$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/2a8a8f1d-d263-3d7f-b2e7-ad8c2f6f8bdc.roa File: 2a8a8f1d-d263-3d7f-b2e7-ad8c2f6f8bdc.roa (raw, json) Hash identifier: SvtttsOQE/5VoJcnVAOMTMnV8frCEHJSx/Qvd1eN5uc= Subject key identifier: 79:97:BA:C8:BF:64:F4:90:68:AF:53:82:16:73:0C:FC:26:F1:12:01 Certificate issuer: /CN=58f2afa5-5d7a-4f76-8a53-9229a75f1f45 Certificate serial: 010D0C9F4328584D9E502FAB35BD216204484B00 Authority key identifier: 55:5D:08:E2:4B:7D:1D:9A:4E:72:44:47:DE:16:75:82:56:07:71:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/2a8a8f1d-d263-3d7f-b2e7-ad8c2f6f8bdc.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 214483 IP address blocks: 23.142.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:2f:ab:35:bd:21:62:04:48:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58f2afa5-5d7a-4f76-8a53-9229a75f1f45 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=6a57944c-3009-44e0-b52e-e2dba88bff0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:40:35:0f:19:48:fd:00:a4:0e:4d:29:e5:07: 61:a4:82:aa:b7:4d:15:69:5e:90:93:8d:dc:37:e7: 40:91:8e:16:3b:f2:67:d6:e3:da:12:fe:71:06:52: 1e:ed:ae:a8:79:e3:09:3f:f9:7d:36:62:40:c3:ca: c4:83:e9:ad:c6:12:48:fa:20:79:ff:3d:91:32:a3: 5b:5b:e9:8e:e6:8f:e2:2f:04:32:e1:db:a4:a8:45: b0:8e:4b:fc:49:0f:e1:b0:49:1a:f2:a6:e0:e5:5f: bc:b2:c5:8d:d3:f1:a8:01:5d:1f:cc:19:e9:bc:15: 4b:cd:58:1a:c3:cc:be:32:97:22:54:45:b0:f9:a4: 21:26:e6:e0:1f:1e:78:dd:8e:b1:8d:75:8a:a1:f5: fe:da:c2:66:50:16:21:0a:54:c0:69:a0:df:4f:2f: 86:40:f7:7b:e9:3c:0a:51:be:b1:c7:ce:23:cf:c4: 39:0b:cb:b1:98:62:f4:f3:a6:3b:4f:de:11:cd:34: 54:8d:72:11:e3:8a:17:b1:e6:08:34:8c:72:10:91: a2:2e:14:0b:e0:dc:40:eb:e7:6c:a3:41:b7:62:46: 30:cf:8b:19:40:dd:cc:7d:88:76:91:b4:b9:4a:21: 74:54:9f:f1:02:98:6f:7e:e3:b5:71:f1:0d:e0:ff: d9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:97:BA:C8:BF:64:F4:90:68:AF:53:82:16:73:0C:FC:26:F1:12:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/2a8a8f1d-d263-3d7f-b2e7-ad8c2f6f8bdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.crl X509v3 Authority Key Identifier: keyid:55:5D:08:E2:4B:7D:1D:9A:4E:72:44:47:DE:16:75:82:56:07:71:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.cer sbgp-ipAddrBlock: critical IPv4: 23.142.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:68:c3:4f:26:1e:3d:39:3f:f7:5a:38:c5:56:df:4c:14:bd: fe:3c:0f:4a:ee:d8:04:5f:d9:2d:75:a7:c9:f5:7d:bb:75:db: b4:df:9b:90:e9:73:a8:05:bc:e3:e7:96:1a:35:3f:2c:f6:12: da:6b:82:09:35:be:75:a1:63:a0:a2:34:c1:b2:93:c3:50:36: 53:7a:60:41:63:d6:92:5c:78:e5:70:af:54:a7:99:55:fc:17: 3a:cc:61:39:82:c2:2b:13:58:48:b7:64:6c:01:b1:8d:10:df: e8:de:d9:2b:8e:a0:8c:ff:6c:c6:05:88:85:aa:fc:b6:7a:5f: a0:29:6a:1c:86:fe:3c:4c:7b:e1:4d:67:b9:17:04:0c:7e:b7: ac:0d:8e:6f:a0:50:96:81:44:5b:13:a7:88:7f:e8:20:e9:ff: 13:1d:14:a1:f4:a2:5b:32:b0:2b:ad:9a:86:9e:e8:e0:89:cc: 9c:db:99:1e:fd:f0:6a:69:97:85:59:a6:68:d8:b8:f3:c4:a6: 15:04:1a:e5:66:1f:5a:cf:8c:df:3e:a0:71:e5:3c:59:63:83: 6a:0a:14:c1:88:da:92:dc:10:57:3c:e2:a4:65:05:04:48:28: 23:bb:aa:74:2a:fe:2a:e0:3a:0c:46:f5:6f:09:d1:80:8f:b7: 2d:06:25:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUC+rNb0hYgRISwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThmMmFmYTUtNWQ3YS00Zjc2LThhNTMtOTIyOWE3NWYx ZjQ1MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NmE1Nzk0NGMtMzAwOS00NGUwLWI1MmUtZTJkYmE4OGJmZjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0A1DxlI/QCkDk0p5QdhpIKqt00VaV6Qk43c N+dAkY4WO/Jn1uPaEv5xBlIe7a6oeeMJP/l9NmJAw8rEg+mtxhJI+iB5/z2RMqNb W+mO5o/iLwQy4dukqEWwjkv8SQ/hsEka8qbg5V+8ssWN0/GoAV0fzBnpvBVLzVga w8y+MpciVEWw+aQhJubgHx543Y6xjXWKofX+2sJmUBYhClTAaaDfTy+GQPd76TwK Ub6xx84jz8Q5C8uxmGL086Y7T94RzTRUjXIR44oXseYINIxyEJGiLhQL4NxA6+ds o0G3YkYwz4sZQN3MfYh2kbS5SiF0VJ/xAphvfuO1cfEN4P/ZoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmXusi/ZPSQaK9TghZzDPwm8RIBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81OGYy YWZhNS01ZDdhLTRmNzYtOGE1My05MjI5YTc1ZjFmNDUvMmE4YThmMWQtZDI2My0z ZDdmLWIyZTctYWQ4YzJmNmY4YmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNThmMmFmYTUtNWQ3YS00Zjc2LThh NTMtOTIyOWE3NWYxZjQ1LzU4ZjJhZmE1LTVkN2EtNGY3Ni04YTUzLTkyMjlhNzVm MWY0NS5jcmwwHwYDVR0jBBgwFoAUVV0I4kt9HZpOckRH3hZ1glYHceIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81OGYyYWZhNS01ZDdhLTRmNzYtOGE1My05MjI5 YTc1ZjFmNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF440MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBow08mHj05P/daOMVW30wUvf48D0ru2ARf2S11p8n1fbt127Tfm5Dp c6gFvOPnlho1Pyz2Etprggk1vnWhY6CiNMGyk8NQNlN6YEFj1pJceOVwr1SnmVX8 FzrMYTmCwisTWEi3ZGwBsY0Q3+je2SuOoIz/bMYFiIWq/LZ6X6ApahyG/jxMe+FN Z7kXBAx+t6wNjm+gUJaBRFsTp4h/6CDp/xMdFKH0olsysCutmoae6OCJzJzbmR79 8Gppl4VZpmjYuPPEphUEGuVmH1rPjN8+oHHlPFljg2oKFMGI2pLcEFc84qRlBQRI KCO7qnQq/irgOgxG9W8J0YCPty0GJbQ= -----END CERTIFICATE-----Generated at Tue Apr 28 23:10:34 2026 by rpki-client