$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/d40a7535-e168-3116-acad-26158f7c0cce.roa File: d40a7535-e168-3116-acad-26158f7c0cce.roa (raw, json) Hash identifier: w4dpFE2E2fanLxfWPuyGuq77lY4NI39hwLHbHqjVTcU= Subject key identifier: AB:F5:B9:5F:B0:CF:FB:99:05:92:C9:BE:79:4C:7B:F0:1C:2D:AD:17 Certificate issuer: /CN=02df9026-5ea2-4718-a55c-d46da7505348 Certificate serial: 010D0C9F4328584DF640AF42564B5888C5E7B8A0 Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/d40a7535-e168-3116-acad-26158f7c0cce.roa Signing time: Tue 26 May 2026 13:00:31 +0000 ROA not before: Tue 26 May 2026 13:00:31 +0000 ROA not after: Mon 24 Aug 2026 13:00:31 +0000 asID: 14291 IP address blocks: 24.153.112.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:40:af:42:56:4b:58:88:c5:e7:b8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348 Validity Not Before: May 26 13:00:31 2026 GMT Not After : Aug 24 13:00:31 2026 GMT Subject: CN=789fd244-4c7b-4966-979f-4400986df3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e4:e3:68:36:d7:08:c2:82:c4:50:a0:90:e6: 2a:e9:b3:33:b9:e0:eb:e9:0d:79:bb:c0:25:67:94: 02:e4:f8:30:be:1b:f5:96:f8:10:07:b7:03:ff:45: 2a:9a:f7:92:47:e1:71:be:9d:c2:b1:c9:61:d8:90: f1:f4:f9:8a:2a:5d:8e:cb:81:12:f2:4a:8e:f7:a5: 88:50:25:65:03:99:0a:41:e7:4c:e3:fa:23:fc:16: e2:20:14:3f:26:08:e3:1e:7f:7f:f9:fd:e3:0f:1c: ab:49:cf:4f:73:fa:e9:b5:47:dd:74:be:09:fe:80: d5:08:aa:55:b0:3c:83:4c:b0:b6:f2:3b:eb:a3:6c: 2e:ca:a4:07:4c:ab:13:a3:e8:26:cf:35:47:b0:0a: 5f:b2:60:94:5e:29:58:b4:47:53:7c:de:3c:b6:62: 29:5b:df:6e:f7:9e:8a:9c:1f:ac:32:0e:9c:85:31: 93:48:87:ca:7b:cf:10:4c:80:df:16:3c:03:b6:e7: 05:80:3a:64:34:f9:16:e3:10:02:79:9a:22:1f:11: 8e:29:74:fb:d2:60:69:07:26:ff:35:8e:57:27:84: 7b:18:1f:95:e3:ef:fe:2a:61:f7:6e:16:3d:d1:11: a8:16:5b:b8:ce:60:37:cc:e8:08:3f:ee:36:d8:38: 40:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F5:B9:5F:B0:CF:FB:99:05:92:C9:BE:79:4C:7B:F0:1C:2D:AD:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/d40a7535-e168-3116-acad-26158f7c0cce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl X509v3 Authority Key Identifier: keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer sbgp-ipAddrBlock: critical IPv4: 24.153.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d4:07:61:65:9e:1c:58:c3:b2:0a:4e:d2:0e:18:ae:07:74: ad:5c:f9:17:f3:0b:dd:bf:87:d2:e0:28:0a:29:b7:12:2f:6a: 59:1a:e4:b0:af:9a:8e:0e:c6:c8:6a:5f:ad:fd:1e:bd:d2:7b: 42:00:98:1d:01:94:0c:c7:1c:8f:5a:9a:77:80:21:ec:b6:06: 70:fc:fb:04:12:05:72:6f:79:fb:4a:f8:1a:2d:52:34:5c:5a: 77:58:2f:f1:8a:14:c2:53:37:66:fe:0b:01:d5:76:79:91:cf: 16:64:a7:2f:55:56:10:2f:00:3a:ed:b2:19:00:04:aa:28:cb: 18:92:a7:97:5c:09:27:0c:1e:1e:95:4d:c8:7a:8f:1e:e5:85: 7e:08:9a:24:44:b4:7b:30:c2:74:6a:10:53:81:a6:5c:92:d5: 9b:b4:45:6f:84:5e:3c:d9:93:43:36:72:65:6a:8a:6c:01:6e: 93:c5:4c:23:23:7d:bb:51:61:df:12:5f:be:c1:66:78:71:0a: 94:77:e5:bd:aa:4e:98:57:10:54:48:2f:46:e0:2f:d3:50:8c: 63:c6:89:b8:74:84:da:46:49:3c:5e:40:5e:c3:d2:a8:84:a0: dc:5a:6a:3b:8a:e9:4c:fe:45:d7:11:1e:24:e0:7c:de:3e:0d: 7c:de:ba:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE32QK9CVktYiMXnuKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJkZjkwMjYtNWVhMi00NzE4LWE1NWMtZDQ2ZGE3NTA1 MzQ4MB4XDTI2MDUyNjEzMDAzMVoXDTI2MDgyNDEzMDAzMVowLzEtMCsGA1UEAxMk Nzg5ZmQyNDQtNGM3Yi00OTY2LTk3OWYtNDQwMDk4NmRmM2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeTjaDbXCMKCxFCgkOYq6bMzueDr6Q15u8Al Z5QC5Pgwvhv1lvgQB7cD/0UqmveSR+Fxvp3Csclh2JDx9PmKKl2Oy4ES8kqO96WI UCVlA5kKQedM4/oj/BbiIBQ/JgjjHn9/+f3jDxyrSc9Pc/rptUfddL4J/oDVCKpV sDyDTLC28jvro2wuyqQHTKsTo+gmzzVHsApfsmCUXilYtEdTfN48tmIpW99u956K nB+sMg6chTGTSIfKe88QTIDfFjwDtucFgDpkNPkW4xACeZoiHxGOKXT70mBpByb/ NY5XJ4R7GB+V4+/+KmH3bhY90RGoFlu4zmA3zOgIP+422DhALwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKv1uV+wz/uZBZLJvnlMe/AcLa0XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRm OTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZkYTc1MDUzNDgvZDQwYTc1MzUtZTE2OC0z MTE2LWFjYWQtMjYxNThmN2MwY2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDJkZjkwMjYtNWVhMi00NzE4LWE1 NWMtZDQ2ZGE3NTA1MzQ4LzAyZGY5MDI2LTVlYTItNDcxOC1hNTVjLWQ0NmRhNzUw NTM0OC5jcmwwHwYDVR0jBBgwFoAUyBt2Ol6lM34AGtjZ+ZDa9s1kXqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRmOTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZk YTc1MDUzNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGJlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHUB2FlnhxYw7IKTtIOGK4HdK1c+RfzC92/h9LgKAoptxIvalka5LCv mo4OxshqX639Hr3Se0IAmB0BlAzHHI9amneAIey2BnD8+wQSBXJveftK+BotUjRc WndYL/GKFMJTN2b+CwHVdnmRzxZkpy9VVhAvADrtshkABKooyxiSp5dcCScMHh6V Tch6jx7lhX4ImiREtHswwnRqEFOBplyS1Zu0RW+EXjzZk0M2cmVqimwBbpPFTCMj fbtRYd8SX77BZnhxCpR35b2qTphXEFRIL0bgL9NQjGPGibh0hNpGSTxeQF7D0qiE oNxaajuK6Uz+RdcRHiTgfN4+DXzeumY= -----END CERTIFICATE-----Generated at Thu May 28 13:41:12 2026 by rpki-client