$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/d2135f21-7eb4-3c34-8d49-ce2a4bacb4f1.roa File: d2135f21-7eb4-3c34-8d49-ce2a4bacb4f1.roa (raw, json) Hash identifier: TCC3zgrctCTGkIFqG0bfj78whPwNooCv6Dw0u8cwRWc= Subject key identifier: DC:19:79:3D:5B:8B:11:59:57:AC:60:5A:64:41:79:D5:01:6E:3C:70 Certificate issuer: /CN=ba371da1-cd74-46bd-82a8-de7b9f7a9ffa Certificate serial: 010D0C9F4328584DF7A5ED7C1F5355F2A376F940 Authority key identifier: 3D:2D:60:F6:42:2A:04:1A:A1:84:7A:85:B6:56:BD:0F:CA:4A:99:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/d2135f21-7eb4-3c34-8d49-ce2a4bacb4f1.roa Signing time: Wed 27 May 2026 01:00:14 +0000 ROA not before: Wed 27 May 2026 01:00:14 +0000 ROA not after: Tue 25 Aug 2026 01:00:14 +0000 asID: 30006 IP address blocks: 23.171.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f7:a5:ed:7c:1f:53:55:f2:a3:76:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba371da1-cd74-46bd-82a8-de7b9f7a9ffa Validity Not Before: May 27 01:00:14 2026 GMT Not After : Aug 25 01:00:14 2026 GMT Subject: CN=35da1906-175c-4313-b2d5-26e22a7ae11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:23:f5:9f:e9:90:65:10:04:d7:b6:da:d0:0e: de:f4:0a:35:8f:86:cd:14:04:22:a7:db:86:ce:22: cd:70:4f:ec:cf:8f:cc:27:da:7d:40:a9:8a:90:0f: 2d:d7:0d:b6:16:ee:08:c0:f9:2a:a8:e6:83:2d:36: 7f:02:1e:01:e6:8e:ea:23:5f:47:78:7c:f6:32:02: 99:2c:7b:d3:7a:ca:b8:fd:1c:82:f6:f9:56:29:1d: 95:4f:4a:a1:75:ac:97:67:ee:4f:62:38:fa:9b:93: 44:58:c9:f9:3c:97:de:03:d0:cd:eb:98:81:a6:ab: 3b:11:df:18:04:d3:7e:aa:c3:e4:c5:55:98:02:96: 2b:33:7d:a9:c5:36:75:3c:81:7e:4e:5b:a8:3c:06: a3:28:fb:5b:59:f2:fc:27:97:02:7e:5f:19:b5:07: c8:9f:3f:aa:c1:de:c7:4c:3a:76:b1:54:98:4d:e4: 5f:68:a9:d5:66:74:b3:f5:6c:5c:3b:75:6e:bd:ca: 68:27:f7:c2:aa:65:04:4d:3a:b5:7b:9b:7e:2d:85: b6:59:15:2d:14:c1:d6:44:b6:ce:9c:b7:da:3a:54: 5a:11:08:e1:f0:e2:0c:ec:ea:a0:61:5f:69:92:6e: de:98:c5:82:3a:49:bb:68:2d:b7:4b:b4:ae:ad:fb: 4c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:19:79:3D:5B:8B:11:59:57:AC:60:5A:64:41:79:D5:01:6E:3C:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/d2135f21-7eb4-3c34-8d49-ce2a4bacb4f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.crl X509v3 Authority Key Identifier: keyid:3D:2D:60:F6:42:2A:04:1A:A1:84:7A:85:B6:56:BD:0F:CA:4A:99:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer sbgp-ipAddrBlock: critical IPv4: 23.171.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:09:2a:64:90:3f:8b:d9:8e:4a:0b:ac:7c:0a:cc:88:79:a5: d5:d7:7b:56:4c:b2:ab:c8:51:49:da:45:1f:84:d9:d9:b1:c8: a3:9e:18:d6:65:20:48:5b:a1:fe:79:fc:4f:52:dd:48:37:42: d7:c8:a4:4e:19:d3:7a:b5:38:7e:3a:5a:ac:b6:81:93:40:26: 14:92:b9:3f:3b:8b:6a:80:c2:a5:af:47:3e:2f:6b:2e:b9:ce: 03:70:1e:a4:dc:3a:e0:b7:8b:2c:5a:51:15:46:2a:9a:5a:4b: a2:64:7c:2c:5c:a2:20:f9:a0:9b:1e:15:a8:78:70:00:35:61: 8a:bc:5f:2d:0d:48:06:64:b9:66:34:6e:cc:3a:52:a0:2b:a5: 12:87:1c:40:38:81:51:6e:5f:3a:7c:ed:8f:9b:69:83:8a:7f: 4b:7e:c3:18:1d:6f:3b:a5:02:1a:be:e5:0b:4b:4e:31:2d:af: 13:0a:68:e1:94:9c:95:7b:8a:7d:db:e9:be:1f:a3:da:3d:94: 55:7d:4e:d9:b3:8b:9c:9d:7f:c1:3a:ee:39:42:52:e2:41:61: 91:e4:43:4e:ae:7b:a6:f8:9a:5e:bb:2c:25:cf:0e:e7:a8:9a: 5b:e3:5c:27:e8:5a:18:72:dd:d5:27:04:ec:2d:73:c4:3d:28: ba:9d:52:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE33pe18H1NV8qN2+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNzFkYTEtY2Q3NC00NmJkLTgyYTgtZGU3YjlmN2E5 ZmZhMB4XDTI2MDUyNzAxMDAxNFoXDTI2MDgyNTAxMDAxNFowLzEtMCsGA1UEAxMk MzVkYTE5MDYtMTc1Yy00MzEzLWIyZDUtMjZlMjJhN2FlMTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiP1n+mQZRAE17ba0A7e9Ao1j4bNFAQip9uG ziLNcE/sz4/MJ9p9QKmKkA8t1w22Fu4IwPkqqOaDLTZ/Ah4B5o7qI19HeHz2MgKZ LHvTesq4/RyC9vlWKR2VT0qhdayXZ+5PYjj6m5NEWMn5PJfeA9DN65iBpqs7Ed8Y BNN+qsPkxVWYApYrM32pxTZ1PIF+TluoPAajKPtbWfL8J5cCfl8ZtQfInz+qwd7H TDp2sVSYTeRfaKnVZnSz9WxcO3VuvcpoJ/fCqmUETTq1e5t+LYW2WRUtFMHWRLbO nLfaOlRaEQjh8OIM7OqgYV9pkm7emMWCOkm7aC23S7SurftM9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwZeT1bixFZV6xgWmRBedUBbjxwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9iYTM3 MWRhMS1jZDc0LTQ2YmQtODJhOC1kZTdiOWY3YTlmZmEvZDIxMzVmMjEtN2ViNC0z YzM0LThkNDktY2UyYTRiYWNiNGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYmEzNzFkYTEtY2Q3NC00NmJkLTgy YTgtZGU3YjlmN2E5ZmZhL2JhMzcxZGExLWNkNzQtNDZiZC04MmE4LWRlN2I5Zjdh OWZmYS5jcmwwHwYDVR0jBBgwFoAUPS1g9kIqBBqhhHqFtla9D8pKmUswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9iYTM3MWRhMS1jZDc0LTQ2YmQtODJhOC1kZTdi OWY3YTlmZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6vYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMJKmSQP4vZjkoLrHwKzIh5pdXXe1ZMsqvIUUnaRR+E2dmxyKOeGNZl IEhbof55/E9S3Ug3QtfIpE4Z03q1OH46Wqy2gZNAJhSSuT87i2qAwqWvRz4vay65 zgNwHqTcOuC3iyxaURVGKppaS6JkfCxcoiD5oJseFah4cAA1YYq8Xy0NSAZkuWY0 bsw6UqArpRKHHEA4gVFuXzp87Y+baYOKf0t+wxgdbzulAhq+5QtLTjEtrxMKaOGU nJV7in3b6b4fo9o9lFV9Ttmzi5ydf8E67jlCUuJBYZHkQ06ue6b4ml67LCXPDueo mlvjXCfoWhhy3dUnBOwtc8Q9KLqdUsg= -----END CERTIFICATE-----Generated at Mon Jun 1 22:00:21 2026 by rpki-client