$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/295d13d7-99ef-33dd-a625-3a2596a0f75d.roa File: 295d13d7-99ef-33dd-a625-3a2596a0f75d.roa (raw, json) Hash identifier: QMfIzK6y4GUlPLEv6V9QsJoOT7+AAApbHqy42qqkHEQ= Subject key identifier: AF:2B:91:4B:52:6A:7F:5F:D5:9E:77:8F:40:70:D9:57:36:D4:DB:7B Certificate issuer: /CN=cb5b14dc-69ee-4b58-b27d-78fe51b1335f Certificate serial: 010D0C9F4328584D98BAA82B956D8F443A94B500 Authority key identifier: A1:9A:77:2F:FD:70:E8:07:64:E2:E3:1C:A4:41:24:B6:42:51:05:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/295d13d7-99ef-33dd-a625-3a2596a0f75d.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 401010 IP address blocks: 23.148.136.0/24 maxlen: 24 130.51.77.0/24 maxlen: 24 2602:face::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a8:2b:95:6d:8f:44:3a:94:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb5b14dc-69ee-4b58-b27d-78fe51b1335f Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=1d6572a4-8e71-4a69-b349-d53069fa4cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:01:2d:1e:00:5c:87:5f:02:84:78:71:c1:ad: 0e:d2:66:3d:db:18:42:60:e8:34:bf:e1:8c:c4:ef: 50:1f:bf:bc:27:fe:eb:90:fd:7e:e3:d6:f7:3a:24: 54:49:14:94:1a:48:f1:66:67:6a:95:97:63:92:bd: ba:26:0b:95:39:38:a2:b8:20:64:d3:86:1f:a2:89: a8:81:74:6a:b2:50:bf:af:70:b9:68:54:ee:ee:2b: 63:77:33:68:25:48:ae:e4:bf:f3:7b:d1:66:be:05: b5:09:76:f9:e7:1e:c9:8e:23:b9:6d:cd:11:94:40: 79:b0:64:67:1b:2c:32:81:9d:e1:71:17:14:7d:ac: 85:73:17:50:23:65:68:f6:cb:6e:3c:04:1c:e7:e9: 7e:eb:8a:61:ee:b6:f1:a3:3d:ba:60:d9:39:8a:70: ad:57:b5:46:bd:db:29:47:b6:9b:41:b2:6f:4d:e5: be:85:d9:8c:c0:61:a5:dc:65:98:ad:ca:6f:9a:d9: f3:77:d9:9a:7b:37:2a:70:22:29:a5:a7:82:2a:7c: 50:c8:a9:4d:04:c7:0b:ef:80:c5:27:2c:fb:57:95: 76:f0:86:20:54:88:3d:35:1c:17:7c:0b:29:ab:7e: 86:0d:a5:9e:38:d5:63:fd:70:99:3a:ea:37:70:c0: 8c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2B:91:4B:52:6A:7F:5F:D5:9E:77:8F:40:70:D9:57:36:D4:DB:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/295d13d7-99ef-33dd-a625-3a2596a0f75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.crl X509v3 Authority Key Identifier: keyid:A1:9A:77:2F:FD:70:E8:07:64:E2:E3:1C:A4:41:24:B6:42:51:05:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer sbgp-ipAddrBlock: critical IPv4: 23.148.136.0/24 130.51.77.0/24 IPv6: 2602:face::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:82:68:fd:b6:60:d7:4c:a7:36:4f:4e:c9:60:66:67:4a:39: 21:99:63:8e:7a:0b:7f:c3:a8:3e:8c:38:b9:2a:90:25:e6:37: d9:fd:60:00:64:85:79:fe:73:4e:30:25:e6:3e:4a:f0:07:b7: 6f:a3:c3:d4:90:30:c2:d1:9a:0e:1a:08:9f:dc:38:00:88:ce: 38:f6:c9:17:cc:95:c8:61:2d:e7:8b:2c:a2:da:1b:ad:71:5f: f6:b6:1e:d4:66:19:80:fc:5e:77:cd:ea:9d:43:69:f5:c5:22: 7b:62:0a:23:73:5f:50:ac:f8:3e:31:2e:4b:64:73:b9:56:52: 05:47:a2:a1:a3:48:05:29:5f:07:e9:77:90:9b:bc:74:e7:97: 1a:25:a7:de:2a:e7:4d:23:5f:a6:e7:46:9a:68:30:f7:fd:bc: 0a:b0:a7:4e:03:52:2a:0d:9d:e8:dd:7a:a5:84:91:1a:d5:2b: 03:2b:a6:8e:5b:ff:c6:db:33:be:5e:83:77:60:f2:08:80:42: 4e:e1:83:42:44:47:fa:49:de:ae:69:d6:95:31:49:48:f3:08: 83:9c:fa:ae:87:a2:d4:c8:46:90:fd:38:95:74:16:22:e3:23: fb:6d:72:75:7c:b2:6b:c1:7f:b5:b6:9a:68:2f:69:29:31:6d: 0e:13:09:e2 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE2YuqgrlW2PRDqUtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I1YjE0ZGMtNjllZS00YjU4LWIyN2QtNzhmZTUxYjEz MzVmMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk MWQ2NTcyYTQtOGU3MS00YTY5LWIzNDktZDUzMDY5ZmE0Y2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAEtHgBch18ChHhxwa0O0mY92xhCYOg0v+GM xO9QH7+8J/7rkP1+49b3OiRUSRSUGkjxZmdqlZdjkr26JguVOTiiuCBk04Yfoomo gXRqslC/r3C5aFTu7itjdzNoJUiu5L/ze9FmvgW1CXb55x7JjiO5bc0RlEB5sGRn GywygZ3hcRcUfayFcxdQI2Vo9stuPAQc5+l+64ph7rbxoz26YNk5inCtV7VGvdsp R7abQbJvTeW+hdmMwGGl3GWYrcpvmtnzd9maezcqcCIppaeCKnxQyKlNBMcL74DF Jyz7V5V28IYgVIg9NRwXfAspq36GDaWeONVj/XCZOuo3cMCMfwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFK8rkUtSan9f1Z53j0Bw2Vc21Nt7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYjVi MTRkYy02OWVlLTRiNTgtYjI3ZC03OGZlNTFiMTMzNWYvMjk1ZDEzZDctOTllZi0z M2RkLWE2MjUtM2EyNTk2YTBmNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2I1YjE0ZGMtNjllZS00YjU4LWIy N2QtNzhmZTUxYjEzMzVmL2NiNWIxNGRjLTY5ZWUtNGI1OC1iMjdkLTc4ZmU1MWIx MzM1Zi5jcmwwHwYDVR0jBBgwFoAUoZp3L/1w6Adk4uMcpEEktkJRBdEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jYjViMTRkYy02OWVlLTRiNTgtYjI3ZC03OGZl NTFiMTMzNWYuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5SIAwQA gjNNMA4EAgACMAgDBgQmAvrOADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCigmj9tmDXTKc2T07JYGZnSjkh mWOOegt/w6g+jDi5KpAl5jfZ/WAAZIV5/nNOMCXmPkrwB7dvo8PUkDDC0ZoOGgif 3DgAiM449skXzJXIYS3niyyi2hutcV/2th7UZhmA/F53zeqdQ2n1xSJ7Ygojc19Q rPg+MS5LZHO5VlIFR6Kho0gFKV8H6XeQm7x055caJafeKudNI1+m50aaaDD3/bwK sKdOA1IqDZ3o3XqlhJEa1SsDK6aOW//G2zO+XoN3YPIIgEJO4YNCREf6Sd6uadaV MUlI8wiDnPquh6LUyEaQ/TiVdBYi4yP7bXJ1fLJrwX+1tppoL2kpMW0OEwni -----END CERTIFICATE-----Generated at Wed Apr 29 15:30:06 2026 by rpki-client