$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9/4de99c7b-0c73-37cc-9e43-4055a303bea4.roa File: 4de99c7b-0c73-37cc-9e43-4055a303bea4.roa (raw, json) Hash identifier: aT8h3clb18ohXiRYJp+1icHSbC9svLZ02D1pRRxdlAc= Subject key identifier: 9E:7C:CD:44:64:DB:0E:84:C6:82:2C:48:88:26:01:71:B3:2B:9E:BE Certificate issuer: /CN=b32cd942-7da6-4568-a951-c48745916cd9 Certificate serial: 010D0C9F4328584E260EFDC1770B59AECE1CD660 Authority key identifier: F3:AC:69:66:DA:8B:B6:0B:4A:22:89:AD:B4:81:5F:0E:C1:81:2D:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9/4de99c7b-0c73-37cc-9e43-4055a303bea4.roa Signing time: Fri 12 Jun 2026 15:59:26 +0000 ROA not before: Fri 12 Jun 2026 15:59:26 +0000 ROA not after: Thu 10 Sep 2026 15:59:26 +0000 asID: 402619 IP address blocks: 23.159.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9/b32cd942-7da6-4568-a951-c48745916cd9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9/b32cd942-7da6-4568-a951-c48745916cd9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:26:0e:fd:c1:77:0b:59:ae:ce:1c:d6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32cd942-7da6-4568-a951-c48745916cd9 Validity Not Before: Jun 12 15:59:26 2026 GMT Not After : Sep 10 15:59:26 2026 GMT Subject: CN=befc0a75-7de0-4cac-abe6-c48a516ee8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2e:6a:89:7b:75:90:bb:47:b9:e4:27:08:2b: e9:dd:1f:40:f7:3f:e4:b9:73:22:bc:98:98:58:05: 2c:60:07:f6:b5:99:5d:9c:b2:67:cc:cf:f9:61:26: 3a:0c:31:28:13:a6:bb:a4:41:e3:83:e1:00:86:53: 37:19:28:f5:11:b1:9c:b0:f4:98:c7:fb:8a:87:0c: dd:a5:03:9c:4e:6d:d7:dc:60:23:7d:3b:36:d4:64: bf:31:a1:02:c8:dd:49:d2:7a:e1:80:c4:72:de:0e: 21:70:01:f2:d1:84:9b:a8:9a:e0:72:f6:94:b0:b4: 29:e9:c1:d3:b6:8a:eb:aa:79:89:cb:b1:dd:ee:6d: 0b:8d:e2:e1:ab:b2:44:76:10:e6:69:f6:4a:17:8c: b6:1c:06:4b:be:79:4b:d0:c6:9c:cc:97:53:4e:eb: b8:ab:d2:f2:13:e0:75:1b:0b:19:2c:f2:8a:d7:9f: 04:0e:76:a9:6c:d5:fd:35:97:39:ca:f9:6e:05:c4: 87:87:ee:9c:88:13:35:69:81:d5:76:3c:bc:bd:89: 75:14:37:fa:cb:e2:1a:c9:62:ca:2f:ed:43:5f:6a: d3:72:8d:13:a6:f7:8c:d8:43:89:b9:0a:28:2d:6f: c8:89:48:98:c3:36:dc:fc:6a:69:ac:08:41:63:e2: ea:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7C:CD:44:64:DB:0E:84:C6:82:2C:48:88:26:01:71:B3:2B:9E:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9/4de99c7b-0c73-37cc-9e43-4055a303bea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9/b32cd942-7da6-4568-a951-c48745916cd9.crl X509v3 Authority Key Identifier: keyid:F3:AC:69:66:DA:8B:B6:0B:4A:22:89:AD:B4:81:5F:0E:C1:81:2D:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9.cer sbgp-ipAddrBlock: critical IPv4: 23.159.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:04:19:7b:36:2d:ef:c6:96:d4:7b:9c:34:9e:ec:20:92:36: 72:52:8d:97:64:07:f1:a6:ae:4b:ae:1b:72:62:f8:e8:33:78: d7:d7:5f:44:59:3c:3a:23:47:40:68:c5:80:72:48:4f:7c:61: 27:b6:ca:cd:9f:e4:71:9f:c3:9b:e0:e4:e3:77:37:d9:14:c6: 65:ab:5d:8c:95:1b:55:10:f6:f8:98:2f:33:9c:35:bf:be:d7: b6:e0:03:53:4d:56:a8:73:99:81:42:22:6e:87:75:82:2c:d9: 6a:78:e1:05:a0:d6:96:03:2f:06:bf:cb:72:33:64:8d:d9:82: a1:02:70:b7:41:64:71:15:04:9c:13:bc:46:e6:6b:06:eb:1d: 99:e7:73:fc:10:8f:a0:07:a6:c4:07:da:5c:da:82:b7:07:67: 04:c2:ca:d9:44:57:1e:b9:24:08:16:88:30:8c:08:3a:1b:ba: 0f:62:70:27:df:37:1e:99:56:d5:dd:b9:0f:ad:97:1d:a4:05: bf:ee:55:75:1a:c2:c9:74:06:c2:c6:92:da:35:a9:3d:64:45: 8c:bc:f4:29:b1:ae:b9:95:47:86:ba:3d:34:85:9b:5a:1b:05: 45:e9:74:a5:5f:da:b8:02:a5:71:94:12:eb:c9:c1:63:8c:c5: 02:c0:7d:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4mDv3BdwtZrs4c1mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMyY2Q5NDItN2RhNi00NTY4LWE5NTEtYzQ4NzQ1OTE2 Y2Q5MB4XDTI2MDYxMjE1NTkyNloXDTI2MDkxMDE1NTkyNlowLzEtMCsGA1UEAxMk YmVmYzBhNzUtN2RlMC00Y2FjLWFiZTYtYzQ4YTUxNmVlOGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi5qiXt1kLtHueQnCCvp3R9A9z/kuXMivJiY WAUsYAf2tZldnLJnzM/5YSY6DDEoE6a7pEHjg+EAhlM3GSj1EbGcsPSYx/uKhwzd pQOcTm3X3GAjfTs21GS/MaECyN1J0nrhgMRy3g4hcAHy0YSbqJrgcvaUsLQp6cHT torrqnmJy7Hd7m0LjeLhq7JEdhDmafZKF4y2HAZLvnlL0MaczJdTTuu4q9LyE+B1 GwsZLPKK158EDnapbNX9NZc5yvluBcSHh+6ciBM1aYHVdjy8vYl1FDf6y+IayWLK L+1DX2rTco0TpveM2EOJuQooLW/IiUiYwzbc/GpprAhBY+LqXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ58zURk2w6ExoIsSIgmAXGzK56+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMzJj ZDk0Mi03ZGE2LTQ1NjgtYTk1MS1jNDg3NDU5MTZjZDkvNGRlOTljN2ItMGM3My0z N2NjLTllNDMtNDA1NWEzMDNiZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjMyY2Q5NDItN2RhNi00NTY4LWE5 NTEtYzQ4NzQ1OTE2Y2Q5L2IzMmNkOTQyLTdkYTYtNDU2OC1hOTUxLWM0ODc0NTkx NmNkOS5jcmwwHwYDVR0jBBgwFoAU86xpZtqLtgtKIomttIFfDsGBLRUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMzJjZDk0Mi03ZGE2LTQ1NjgtYTk1MS1jNDg3 NDU5MTZjZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgEGXs2Le/GltR7nDSe7CCSNnJSjZdkB/GmrkuuG3Ji+OgzeNfXX0RZ PDojR0BoxYBySE98YSe2ys2f5HGfw5vg5ON3N9kUxmWrXYyVG1UQ9viYLzOcNb++ 17bgA1NNVqhzmYFCIm6HdYIs2Wp44QWg1pYDLwa/y3IzZI3ZgqECcLdBZHEVBJwT vEbmawbrHZnnc/wQj6AHpsQH2lzagrcHZwTCytlEVx65JAgWiDCMCDobug9icCff Nx6ZVtXduQ+tlx2kBb/uVXUawsl0BsLGkto1qT1kRYy89CmxrrmVR4a6PTSFm1ob BUXpdKVf2rgCpXGUEuvJwWOMxQLAfZE= -----END CERTIFICATE-----Generated at Sun Jun 14 02:44:32 2026 by rpki-client