$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/efac39e6-7c8c-3202-8590-cf9dcc302c63.roa File: efac39e6-7c8c-3202-8590-cf9dcc302c63.roa (raw, json) Hash identifier: ijNMiFQuTrvlYBO2qhiA43FcSq9DfR3F/xGXgA4sotI= Subject key identifier: AB:B2:DE:6F:F3:47:09:45:57:78:16:62:1E:78:05:8B:7F:D4:06:06 Certificate issuer: /CN=628f1b90-aa4f-4bf4-9b08-6c2ba4a51659 Certificate serial: 010D0C9F4328584DD625B4A3E723C313C6A4D180 Authority key identifier: 82:8D:F8:35:71:30:E9:BC:84:5B:0B:50:59:E3:B8:25:D7:CA:0F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/efac39e6-7c8c-3202-8590-cf9dcc302c63.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 63023 IP address blocks: 23.157.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:b4:a3:e7:23:c3:13:c6:a4:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=628f1b90-aa4f-4bf4-9b08-6c2ba4a51659 Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=602057d2-096e-4239-87c6-0cd9db373ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4d:b3:2b:33:b4:cc:0a:53:50:ad:ad:7e:94: 77:6f:9f:f4:e0:13:e9:4c:96:0a:dd:e4:38:d6:48: 51:fc:81:05:a4:d3:26:3f:bc:a3:83:ce:28:05:76: da:55:1a:21:70:9b:d8:0a:78:52:89:04:c6:cb:45: a3:54:8b:4e:77:5e:b8:11:a0:56:95:91:f6:1a:ef: e9:52:13:7b:33:b9:89:48:7a:f7:5c:f7:18:b2:26: 64:18:e6:d4:d3:ea:6c:a5:16:97:98:17:78:32:c8: 93:97:a1:b8:a4:6f:5d:80:26:26:04:b4:15:d2:d0: 60:8b:35:4a:67:16:a5:16:2a:15:41:63:ad:fb:1b: 7b:fc:ce:2c:4b:32:1e:42:57:45:d4:e5:af:b1:35: 66:5a:d2:29:fe:de:0c:80:d3:68:e6:77:9f:33:4f: 80:12:3e:7e:7d:04:ae:25:64:22:09:b6:a2:3f:b1: 0c:91:fc:7b:43:78:be:08:cd:e6:d7:98:63:ae:78: fe:fa:b9:d6:b5:97:04:2f:b6:44:8c:db:a8:86:c4: d0:1f:94:8e:ac:79:c1:ef:df:72:e2:36:c1:2a:b8: 8c:da:20:8d:93:cf:ac:3c:85:84:1e:ab:3d:02:be: f1:b8:e5:26:69:33:01:49:76:45:c9:14:03:14:96: ce:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B2:DE:6F:F3:47:09:45:57:78:16:62:1E:78:05:8B:7F:D4:06:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/efac39e6-7c8c-3202-8590-cf9dcc302c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.crl X509v3 Authority Key Identifier: keyid:82:8D:F8:35:71:30:E9:BC:84:5B:0B:50:59:E3:B8:25:D7:CA:0F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.cer sbgp-ipAddrBlock: critical IPv4: 23.157.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:5e:45:cd:1f:10:de:82:e9:6c:07:3f:ec:a0:73:f5:4b:6d: b5:58:42:7d:4e:c1:89:03:1c:6d:9d:6f:93:a2:97:77:72:17: f2:9d:ec:3b:51:bc:92:08:c4:2e:e2:ff:c0:3b:a1:5c:97:bd: 72:91:89:e5:cb:36:8d:e2:48:ec:2c:d6:ec:b6:a2:8b:01:b0: 79:93:fc:ab:61:d4:80:6c:24:ce:88:b2:b3:d6:42:51:ee:6d: 69:18:09:68:15:98:6b:f1:b5:89:7d:d8:05:23:88:39:47:b7: cf:6d:0a:89:e9:86:45:05:7a:85:8e:71:15:f4:9e:a5:c5:f9: ee:19:7b:31:0a:46:68:22:80:a9:0d:26:3b:18:8b:49:5f:94: 5f:0a:5f:b8:56:4f:3b:84:b7:89:dc:e4:d2:51:df:06:2d:9d: 48:50:98:40:4b:8e:4f:8c:7c:de:71:e3:0e:07:73:a0:7a:da: 88:ef:54:01:68:87:f0:5a:66:cc:ce:ba:1c:a2:3e:16:9f:ca: a4:da:b7:94:88:5d:f2:53:ae:8e:dd:84:5c:3a:3d:85:98:d8: 22:9b:5c:73:85:ec:e4:93:05:2a:0a:3e:56:fe:cc:0e:1d:7d: 14:fe:b4:92:40:33:0b:d9:42:c7:a2:48:5b:ae:47:6e:b9:fc: 21:a4:be:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WJbSj5yPDE8ak0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI4ZjFiOTAtYWE0Zi00YmY0LTliMDgtNmMyYmE0YTUx NjU5MB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk NjAyMDU3ZDItMDk2ZS00MjM5LTg3YzYtMGNkOWRiMzczYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok2zKzO0zApTUK2tfpR3b5/04BPpTJYK3eQ4 1khR/IEFpNMmP7yjg84oBXbaVRohcJvYCnhSiQTGy0WjVItOd164EaBWlZH2Gu/p UhN7M7mJSHr3XPcYsiZkGObU0+pspRaXmBd4MsiTl6G4pG9dgCYmBLQV0tBgizVK ZxalFioVQWOt+xt7/M4sSzIeQldF1OWvsTVmWtIp/t4MgNNo5nefM0+AEj5+fQSu JWQiCbaiP7EMkfx7Q3i+CM3m15hjrnj++rnWtZcEL7ZEjNuohsTQH5SOrHnB799y 4jbBKriM2iCNk8+sPIWEHqs9Ar7xuOUmaTMBSXZFyRQDFJbOPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuy3m/zRwlFV3gWYh54BYt/1AYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82Mjhm MWI5MC1hYTRmLTRiZjQtOWIwOC02YzJiYTRhNTE2NTkvZWZhYzM5ZTYtN2M4Yy0z MjAyLTg1OTAtY2Y5ZGNjMzAyYzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjI4ZjFiOTAtYWE0Zi00YmY0LTli MDgtNmMyYmE0YTUxNjU5LzYyOGYxYjkwLWFhNGYtNGJmNC05YjA4LTZjMmJhNGE1 MTY1OS5jcmwwHwYDVR0jBBgwFoAUgo34NXEw6byEWwtQWeO4JdfKD2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82MjhmMWI5MC1hYTRmLTRiZjQtOWIwOC02YzJi YTRhNTE2NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF51YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFeRc0fEN6C6WwHP+ygc/VLbbVYQn1OwYkDHG2db5Oil3dyF/Kd7DtR vJIIxC7i/8A7oVyXvXKRieXLNo3iSOws1uy2oosBsHmT/Kth1IBsJM6IsrPWQlHu bWkYCWgVmGvxtYl92AUjiDlHt89tConphkUFeoWOcRX0nqXF+e4ZezEKRmgigKkN JjsYi0lflF8KX7hWTzuEt4nc5NJR3wYtnUhQmEBLjk+MfN5x4w4Hc6B62ojvVAFo h/BaZszOuhyiPhafyqTat5SIXfJTro7dhFw6PYWY2CKbXHOF7OSTBSoKPlb+zA4d fRT+tJJAMwvZQseiSFuuR265/CGkvmY= -----END CERTIFICATE-----Generated at Thu Jun 4 08:00:47 2026 by rpki-client