$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/78bc00a8-8871-36fb-9c9b-ad8a3d7c03d1.roa File: 78bc00a8-8871-36fb-9c9b-ad8a3d7c03d1.roa (raw, json) Hash identifier: rt2fbrGSLgJQ4T4QU9CDXU5eOHc2VuuHBMlXM5fSSEE= Subject key identifier: 85:DA:4D:1D:AD:ED:11:E3:2D:F9:39:02:69:9F:42:86:F0:4F:99:1C Certificate issuer: /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Certificate serial: 010D0C9F4328584DA6B00F80DD74F90D46653C80 Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/78bc00a8-8871-36fb-9c9b-ad8a3d7c03d1.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 40249 IP address blocks: 23.137.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:0f:80:dd:74:f9:0d:46:65:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=c27914d8-7c10-4b51-9efc-09ca753e3da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:73:ba:fb:c7:14:79:0a:03:7d:a0:86:78:bd: 0c:ca:c2:de:22:cc:c9:07:f6:0f:7b:05:1f:20:4e: 2e:59:dd:b0:f0:6f:fc:70:08:7b:47:67:1b:55:d0: 9b:ab:92:3b:cb:8c:18:fb:b9:6b:ba:c7:7d:f2:11: 93:59:bb:39:ab:9b:f9:ea:41:72:cc:10:3a:bb:85: 38:94:4c:69:fe:54:a7:af:6e:76:4d:19:4d:65:e0: d7:86:4b:73:5a:89:37:d5:7b:db:7a:90:7b:23:82: 18:b8:32:2a:c6:d4:59:24:4c:c4:c0:aa:13:0f:da: 66:e9:fb:a0:34:e0:8b:32:99:5c:30:11:22:c2:68: 57:c4:ff:8a:21:3d:a7:0c:60:38:a8:54:1b:fc:79: 4d:cf:b4:2b:2b:c0:fc:3d:7d:52:28:eb:44:39:44: c4:8f:b0:12:3f:e9:62:b8:ab:b4:5b:a1:f1:5e:2e: d1:6c:9f:e4:0c:26:a3:f6:e2:78:05:6b:e3:97:1b: b3:bf:f7:c8:08:29:8c:bf:17:12:c6:56:78:a5:43: a2:36:77:20:00:cd:d9:cc:45:ef:3f:40:04:d0:d4: e4:a3:a7:70:0e:bc:6e:2c:05:8d:2d:3c:73:57:63: 9a:9f:5c:47:8a:93:c7:4f:10:fd:21:00:49:ca:fa: 1e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DA:4D:1D:AD:ED:11:E3:2D:F9:39:02:69:9F:42:86:F0:4F:99:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/78bc00a8-8871-36fb-9c9b-ad8a3d7c03d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl X509v3 Authority Key Identifier: keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer sbgp-ipAddrBlock: critical IPv4: 23.137.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:01:f9:2a:af:52:0d:66:2a:25:fe:4c:97:66:2d:09:e2:0b: 7a:70:e1:50:ee:e8:12:3e:c1:2a:46:03:28:7c:dd:23:12:ac: 82:3b:69:4e:a3:60:4a:9d:22:84:5c:ec:01:8a:70:11:60:a4: 44:52:20:87:65:84:23:f9:ae:87:f4:23:0e:c8:9d:ec:2b:60: 51:62:9c:1e:b0:40:74:ac:04:6c:39:4d:0f:5e:72:02:e7:bd: 63:b2:ca:b2:96:bc:79:05:18:54:10:64:cf:43:79:1e:e4:69: 6e:24:e3:b9:78:dd:a5:5b:1c:1b:34:9e:71:42:8d:d9:44:30: 44:e3:44:34:c1:cf:07:48:a7:28:6f:86:a2:32:87:61:c4:92: 19:e1:47:a3:ff:c6:3c:1f:11:44:f1:7d:27:4d:a1:1c:76:7f: 82:a9:49:a7:f7:cb:da:95:68:4a:49:a2:1e:7f:71:f0:58:9b: fa:0e:dd:dc:ac:3f:b3:f2:e8:47:08:88:5e:40:5e:ae:7f:b4: 33:c1:b7:34:bb:22:de:51:15:ab:12:62:4b:ec:9b:cc:e0:ea: 3f:40:bf:13:2b:96:44:f7:ef:da:f1:68:62:6d:bc:1c:fd:72: d6:53:69:d6:94:71:12:2e:21:8e:be:0d:8d:06:f4:2b:e2:c5: 98:15:e7:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msA+A3XT5DUZlPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNzExYjUtZDE2Zi00NTQ5LTllNzUtYmQyMDFmNWI3 YTEzMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk YzI3OTE0ZDgtN2MxMC00YjUxLTllZmMtMDljYTc1M2UzZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXO6+8cUeQoDfaCGeL0MysLeIszJB/YPewUf IE4uWd2w8G/8cAh7R2cbVdCbq5I7y4wY+7lrusd98hGTWbs5q5v56kFyzBA6u4U4 lExp/lSnr252TRlNZeDXhktzWok31XvbepB7I4IYuDIqxtRZJEzEwKoTD9pm6fug NOCLMplcMBEiwmhXxP+KIT2nDGA4qFQb/HlNz7QrK8D8PX1SKOtEOUTEj7ASP+li uKu0W6HxXi7RbJ/kDCaj9uJ4BWvjlxuzv/fICCmMvxcSxlZ4pUOiNncgAM3ZzEXv P0AE0NTko6dwDrxuLAWNLTxzV2Oan1xHipPHTxD9IQBJyvoe5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXaTR2t7RHjLfk5AmmfQobwT5kcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3 MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIwMWY1YjdhMTMvNzhiYzAwYTgtODg3MS0z NmZiLTljOWItYWQ4YTNkN2MwM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRkNzExYjUtZDE2Zi00NTQ5LTll NzUtYmQyMDFmNWI3YTEzL2ZkZDcxMWI1LWQxNmYtNDU0OS05ZTc1LWJkMjAxZjVi N2ExMy5jcmwwHwYDVR0jBBgwFoAUHHKGSiScg7PMA5PUnLiNgqiJlT8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIw MWY1YjdhMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4koMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoB+SqvUg1mKiX+TJdmLQniC3pw4VDu6BI+wSpGAyh83SMSrII7aU6j YEqdIoRc7AGKcBFgpERSIIdlhCP5rof0Iw7InewrYFFinB6wQHSsBGw5TQ9ecgLn vWOyyrKWvHkFGFQQZM9DeR7kaW4k47l43aVbHBs0nnFCjdlEMETjRDTBzwdIpyhv hqIyh2HEkhnhR6P/xjwfEUTxfSdNoRx2f4KpSaf3y9qVaEpJoh5/cfBYm/oO3dys P7Py6EcIiF5AXq5/tDPBtzS7It5RFasSYkvsm8zg6j9AvxMrlkT379rxaGJtvBz9 ctZTadaUcRIuIY6+DY0G9CvixZgV570= -----END CERTIFICATE-----Generated at Thu Apr 30 14:07:53 2026 by rpki-client