$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/082f6217-6e4e-43f6-a1a3-7919091c23a5/10f6b350-4d39-36e3-9928-6b33a7e7b02d.roa File: 10f6b350-4d39-36e3-9928-6b33a7e7b02d.roa (raw, json) Hash identifier: g5rWppwxw1DDn0pRRUaLGCw6GGU6XYWDQglyqxxro78= Subject key identifier: AE:6B:58:80:27:D8:7C:D1:9F:75:82:1E:2C:20:48:31:54:A2:6B:B2 Certificate issuer: /CN=082f6217-6e4e-43f6-a1a3-7919091c23a5 Certificate serial: 010D0C9F4328584D82652260981E52E4A0BFED00 Authority key identifier: AD:58:9B:8D:05:15:23:A8:FF:F3:3D:A4:BE:3F:C3:EC:BF:17:60:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/082f6217-6e4e-43f6-a1a3-7919091c23a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/082f6217-6e4e-43f6-a1a3-7919091c23a5/10f6b350-4d39-36e3-9928-6b33a7e7b02d.roa Signing time: Wed 15 Apr 2026 01:00:24 +0000 ROA not before: Wed 15 Apr 2026 01:00:24 +0000 ROA not after: Tue 14 Jul 2026 01:00:24 +0000 asID: 153391 IP address blocks: 23.129.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/082f6217-6e4e-43f6-a1a3-7919091c23a5/082f6217-6e4e-43f6-a1a3-7919091c23a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/082f6217-6e4e-43f6-a1a3-7919091c23a5/082f6217-6e4e-43f6-a1a3-7919091c23a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/082f6217-6e4e-43f6-a1a3-7919091c23a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:82:65:22:60:98:1e:52:e4:a0:bf:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082f6217-6e4e-43f6-a1a3-7919091c23a5 Validity Not Before: Apr 15 01:00:24 2026 GMT Not After : Jul 14 01:00:24 2026 GMT Subject: CN=f6ed2e9a-426c-468f-848b-681e1faacd9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4a:e9:1f:7d:b6:88:33:e4:b7:c0:e3:c9:55: bb:f3:ad:26:4f:d9:2c:70:fb:87:0f:42:1c:0c:d9: dd:00:09:3c:fd:0d:c3:69:28:26:e6:f3:ff:9c:b2: c1:7e:51:46:e1:06:ad:69:1d:e9:f6:d2:c7:34:b1: 9f:06:7d:5c:8d:73:bf:0e:17:63:fa:34:b8:c6:fb: 37:ac:92:61:64:b4:17:2a:18:88:cf:de:f7:97:08: 91:08:7c:c4:51:65:8c:66:48:0b:b8:0b:02:12:69: df:cd:68:31:dd:28:45:a9:c6:38:fc:cb:d0:24:61: 9c:00:32:09:53:94:9a:f8:1d:a7:fe:35:ac:7b:9a: 7f:10:b2:a1:ef:bf:31:5b:7f:a6:e5:6b:8b:d6:a6: 86:e8:70:5b:61:3d:9d:c6:07:b1:7c:b9:9a:28:3a: 42:86:95:be:94:16:84:82:12:ea:0f:59:29:3a:df: 07:92:eb:83:c5:e0:54:cd:04:92:e6:0d:2b:5b:75: a3:fb:9b:a3:02:a3:ec:b7:b1:4b:59:fd:fa:15:6f: 46:6f:e1:ca:35:9b:25:4a:1c:39:7f:9b:90:98:fa: f1:b9:ba:b8:c9:a2:51:6d:3f:82:8d:80:fc:c8:1f: 81:b5:92:15:6d:20:31:2e:2f:ec:05:a6:2b:4a:b3: 38:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6B:58:80:27:D8:7C:D1:9F:75:82:1E:2C:20:48:31:54:A2:6B:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/082f6217-6e4e-43f6-a1a3-7919091c23a5/10f6b350-4d39-36e3-9928-6b33a7e7b02d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/082f6217-6e4e-43f6-a1a3-7919091c23a5/082f6217-6e4e-43f6-a1a3-7919091c23a5.crl X509v3 Authority Key Identifier: keyid:AD:58:9B:8D:05:15:23:A8:FF:F3:3D:A4:BE:3F:C3:EC:BF:17:60:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/082f6217-6e4e-43f6-a1a3-7919091c23a5.cer sbgp-ipAddrBlock: critical IPv4: 23.129.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d0:62:56:27:69:bd:37:a2:9a:92:83:16:b9:ac:91:52:e1: 22:71:b5:de:fd:78:a5:97:d0:a0:d3:51:58:87:ef:f0:95:76: b7:16:95:26:20:92:10:bd:64:09:dc:4a:00:30:43:86:35:a6: 2e:81:8f:b0:8e:12:07:d2:c0:5c:17:b2:ee:21:65:59:0e:18: 83:2c:b5:9c:a4:0a:88:9a:bd:f3:da:2e:d0:dc:e0:0c:27:cd: af:5a:c3:74:61:ef:d4:cc:fd:89:74:1f:7a:ac:42:2e:a8:d5: 74:8b:1a:61:29:a0:ab:42:2e:10:d1:8c:68:f5:10:5a:4a:24: 39:f2:c7:04:b1:7a:8d:35:15:62:b3:e1:62:84:c6:1c:8e:b0: 92:d3:23:e3:5f:64:18:6e:23:83:3f:dc:5d:48:3f:e7:c7:4e: 1a:e5:f9:f9:d2:05:94:2b:31:b9:1b:2c:3b:64:86:ab:9f:55: 19:74:55:d5:66:38:6e:0a:ca:50:c5:94:7b:14:92:32:d2:55: c3:d8:65:84:77:d3:0c:ee:0d:01:00:28:9f:2a:9e:fe:c2:d2: 9b:e9:99:d4:c8:8a:60:f5:29:09:ff:bc:02:08:43:42:16:f8: 82:b1:98:8e:30:55:da:27:9c:be:0f:72:46:e8:ce:fb:f0:03: 1a:c6:8d:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2CZSJgmB5S5KC/7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDgyZjYyMTctNmU0ZS00M2Y2LWExYTMtNzkxOTA5MWMy M2E1MB4XDTI2MDQxNTAxMDAyNFoXDTI2MDcxNDAxMDAyNFowLzEtMCsGA1UEAxMk ZjZlZDJlOWEtNDI2Yy00NjhmLTg0OGItNjgxZTFmYWFjZDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUrpH322iDPkt8DjyVW7860mT9kscPuHD0Ic DNndAAk8/Q3DaSgm5vP/nLLBflFG4QataR3p9tLHNLGfBn1cjXO/Dhdj+jS4xvs3 rJJhZLQXKhiIz973lwiRCHzEUWWMZkgLuAsCEmnfzWgx3ShFqcY4/MvQJGGcADIJ U5Sa+B2n/jWse5p/ELKh778xW3+m5WuL1qaG6HBbYT2dxgexfLmaKDpChpW+lBaE ghLqD1kpOt8HkuuDxeBUzQSS5g0rW3Wj+5ujAqPst7FLWf36FW9Gb+HKNZslShw5 f5uQmPrxubq4yaJRbT+CjYD8yB+BtZIVbSAxLi/sBaYrSrM4UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5rWIAn2HzRn3WCHiwgSDFUomuyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wODJm NjIxNy02ZTRlLTQzZjYtYTFhMy03OTE5MDkxYzIzYTUvMTBmNmIzNTAtNGQzOS0z NmUzLTk5MjgtNmIzM2E3ZTdiMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDgyZjYyMTctNmU0ZS00M2Y2LWEx YTMtNzkxOTA5MWMyM2E1LzA4MmY2MjE3LTZlNGUtNDNmNi1hMWEzLTc5MTkwOTFj MjNhNS5jcmwwHwYDVR0jBBgwFoAUrVibjQUVI6j/8z2kvj/D7L8XYJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wODJmNjIxNy02ZTRlLTQzZjYtYTFhMy03OTE5 MDkxYzIzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4HMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvQYlYnab03opqSgxa5rJFS4SJxtd79eKWX0KDTUViH7/CVdrcWlSYg khC9ZAncSgAwQ4Y1pi6Bj7COEgfSwFwXsu4hZVkOGIMstZykCoiavfPaLtDc4Awn za9aw3Rh79TM/Yl0H3qsQi6o1XSLGmEpoKtCLhDRjGj1EFpKJDnyxwSxeo01FWKz 4WKExhyOsJLTI+NfZBhuI4M/3F1IP+fHThrl+fnSBZQrMbkbLDtkhqufVRl0VdVm OG4KylDFlHsUkjLSVcPYZYR30wzuDQEAKJ8qnv7C0pvpmdTIimD1KQn/vAIIQ0IW +IKxmI4wVdonnL4PckbozvvwAxrGjdU= -----END CERTIFICATE-----Generated at Fri Apr 17 12:37:43 2026 by rpki-client