$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/f80aa1f9-a6e2-3038-b512-57e988c3c123.roa File: f80aa1f9-a6e2-3038-b512-57e988c3c123.roa (raw, json) Hash identifier: pc2Rp5FKzwG4RIyqXyqdbxHp/n4POh8aBlYExNNg+DI= Subject key identifier: 7D:F3:F2:8D:68:56:D7:1C:74:D0:A2:34:5A:2B:EE:91:35:3A:BC:64 Certificate issuer: /CN=17ba49ac-37d6-4b90-b973-bee8a685e116 Certificate serial: 010D0C9F4328584DFA70A550BED1112CEEA37280 Authority key identifier: 24:F8:90:91:66:EA:CD:1F:05:33:85:A2:E7:15:EA:8A:EF:FA:17:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/f80aa1f9-a6e2-3038-b512-57e988c3c123.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 402071 IP address blocks: 23.147.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:a5:50:be:d1:11:2c:ee:a3:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17ba49ac-37d6-4b90-b973-bee8a685e116 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=13dabfa4-f5f3-476c-9859-09247c217401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a9:79:18:cf:ca:d4:7e:8e:49:42:62:d2:41: ec:2d:91:d1:a1:8d:a1:49:d3:aa:b3:bf:d5:2b:d2: 7e:4a:9f:4f:2c:66:d5:9d:6b:06:27:97:e6:00:2b: 02:11:ac:21:48:5f:0a:43:da:64:ed:ca:1b:df:e5: 6c:22:77:9d:ee:98:53:69:05:3e:4c:3c:cc:fc:06: 72:cf:a1:7e:97:d7:23:8f:e9:57:ae:13:8f:1a:cd: 56:b3:04:a2:09:70:5e:e9:92:ee:f4:b0:29:06:5f: b6:e4:e6:a7:be:ba:92:32:a1:2f:25:11:b8:ed:77: 0f:df:34:7f:64:80:83:a1:24:13:b2:ef:ea:61:f4: 2d:9f:15:4d:0c:80:33:bb:84:bc:c4:c5:66:76:17: b2:17:2f:89:d7:f8:a8:0d:ef:4d:aa:68:b0:65:42: 1c:31:cd:52:86:48:62:d2:61:b6:b5:87:6e:5d:20: 1d:a1:a0:6f:d3:a4:bc:90:9d:eb:92:ba:68:9d:c1: 5a:80:88:8b:03:b0:93:58:22:ab:21:29:6e:bd:93: 10:d1:6a:aa:77:f2:05:5a:4d:2a:d5:bf:57:ce:97: 01:c4:ba:e3:b8:02:7f:fb:7e:a3:e0:10:83:d6:11: 4c:89:6f:0c:34:fc:c6:c1:12:46:e9:28:c0:27:8a: 8e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F3:F2:8D:68:56:D7:1C:74:D0:A2:34:5A:2B:EE:91:35:3A:BC:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/f80aa1f9-a6e2-3038-b512-57e988c3c123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.crl X509v3 Authority Key Identifier: keyid:24:F8:90:91:66:EA:CD:1F:05:33:85:A2:E7:15:EA:8A:EF:FA:17:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer sbgp-ipAddrBlock: critical IPv4: 23.147.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:7a:aa:a8:f7:73:3e:32:60:54:21:aa:85:91:0b:65:e8:07: cc:5e:07:b7:7a:05:99:e3:1a:53:92:5d:47:1c:e5:38:c9:c5: 71:5c:3a:8a:fb:ad:05:9a:c6:37:46:df:01:72:1a:e2:a3:71: 25:aa:ea:aa:d7:1e:43:ad:c1:15:bf:16:5b:86:1f:fd:90:4d: 4b:06:f6:09:8d:f4:2a:ba:a8:8a:d3:8c:bd:24:8d:17:0f:82: 8f:a2:cf:be:bc:f7:0a:7d:14:56:16:31:ad:b6:82:4f:f3:65: 6a:f9:13:16:c3:2d:66:d3:6d:1f:0e:be:57:f3:40:3f:1e:6e: 90:e7:58:cb:6a:c3:ce:7d:b5:c2:0e:3d:bc:2f:b7:1b:a4:69: 39:99:a2:93:a0:5c:c0:9f:d1:82:59:f1:68:e9:99:c9:79:60: 4c:68:e2:7f:ac:ff:3a:cf:b2:91:2f:fd:9c:a6:6b:49:af:67: a4:c2:81:bc:0e:02:2f:6a:37:ea:0b:96:22:22:1b:4b:5c:a2: 05:27:1d:2f:50:a0:93:03:6a:37:c7:e7:f9:fe:0b:d9:30:46: 16:cf:12:06:a1:01:e7:26:3c:41:1c:c5:db:6c:51:b3:f0:4b: 7f:8d:32:d1:c1:be:91:ed:c0:e6:c0:b5:0d:b5:24:47:b9:f0: fc:90:61:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cKVQvtERLO6jcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdiYTQ5YWMtMzdkNi00YjkwLWI5NzMtYmVlOGE2ODVl MTE2MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk MTNkYWJmYTQtZjVmMy00NzZjLTk4NTktMDkyNDdjMjE3NDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsal5GM/K1H6OSUJi0kHsLZHRoY2hSdOqs7/V K9J+Sp9PLGbVnWsGJ5fmACsCEawhSF8KQ9pk7cob3+VsIned7phTaQU+TDzM/AZy z6F+l9cjj+lXrhOPGs1WswSiCXBe6ZLu9LApBl+25OanvrqSMqEvJRG47XcP3zR/ ZICDoSQTsu/qYfQtnxVNDIAzu4S8xMVmdheyFy+J1/ioDe9NqmiwZUIcMc1Shkhi 0mG2tYduXSAdoaBv06S8kJ3rkrponcFagIiLA7CTWCKrISluvZMQ0Wqqd/IFWk0q 1b9XzpcBxLrjuAJ/+36j4BCD1hFMiW8MNPzGwRJG6SjAJ4qO2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3z8o1oVtccdNCiNFor7pE1OrxkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xN2Jh NDlhYy0zN2Q2LTRiOTAtYjk3My1iZWU4YTY4NWUxMTYvZjgwYWExZjktYTZlMi0z MDM4LWI1MTItNTdlOTg4YzNjMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTdiYTQ5YWMtMzdkNi00YjkwLWI5 NzMtYmVlOGE2ODVlMTE2LzE3YmE0OWFjLTM3ZDYtNGI5MC1iOTczLWJlZThhNjg1 ZTExNi5jcmwwHwYDVR0jBBgwFoAUJPiQkWbqzR8FM4Wi5xXqiu/6FyYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xN2JhNDlhYy0zN2Q2LTRiOTAtYjk3My1iZWU4 YTY4NWUxMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5McMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACl6qqj3cz4yYFQhqoWRC2XoB8xeB7d6BZnjGlOSXUcc5TjJxXFcOor7 rQWaxjdG3wFyGuKjcSWq6qrXHkOtwRW/FluGH/2QTUsG9gmN9Cq6qIrTjL0kjRcP go+iz7689wp9FFYWMa22gk/zZWr5ExbDLWbTbR8OvlfzQD8ebpDnWMtqw859tcIO PbwvtxukaTmZopOgXMCf0YJZ8Wjpmcl5YExo4n+s/zrPspEv/Zyma0mvZ6TCgbwO Ai9qN+oLliIiG0tcogUnHS9QoJMDajfH5/n+C9kwRhbPEgahAecmPEEcxdtsUbPw S3+NMtHBvpHtwObAtQ21JEe58PyQYaY= -----END CERTIFICATE-----Generated at Thu May 28 13:41:32 2026 by rpki-client