$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/faa2ef74-f3ac-358c-9428-0eb061b7e349.roa File: faa2ef74-f3ac-358c-9428-0eb061b7e349.roa (raw, json) Hash identifier: 18KeMleE7KJLPi729B1e6j7XtIChOMN22tYw9INGCds= Subject key identifier: 6A:7E:D9:5F:D9:AB:52:0F:D5:32:E4:35:A1:6B:87:69:73:81:A1:C1 Certificate issuer: /CN=1a319486-03d5-4fb1-997e-228350330847 Certificate serial: 010D0C9F4328584DE41B33629FA148E15735D4B0 Authority key identifier: A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/faa2ef74-f3ac-358c-9428-0eb061b7e349.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 46983 IP address blocks: 23.157.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:33:62:9f:a1:48:e1:57:35:d4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a319486-03d5-4fb1-997e-228350330847 Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=6762cd97-6f07-4efd-94e2-70c03ea02db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:be:c7:ff:24:4c:89:f0:91:53:f1:b0:99:d9: 4d:3e:29:11:3b:80:db:b6:fa:07:10:28:03:d0:aa: 99:ac:ca:e2:7c:c1:1f:d7:12:a0:d6:b8:4a:cb:f0: 27:1f:78:06:3b:ce:ab:f9:36:87:e1:60:96:6b:cc: ce:8e:17:b3:aa:5a:ee:0d:dd:39:9f:13:e4:50:e8: 62:0f:aa:e8:a3:08:a1:d0:fb:d7:49:e9:8d:e9:36: 38:b7:46:d8:78:4a:7a:d1:d6:e4:d6:13:cd:7e:4f: 6d:88:cb:2f:72:e8:8e:08:fb:a7:db:f2:b3:d8:0b: 76:c6:c3:dc:e1:64:a8:7f:bc:80:ea:4e:fa:f0:d0: 28:ea:3e:96:e4:5f:fd:a6:b9:1e:7f:d0:3c:76:fa: 96:14:09:cc:66:d5:9b:c8:c2:1c:05:85:b8:1d:cf: 3f:36:c7:e1:aa:2a:7c:c9:6e:7c:af:05:e8:8c:d4: 57:88:dc:ca:68:ec:90:2f:a8:20:8a:0a:99:da:c7: 78:f6:9b:b8:13:20:c2:15:b0:90:1b:d5:82:a8:75: 15:4b:51:06:c8:e6:a8:b2:7d:f7:e0:16:68:fb:ad: 61:f3:da:a5:76:3e:71:7e:26:4a:d0:82:78:7b:f7: d7:8d:86:b8:b9:62:6c:f2:38:57:51:e9:c7:31:6d: 16:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7E:D9:5F:D9:AB:52:0F:D5:32:E4:35:A1:6B:87:69:73:81:A1:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/faa2ef74-f3ac-358c-9428-0eb061b7e349.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl X509v3 Authority Key Identifier: keyid:A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer sbgp-ipAddrBlock: critical IPv4: 23.157.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:e9:47:68:a8:6c:09:68:ef:2e:be:0e:48:e7:ca:3e:15:11: c6:b8:d2:aa:d0:a1:01:87:f2:1f:0a:3e:b0:1a:a6:07:f9:91: 4d:25:f8:c8:80:e2:06:98:ad:70:34:e2:e8:18:b9:25:26:44: 8f:8f:c2:75:cf:fa:50:45:09:cb:81:c8:95:32:f1:38:93:1f: ca:b2:ff:bd:24:93:03:b3:3d:3e:14:48:2b:35:ab:67:db:f1: a3:df:a5:7d:2f:8b:84:58:a7:29:66:c6:17:87:dd:a3:f8:5b: dc:d4:c7:a3:8d:03:cb:4d:d5:72:3e:3e:21:d2:81:b2:d9:d0: c6:87:e3:75:95:56:ca:0c:18:38:5e:c3:ce:d3:ba:eb:0a:34: cf:62:46:a5:84:d8:d9:df:53:86:da:ea:05:df:be:0f:f8:f7: 39:45:09:af:11:72:72:95:a1:d9:1d:9f:42:c5:1c:fa:12:be: 3f:68:f6:4f:19:f5:1a:4f:28:64:23:54:a6:7e:af:e0:69:10: 4a:64:2c:21:21:46:a9:0d:cf:3d:81:3b:ad:17:36:11:2b:55: 1c:6d:86:ed:f4:88:39:c8:c7:48:82:b4:e2:2e:34:81:0a:56: c6:fd:39:92:df:fa:6f:03:7c:02:36:ba:0c:39:c3:0c:89:cd: 29:a9:43:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGzNin6FI4Vc11LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWEzMTk0ODYtMDNkNS00ZmIxLTk5N2UtMjI4MzUwMzMw ODQ3MB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk Njc2MmNkOTctNmYwNy00ZWZkLTk0ZTItNzBjMDNlYTAyZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL7H/yRMifCRU/GwmdlNPikRO4DbtvoHECgD 0KqZrMrifMEf1xKg1rhKy/AnH3gGO86r+TaH4WCWa8zOjhezqlruDd05nxPkUOhi D6roowih0PvXSemN6TY4t0bYeEp60dbk1hPNfk9tiMsvcuiOCPun2/Kz2At2xsPc 4WSof7yA6k768NAo6j6W5F/9prkef9A8dvqWFAnMZtWbyMIcBYW4Hc8/Nsfhqip8 yW58rwXojNRXiNzKaOyQL6ggigqZ2sd49pu4EyDCFbCQG9WCqHUVS1EGyOaosn33 4BZo+61h89qldj5xfiZK0IJ4e/fXjYa4uWJs8jhXUenHMW0W5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGp+2V/Zq1IP1TLkNaFrh2lzgaHBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xYTMx OTQ4Ni0wM2Q1LTRmYjEtOTk3ZS0yMjgzNTAzMzA4NDcvZmFhMmVmNzQtZjNhYy0z NThjLTk0MjgtMGViMDYxYjdlMzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWEzMTk0ODYtMDNkNS00ZmIxLTk5 N2UtMjI4MzUwMzMwODQ3LzFhMzE5NDg2LTAzZDUtNGZiMS05OTdlLTIyODM1MDMz MDg0Ny5jcmwwHwYDVR0jBBgwFoAUojoUY2Szy8/8gGpP64Xxl3Adxp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xYTMxOTQ4Ni0wM2Q1LTRmYjEtOTk3ZS0yMjgz NTAzMzA4NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnpR2iobAlo7y6+Dkjnyj4VEca40qrQoQGH8h8KPrAapgf5kU0l+MiA 4gaYrXA04ugYuSUmRI+PwnXP+lBFCcuByJUy8TiTH8qy/70kkwOzPT4USCs1q2fb 8aPfpX0vi4RYpylmxheH3aP4W9zUx6ONA8tN1XI+PiHSgbLZ0MaH43WVVsoMGDhe w87TuusKNM9iRqWE2NnfU4ba6gXfvg/49zlFCa8RcnKVodkdn0LFHPoSvj9o9k8Z 9RpPKGQjVKZ+r+BpEEpkLCEhRqkNzz2BO60XNhErVRxthu30iDnIx0iCtOIuNIEK Vsb9OZLf+m8DfAI2ugw5wwyJzSmpQwo= -----END CERTIFICATE-----Generated at Thu May 21 18:36:34 2026 by rpki-client