$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa File: 7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa (raw, json) Hash identifier: ZYyk3z8L6DI3CpQAggP20O51jnsT0k9iBZNgdfPLUqQ= Subject key identifier: 5B:7F:6A:14:2A:55:44:A5:E4:1B:FD:E7:8C:14:61:96:5D:47:E9:94 Certificate issuer: /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Certificate serial: 010D0C9F4328584DFBD5E3507E79E334CC029A40 Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 3356 IP address blocks: 23.156.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:e3:50:7e:79:e3:34:cc:02:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=fa98ba0b-f1fe-4ddb-aaa5-f58a4070a37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:74:bc:62:ca:93:57:a8:64:fe:a1:d6:ef:6c: 38:e3:2c:16:bd:74:ba:b6:75:cf:ae:8c:dc:32:54: 30:e6:59:4d:1a:cb:29:5b:7a:ee:99:28:04:b0:3b: 60:04:18:43:ea:32:1c:23:2a:32:03:8f:40:da:2e: aa:c8:6f:21:87:63:78:31:35:54:b0:b3:5a:4d:1a: 14:ec:20:d6:92:cc:3f:3c:a6:0e:9b:74:c1:b9:35: a3:cf:b4:32:ca:c3:3f:89:13:d4:b1:c0:06:ac:64: 4e:cf:47:51:26:79:e2:83:3d:e4:3d:f1:5e:9f:f5: fa:59:5c:69:a6:fa:f6:fd:91:db:9c:df:9c:3e:07: 30:14:8b:b8:3f:df:1c:a3:a5:30:14:07:ea:06:3b: 5d:06:d2:55:d0:c2:d6:53:d6:d0:b4:0d:fa:d4:d4: bf:43:e8:23:7e:98:48:11:08:8a:6f:a1:34:33:7b: 63:14:bc:ea:90:85:07:5f:21:9e:ee:13:41:4b:db: cd:f0:32:e3:e3:11:bc:e7:a8:73:7b:a5:b3:86:72: b8:31:4d:04:b2:8d:1c:66:5a:e3:5b:95:2c:1b:1a: ea:b1:b3:e2:f1:17:19:1c:5e:e4:f2:ca:3f:cc:bd: 20:e8:76:f4:c5:1e:4b:a5:ec:5e:79:91:84:15:17: d2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7F:6A:14:2A:55:44:A5:E4:1B:FD:E7:8C:14:61:96:5D:47:E9:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl X509v3 Authority Key Identifier: keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer sbgp-ipAddrBlock: critical IPv4: 23.156.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:53:23:f5:12:6f:b2:7e:73:31:d1:81:2e:1d:df:fb:3f:90: f5:d3:08:85:c5:a7:4a:ea:7f:61:50:51:2e:91:5f:30:95:8a: c3:23:5c:84:90:96:f1:4d:61:ff:b6:b9:6e:26:1b:46:1c:4d: 5d:d8:98:0d:22:09:de:a0:02:b9:f0:a5:50:4d:6e:5d:bb:db: 8e:7f:60:19:c4:cb:06:c0:a8:91:2e:c3:7e:31:eb:08:5c:86: e5:02:0b:12:c4:f4:4a:ec:a6:f5:cf:9b:db:be:d9:99:69:35: 9a:8d:89:37:fc:dd:a4:12:8e:49:6f:8e:3b:8c:9d:97:91:07: 5a:6b:19:d7:eb:fc:0c:fd:87:68:a6:3b:0a:86:4d:15:94:59: 66:0f:48:03:e6:6b:b8:58:5a:a3:8a:74:b2:d3:76:92:c1:39: c3:52:db:ab:53:f2:d3:f1:b8:d1:59:43:0f:d4:fb:da:85:52: 6f:cc:84:e9:87:c7:32:3d:ab:00:af:75:ae:9e:d2:8e:18:3b: 75:3f:ef:e2:c1:a9:d6:68:b3:8e:e4:58:92:28:f1:dc:01:05: 48:82:e3:ce:54:17:0b:c4:c2:61:95:86:60:56:c6:2f:a8:6a: 00:fa:0f:91:83:00:98:85:61:36:60:7c:f6:42:f6:0e:3c:9d: d4:05:13:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371eNQfnnjNMwCmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmYThlM2YtNjdlOS00ZThmLTlkMTgtNjIxMWRkNjEz MDczMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk ZmE5OGJhMGItZjFmZS00ZGRiLWFhYTUtZjU4YTQwNzBhMzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3S8YsqTV6hk/qHW72w44ywWvXS6tnXProzc MlQw5llNGsspW3rumSgEsDtgBBhD6jIcIyoyA49A2i6qyG8hh2N4MTVUsLNaTRoU 7CDWksw/PKYOm3TBuTWjz7QyysM/iRPUscAGrGROz0dRJnnigz3kPfFen/X6WVxp pvr2/ZHbnN+cPgcwFIu4P98co6UwFAfqBjtdBtJV0MLWU9bQtA361NS/Q+gjfphI EQiKb6E0M3tjFLzqkIUHXyGe7hNBS9vN8DLj4xG856hze6WzhnK4MU0Eso0cZlrj W5UsGxrqsbPi8RcZHF7k8so/zL0g6Hb0xR5LpexeeZGEFRfStQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFt/ahQqVUSl5Bv954wUYZZdR+mUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZh OGUzZi02N2U5LTRlOGYtOWQxOC02MjExZGQ2MTMwNzMvN2YyMjQ5ZjYtNGJiMi0z MWI3LTlmMTQtYWEzZWU0ZDRhMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBmYThlM2YtNjdlOS00ZThmLTlk MTgtNjIxMWRkNjEzMDczL2QwZmE4ZTNmLTY3ZTktNGU4Zi05ZDE4LTYyMTFkZDYx MzA3My5jcmwwHwYDVR0jBBgwFoAUK7RjzmcAGdo63rw75WI23btNwp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZhOGUzZi02N2U5LTRlOGYtOWQxOC02MjEx ZGQ2MTMwNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5x4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERTI/USb7J+czHRgS4d3/s/kPXTCIXFp0rqf2FQUS6RXzCVisMjXISQ lvFNYf+2uW4mG0YcTV3YmA0iCd6gArnwpVBNbl27245/YBnEywbAqJEuw34x6whc huUCCxLE9ErspvXPm9u+2ZlpNZqNiTf83aQSjklvjjuMnZeRB1prGdfr/Az9h2im OwqGTRWUWWYPSAPma7hYWqOKdLLTdpLBOcNS26tT8tPxuNFZQw/U+9qFUm/MhOmH xzI9qwCvda6e0o4YO3U/7+LBqdZos47kWJIo8dwBBUiC485UFwvEwmGVhmBWxi+o agD6D5GDAJiFYTZgfPZC9g48ndQFE3I= -----END CERTIFICATE-----Generated at Sat Jun 13 11:16:05 2026 by rpki-client