$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/1f91f8f6-9f47-3789-8964-a821f5a7d49f.roa File: 1f91f8f6-9f47-3789-8964-a821f5a7d49f.roa (raw, json) Hash identifier: tj8t4KKDyDM4s2Fnqd1VEBrub0qV7rSpzwTNqg5+RcE= Subject key identifier: CE:F8:B8:3A:CF:6C:C6:15:46:25:80:F0:C1:82:AB:3D:C5:C1:05:A5 Certificate issuer: /CN=258880f7-56fa-4c7c-a7e7-6d113eda383d Certificate serial: 010D0C9F4328584E07009952798976C0796193A0 Authority key identifier: E0:77:99:0D:E0:ED:30:9C:45:71:0C:2E:B0:73:14:DD:FC:55:BE:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/1f91f8f6-9f47-3789-8964-a821f5a7d49f.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 151338 IP address blocks: 23.142.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/258880f7-56fa-4c7c-a7e7-6d113eda383d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/258880f7-56fa-4c7c-a7e7-6d113eda383d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:99:52:79:89:76:c0:79:61:93:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258880f7-56fa-4c7c-a7e7-6d113eda383d Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=7770657b-28a1-4672-bdce-68b32171aeaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9a:eb:fe:46:d8:dc:4f:63:69:cd:b3:06:1e: e0:cb:1b:b0:9d:72:71:88:4d:01:b8:64:1f:e4:70: d9:5c:71:a2:6d:87:6b:72:7d:11:6a:37:2c:68:be: 7e:d5:97:51:62:ef:66:b0:f9:47:8f:d8:98:df:d2: a8:dd:b4:3c:df:22:99:09:7a:b9:d5:c7:f4:52:9f: 46:c2:08:71:dc:71:08:b2:5a:fd:72:b1:24:85:63: 7f:bf:10:71:03:62:71:de:cb:c9:fb:91:6a:3e:85: 77:cd:9f:53:53:db:61:8f:24:e7:10:fc:55:05:06: 37:8d:04:91:73:13:45:bb:b1:7f:1b:46:1d:8c:48: 36:70:a3:4c:68:1d:6a:e5:05:a6:99:32:a0:e9:73: c4:f7:45:5d:2b:93:92:de:91:81:cc:bf:f6:93:1b: b6:ba:56:eb:53:ac:02:b1:cd:b2:83:f7:5c:71:fa: 0c:1d:ad:7a:05:16:f2:c9:99:b5:8a:27:51:72:51: d8:b8:2e:c8:d5:ca:40:9a:2b:d8:b4:95:cb:aa:ce: 65:c6:ef:59:58:7f:ca:38:6c:73:3d:89:e1:12:bc: 3d:24:09:78:4e:6d:c1:63:3c:7a:f7:51:af:11:a9: 77:77:95:bb:5b:6c:be:f6:e8:6a:f5:f9:bd:fe:c3: 5f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F8:B8:3A:CF:6C:C6:15:46:25:80:F0:C1:82:AB:3D:C5:C1:05:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/1f91f8f6-9f47-3789-8964-a821f5a7d49f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/258880f7-56fa-4c7c-a7e7-6d113eda383d.crl X509v3 Authority Key Identifier: keyid:E0:77:99:0D:E0:ED:30:9C:45:71:0C:2E:B0:73:14:DD:FC:55:BE:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d.cer sbgp-ipAddrBlock: critical IPv4: 23.142.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:37:87:d2:b3:ec:b0:d2:6d:48:c4:ef:88:6c:0b:fa:c6:f0: 28:6a:86:e3:c1:ca:14:1f:ce:87:8d:3f:cf:af:42:6c:4a:60: ba:5d:0d:db:0b:2a:2e:44:c1:77:2f:2f:56:1b:1f:6a:aa:8e: a7:ca:57:9f:67:e1:9b:91:21:ee:fd:ef:bc:f8:ca:26:5a:ed: 9f:66:45:32:7e:28:a5:fe:31:d0:1b:b1:ea:b5:c4:39:af:d8: 99:31:47:e3:ee:5c:3b:be:19:3d:cd:6d:ac:77:a2:8c:07:3b: 87:53:d1:73:70:a6:63:be:00:9c:c2:cd:d8:7d:55:8e:5e:40: e8:e9:77:4a:eb:33:2b:f0:27:c4:08:3f:94:25:58:8f:98:ce: f0:d6:20:f0:1e:c8:83:37:35:c7:7d:35:b8:1c:c3:f5:5c:b3: 55:4d:31:55:62:45:ea:93:49:86:91:88:80:ac:13:d5:3d:ec: d0:4c:bd:ed:81:bd:6b:02:b1:74:ba:86:9a:30:e8:48:96:46: 3f:93:91:e0:1d:97:f1:39:c2:d8:0c:7a:f8:8c:f0:bc:bb:5a: 08:d7:d5:ac:dc:15:86:51:2f:7f:48:42:fd:d3:0b:d0:e4:02: 06:5d:46:a8:0e:67:80:20:ba:64:bb:fe:6c:2f:d3:7e:b3:75: c6:3b:8e:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HAJlSeYl2wHlhk6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU4ODgwZjctNTZmYS00YzdjLWE3ZTctNmQxMTNlZGEz ODNkMB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk Nzc3MDY1N2ItMjhhMS00NjcyLWJkY2UtNjhiMzIxNzFhZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Jrr/kbY3E9jac2zBh7gyxuwnXJxiE0BuGQf 5HDZXHGibYdrcn0RajcsaL5+1ZdRYu9msPlHj9iY39Ko3bQ83yKZCXq51cf0Up9G wghx3HEIslr9crEkhWN/vxBxA2Jx3svJ+5FqPoV3zZ9TU9thjyTnEPxVBQY3jQSR cxNFu7F/G0YdjEg2cKNMaB1q5QWmmTKg6XPE90VdK5OS3pGBzL/2kxu2ulbrU6wC sc2yg/dccfoMHa16BRbyyZm1iidRclHYuC7I1cpAmivYtJXLqs5lxu9ZWH/KOGxz PYnhErw9JAl4Tm3BYzx691GvEal3d5W7W2y+9uhq9fm9/sNffQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM74uDrPbMYVRiWA8MGCqz3FwQWlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNTg4 ODBmNy01NmZhLTRjN2MtYTdlNy02ZDExM2VkYTM4M2QvMWY5MWY4ZjYtOWY0Ny0z Nzg5LTg5NjQtYTgyMWY1YTdkNDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjU4ODgwZjctNTZmYS00YzdjLWE3 ZTctNmQxMTNlZGEzODNkLzI1ODg4MGY3LTU2ZmEtNGM3Yy1hN2U3LTZkMTEzZWRh MzgzZC5jcmwwHwYDVR0jBBgwFoAU4HeZDeDtMJxFcQwusHMU3fxVvoowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNTg4ODBmNy01NmZhLTRjN2MtYTdlNy02ZDEx M2VkYTM4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF47IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKo3h9Kz7LDSbUjE74hsC/rG8ChqhuPByhQfzoeNP8+vQmxKYLpdDdsL Ki5EwXcvL1YbH2qqjqfKV59n4ZuRIe7977z4yiZa7Z9mRTJ+KKX+MdAbseq1xDmv 2JkxR+PuXDu+GT3Nbax3oowHO4dT0XNwpmO+AJzCzdh9VY5eQOjpd0rrMyvwJ8QI P5QlWI+YzvDWIPAeyIM3Ncd9Nbgcw/Vcs1VNMVViReqTSYaRiICsE9U97NBMve2B vWsCsXS6hpow6EiWRj+TkeAdl/E5wtgMeviM8Ly7WgjX1azcFYZRL39IQv3TC9Dk AgZdRqgOZ4AgumS7/mwv036zdcY7jrQ= -----END CERTIFICATE-----Generated at Thu Jun 11 19:20:42 2026 by rpki-client