$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/673f4a2a-5656-3dbd-a855-f30cadf48404.roa File: 673f4a2a-5656-3dbd-a855-f30cadf48404.roa (raw, json) Hash identifier: 4Kk/GFMyxnSXmdezBIOBR7npn9o10LdKqhL0b+CDv4I= Subject key identifier: 2A:CD:AF:54:F4:AF:0E:0B:6D:6F:61:85:46:D2:BA:B5:C7:B3:ED:7B Certificate issuer: /CN=43d85349-fcc3-4834-8564-24f8a824b0cd Certificate serial: 010D0C9F4328584E147ED687DB899E57D2D57F00 Authority key identifier: 04:E6:CE:C5:24:7C:98:A4:6B:C3:A2:9A:16:AB:E3:9B:E5:A2:4E:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/673f4a2a-5656-3dbd-a855-f30cadf48404.roa Signing time: Sat 06 Jun 2026 09:00:12 +0000 ROA not before: Sat 06 Jun 2026 09:00:12 +0000 ROA not after: Fri 04 Sep 2026 09:00:12 +0000 asID: 399613 IP address blocks: 23.141.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:14:7e:d6:87:db:89:9e:57:d2:d5:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d85349-fcc3-4834-8564-24f8a824b0cd Validity Not Before: Jun 6 09:00:12 2026 GMT Not After : Sep 4 09:00:12 2026 GMT Subject: CN=f7dbc100-bc18-4e22-b13a-1cf60b038eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:89:f7:aa:4d:e7:ea:39:20:e6:7c:b1:9c:d7: ba:c4:a1:42:fc:2c:64:39:59:ac:d5:fa:3e:6a:1d: 67:46:8e:e3:4a:2b:69:bb:47:c3:3f:4d:90:2b:d8: 90:b4:5f:ee:45:ec:15:7b:d2:51:fd:b5:02:c4:dd: b5:45:25:fd:09:79:9c:1b:ed:de:3a:ca:3b:e0:aa: c8:b0:2d:aa:b0:9d:ae:36:47:1c:c7:ea:ec:38:62: 94:0c:3a:21:32:e5:51:9f:a6:d4:a4:07:52:5b:8c: 29:4a:7a:bc:4b:a6:b9:b9:d8:aa:ea:13:6e:27:1b: 35:7f:d2:93:18:dd:d9:79:02:78:c4:d1:5e:e5:22: f2:a2:c9:75:43:97:3c:cd:6a:b0:e1:e5:89:54:37: 3a:e5:20:ac:ed:38:02:49:e5:92:11:5d:6f:89:59: d5:42:ab:03:c1:67:f3:b0:a6:82:9f:29:6b:ed:84: 85:d0:e8:55:a4:53:15:60:e4:9a:87:9c:e2:46:b8: d5:2d:19:d2:99:d7:f0:a0:d6:14:4f:15:02:29:18: fb:5c:9a:d8:94:7f:9c:0b:45:b7:b6:ad:8f:3c:b8: c8:43:be:c9:63:cf:3e:f1:94:e1:cf:d9:4e:71:6e: 67:01:f7:3d:71:82:ea:e8:e2:d8:dc:ae:86:76:ec: 70:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CD:AF:54:F4:AF:0E:0B:6D:6F:61:85:46:D2:BA:B5:C7:B3:ED:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/673f4a2a-5656-3dbd-a855-f30cadf48404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.crl X509v3 Authority Key Identifier: keyid:04:E6:CE:C5:24:7C:98:A4:6B:C3:A2:9A:16:AB:E3:9B:E5:A2:4E:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer sbgp-ipAddrBlock: critical IPv4: 23.141.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:43:83:3b:84:63:42:67:6d:23:d6:8e:57:42:64:88:be:d9: 45:ec:95:f4:60:4f:74:fa:d3:f0:ff:57:46:f0:b8:5e:22:de: c0:ac:4b:d8:77:3e:22:69:de:33:f0:7d:ac:2d:d7:90:db:bd: 62:fc:a7:d9:2e:34:47:bd:83:2e:13:55:a9:b9:e8:49:55:a7: 94:20:14:3d:04:28:f5:d1:af:02:cb:f0:fd:af:55:c8:8c:13: 9c:32:6a:67:4b:e0:4d:2c:ea:f4:29:a6:dc:9b:2b:e8:57:5b: d8:65:67:0d:95:ca:5f:ac:8b:4e:e1:8b:a6:11:e9:1b:c9:19: 07:56:f5:bf:0d:73:3e:62:a7:f0:7b:c6:c5:bd:71:c4:51:03: 64:93:df:61:d7:78:7b:2a:77:62:bf:e3:6c:cd:f1:8c:73:83: b2:d4:37:f9:4c:41:1b:ab:53:5b:3f:21:ce:38:43:be:bf:4f: 04:aa:9d:d5:9a:c8:ef:1d:7b:ce:e7:72:85:4c:e4:07:dc:a2: e5:cf:d9:13:62:4f:21:f7:0e:41:ff:02:3c:57:75:da:d7:a0: 64:a2:f6:07:21:5b:30:7e:64:d1:ee:9f:e2:a1:52:82:f7:51: 6b:55:97:35:69:03:42:fe:31:88:8c:fe:d3:af:81:da:eb:04: 2c:09:70:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4UftaH24meV9LVfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNkODUzNDktZmNjMy00ODM0LTg1NjQtMjRmOGE4MjRi MGNkMB4XDTI2MDYwNjA5MDAxMloXDTI2MDkwNDA5MDAxMlowLzEtMCsGA1UEAxMk ZjdkYmMxMDAtYmMxOC00ZTIyLWIxM2EtMWNmNjBiMDM4ZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54n3qk3n6jkg5nyxnNe6xKFC/CxkOVms1fo+ ah1nRo7jSitpu0fDP02QK9iQtF/uRewVe9JR/bUCxN21RSX9CXmcG+3eOso74KrI sC2qsJ2uNkccx+rsOGKUDDohMuVRn6bUpAdSW4wpSnq8S6a5udiq6hNuJxs1f9KT GN3ZeQJ4xNFe5SLyosl1Q5c8zWqw4eWJVDc65SCs7TgCSeWSEV1viVnVQqsDwWfz sKaCnylr7YSF0OhVpFMVYOSah5ziRrjVLRnSmdfwoNYUTxUCKRj7XJrYlH+cC0W3 tq2PPLjIQ77JY88+8ZThz9lOcW5nAfc9cYLq6OLY3K6GduxwmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrNr1T0rw4LbW9hhUbSurXHs+17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80M2Q4 NTM0OS1mY2MzLTQ4MzQtODU2NC0yNGY4YTgyNGIwY2QvNjczZjRhMmEtNTY1Ni0z ZGJkLWE4NTUtZjMwY2FkZjQ4NDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDNkODUzNDktZmNjMy00ODM0LTg1 NjQtMjRmOGE4MjRiMGNkLzQzZDg1MzQ5LWZjYzMtNDgzNC04NTY0LTI0ZjhhODI0 YjBjZC5jcmwwHwYDVR0jBBgwFoAUBObOxSR8mKRrw6KaFqvjm+WiToIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80M2Q4NTM0OS1mY2MzLTQ4MzQtODU2NC0yNGY4 YTgyNGIwY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF42UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABDgzuEY0JnbSPWjldCZIi+2UXslfRgT3T60/D/V0bwuF4i3sCsS9h3 PiJp3jPwfawt15DbvWL8p9kuNEe9gy4TVam56ElVp5QgFD0EKPXRrwLL8P2vVciM E5wyamdL4E0s6vQpptybK+hXW9hlZw2Vyl+si07hi6YR6RvJGQdW9b8Ncz5ip/B7 xsW9ccRRA2ST32HXeHsqd2K/42zN8Yxzg7LUN/lMQRurU1s/Ic44Q76/TwSqndWa yO8de87ncoVM5AfcouXP2RNiTyH3DkH/AjxXddrXoGSi9gchWzB+ZNHun+KhUoL3 UWtVlzVpA0L+MYiM/tOvgdrrBCwJcJY= -----END CERTIFICATE-----Generated at Wed Jun 10 03:40:55 2026 by rpki-client