$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/707771ce-afb7-360a-9819-67b62be7adc9.roa File: 707771ce-afb7-360a-9819-67b62be7adc9.roa (raw, json) Hash identifier: JxsTVedaYwe5ry2tBCjosQOE/ed2V6CmNrDO/FM4/AU= Subject key identifier: 71:E9:4D:6D:58:F8:EA:86:20:5E:E5:2A:87:12:35:42:0E:15:01:A4 Certificate issuer: /CN=138368b0-1eac-4feb-81cd-f0e4e71fcdc0 Certificate serial: 010D0C9F4328584DAAE04DC4DE91E58EA6F67480 Authority key identifier: 65:AE:F3:DF:8E:27:31:37:B7:57:A2:0D:54:BD:52:BA:EE:72:80:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/707771ce-afb7-360a-9819-67b62be7adc9.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 46161 IP address blocks: 23.135.28.0/24 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:4d:c4:de:91:e5:8e:a6:f6:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=138368b0-1eac-4feb-81cd-f0e4e71fcdc0 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=b8cfba14-b995-4340-8537-e666b07aceeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:07:8a:01:4e:44:04:a0:3c:0b:7d:f8:eb:fd: 0b:4c:cc:9a:4f:c9:73:4c:4c:d2:95:fa:ca:1d:a3: 45:69:49:2d:b7:29:24:24:96:fa:c3:ff:3c:88:47: 86:74:67:b4:59:05:8d:7f:97:72:4b:e3:3f:9b:f7: c6:db:d1:50:e1:0c:3c:b0:b7:68:68:3d:b2:cf:2f: 52:9d:38:45:35:a8:fe:94:7f:3a:5b:71:b1:94:e7: 7a:5d:ee:93:0f:16:bc:08:fb:20:c1:9b:0e:3d:13: f0:95:6d:8d:35:fa:c7:e5:b1:e2:01:72:72:1b:95: 6c:ee:87:4e:3d:a9:f2:e7:eb:81:ca:7b:b3:13:db: 77:9d:4f:1b:35:64:82:69:3e:f8:b5:40:87:90:49: 8f:78:45:ae:0f:45:76:b2:fb:c7:93:03:94:c6:27: 37:07:04:17:10:95:fa:d8:32:ac:ab:ad:34:27:7b: 1a:c1:17:1c:03:45:a7:c9:22:ec:d4:43:28:d6:44: da:ef:86:0c:8b:f2:de:e3:cf:78:4e:cc:aa:c5:1d: 1e:29:e6:eb:47:69:92:53:83:21:cf:ce:35:8d:d2: 07:e1:e6:ed:16:8b:23:4c:a2:f5:25:ee:33:85:10: 9e:0e:e2:42:ee:60:1d:f8:a2:38:51:03:da:0c:ec: aa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E9:4D:6D:58:F8:EA:86:20:5E:E5:2A:87:12:35:42:0E:15:01:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/707771ce-afb7-360a-9819-67b62be7adc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.crl X509v3 Authority Key Identifier: keyid:65:AE:F3:DF:8E:27:31:37:B7:57:A2:0D:54:BD:52:BA:EE:72:80:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.cer sbgp-ipAddrBlock: critical IPv4: 23.135.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:7b:e6:38:7e:0a:1c:71:e5:d9:f0:ee:ab:14:00:d1:6a:12: b7:1b:e0:dc:f4:44:67:35:25:af:4a:04:9a:21:44:45:20:92: a4:4a:37:23:be:21:c1:c5:b5:14:72:34:26:3b:ed:d7:74:a1: eb:fc:03:5d:7b:b8:44:c7:9a:a2:22:45:b9:61:5e:b1:be:db: 22:63:3b:ab:ad:8a:14:5a:59:3f:70:78:20:3d:3a:72:93:72: 77:65:a8:40:23:b8:cb:4a:f5:97:eb:f6:2b:c6:89:b8:15:94: 7a:1a:86:37:6a:55:8a:d4:7f:70:8e:7b:16:db:b8:ff:76:6b: 2d:d6:1d:04:85:3b:47:38:b8:f3:7b:2c:5b:1f:61:50:80:cd: b8:10:21:bd:dc:74:8e:71:92:f9:46:8e:50:16:40:88:af:fe: b8:b0:1a:e5:d4:35:12:25:93:61:56:37:b9:5f:3b:bd:7f:b9: 85:45:91:4f:42:6a:65:56:c8:f1:5d:ea:0b:74:e5:cd:03:59: e4:e4:2c:1f:e0:eb:b7:8d:12:c4:22:e0:77:a2:82:64:df:9e: 17:b5:41:03:12:61:7a:3c:6b:33:e3:b8:e9:f0:e3:99:d9:0b: 4a:74:0a:b8:f2:e0:c3:4b:83:f9:42:dc:58:d6:d0:bd:ea:d8: 5d:23:82:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4E3E3pHljqb2dIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM4MzY4YjAtMWVhYy00ZmViLTgxY2QtZjBlNGU3MWZj ZGMwMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk YjhjZmJhMTQtYjk5NS00MzQwLTg1MzctZTY2NmIwN2FjZWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQeKAU5EBKA8C3346/0LTMyaT8lzTEzSlfrK HaNFaUkttykkJJb6w/88iEeGdGe0WQWNf5dyS+M/m/fG29FQ4Qw8sLdoaD2yzy9S nThFNaj+lH86W3GxlOd6Xe6TDxa8CPsgwZsOPRPwlW2NNfrH5bHiAXJyG5Vs7odO Pany5+uBynuzE9t3nU8bNWSCaT74tUCHkEmPeEWuD0V2svvHkwOUxic3BwQXEJX6 2DKsq600J3sawRccA0WnySLs1EMo1kTa74YMi/Le4894TsyqxR0eKebrR2mSU4Mh z841jdIH4ebtFosjTKL1Je4zhRCeDuJC7mAd+KI4UQPaDOyqDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHpTW1Y+OqGIF7lKocSNUIOFQGkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMzgz NjhiMC0xZWFjLTRmZWItODFjZC1mMGU0ZTcxZmNkYzAvNzA3NzcxY2UtYWZiNy0z NjBhLTk4MTktNjdiNjJiZTdhZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTM4MzY4YjAtMWVhYy00ZmViLTgx Y2QtZjBlNGU3MWZjZGMwLzEzODM2OGIwLTFlYWMtNGZlYi04MWNkLWYwZTRlNzFm Y2RjMC5jcmwwHwYDVR0jBBgwFoAUZa7z344nMTe3V6INVL1Suu5ygPkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMzgzNjhiMC0xZWFjLTRmZWItODFjZC1mMGU0 ZTcxZmNkYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4ccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFl75jh+Chxx5dnw7qsUANFqErcb4Nz0RGc1Ja9KBJohREUgkqRKNyO+ IcHFtRRyNCY77dd0oev8A117uETHmqIiRblhXrG+2yJjO6utihRaWT9weCA9OnKT cndlqEAjuMtK9Zfr9ivGibgVlHoahjdqVYrUf3COexbbuP92ay3WHQSFO0c4uPN7 LFsfYVCAzbgQIb3cdI5xkvlGjlAWQIiv/riwGuXUNRIlk2FWN7lfO71/uYVFkU9C amVWyPFd6gt05c0DWeTkLB/g67eNEsQi4HeigmTfnhe1QQMSYXo8azPjuOnw45nZ C0p0Crjy4MNLg/lC3FjW0L3q2F0jgks= -----END CERTIFICATE-----Generated at Sun May 3 16:15:34 2026 by rpki-client