$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa File: d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa (raw, json) Hash identifier: oNgFhlQuoXPtM56roAa0mmTXbAaewYr7u8dD+ocuNA8= Subject key identifier: B2:81:81:2A:BC:4E:CB:4B:87:42:2A:D6:A6:8B:0A:3A:21:BC:B1:69 Certificate issuer: /CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Certificate serial: 010D0C9F4328584DF4DB5E425580FDB492DF4300 Authority key identifier: 30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 209242 IP address blocks: 23.170.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:5e:42:55:80:fd:b4:92:df:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=597fffa8-00f8-440c-b03a-70d5e8c41b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:92:23:fe:b6:ad:34:98:50:0a:58:38:13:cf: 96:23:fd:d2:a2:77:c5:64:a3:d3:4f:1e:35:96:51: 2e:be:df:77:f0:71:68:4d:3d:50:df:5e:8e:5d:f1: 02:9f:1f:bd:be:11:75:8f:6a:e3:9c:7c:b9:33:63: bf:d3:24:d5:5b:e9:01:f9:74:87:4b:be:54:88:69: 24:5f:ee:0b:59:c7:a8:92:da:b8:7d:0d:6a:d7:03: 4e:68:0d:b5:ca:25:c1:91:85:93:26:d9:41:e7:c2: e1:a6:9f:5a:a0:d6:a4:45:d7:08:e3:e2:48:5d:03: 12:6b:cd:0b:4b:ec:72:fb:06:a6:36:00:a8:3d:bd: e4:c6:01:47:99:ec:c4:48:fa:b2:ad:39:31:24:77: 55:ea:c3:c8:35:2b:54:71:0f:93:f6:d5:9c:3c:37: 87:bc:87:cd:f8:4f:41:c1:c9:5a:ec:4a:90:32:8a: 2b:1b:42:a2:35:46:3e:81:5c:8c:ce:b5:73:5f:45: 5a:d1:28:2b:a5:32:d1:a1:ec:44:bf:6c:a2:ee:98: 1e:91:69:f4:76:7d:ed:a1:80:61:91:fb:f1:ff:8d: 3e:c3:03:48:a6:e4:57:f3:78:2f:44:b0:28:64:b6: b7:cf:36:9e:69:03:5e:11:18:66:05:7f:82:ef:b7: 07:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:81:81:2A:BC:4E:CB:4B:87:42:2A:D6:A6:8B:0A:3A:21:BC:B1:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl X509v3 Authority Key Identifier: keyid:30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer sbgp-ipAddrBlock: critical IPv4: 23.170.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d5:0e:09:78:f4:b3:5f:f6:05:14:2a:80:1d:37:b6:26:41: df:4b:b2:61:e9:d3:ce:21:68:39:6d:8c:a6:94:12:84:42:67: dd:9e:af:01:33:1b:20:21:b1:3a:3d:0d:21:2c:7a:07:8c:5a: cd:77:8a:3f:ee:2a:c6:b4:4e:2d:90:37:15:db:69:b0:bc:6a: 56:f6:2c:4f:22:9f:90:f4:dc:e4:4b:08:81:e0:1e:fa:8e:09: 52:91:84:14:fc:18:0e:25:ed:f0:6d:79:7b:5e:db:e4:82:2c: 10:ef:e6:1f:23:07:2b:40:a6:a6:f9:39:4b:c5:f7:42:a8:36: 5d:26:80:e0:5d:19:61:b2:9d:97:cf:4a:4b:90:69:78:16:2f: 77:46:b2:90:d3:07:d9:27:c0:8d:57:dd:70:8c:7a:ff:60:4c: 54:20:6a:88:66:fe:da:d6:10:d5:b6:9e:a1:db:98:cb:22:02: 03:13:a2:78:69:e4:c9:e1:5f:44:ed:c2:b5:27:8e:9f:51:3f: b7:39:66:e2:7d:55:22:1b:6e:14:48:c8:29:06:fe:15:fd:17: ac:b8:a2:1e:c0:09:bb:f2:00:bf:ed:29:2a:1b:e5:9b:e8:e6: 73:67:0c:d4:26:f9:dc:4b:97:97:a1:0a:a1:05:9d:00:f8:c8: ee:62:53:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE30215CVYD9tJLfQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NjdmOGItZTdiNy00YzM0LWFhYTAtMDBmZGRiZWVm NDhkMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk NTk3ZmZmYTgtMDBmOC00NDBjLWIwM2EtNzBkNWU4YzQxYjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5Ij/ratNJhQClg4E8+WI/3SonfFZKPTTx41 llEuvt938HFoTT1Q316OXfECnx+9vhF1j2rjnHy5M2O/0yTVW+kB+XSHS75UiGkk X+4LWceoktq4fQ1q1wNOaA21yiXBkYWTJtlB58Lhpp9aoNakRdcI4+JIXQMSa80L S+xy+wamNgCoPb3kxgFHmezESPqyrTkxJHdV6sPINStUcQ+T9tWcPDeHvIfN+E9B wcla7EqQMoorG0KiNUY+gVyMzrVzX0Va0SgrpTLRoexEv2yi7pgekWn0dn3toYBh kfvx/40+wwNIpuRX83gvRLAoZLa3zzaeaQNeERhmBX+C77cHVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKBgSq8TstLh0Iq1qaLCjohvLFpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOTY2 N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZkZGJlZWY0OGQvZDNiNDFjOWYtNWE5OC0z ZGM5LTkwOGUtOGI0YzEwZWU4NDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzk2NjdmOGItZTdiNy00YzM0LWFh YTAtMDBmZGRiZWVmNDhkLzM5NjY3ZjhiLWU3YjctNGMzNC1hYWEwLTAwZmRkYmVl ZjQ4ZC5jcmwwHwYDVR0jBBgwFoAUMN8a5EPYVgbeIdFXPxgyY3q5bw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zOTY2N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZk ZGJlZWY0OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6o4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPVDgl49LNf9gUUKoAdN7YmQd9LsmHp084haDltjKaUEoRCZ92erwEz GyAhsTo9DSEsegeMWs13ij/uKsa0Ti2QNxXbabC8alb2LE8in5D03ORLCIHgHvqO CVKRhBT8GA4l7fBteXte2+SCLBDv5h8jBytApqb5OUvF90KoNl0mgOBdGWGynZfP SkuQaXgWL3dGspDTB9knwI1X3XCMev9gTFQgaohm/trWENW2nqHbmMsiAgMTonhp 5MnhX0TtwrUnjp9RP7c5ZuJ9VSIbbhRIyCkG/hX9F6y4oh7ACbvyAL/tKSob5Zvo 5nNnDNQm+dxLl5ehCqEFnQD4yO5iUzA= -----END CERTIFICATE-----Generated at Sat Jun 13 09:19:08 2026 by rpki-client