$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/9c3fc31a-86bb-323c-9085-2e09b9e1d4a4.roa File: 9c3fc31a-86bb-323c-9085-2e09b9e1d4a4.roa (raw, json) Hash identifier: kBbJHd2bphcMcUmEUKUJE6TBLWGOSD2ViG7LIysJJ1U= Subject key identifier: 3B:B7:69:08:0F:9A:1F:B4:4C:47:B1:95:FE:79:AE:4D:43:F9:6F:3D Certificate issuer: /CN=8e5b6975-a14a-49a5-bbe6-66396778d718 Certificate serial: 010D0C9F4328584E104EE3E3E41D9BA7CD8D6B10 Authority key identifier: 5C:C1:7D:61:BF:86:1A:A5:EF:54:15:7A:62:D8:0F:E8:61:83:39:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/9c3fc31a-86bb-323c-9085-2e09b9e1d4a4.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 401561 IP address blocks: 23.130.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/8e5b6975-a14a-49a5-bbe6-66396778d718.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/8e5b6975-a14a-49a5-bbe6-66396778d718.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:e3:e3:e4:1d:9b:a7:cd:8d:6b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5b6975-a14a-49a5-bbe6-66396778d718 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=adf35b7f-4736-4fcf-91af-d727ddce98fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c8:d1:10:fa:92:d0:dd:3d:25:fd:d4:7e:dc: 2a:b7:da:57:6f:49:20:da:5e:f5:ee:01:59:c4:ea: be:93:f8:7d:4f:60:27:18:76:54:04:e8:24:ab:28: 43:f7:d7:ec:d6:13:80:22:b5:cf:67:99:87:f4:fd: 75:57:0e:08:65:e5:d1:ff:49:09:06:ab:90:ad:6a: b2:c8:4a:33:2b:a4:4f:12:fc:23:d9:74:03:06:93: 5b:d5:70:a8:e6:f4:8d:79:a1:01:a9:f6:76:9c:f7: 6a:20:ac:d5:8c:da:ff:47:66:59:9c:60:04:98:08: 0d:20:f1:3f:72:36:ad:e8:42:28:45:8d:bc:8c:1d: ec:b2:74:d6:3e:e1:70:36:5e:b8:93:c9:2c:df:31: 67:03:05:9e:96:47:ab:8e:8c:e3:d1:56:91:e5:a1: 0f:04:2a:1b:1d:2e:4f:c3:01:f0:1b:29:4e:b0:87: de:a7:e1:ed:90:53:0d:6c:8f:eb:f1:1a:0b:08:2b: 5f:9d:91:61:4a:f8:56:80:df:eb:e5:73:d8:67:fe: ef:44:dc:22:73:2a:9d:cb:80:52:b0:26:ea:4e:7b: 70:b5:7b:b9:ca:e3:07:42:18:3b:26:7d:72:06:04: 31:b0:cd:64:4d:d8:59:97:07:c9:04:50:a3:a0:47: cc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B7:69:08:0F:9A:1F:B4:4C:47:B1:95:FE:79:AE:4D:43:F9:6F:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/9c3fc31a-86bb-323c-9085-2e09b9e1d4a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/8e5b6975-a14a-49a5-bbe6-66396778d718.crl X509v3 Authority Key Identifier: keyid:5C:C1:7D:61:BF:86:1A:A5:EF:54:15:7A:62:D8:0F:E8:61:83:39:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718.cer sbgp-ipAddrBlock: critical IPv4: 23.130.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f2:79:ed:b5:2b:dd:3a:46:85:ab:ae:e4:e1:aa:8c:34:06: ac:10:30:c3:3b:20:6d:0d:36:55:fc:31:21:69:4f:15:9b:d1: b6:bf:3d:7e:1d:66:05:95:83:00:ea:c1:7b:78:49:56:2b:c7: 9c:43:22:39:17:41:e4:d8:bf:4b:0c:2a:8e:82:52:c7:63:5a: 3f:f6:04:0a:3e:d9:f2:31:14:c5:a3:f9:1d:12:e1:a8:7d:c6: 6c:49:e1:3b:dc:35:40:a9:ea:a3:58:3f:d6:f3:09:ff:0b:8f: c3:9d:5d:15:ed:40:07:e7:2b:08:bd:09:c1:83:f7:54:8a:45: 7e:9b:7a:7e:94:1b:e5:53:5f:f8:e7:a4:82:04:31:c9:e8:76: 4f:b1:99:78:a1:f5:d2:e6:d2:ac:8f:bb:1f:a3:b9:d8:f0:cf: 11:8f:43:50:1c:c2:29:9a:23:a9:cd:19:e4:7a:18:c6:63:cc: 06:25:78:24:b8:39:52:f4:eb:d6:2a:21:60:29:b3:8b:e5:95: 0e:5e:6b:bd:e5:10:09:f9:b3:0d:0c:5b:b1:9a:15:9d:78:4e: bf:92:ab:44:cd:52:09:46:2f:ac:d8:b5:5f:66:ac:57:04:17: 5c:03:54:49:89:42:ce:7b:e6:77:eb:16:06:5e:1b:a9:f6:98: 9f:f3:77:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTuPj5B2bp82NaxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1YjY5NzUtYTE0YS00OWE1LWJiZTYtNjYzOTY3Nzhk NzE4MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk YWRmMzViN2YtNDczNi00ZmNmLTkxYWYtZDcyN2RkY2U5OGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucjREPqS0N09Jf3Uftwqt9pXb0kg2l717gFZ xOq+k/h9T2AnGHZUBOgkqyhD99fs1hOAIrXPZ5mH9P11Vw4IZeXR/0kJBquQrWqy yEozK6RPEvwj2XQDBpNb1XCo5vSNeaEBqfZ2nPdqIKzVjNr/R2ZZnGAEmAgNIPE/ cjat6EIoRY28jB3ssnTWPuFwNl64k8ks3zFnAwWelkerjozj0VaR5aEPBCobHS5P wwHwGylOsIfep+HtkFMNbI/r8RoLCCtfnZFhSvhWgN/r5XPYZ/7vRNwicyqdy4BS sCbqTntwtXu5yuMHQhg7Jn1yBgQxsM1kTdhZlwfJBFCjoEfMnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDu3aQgPmh+0TEexlf55rk1D+W89MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84ZTVi Njk3NS1hMTRhLTQ5YTUtYmJlNi02NjM5Njc3OGQ3MTgvOWMzZmMzMWEtODZiYi0z MjNjLTkwODUtMmUwOWI5ZTFkNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOGU1YjY5NzUtYTE0YS00OWE1LWJi ZTYtNjYzOTY3NzhkNzE4LzhlNWI2OTc1LWExNGEtNDlhNS1iYmU2LTY2Mzk2Nzc4 ZDcxOC5jcmwwHwYDVR0jBBgwFoAUXMF9Yb+GGqXvVBV6YtgP6GGDOd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84ZTViNjk3NS1hMTRhLTQ5YTUtYmJlNi02NjM5 Njc3OGQ3MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4KUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPyee21K906RoWrruThqow0BqwQMMM7IG0NNlX8MSFpTxWb0ba/PX4d ZgWVgwDqwXt4SVYrx5xDIjkXQeTYv0sMKo6CUsdjWj/2BAo+2fIxFMWj+R0S4ah9 xmxJ4TvcNUCp6qNYP9bzCf8Lj8OdXRXtQAfnKwi9CcGD91SKRX6ben6UG+VTX/jn pIIEMcnodk+xmXih9dLm0qyPux+judjwzxGPQ1AcwimaI6nNGeR6GMZjzAYleCS4 OVL069YqIWAps4vllQ5ea73lEAn5sw0MW7GaFZ14Tr+Sq0TNUglGL6zYtV9mrFcE F1wDVEmJQs575nfrFgZeG6n2mJ/zd1M= -----END CERTIFICATE-----Generated at Fri Jun 5 18:35:02 2026 by rpki-client