$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/9787b498-f81f-37d7-a779-d4e727560c5b.roa File: 9787b498-f81f-37d7-a779-d4e727560c5b.roa (raw, json) Hash identifier: NzmCssUvow3mgJuN+WnrRb9xc+Dp43FeSIxC83bXeVY= Subject key identifier: A6:BB:FC:88:58:A2:2B:41:0D:1D:0D:D7:5E:20:17:BF:50:87:48:FB Certificate issuer: /CN=f838c026-61f9-443d-b867-26f60a99d561 Certificate serial: 010D0C9F4328584E0C1EDC9F566CA8692C877740 Authority key identifier: 23:47:1B:D2:AE:7E:16:EB:A1:A9:45:E8:0E:82:11:88:74:9A:B2:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/9787b498-f81f-37d7-a779-d4e727560c5b.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 30205 IP address blocks: 23.168.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:dc:9f:56:6c:a8:69:2c:87:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f838c026-61f9-443d-b867-26f60a99d561 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=cf8f048d-aa8e-4baf-b7dc-6c6039e863a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d1:e8:1d:44:1e:83:4a:b6:5e:b7:4b:63:55: f3:b3:ec:4c:91:01:68:6b:bc:4e:6e:9d:c5:31:31: 26:53:46:d8:45:86:ab:ba:f8:d7:bd:a4:48:54:bc: bc:9b:a8:d4:5d:ae:f0:55:0e:29:e0:2c:31:30:29: 22:33:df:a4:84:9d:d5:cd:79:9c:75:c7:7c:8f:ca: 4d:f6:21:3e:5c:fb:d3:ee:57:cf:96:0e:b0:3d:1b: 6d:cd:c5:65:82:c5:76:b9:ac:83:c0:06:b1:af:76: 8a:2d:51:07:77:da:60:fc:88:72:65:c1:0c:e4:fb: eb:90:cf:aa:9b:06:d0:59:f1:2d:03:a7:70:56:4c: 00:19:77:ca:1f:6e:68:57:73:e1:a8:e2:14:cd:45: 14:93:70:8a:fd:ae:3d:f3:5b:98:cc:9e:c2:16:39: 25:68:1e:f2:e0:eb:92:c2:13:f6:9f:79:72:8b:b5: aa:74:0a:33:de:38:f3:18:24:1b:cb:8c:25:0e:5f: 78:09:36:93:8c:35:2f:28:f9:3a:bf:92:9f:52:42: da:1a:19:5f:dc:b0:da:59:07:d4:e8:32:1f:ef:27: b0:4a:65:5d:e4:b4:fe:0b:2e:61:1e:4e:27:fe:ba: df:be:68:c9:42:cd:3d:59:ba:de:e1:03:7a:8e:c4: 77:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BB:FC:88:58:A2:2B:41:0D:1D:0D:D7:5E:20:17:BF:50:87:48:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/9787b498-f81f-37d7-a779-d4e727560c5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.crl X509v3 Authority Key Identifier: keyid:23:47:1B:D2:AE:7E:16:EB:A1:A9:45:E8:0E:82:11:88:74:9A:B2:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer sbgp-ipAddrBlock: critical IPv4: 23.168.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:a3:bf:a0:ca:d1:47:cc:8a:fa:c0:8e:cd:e4:5b:44:3c:30: 08:c1:72:65:45:d9:e1:fb:a5:df:d8:3a:98:8b:d7:15:14:31: 96:ed:52:90:88:9b:9c:fd:a4:b9:1e:ea:5b:8b:ee:1f:84:ca: 30:93:5c:1d:80:21:c9:d8:dc:6f:f8:39:9e:1b:bb:24:9a:df: 5f:42:2f:e7:fc:b1:c7:88:23:50:66:54:f6:93:b8:7e:89:2a: f0:39:fb:49:68:61:ca:87:3e:1b:32:86:b5:f5:ce:bc:e8:76: 89:bf:36:d7:10:b3:bb:d3:c6:b6:9f:30:c7:82:e1:d9:92:a9: 6e:10:f2:62:b7:e6:ed:3e:cb:eb:4a:19:3b:35:03:e5:7d:a1: 8c:74:44:e7:3a:02:18:ad:06:b8:55:06:4e:3c:ea:2e:d6:2c: f4:69:c3:17:ed:77:b1:63:ab:3f:88:2f:3d:83:48:43:1b:cf: 96:36:26:dc:12:9f:20:cb:9b:2e:5b:d9:c6:54:c5:71:c1:27: 33:5d:c0:99:5f:21:d8:37:42:86:94:1a:a3:1e:cb:d9:f2:f3: 1d:82:ce:33:65:f7:6d:bb:a8:16:1b:d3:94:84:d4:ca:4d:42: f2:32:12:70:26:3d:bc:b3:b7:a1:98:7a:31:dc:ac:3e:96:03: d7:5d:b3:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHtyfVmyoaSyHd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjgzOGMwMjYtNjFmOS00NDNkLWI4NjctMjZmNjBhOTlk NTYxMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk Y2Y4ZjA0OGQtYWE4ZS00YmFmLWI3ZGMtNmM2MDM5ZTg2M2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndHoHUQeg0q2XrdLY1Xzs+xMkQFoa7xObp3F MTEmU0bYRYaruvjXvaRIVLy8m6jUXa7wVQ4p4CwxMCkiM9+khJ3VzXmcdcd8j8pN 9iE+XPvT7lfPlg6wPRttzcVlgsV2uayDwAaxr3aKLVEHd9pg/IhyZcEM5PvrkM+q mwbQWfEtA6dwVkwAGXfKH25oV3PhqOIUzUUUk3CK/a4981uYzJ7CFjklaB7y4OuS whP2n3lyi7WqdAoz3jjzGCQby4wlDl94CTaTjDUvKPk6v5KfUkLaGhlf3LDaWQfU 6DIf7yewSmVd5LT+Cy5hHk4n/rrfvmjJQs09Wbre4QN6jsR3BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKa7/IhYoitBDR0N114gF79Qh0j7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mODM4 YzAyNi02MWY5LTQ0M2QtYjg2Ny0yNmY2MGE5OWQ1NjEvOTc4N2I0OTgtZjgxZi0z N2Q3LWE3NzktZDRlNzI3NTYwYzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjgzOGMwMjYtNjFmOS00NDNkLWI4 NjctMjZmNjBhOTlkNTYxL2Y4MzhjMDI2LTYxZjktNDQzZC1iODY3LTI2ZjYwYTk5 ZDU2MS5jcmwwHwYDVR0jBBgwFoAUI0cb0q5+FuuhqUXoDoIRiHSasuQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mODM4YzAyNi02MWY5LTQ0M2QtYjg2Ny0yNmY2 MGE5OWQ1NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6iYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKjv6DK0UfMivrAjs3kW0Q8MAjBcmVF2eH7pd/YOpiL1xUUMZbtUpCI m5z9pLke6luL7h+EyjCTXB2AIcnY3G/4OZ4buySa319CL+f8sceII1BmVPaTuH6J KvA5+0loYcqHPhsyhrX1zrzodom/NtcQs7vTxrafMMeC4dmSqW4Q8mK35u0+y+tK GTs1A+V9oYx0ROc6AhitBrhVBk486i7WLPRpwxftd7Fjqz+ILz2DSEMbz5Y2JtwS nyDLmy5b2cZUxXHBJzNdwJlfIdg3QoaUGqMey9ny8x2CzjNl9227qBYb05SE1MpN QvIyEnAmPbyzt6GYejHcrD6WA9dds2U= -----END CERTIFICATE-----Generated at Wed Jun 10 06:00:15 2026 by rpki-client