MqmYVrBPxzIP07mPTVuQnjeELznqEkUX/a+M+BMgaLvU5LT7OB+Hhl1MC h6II6iImviEkM9rfzxtBlxJRK4d2IEJUqf1rH20KCB85QYh8Vsb7XWv+6hAV -----END CERTIFICATE-----Generated at Thu Apr 30 13:54:50 2026 by rpki-client