$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/6128c351-c1a2-3aaf-bd5b-586a10f0ea48.roa File: 6128c351-c1a2-3aaf-bd5b-586a10f0ea48.roa (raw, json) Hash identifier: +kSXZU5vGvbJHpBBYs/kdOtwjVug8GT7XUZTICzLguM= Subject key identifier: 82:D4:44:34:F9:3E:87:A7:DE:8C:B2:D7:81:50:F0:0A:6D:00:0A:9B Certificate issuer: /CN=efc37d3d-05e3-4f5b-85f2-374292d5009e Certificate serial: 010D0C9F4328584DF0AB402F5146E8937663F900 Authority key identifier: 9F:77:B3:18:AD:C7:08:C0:68:C5:97:FD:9C:2B:2A:34:03:FB:2B:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/6128c351-c1a2-3aaf-bd5b-586a10f0ea48.roa Signing time: Sun 24 May 2026 13:00:30 +0000 ROA not before: Sun 24 May 2026 13:00:30 +0000 ROA not after: Sat 22 Aug 2026 13:00:30 +0000 asID: 399619 IP address blocks: 23.128.156.0/24 maxlen: 24 2602:f7ad::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/efc37d3d-05e3-4f5b-85f2-374292d5009e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/efc37d3d-05e3-4f5b-85f2-374292d5009e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 31 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f0:ab:40:2f:51:46:e8:93:76:63:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efc37d3d-05e3-4f5b-85f2-374292d5009e Validity Not Before: May 24 13:00:30 2026 GMT Not After : Aug 22 13:00:30 2026 GMT Subject: CN=4a78e4de-4cd3-4194-a05a-98d8c420604c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b9:42:82:59:94:76:94:05:d1:ec:61:23:fb: 95:e1:c1:e1:a5:a6:a0:c4:78:bd:48:2a:3b:a3:7c: 47:4c:3e:be:db:17:6c:f1:9c:e2:8a:3b:f8:fd:8f: 67:d9:46:eb:97:bc:79:05:f0:26:a3:b5:f8:f2:8d: 13:41:54:1f:20:ec:c6:71:0e:26:a7:e4:86:2b:2e: cc:49:9d:8c:27:8e:c7:13:dc:c9:97:ab:8e:86:9a: bb:d6:6f:70:69:1f:a2:0a:6c:e8:cc:36:b3:3e:d2: a1:f6:9b:a1:82:02:97:13:80:b9:4b:28:86:3b:4a: 20:eb:cf:d8:38:00:ac:e0:6a:23:63:72:17:27:e8: f1:27:70:7a:cc:3a:3c:38:f2:d8:6a:8e:6d:c9:63: 33:29:20:bb:0e:ad:41:0a:ea:d3:4e:e7:02:10:7f: 5a:b2:79:79:0d:18:99:27:0e:27:68:0c:27:a3:9d: 05:5f:d1:bd:1d:ba:b0:ae:ee:88:3a:e1:2f:4b:55: d0:45:bd:e4:7e:ca:6a:2c:c5:d4:fa:31:da:0e:0a: d6:f1:2a:cb:b0:bc:eb:28:bf:5f:6e:55:d9:79:21: f9:be:b5:27:f9:8a:de:f7:06:51:7a:00:cb:22:31: f3:17:0c:fd:61:5d:9c:a1:cf:94:1a:26:1c:9e:da: 54:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D4:44:34:F9:3E:87:A7:DE:8C:B2:D7:81:50:F0:0A:6D:00:0A:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/6128c351-c1a2-3aaf-bd5b-586a10f0ea48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/efc37d3d-05e3-4f5b-85f2-374292d5009e.crl X509v3 Authority Key Identifier: keyid:9F:77:B3:18:AD:C7:08:C0:68:C5:97:FD:9C:2B:2A:34:03:FB:2B:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e.cer sbgp-ipAddrBlock: critical IPv4: 23.128.156.0/24 IPv6: 2602:f7ad::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:61:91:6d:81:ef:ef:bc:4f:fe:b9:23:59:1e:4e:14:05:13: df:5d:b7:a3:22:ee:40:fe:64:a1:bd:26:b4:1b:d0:bb:ba:fd: 9a:29:88:cb:1d:00:54:eb:55:a6:29:2a:cf:d6:c1:89:af:b6: 1c:4e:42:41:84:79:e5:84:e9:68:5d:68:00:b0:b1:59:34:58: 04:41:0e:8e:75:2c:7c:93:13:bf:9b:e3:0d:73:22:fa:e6:bc: a7:de:ab:28:7b:f2:af:85:d2:11:f0:7a:5b:45:1a:ad:e0:ce: f7:f5:f6:c3:a8:75:63:8d:eb:8a:50:4e:22:5e:ef:b1:78:79: c3:92:10:88:ed:28:ca:72:d4:31:7b:ad:d2:bd:c9:64:1f:c9: 44:66:a6:e1:b4:94:b9:38:c7:2e:5d:97:e7:53:2d:45:6f:1a: c6:ac:cc:e4:62:bc:9f:2d:db:41:16:c7:82:a9:f5:65:c7:ff: c1:cb:8f:1e:19:be:47:39:c3:07:c6:b4:b3:bf:63:79:dd:26: 2f:c4:00:5d:b3:15:4b:50:48:d8:37:ce:e3:b5:c1:e8:20:6f: 14:d5:da:20:83:46:d5:d3:95:00:a3:1c:0d:1e:43:64:a8:ff: 87:e0:22:85:ab:0a:b6:6d:99:4a:b1:7c:00:1a:c6:38:2e:4d: 65:3a:3d:3b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE3wq0AvUUbok3Zj+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZjMzdkM2QtMDVlMy00ZjViLTg1ZjItMzc0MjkyZDUw MDllMB4XDTI2MDUyNDEzMDAzMFoXDTI2MDgyMjEzMDAzMFowLzEtMCsGA1UEAxMk NGE3OGU0ZGUtNGNkMy00MTk0LWEwNWEtOThkOGM0MjA2MDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrlCglmUdpQF0exhI/uV4cHhpaagxHi9SCo7 o3xHTD6+2xds8Zziijv4/Y9n2Ubrl7x5BfAmo7X48o0TQVQfIOzGcQ4mp+SGKy7M SZ2MJ47HE9zJl6uOhpq71m9waR+iCmzozDazPtKh9puhggKXE4C5SyiGO0og68/Y OACs4GojY3IXJ+jxJ3B6zDo8OPLYao5tyWMzKSC7Dq1BCurTTucCEH9asnl5DRiZ Jw4naAwno50FX9G9Hbqwru6IOuEvS1XQRb3kfspqLMXU+jHaDgrW8SrLsLzrKL9f blXZeSH5vrUn+Yre9wZRegDLIjHzFwz9YV2coc+UGiYcntpU/wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFILURDT5Poen3oyy14FQ8AptAAqbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lZmMz N2QzZC0wNWUzLTRmNWItODVmMi0zNzQyOTJkNTAwOWUvNjEyOGMzNTEtYzFhMi0z YWFmLWJkNWItNTg2YTEwZjBlYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWZjMzdkM2QtMDVlMy00ZjViLTg1 ZjItMzc0MjkyZDUwMDllL2VmYzM3ZDNkLTA1ZTMtNGY1Yi04NWYyLTM3NDI5MmQ1 MDA5ZS5jcmwwHwYDVR0jBBgwFoAUn3ezGK3HCMBoxZf9nCsqNAP7K8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lZmMzN2QzZC0wNWUzLTRmNWItODVmMi0zNzQy OTJkNTAwOWUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4CcMA4E AgACMAgDBgQmAvetADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAFYZFtge/vvE/+uSNZHk4UBRPfXbejIu5A /mShvSa0G9C7uv2aKYjLHQBU61WmKSrP1sGJr7YcTkJBhHnlhOloXWgAsLFZNFgE QQ6OdSx8kxO/m+MNcyL65ryn3qsoe/KvhdIR8HpbRRqt4M739fbDqHVjjeuKUE4i Xu+xeHnDkhCI7SjKctQxe63SvclkH8lEZqbhtJS5OMcuXZfnUy1FbxrGrMzkYryf LdtBFseCqfVlx//By48eGb5HOcMHxrSzv2N53SYvxABdsxVLUEjYN87jtcHoIG8U 1dogg0bV05UAoxwNHkNkqP+H4CKFqwq2bZlKsXwAGsY4Lk1lOj07 -----END CERTIFICATE-----Generated at Fri May 29 16:17:44 2026 by rpki-client