$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/5094b170-7783-383b-add6-8db0ea7f91ad.roa File: 5094b170-7783-383b-add6-8db0ea7f91ad.roa (raw, json) Hash identifier: Ca4p2xCxqAiM58lWwUMXdu22KjanwSZXTSpYzxinkq0= Subject key identifier: 55:7B:97:F5:19:73:26:90:A7:C7:C4:2B:73:B1:56:A6:3E:3D:A2:5F Certificate issuer: /CN=ba2d5b86-cca0-4f2a-87a4-874f5e96eed8 Certificate serial: 010D0C9F4328584E4559E7270B16D799DB8C9680 Authority key identifier: C7:79:C1:DD:35:BC:68:51:32:59:6B:CF:57:81:3B:7D:C4:E3:24:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/5094b170-7783-383b-add6-8db0ea7f91ad.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 2914 IP address blocks: 23.134.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:e7:27:0b:16:d7:99:db:8c:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba2d5b86-cca0-4f2a-87a4-874f5e96eed8 Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=e7a60818-a717-4d87-8419-5bd140496694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e7:31:4d:97:63:26:0a:b6:c7:bb:cc:f5:68: e2:10:11:f3:11:36:de:b1:c8:50:75:8e:2c:07:69: 51:29:71:ba:77:35:5c:6f:ab:49:e3:e2:5d:8b:b3: 98:fc:12:c4:e0:4f:e6:56:4c:cd:90:f8:ee:cf:f2: bc:d9:7d:80:eb:45:bb:68:70:f7:fe:ee:ab:94:a1: 65:70:05:60:da:e2:9c:5a:92:ed:6d:ab:b0:db:b8: 89:e3:17:63:48:06:2c:7c:90:00:ef:80:ac:ea:d6: 1e:30:fe:0c:c1:e6:c9:a2:55:50:df:b1:47:eb:47: 99:6b:d2:f2:73:ef:f9:b7:81:6b:04:13:8d:64:0c: 49:1a:93:16:b8:64:d8:c3:b6:90:e9:a8:8f:8d:c8: b5:2f:45:0c:48:20:69:fc:a2:2b:57:f7:c4:c0:3f: 2e:7d:33:b2:00:4c:ad:ad:a2:a6:d1:61:ec:18:fb: 85:8f:1e:77:ed:42:c6:0f:6a:4b:5e:a8:47:a9:2e: 78:19:8c:5b:e1:db:d5:c0:fc:a6:07:b6:e4:db:c5: d5:86:cb:bc:ba:35:46:c2:d5:60:50:64:d2:9d:34: 3b:e4:73:cf:ec:26:51:35:ca:e7:68:fd:b3:7c:21: 3c:06:fd:ab:01:89:59:f5:6c:3f:18:cf:04:e3:9f: f2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7B:97:F5:19:73:26:90:A7:C7:C4:2B:73:B1:56:A6:3E:3D:A2:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/5094b170-7783-383b-add6-8db0ea7f91ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.crl X509v3 Authority Key Identifier: keyid:C7:79:C1:DD:35:BC:68:51:32:59:6B:CF:57:81:3B:7D:C4:E3:24:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.cer sbgp-ipAddrBlock: critical IPv4: 23.134.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:10:e3:89:2d:12:68:c0:85:0e:71:bd:41:bc:ee:d3:02:ba: 75:63:55:50:38:4b:91:65:74:1a:a5:99:c4:69:50:b2:b5:dd: 24:c6:0a:25:6a:a6:1f:2d:60:36:2c:35:85:1a:55:f6:a6:bc: 67:9c:0c:44:2e:42:ea:89:19:fb:ae:d7:2b:d4:35:cf:50:9c: 02:fc:4a:d6:bc:d5:c3:85:c5:43:ac:f4:73:f8:55:56:53:c6: 33:8e:93:41:28:3f:0c:f7:54:9b:87:4c:ab:c4:8d:cd:a6:cf: 65:f9:82:e4:37:a6:81:f8:87:5e:83:a2:c0:23:97:92:ce:54: 18:cd:57:83:11:e4:98:95:cc:dc:ff:9a:f5:74:5e:03:17:07: 9c:40:b7:fc:c9:2f:a0:7e:94:00:4c:ea:eb:2e:e1:4d:65:6e: f4:86:e7:f8:54:e8:34:78:85:84:11:9c:c3:9a:38:e4:3e:e9: 54:bb:cd:e3:d8:2f:8d:75:82:c0:3f:12:9e:70:f1:39:90:ef: 95:85:61:b0:d4:74:04:32:ca:84:81:d5:f1:ad:f3:68:46:31: 03:c3:51:91:f1:b6:5b:f7:14:09:35:6c:1f:f7:ac:bc:ee:3d: 43:46:c6:1c:c8:8d:ed:26:49:2c:31:61:30:d8:39:d2:e9:9c: 18:65:b3:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWecnCxbXmduMloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEyZDViODYtY2NhMC00ZjJhLTg3YTQtODc0ZjVlOTZl ZWQ4MB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk ZTdhNjA4MTgtYTcxNy00ZDg3LTg0MTktNWJkMTQwNDk2Njk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+cxTZdjJgq2x7vM9WjiEBHzETbeschQdY4s B2lRKXG6dzVcb6tJ4+Jdi7OY/BLE4E/mVkzNkPjuz/K82X2A60W7aHD3/u6rlKFl cAVg2uKcWpLtbauw27iJ4xdjSAYsfJAA74Cs6tYeMP4MwebJolVQ37FH60eZa9Ly c+/5t4FrBBONZAxJGpMWuGTYw7aQ6aiPjci1L0UMSCBp/KIrV/fEwD8ufTOyAEyt raKm0WHsGPuFjx537ULGD2pLXqhHqS54GYxb4dvVwPymB7bk28XVhsu8ujVGwtVg UGTSnTQ75HPP7CZRNcrnaP2zfCE8Bv2rAYlZ9Ww/GM8E45/yXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFV7l/UZcyaQp8fEK3OxVqY+PaJfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYTJk NWI4Ni1jY2EwLTRmMmEtODdhNC04NzRmNWU5NmVlZDgvNTA5NGIxNzAtNzc4My0z ODNiLWFkZDYtOGRiMGVhN2Y5MWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmEyZDViODYtY2NhMC00ZjJhLTg3 YTQtODc0ZjVlOTZlZWQ4L2JhMmQ1Yjg2LWNjYTAtNGYyYS04N2E0LTg3NGY1ZTk2 ZWVkOC5jcmwwHwYDVR0jBBgwFoAUx3nB3TW8aFEyWWvPV4E7fcTjJM0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYTJkNWI4Ni1jY2EwLTRmMmEtODdhNC04NzRm NWU5NmVlZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4bkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsQ44ktEmjAhQ5xvUG87tMCunVjVVA4S5FldBqlmcRpULK13STGCiVq ph8tYDYsNYUaVfamvGecDEQuQuqJGfuu1yvUNc9QnAL8Sta81cOFxUOs9HP4VVZT xjOOk0EoPwz3VJuHTKvEjc2mz2X5guQ3poH4h16DosAjl5LOVBjNV4MR5JiVzNz/ mvV0XgMXB5xAt/zJL6B+lABM6usu4U1lbvSG5/hU6DR4hYQRnMOaOOQ+6VS7zePY L411gsA/Ep5w8TmQ75WFYbDUdAQyyoSB1fGt82hGMQPDUZHxtlv3FAk1bB/3rLzu PUNGxhzIje0mSSwxYTDYOdLpnBhls0Q= -----END CERTIFICATE-----Generated at Tue Jul 7 22:13:04 2026 by rpki-client