$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/aa399e70-b9e1-39f8-af5f-669c59a46e20.roa File: aa399e70-b9e1-39f8-af5f-669c59a46e20.roa (raw, json) Hash identifier: Bgqcpe04dO28u4O5Tx83JmPvOMt914NE7oGtWVu4Wzc= Subject key identifier: 54:66:A9:9A:0E:46:59:B5:FA:61:3F:43:01:4C:15:FC:6C:E8:06:CE Certificate issuer: /CN=bfcded43-2d76-428f-b7f1-3042af66f969 Certificate serial: 010D0C9F4328584E1B7011F0F9EBF39CE280DCC0 Authority key identifier: E5:80:74:93:4A:D6:00:AE:DC:44:7A:A6:7D:10:61:9A:31:85:E3:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/aa399e70-b9e1-39f8-af5f-669c59a46e20.roa Signing time: Mon 08 Jun 2026 20:41:09 +0000 ROA not before: Mon 08 Jun 2026 20:41:09 +0000 ROA not after: Sun 06 Sep 2026 20:41:09 +0000 asID: 398357 IP address blocks: 23.175.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/bfcded43-2d76-428f-b7f1-3042af66f969.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/bfcded43-2d76-428f-b7f1-3042af66f969.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1b:70:11:f0:f9:eb:f3:9c:e2:80:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfcded43-2d76-428f-b7f1-3042af66f969 Validity Not Before: Jun 8 20:41:09 2026 GMT Not After : Sep 6 20:41:09 2026 GMT Subject: CN=788a36de-07ba-4f20-be86-757767a4e7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:75:5e:46:60:23:62:d3:07:34:57:a1:d3:34: f8:36:82:f2:bb:11:83:c4:7d:43:30:52:ea:10:aa: 46:39:54:ba:09:f8:f8:44:c4:c2:e7:aa:1d:99:4a: 4f:05:e5:65:23:0d:77:f0:b4:bd:df:c8:e3:ec:6e: 2a:f3:c5:a2:c5:83:f9:8c:03:c2:f9:b6:55:8e:3e: a2:d5:77:22:65:ac:48:ea:b3:38:9b:0b:b9:e4:fb: 9c:41:a2:e6:55:2c:d6:9b:ab:3f:63:e7:64:70:8b: 41:2c:00:89:43:db:54:11:a6:c3:bb:b9:96:81:73: 69:c8:6a:77:31:fe:ed:c1:70:97:f1:c5:ec:2c:0e: ec:7c:08:66:7c:50:7b:c3:4b:8f:52:a1:ba:e0:a6: 76:40:3a:eb:7c:3b:ad:d1:00:c7:e4:6a:a9:14:af: 19:a5:c5:ff:23:b5:24:1b:bd:1a:5b:7c:79:86:fc: 60:11:02:45:3a:73:ca:65:39:84:3c:04:c8:fd:85: 6d:7b:1c:0e:b2:d0:f6:f4:49:6a:4d:f4:f0:9f:e3: 59:76:7d:f7:b6:35:d2:23:d1:dd:5c:8b:81:2e:12: fa:5c:42:1b:7d:04:96:de:7c:6f:ae:bb:9e:a5:ff: e7:88:68:a6:2b:3b:b3:43:1a:b1:b6:39:41:5b:58: 2d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:66:A9:9A:0E:46:59:B5:FA:61:3F:43:01:4C:15:FC:6C:E8:06:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/aa399e70-b9e1-39f8-af5f-669c59a46e20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/bfcded43-2d76-428f-b7f1-3042af66f969.crl X509v3 Authority Key Identifier: keyid:E5:80:74:93:4A:D6:00:AE:DC:44:7A:A6:7D:10:61:9A:31:85:E3:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969.cer sbgp-ipAddrBlock: critical IPv4: 23.175.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:3a:c3:99:43:e7:7a:03:4c:e2:9e:b1:9c:73:7c:14:3a:8b: 31:b3:29:10:4f:19:68:00:11:51:60:67:55:ba:5f:e1:6d:f8: ed:67:54:c3:9b:91:41:3d:6d:4d:e1:27:1f:f0:45:67:95:30: 56:72:c1:d0:9d:33:9d:ab:dd:e6:fa:3e:e9:6d:36:a2:b1:bf: 18:68:01:ca:c1:3b:e5:2b:25:23:98:2d:b0:9d:81:18:fd:11: d8:50:ba:d7:25:36:ff:e6:d2:7c:ff:c9:99:5b:38:f4:1f:ed: ec:d5:80:05:80:5c:1f:81:29:23:74:9c:55:43:01:a4:f6:47: 2f:9e:9b:69:f6:e8:da:98:ea:7d:d1:33:12:0b:62:94:83:20: bb:25:d2:ab:8b:0a:1f:ac:d3:20:27:17:c5:b8:58:dd:6e:1c: 5f:4d:de:72:4a:1f:c4:00:02:0b:3b:80:b9:fd:aa:da:08:12: 40:bf:31:fc:a4:ec:26:8b:95:89:04:66:b8:e5:e2:ea:7e:85: cb:7f:aa:0d:af:ab:67:3c:f4:d2:79:a3:af:32:2c:ed:4d:f8: 01:3a:c1:fc:4e:60:6c:14:c3:fe:98:ad:20:a3:44:0c:ba:ad: c3:d0:2f:fc:cc:8e:95:a2:d5:b8:a6:00:23:ea:58:99:b6:fd: 8a:59:04:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4bcBHw+evznOKA3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZjZGVkNDMtMmQ3Ni00MjhmLWI3ZjEtMzA0MmFmNjZm OTY5MB4XDTI2MDYwODIwNDEwOVoXDTI2MDkwNjIwNDEwOVowLzEtMCsGA1UEAxMk Nzg4YTM2ZGUtMDdiYS00ZjIwLWJlODYtNzU3NzY3YTRlN2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3VeRmAjYtMHNFeh0zT4NoLyuxGDxH1DMFLq EKpGOVS6Cfj4RMTC56odmUpPBeVlIw138LS938jj7G4q88WixYP5jAPC+bZVjj6i 1XciZaxI6rM4mwu55PucQaLmVSzWm6s/Y+dkcItBLACJQ9tUEabDu7mWgXNpyGp3 Mf7twXCX8cXsLA7sfAhmfFB7w0uPUqG64KZ2QDrrfDut0QDH5GqpFK8ZpcX/I7Uk G70aW3x5hvxgEQJFOnPKZTmEPATI/YVtexwOstD29ElqTfTwn+NZdn33tjXSI9Hd XIuBLhL6XEIbfQSW3nxvrruepf/niGimKzuzQxqxtjlBW1gtZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRmqZoORlm1+mE/QwFMFfxs6AbOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZmNk ZWQ0My0yZDc2LTQyOGYtYjdmMS0zMDQyYWY2NmY5NjkvYWEzOTllNzAtYjllMS0z OWY4LWFmNWYtNjY5YzU5YTQ2ZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmZjZGVkNDMtMmQ3Ni00MjhmLWI3 ZjEtMzA0MmFmNjZmOTY5L2JmY2RlZDQzLTJkNzYtNDI4Zi1iN2YxLTMwNDJhZjY2 Zjk2OS5jcmwwHwYDVR0jBBgwFoAU5YB0k0rWAK7cRHqmfRBhmjGF42swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZmNkZWQ0My0yZDc2LTQyOGYtYjdmMS0zMDQy YWY2NmY5NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF68wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGw6w5lD53oDTOKesZxzfBQ6izGzKRBPGWgAEVFgZ1W6X+Ft+O1nVMOb kUE9bU3hJx/wRWeVMFZywdCdM52r3eb6PultNqKxvxhoAcrBO+UrJSOYLbCdgRj9 EdhQutclNv/m0nz/yZlbOPQf7ezVgAWAXB+BKSN0nFVDAaT2Ry+em2n26NqY6n3R MxILYpSDILsl0quLCh+s0yAnF8W4WN1uHF9N3nJKH8QAAgs7gLn9qtoIEkC/Mfyk 7CaLlYkEZrjl4up+hct/qg2vq2c89NJ5o68yLO1N+AE6wfxOYGwUw/6YrSCjRAy6 rcPQL/zMjpWi1bimACPqWJm2/YpZBOc= -----END CERTIFICATE-----Generated at Sat Jun 13 12:54:46 2026 by rpki-client