$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e8ff2a58-be95-49e2-9b8f-31ade9c76785/8da57dc4-a37a-3e35-9ecd-07cd2179eb6f.roa File: 8da57dc4-a37a-3e35-9ecd-07cd2179eb6f.roa (raw, json) Hash identifier: IaiSzqjvPl0rtW9UiW3znfW7+rv4u7EndI2OAAFsEHQ= Subject key identifier: 16:D8:48:B4:1D:62:7B:F8:BF:BD:45:BA:B8:3B:DD:FF:E9:71:A3:C3 Certificate issuer: /CN=e8ff2a58-be95-49e2-9b8f-31ade9c76785 Certificate serial: 010D0C9F4328584E2C39A5D3DFC9D06ED38A8480 Authority key identifier: 75:F3:58:13:26:A0:3E:CF:00:B2:AC:B6:38:34:25:7D:F8:1B:A5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e8ff2a58-be95-49e2-9b8f-31ade9c76785.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e8ff2a58-be95-49e2-9b8f-31ade9c76785/8da57dc4-a37a-3e35-9ecd-07cd2179eb6f.roa Signing time: Sun 14 Jun 2026 21:00:12 +0000 ROA not before: Sun 14 Jun 2026 21:00:12 +0000 ROA not after: Sat 12 Sep 2026 21:00:12 +0000 asID: 214483 IP address blocks: 23.150.196.0/24 maxlen: 24 2602:f4aa::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e8ff2a58-be95-49e2-9b8f-31ade9c76785/e8ff2a58-be95-49e2-9b8f-31ade9c76785.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e8ff2a58-be95-49e2-9b8f-31ade9c76785/e8ff2a58-be95-49e2-9b8f-31ade9c76785.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e8ff2a58-be95-49e2-9b8f-31ade9c76785.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2c:39:a5:d3:df:c9:d0:6e:d3:8a:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8ff2a58-be95-49e2-9b8f-31ade9c76785 Validity Not Before: Jun 14 21:00:12 2026 GMT Not After : Sep 12 21:00:12 2026 GMT Subject: CN=c64cf5a0-6393-48fb-aec1-09892358e5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dc:ed:f2:c1:ff:18:4a:4a:50:34:85:54:72: e7:16:1f:5d:52:c3:07:c7:68:60:80:0e:69:6d:b1: de:eb:d7:2c:00:66:40:78:50:c9:69:69:a8:a8:41: dd:46:e5:b4:c7:bd:f9:91:77:92:97:e4:1f:81:7a: 8d:35:ab:30:47:8e:c7:0b:af:35:60:23:6d:05:14: 1f:0d:42:16:71:a9:43:9f:c6:f1:cb:87:f4:95:a4: 32:b6:dd:41:28:32:bf:60:4e:75:cf:04:6d:eb:6f: 06:75:99:f2:6a:b8:c6:9c:a1:d5:ca:8d:ab:12:32: e9:79:ca:2a:ae:cc:68:5a:4b:8f:c1:41:c2:5e:fa: 79:de:12:00:a8:c3:3b:42:c5:c2:e5:72:0b:80:db: 84:92:9f:66:ad:a1:2e:4a:1f:91:b8:83:2c:0e:90: 5b:0c:da:03:a9:58:b5:e5:e6:8c:b2:b9:28:11:54: ec:87:13:bc:09:cc:ef:fb:dd:f9:3c:9b:52:09:d3: 66:4e:a4:73:5f:cf:5c:8d:24:78:f3:36:67:76:38: 5d:d1:ad:0e:67:0f:4a:7f:e1:37:ac:25:d6:a3:44: f0:e5:6f:ad:fe:e1:6e:a5:21:b3:d1:c6:be:48:08: af:c2:90:ae:c7:29:ec:bb:4e:8f:13:ae:90:ee:23: 6d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D8:48:B4:1D:62:7B:F8:BF:BD:45:BA:B8:3B:DD:FF:E9:71:A3:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e8ff2a58-be95-49e2-9b8f-31ade9c76785/8da57dc4-a37a-3e35-9ecd-07cd2179eb6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e8ff2a58-be95-49e2-9b8f-31ade9c76785/e8ff2a58-be95-49e2-9b8f-31ade9c76785.crl X509v3 Authority Key Identifier: keyid:75:F3:58:13:26:A0:3E:CF:00:B2:AC:B6:38:34:25:7D:F8:1B:A5:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e8ff2a58-be95-49e2-9b8f-31ade9c76785.cer sbgp-ipAddrBlock: critical IPv4: 23.150.196.0/24 IPv6: 2602:f4aa::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:8e:15:bb:61:fe:20:b0:ea:2f:f7:b9:76:84:be:10:a1:68: 84:41:7e:b0:90:ed:a8:22:a6:38:38:af:c7:a7:63:55:d9:f9: 4b:16:6b:0f:d6:80:a8:51:cf:3c:fa:fe:25:db:e6:f5:0b:c2: fe:f2:79:70:be:87:d8:b7:f8:75:f2:52:10:40:40:f9:87:9b: e2:fe:7e:f4:1b:d9:f6:c8:0c:88:eb:5a:12:bf:15:21:99:7a: 59:8a:28:eb:f1:8a:d9:22:db:56:37:d1:f3:81:ab:6b:2d:9b: 4d:91:08:bd:22:4a:cd:ad:9f:d8:80:c0:71:ea:73:45:16:40: f7:08:1d:1f:f9:01:15:9d:6a:94:1d:62:8a:1d:e5:3f:f4:15: b5:dc:51:f2:6c:4c:5a:d5:f2:46:c9:91:c4:44:99:73:cf:f2: 82:c9:bf:04:1a:73:1c:c9:ca:01:e0:f3:d2:90:f6:e7:ed:ef: 7a:32:b7:62:c9:af:5f:70:ef:0a:30:3b:ef:aa:4b:b7:96:73: b1:0c:80:00:09:63:f5:c0:a6:31:e4:78:f0:a2:70:bc:c7:eb: 2f:5b:3c:c2:45:f0:5e:e3:32:80:c0:b6:f0:eb:6c:21:0d:60: e1:c9:96:71:4a:d1:c7:b3:83:0d:94:c7:a3:1d:0b:35:4b:8e: e2:67:87:a0 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE4sOaXT38nQbtOKhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThmZjJhNTgtYmU5NS00OWUyLTliOGYtMzFhZGU5Yzc2 Nzg1MB4XDTI2MDYxNDIxMDAxMloXDTI2MDkxMjIxMDAxMlowLzEtMCsGA1UEAxMk YzY0Y2Y1YTAtNjM5My00OGZiLWFlYzEtMDk4OTIzNThlNWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndzt8sH/GEpKUDSFVHLnFh9dUsMHx2hggA5p bbHe69csAGZAeFDJaWmoqEHdRuW0x735kXeSl+QfgXqNNaswR47HC681YCNtBRQf DUIWcalDn8bxy4f0laQytt1BKDK/YE51zwRt628GdZnyarjGnKHVyo2rEjLpecoq rsxoWkuPwUHCXvp53hIAqMM7QsXC5XILgNuEkp9mraEuSh+RuIMsDpBbDNoDqVi1 5eaMsrkoEVTshxO8Cczv+935PJtSCdNmTqRzX89cjSR48zZndjhd0a0OZw9Kf+E3 rCXWo0Tw5W+t/uFupSGz0ca+SAivwpCuxynsu06PE66Q7iNt3QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBbYSLQdYnv4v71Furg73f/pcaPDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lOGZm MmE1OC1iZTk1LTQ5ZTItOWI4Zi0zMWFkZTljNzY3ODUvOGRhNTdkYzQtYTM3YS0z ZTM1LTllY2QtMDdjZDIxNzllYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZThmZjJhNTgtYmU5NS00OWUyLTli OGYtMzFhZGU5Yzc2Nzg1L2U4ZmYyYTU4LWJlOTUtNDllMi05YjhmLTMxYWRlOWM3 Njc4NS5jcmwwHwYDVR0jBBgwFoAUdfNYEyagPs8Asqy2ODQlffgbpQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lOGZmMmE1OC1iZTk1LTQ5ZTItOWI4Zi0zMWFk ZTljNzY3ODUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5bEMA4E AgACMAgDBgAmAvSqADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfjhW7Yf4gsOov97l2hL4QoWiEQX6wkO2o IqY4OK/Hp2NV2flLFmsP1oCoUc88+v4l2+b1C8L+8nlwvofYt/h18lIQQED5h5vi /n70G9n2yAyI61oSvxUhmXpZiijr8YrZIttWN9HzgatrLZtNkQi9IkrNrZ/YgMBx 6nNFFkD3CB0f+QEVnWqUHWKKHeU/9BW13FHybExa1fJGyZHERJlzz/KCyb8EGnMc ycoB4PPSkPbn7e96Mrdiya9fcO8KMDvvqku3lnOxDIAACWP1wKYx5HjwonC8x+sv WzzCRfBe4zKAwLbw62whDWDhyZZxStHHs4MNlMejHQs1S47iZ4eg -----END CERTIFICATE-----Generated at Sun Jul 12 23:46:18 2026 by rpki-client