$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84/afcc2791-7287-3fac-af0b-7492e0407828.roa File: afcc2791-7287-3fac-af0b-7492e0407828.roa (raw, json) Hash identifier: 2i+wG2AtS8ZgojQNIyS2AEF6yjXaonS7FPR0WLcIuG8= Subject key identifier: A8:72:07:F3:A7:E7:3C:68:B8:62:FD:17:7E:16:F5:3C:61:DA:3F:38 Certificate issuer: /CN=dd4ce57e-c75a-4199-ab3a-1e663124fa84 Certificate serial: 010D0C9F4328584E27EF5201DC32E6035AC1FFC0 Authority key identifier: E5:7F:5E:E9:67:53:20:B7:EA:65:22:E4:72:FF:A4:A9:1D:BB:E9:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84/afcc2791-7287-3fac-af0b-7492e0407828.roa Signing time: Sat 13 Jun 2026 08:07:14 +0000 ROA not before: Sat 13 Jun 2026 08:07:14 +0000 ROA not after: Fri 11 Sep 2026 08:07:14 +0000 asID: 979 IP address blocks: 23.148.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84/dd4ce57e-c75a-4199-ab3a-1e663124fa84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84/dd4ce57e-c75a-4199-ab3a-1e663124fa84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:27:ef:52:01:dc:32:e6:03:5a:c1:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd4ce57e-c75a-4199-ab3a-1e663124fa84 Validity Not Before: Jun 13 08:07:14 2026 GMT Not After : Sep 11 08:07:14 2026 GMT Subject: CN=7aabcb3e-f0b5-4e22-a22f-de32345fad4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f3:c8:02:56:b1:35:1a:6b:cb:0c:9c:6e:a6: 62:18:3f:05:9d:4d:07:5f:50:dc:06:9e:06:ed:a6: 0a:8d:6b:3f:f2:2d:55:03:50:12:7d:3c:02:d5:c3: b2:02:94:ff:7b:0b:b9:18:89:63:fd:b0:9a:81:14: 3b:d9:de:fc:77:d9:2f:07:bb:b4:9a:3f:05:77:a8: e2:97:bf:e4:42:2f:0f:ca:4b:90:7e:e1:51:ab:64: 5f:c9:eb:92:57:70:27:94:ec:1a:fe:5d:1f:ad:cb: 51:be:39:e1:e6:9e:db:4d:42:79:b4:fe:90:08:d6: c8:da:94:46:0c:03:f4:fc:bf:de:58:75:6e:a7:1f: 60:dd:ac:c1:4b:1b:09:8f:df:2f:3d:3f:f8:d9:83: d0:40:28:44:02:c8:7e:eb:71:9c:34:81:0a:81:62: 24:76:42:dd:cb:25:59:38:af:43:93:8f:47:02:6c: dd:ef:e4:f0:e7:9a:ed:6b:b7:d0:30:f5:6f:6c:86: 14:14:7b:77:32:ca:36:95:0c:cc:e6:d2:8a:86:10: cf:7d:41:c8:96:72:1f:6a:a8:95:03:01:38:c6:40: 29:d7:13:12:fb:31:01:8a:ea:79:3f:dc:d1:b8:eb: d4:7b:78:1c:78:97:84:e4:3a:a5:93:0d:ea:ab:fb: cd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:72:07:F3:A7:E7:3C:68:B8:62:FD:17:7E:16:F5:3C:61:DA:3F:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84/afcc2791-7287-3fac-af0b-7492e0407828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84/dd4ce57e-c75a-4199-ab3a-1e663124fa84.crl X509v3 Authority Key Identifier: keyid:E5:7F:5E:E9:67:53:20:B7:EA:65:22:E4:72:FF:A4:A9:1D:BB:E9:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84.cer sbgp-ipAddrBlock: critical IPv4: 23.148.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:a4:4c:f3:e0:43:be:0c:4c:c8:00:89:dd:de:5b:eb:b7:bc: aa:a9:17:a3:2b:3a:5d:b9:3f:7b:0b:47:79:29:2f:7b:40:4b: 02:e0:06:63:20:6b:fd:af:a9:ee:47:47:e3:a2:9e:b2:c7:21: 8c:6b:b3:e3:7d:e2:e7:92:02:8d:f3:8d:d3:b2:86:ca:d9:c2: c7:f1:f7:8f:05:78:9e:4a:2e:2e:0d:e0:d3:89:e1:c2:18:a5: 65:39:60:f5:6c:a6:76:f4:5f:6d:29:90:ae:3a:00:c6:1b:87: 34:56:3b:24:4e:35:3b:15:32:3b:8f:c3:75:66:5e:d5:85:0c: ff:d6:db:c9:c5:93:20:6b:0f:ff:aa:6f:a2:33:ed:4f:af:b7: 03:a2:96:57:da:83:82:31:05:9a:01:7d:cf:e1:7f:34:9d:38: 00:8c:91:6a:ef:1d:91:e1:a2:76:f1:2f:f3:1b:34:f7:7b:dd: 72:2f:47:54:1d:db:ff:84:ba:27:34:07:19:e8:07:b0:8e:e4: 40:a0:24:8b:77:90:1d:59:2f:f3:77:7d:9e:25:ba:be:b9:00: c3:ca:5d:ee:04:eb:0a:6b:49:b4:3f:4a:c8:b4:81:a9:3c:82: e2:71:f3:d4:5d:a2:82:dc:65:56:9b:14:27:6d:02:fe:8e:03: 79:0d:e3:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4n71IB3DLmA1rB/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ0Y2U1N2UtYzc1YS00MTk5LWFiM2EtMWU2NjMxMjRm YTg0MB4XDTI2MDYxMzA4MDcxNFoXDTI2MDkxMTA4MDcxNFowLzEtMCsGA1UEAxMk N2FhYmNiM2UtZjBiNS00ZTIyLWEyMmYtZGUzMjM0NWZhZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofPIAlaxNRprywycbqZiGD8FnU0HX1DcBp4G 7aYKjWs/8i1VA1ASfTwC1cOyApT/ewu5GIlj/bCagRQ72d78d9kvB7u0mj8Fd6ji l7/kQi8PykuQfuFRq2RfyeuSV3AnlOwa/l0frctRvjnh5p7bTUJ5tP6QCNbI2pRG DAP0/L/eWHVupx9g3azBSxsJj98vPT/42YPQQChEAsh+63GcNIEKgWIkdkLdyyVZ OK9Dk49HAmzd7+Tw55rta7fQMPVvbIYUFHt3Mso2lQzM5tKKhhDPfUHIlnIfaqiV AwE4xkAp1xMS+zEBiup5P9zRuOvUe3gceJeE5Dqlkw3qq/vNqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhyB/On5zxouGL9F34W9Txh2j84MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9kZDRj ZTU3ZS1jNzVhLTQxOTktYWIzYS0xZTY2MzEyNGZhODQvYWZjYzI3OTEtNzI4Ny0z ZmFjLWFmMGItNzQ5MmUwNDA3ODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZGQ0Y2U1N2UtYzc1YS00MTk5LWFi M2EtMWU2NjMxMjRmYTg0L2RkNGNlNTdlLWM3NWEtNDE5OS1hYjNhLTFlNjYzMTI0 ZmE4NC5jcmwwHwYDVR0jBBgwFoAU5X9e6WdTILfqZSLkcv+kqR276SwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9kZDRjZTU3ZS1jNzVhLTQxOTktYWIzYS0xZTY2 MzEyNGZhODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5TcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABekTPPgQ74MTMgAid3eW+u3vKqpF6MrOl25P3sLR3kpL3tASwLgBmMg a/2vqe5HR+OinrLHIYxrs+N94ueSAo3zjdOyhsrZwsfx948FeJ5KLi4N4NOJ4cIY pWU5YPVspnb0X20pkK46AMYbhzRWOyRONTsVMjuPw3VmXtWFDP/W28nFkyBrD/+q b6Iz7U+vtwOillfag4IxBZoBfc/hfzSdOACMkWrvHZHhonbxL/MbNPd73XIvR1Qd 2/+Euic0BxnoB7CO5ECgJIt3kB1ZL/N3fZ4lur65AMPKXe4E6wprSbQ/Ssi0gak8 guJx89RdooLcZVabFCdtAv6OA3kN40w= -----END CERTIFICATE-----Generated at Sat Jun 13 21:20:15 2026 by rpki-client