$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/5b544329-5f81-3c9e-8a03-9130ec07b101.roa File: 5b544329-5f81-3c9e-8a03-9130ec07b101.roa (raw, json) Hash identifier: ND7jXR1Q69qC5VPzYEQPOa+IeaPiTh7R6aeildTgkw4= Subject key identifier: 9D:EC:82:22:89:0B:43:DD:D9:77:A5:7E:33:85:4C:4E:88:DB:9E:CB Certificate issuer: /CN=6d2e159b-7f9d-4fde-83eb-ff2852b127f7 Certificate serial: 010D0C9F4328584E253EF43CC56316C899576980 Authority key identifier: 4A:82:75:D7:A7:7C:40:CB:AA:EE:BD:86:14:01:53:AC:A1:C7:5D:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/5b544329-5f81-3c9e-8a03-9130ec07b101.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 401449 IP address blocks: 23.128.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3e:f4:3c:c5:63:16:c8:99:57:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d2e159b-7f9d-4fde-83eb-ff2852b127f7 Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=b7020ec8-a083-4447-965b-2166717e5ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e1:f4:b8:e3:e4:f8:c5:cf:72:89:c1:42:d0: ac:2a:b8:b2:cd:e2:65:50:5a:6a:4d:7e:19:59:76: bd:fa:a0:58:37:bd:4f:63:da:5c:28:8e:c4:c2:44: 04:7b:42:bd:f2:40:e2:97:2d:f8:2a:66:29:d2:52: c1:5e:bc:23:8d:03:63:ba:3f:4e:3f:42:c3:17:92: 52:00:b0:43:61:6c:f7:7a:5d:8a:2e:de:23:56:f1: e2:d3:1e:5e:2e:08:2a:3c:17:4d:42:e7:e6:33:b5: b8:e8:a9:01:64:3f:ec:63:20:f6:eb:96:3f:62:36: 64:04:15:04:c2:ff:11:48:0b:90:2c:c4:ef:d0:e6: d6:46:2d:76:26:38:f2:09:6a:34:45:5b:20:5e:7f: 5f:c4:62:2e:0e:88:13:5b:bf:48:51:81:5d:40:4b: e4:28:65:99:55:43:1d:a8:df:8f:ff:54:65:1d:f4: 05:07:cd:1a:77:d4:11:e3:b1:57:2f:9d:41:f8:90: c3:55:26:53:50:20:94:68:ce:ee:3a:d5:0e:90:19: 24:75:31:4f:f4:97:54:8e:90:d1:14:20:00:99:af: cb:1d:ed:e0:cd:aa:2f:50:8b:70:da:18:ed:e8:ac: 12:d1:e2:3f:e5:59:41:d9:1a:ec:95:6f:be:97:66: 4d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EC:82:22:89:0B:43:DD:D9:77:A5:7E:33:85:4C:4E:88:DB:9E:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/5b544329-5f81-3c9e-8a03-9130ec07b101.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.crl X509v3 Authority Key Identifier: keyid:4A:82:75:D7:A7:7C:40:CB:AA:EE:BD:86:14:01:53:AC:A1:C7:5D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer sbgp-ipAddrBlock: critical IPv4: 23.128.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:42:b4:3d:cd:84:c5:10:f3:15:70:a7:1d:fb:a7:1e:c0:d9: e0:50:65:06:bc:2a:a0:44:61:72:e0:bd:54:72:42:ba:42:26: b7:03:0e:3c:c5:53:0b:c1:33:5b:d5:d4:ca:bf:44:6a:f0:28: a0:f4:53:98:8a:44:a8:fd:7e:69:38:25:6a:45:9a:51:87:46: 38:06:ca:e3:25:75:78:1b:a3:f6:a0:9f:07:b1:df:37:60:b3: d0:c4:4a:4a:26:71:1d:3e:93:1c:1d:75:ee:75:10:ab:d5:74: dc:a2:52:dd:3f:60:21:cd:42:4d:eb:e2:cb:4f:d5:96:fc:a5: ff:2d:33:b2:4a:9c:d4:39:6f:d7:c9:b4:ad:cc:25:43:2b:76: 84:53:d8:8d:5a:03:b3:fe:a0:d4:0c:83:e2:73:5a:ab:11:69: 6b:b7:b6:93:f5:5b:0a:35:62:b5:94:25:c2:af:ed:21:cf:6a: f0:ed:28:1a:f9:b0:f8:7b:5e:f5:95:e0:d7:f4:3b:f5:1b:7b: 10:29:f5:b4:33:96:dc:c9:64:27:b6:cd:15:54:2b:f5:8a:50: e7:b4:74:09:20:2e:03:c2:f6:c9:9e:a3:48:b8:31:a3:c4:ef: 0e:6b:09:6a:37:d8:50:51:ec:3c:5a:62:7c:f5:b0:0d:d3:a7: 56:f9:8f:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPvQ8xWMWyJlXaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQyZTE1OWItN2Y5ZC00ZmRlLTgzZWItZmYyODUyYjEy N2Y3MB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk YjcwMjBlYzgtYTA4My00NDQ3LTk2NWItMjE2NjcxN2U1ZGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeH0uOPk+MXPconBQtCsKriyzeJlUFpqTX4Z WXa9+qBYN71PY9pcKI7EwkQEe0K98kDily34KmYp0lLBXrwjjQNjuj9OP0LDF5JS ALBDYWz3el2KLt4jVvHi0x5eLggqPBdNQufmM7W46KkBZD/sYyD265Y/YjZkBBUE wv8RSAuQLMTv0ObWRi12JjjyCWo0RVsgXn9fxGIuDogTW79IUYFdQEvkKGWZVUMd qN+P/1RlHfQFB80ad9QR47FXL51B+JDDVSZTUCCUaM7uOtUOkBkkdTFP9JdUjpDR FCAAma/LHe3gzaovUItw2hjt6KwS0eI/5VlB2RrslW++l2ZNtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3sgiKJC0Pd2XelfjOFTE6I257LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDJl MTU5Yi03ZjlkLTRmZGUtODNlYi1mZjI4NTJiMTI3ZjcvNWI1NDQzMjktNWY4MS0z YzllLThhMDMtOTEzMGVjMDdiMTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNmQyZTE1OWItN2Y5ZC00ZmRlLTgz ZWItZmYyODUyYjEyN2Y3LzZkMmUxNTliLTdmOWQtNGZkZS04M2ViLWZmMjg1MmIx MjdmNy5jcmwwHwYDVR0jBBgwFoAUSoJ116d8QMuq7r2GFAFTrKHHXcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDJlMTU5Yi03ZjlkLTRmZGUtODNlYi1mZjI4 NTJiMTI3ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4BUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZCtD3NhMUQ8xVwpx37px7A2eBQZQa8KqBEYXLgvVRyQrpCJrcDDjzF UwvBM1vV1Mq/RGrwKKD0U5iKRKj9fmk4JWpFmlGHRjgGyuMldXgbo/agnwex3zdg s9DESkomcR0+kxwdde51EKvVdNyiUt0/YCHNQk3r4stP1Zb8pf8tM7JKnNQ5b9fJ tK3MJUMrdoRT2I1aA7P+oNQMg+JzWqsRaWu3tpP1Wwo1YrWUJcKv7SHPavDtKBr5 sPh7XvWV4Nf0O/UbexAp9bQzltzJZCe2zRVUK/WKUOe0dAkgLgPC9smeo0i4MaPE 7w5rCWo32FBR7DxaYnz1sA3Tp1b5jws= -----END CERTIFICATE-----Generated at Sat Jun 13 15:46:26 2026 by rpki-client