$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/d213cd2e-f31e-3c63-a3c0-c36ac894c40b.roa File: d213cd2e-f31e-3c63-a3c0-c36ac894c40b.roa (raw, json) Hash identifier: 9PHFkFXea+YEsHxh+q15fbm6WG45WhbT1PGLgv0qES0= Subject key identifier: 72:4B:6C:12:B9:C4:2A:6D:D1:64:64:DE:EA:73:19:9F:BA:FB:14:5D Certificate issuer: /CN=dda1859b-9b6c-47e8-8de0-488bb1a65637 Certificate serial: 010D0C9F4328584E08665BE5994EFF5BE508A780 Authority key identifier: D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/d213cd2e-f31e-3c63-a3c0-c36ac894c40b.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 152918 IP address blocks: 23.151.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:5b:e5:99:4e:ff:5b:e5:08:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dda1859b-9b6c-47e8-8de0-488bb1a65637 Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=249bdd67-2bfb-4564-aa58-08422fbeb611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3a:11:76:fb:55:73:b7:3a:a3:15:c4:d0:d3: 87:0f:f8:08:eb:87:c5:3e:61:78:3d:4a:69:fb:05: a1:fb:0c:88:8d:5e:a4:2d:a5:c5:93:00:03:9a:83: 6d:1f:52:94:8b:f7:f6:eb:64:92:f7:62:bf:9b:f6: 70:d7:e9:ce:18:7e:e3:44:e7:cc:9c:28:67:5b:67: 92:e4:04:aa:33:8f:e0:be:ff:fd:b7:f9:5a:95:03: 27:6a:17:44:79:9e:a8:73:2b:57:78:91:0b:98:e1: 19:e7:54:03:e6:16:63:2e:36:8a:4d:40:dd:00:32: 5a:ac:86:64:a3:5d:bd:d5:a9:a7:3c:b4:3d:28:ec: 5a:e9:d7:79:b9:ae:44:87:d7:b1:e1:e4:c7:bd:e7: c5:ca:b9:72:a6:09:cd:4e:fd:c6:2a:72:29:f1:15: e6:fe:40:3f:f6:70:86:8f:25:60:e5:4f:3c:58:72: 21:39:32:4a:e1:b8:db:54:a2:ff:e1:db:9f:10:84: 14:a3:60:f8:ee:d8:45:d7:57:fd:99:9c:34:2d:b3: 74:20:96:34:3e:2b:81:3b:9e:69:3e:00:2b:14:cd: 15:b9:bc:a9:e8:c8:ce:30:16:a1:57:a3:16:96:95: 35:71:b2:aa:4c:cc:f9:a6:ec:20:94:22:ab:da:e7: ff:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4B:6C:12:B9:C4:2A:6D:D1:64:64:DE:EA:73:19:9F:BA:FB:14:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/d213cd2e-f31e-3c63-a3c0-c36ac894c40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.crl X509v3 Authority Key Identifier: keyid:D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer sbgp-ipAddrBlock: critical IPv4: 23.151.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:3b:f9:22:cd:74:59:44:40:e7:86:ce:d6:f1:13:1b:cb:85: 85:8b:df:96:64:c7:fe:44:47:29:51:67:33:d1:8e:39:53:a5: ef:91:27:1b:4c:ac:d1:2b:55:ad:6d:2a:72:a2:61:6e:37:4e: c2:2c:12:54:86:df:11:7a:4f:b4:be:64:54:b4:1a:d5:d9:d3: d4:48:47:ca:8c:41:df:66:43:63:d0:e7:73:9a:e1:b7:db:45: f1:60:e2:14:55:06:00:33:f2:fd:46:02:20:56:37:54:f8:be: 93:d5:43:b1:53:4c:12:50:76:5d:58:eb:65:40:82:76:22:d9: 4b:44:f1:36:e6:01:62:84:e0:13:2d:80:d9:a4:e1:32:f2:c3: a7:fa:9e:e7:4e:6d:7f:e5:22:d0:b4:16:54:a1:c9:cb:7d:da: 9a:cc:7f:82:34:f4:d4:78:52:6b:aa:89:0b:60:0d:be:61:d5: b0:f1:c3:4d:e4:91:2e:f7:c2:19:b3:eb:5b:1f:25:f8:7d:8c: 10:f0:c9:25:0a:8e:03:34:d3:22:6d:c3:07:bc:05:be:19:8d: 98:47:12:31:05:12:95:00:33:db:cc:e4:d8:9e:12:17:bb:f5: 48:a3:a5:f7:dc:28:c4:ca:b6:34:4f:21:cb:50:5b:36:0e:06: c0:04:c5:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZlvlmU7/W+UIp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRhMTg1OWItOWI2Yy00N2U4LThkZTAtNDg4YmIxYTY1 NjM3MB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk MjQ5YmRkNjctMmJmYi00NTY0LWFhNTgtMDg0MjJmYmViNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwToRdvtVc7c6oxXE0NOHD/gI64fFPmF4PUpp +wWh+wyIjV6kLaXFkwADmoNtH1KUi/f262SS92K/m/Zw1+nOGH7jROfMnChnW2eS 5ASqM4/gvv/9t/lalQMnahdEeZ6ocytXeJELmOEZ51QD5hZjLjaKTUDdADJarIZk o1291amnPLQ9KOxa6dd5ua5Eh9ex4eTHvefFyrlypgnNTv3GKnIp8RXm/kA/9nCG jyVg5U88WHIhOTJK4bjbVKL/4dufEIQUo2D47thF11f9mZw0LbN0IJY0PiuBO55p PgArFM0Vubyp6MjOMBahV6MWlpU1cbKqTMz5puwglCKr2uf/kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJLbBK5xCpt0WRk3upzGZ+6+xRdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZGEx ODU5Yi05YjZjLTQ3ZTgtOGRlMC00ODhiYjFhNjU2MzcvZDIxM2NkMmUtZjMxZS0z YzYzLWEzYzAtYzM2YWM4OTRjNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGRhMTg1OWItOWI2Yy00N2U4LThk ZTAtNDg4YmIxYTY1NjM3L2RkYTE4NTliLTliNmMtNDdlOC04ZGUwLTQ4OGJiMWE2 NTYzNy5jcmwwHwYDVR0jBBgwFoAU0rRS4atE9KjQ2if6ETpX26OVzHMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZGExODU5Yi05YjZjLTQ3ZTgtOGRlMC00ODhi YjFhNjU2MzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5fcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAA7+SLNdFlEQOeGztbxExvLhYWL35Zkx/5ERylRZzPRjjlTpe+RJxtM rNErVa1tKnKiYW43TsIsElSG3xF6T7S+ZFS0GtXZ09RIR8qMQd9mQ2PQ53Oa4bfb RfFg4hRVBgAz8v1GAiBWN1T4vpPVQ7FTTBJQdl1Y62VAgnYi2UtE8TbmAWKE4BMt gNmk4TLyw6f6nudObX/lItC0FlShyct92prMf4I09NR4UmuqiQtgDb5h1bDxw03k kS73whmz61sfJfh9jBDwySUKjgM00yJtwwe8Bb4ZjZhHEjEFEpUAM9vM5NieEhe7 9UijpffcKMTKtjRPIctQWzYOBsAExSY= -----END CERTIFICATE-----Generated at Sat Jun 13 13:30:03 2026 by rpki-client