$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/ca756e9a-47d8-33bf-9e02-86af045884a9.roa File: ca756e9a-47d8-33bf-9e02-86af045884a9.roa (raw, json) Hash identifier: VGxIBm1p4mN7JLTj0lM/+MeJqwzCJWWtcCAEVEU5VBg= Subject key identifier: A7:59:1D:FB:33:DA:ED:55:A0:60:68:A9:37:41:95:01:5A:EF:C4:EA Certificate issuer: /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Certificate serial: 010D0C9F4328584DEC7B251828CD205BEEFA9280 Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/ca756e9a-47d8-33bf-9e02-86af045884a9.roa Signing time: Sat 23 May 2026 01:00:25 +0000 ROA not before: Sat 23 May 2026 01:00:25 +0000 ROA not after: Fri 21 Aug 2026 01:00:25 +0000 asID: 135074 IP address blocks: 23.145.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ec:7b:25:18:28:cd:20:5b:ee:fa:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Validity Not Before: May 23 01:00:25 2026 GMT Not After : Aug 21 01:00:25 2026 GMT Subject: CN=a312593d-eaf6-40b8-8908-bde699470ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c9:9a:53:24:a2:f6:dd:25:ae:29:48:36:84: 6f:bc:7d:e2:7e:57:e5:32:70:75:03:b8:3f:d9:92: 2a:b7:1c:7c:dd:e0:8b:18:8a:f4:e6:89:2e:fd:98: c0:77:96:78:cf:b5:8e:90:9f:0d:c5:c5:ae:cd:3e: 40:70:8f:d1:cd:74:8d:ae:ae:ca:80:05:47:59:29: 93:d2:fd:ef:c8:1d:a8:62:43:bc:02:f9:d5:39:60: 08:91:de:9f:1b:d8:dd:70:ab:ab:da:87:2e:80:68: 4b:b2:db:87:2b:ae:ba:28:d3:12:0f:5d:7e:0d:8a: 4d:51:02:70:7a:e1:65:60:9f:fa:25:df:bb:db:a2: 15:a0:36:8a:fd:23:5b:69:d1:a7:de:62:97:e2:7f: b2:bc:24:03:36:97:95:18:9a:79:33:d5:5a:8c:4c: e0:e1:f6:0d:f9:b4:01:ec:4a:93:c6:9b:5d:ac:df: 8a:b1:58:28:ee:3b:1e:df:18:94:5a:4d:79:6b:68: 6f:51:cd:6f:66:f9:d5:a9:eb:ac:c3:92:aa:f4:03: 92:c1:ae:5a:bd:59:55:75:4a:b7:59:b6:b4:ca:95: 5b:42:ed:ee:55:8c:03:5a:ae:07:79:9b:ca:24:0e: 56:f5:3b:dd:65:64:cb:8f:76:95:21:38:fd:01:5a: 4c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:59:1D:FB:33:DA:ED:55:A0:60:68:A9:37:41:95:01:5A:EF:C4:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/ca756e9a-47d8-33bf-9e02-86af045884a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl X509v3 Authority Key Identifier: keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer sbgp-ipAddrBlock: critical IPv4: 23.145.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:ac:70:ca:a6:f0:d8:c6:15:8f:49:45:c7:f8:90:ee:c2:9b: b3:01:9d:9a:e5:52:1f:db:09:8d:84:25:4a:af:c2:1d:b7:20: 9f:54:52:af:55:6a:4f:ab:d0:ad:57:15:5d:5f:66:ed:1b:9f: d3:99:98:a5:14:e9:87:09:37:6e:30:54:07:1f:48:65:a2:95: e0:48:cb:12:ae:f7:4e:23:8d:b3:ea:b0:2a:da:16:8b:47:f1: d4:09:52:9b:57:cc:83:31:10:2c:13:47:98:a3:57:00:2f:7f: 03:7c:51:07:74:df:73:01:48:32:43:7b:3f:c9:79:a8:17:1f: de:7e:8f:e1:79:e7:b7:75:57:e4:f8:98:f8:41:46:ca:b7:2c: d3:7e:b0:9b:58:29:e6:6b:66:b0:c0:4b:80:7c:5d:b2:b1:85: 75:0d:86:84:46:52:02:61:35:84:ea:99:bf:2d:15:db:1b:f4: ed:92:34:25:b5:ba:84:19:54:89:b9:44:21:0d:f8:81:3c:f2: dd:3d:04:0e:d1:72:2c:4e:9a:05:8d:1b:49:63:97:9c:3c:76: c3:84:ae:67:b2:e1:72:c7:1b:85:01:6d:0d:1c:fc:fe:fb:59: df:21:6e:90:32:35:ef:4f:17:76:09:a9:2b:86:9e:2c:ae:e7: 24:d8:2b:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3seyUYKM0gW+76koAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI5YmYyZjQtYzgzMS00ZjFlLWEyZDUtZDdmYzQwNTM1 YzhmMB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk YTMxMjU5M2QtZWFmNi00MGI4LTg5MDgtYmRlNjk5NDcwZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocmaUySi9t0lrilINoRvvH3iflflMnB1A7g/ 2ZIqtxx83eCLGIr05oku/ZjAd5Z4z7WOkJ8NxcWuzT5AcI/RzXSNrq7KgAVHWSmT 0v3vyB2oYkO8AvnVOWAIkd6fG9jdcKur2ocugGhLstuHK666KNMSD11+DYpNUQJw euFlYJ/6Jd+726IVoDaK/SNbadGn3mKX4n+yvCQDNpeVGJp5M9VajEzg4fYN+bQB 7EqTxptdrN+KsVgo7jse3xiUWk15a2hvUc1vZvnVqeusw5Kq9AOSwa5avVlVdUq3 Wba0ypVbQu3uVYwDWq4HeZvKJA5W9TvdZWTLj3aVITj9AVpMqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdZHfsz2u1VoGBoqTdBlQFa78TqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjli ZjJmNC1jODMxLTRmMWUtYTJkNS1kN2ZjNDA1MzVjOGYvY2E3NTZlOWEtNDdkOC0z M2JmLTllMDItODZhZjA0NTg4NGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWI5YmYyZjQtYzgzMS00ZjFlLWEy ZDUtZDdmYzQwNTM1YzhmLzFiOWJmMmY0LWM4MzEtNGYxZS1hMmQ1LWQ3ZmM0MDUz NWM4Zi5jcmwwHwYDVR0jBBgwFoAUPMMWR4yxJu0PqWMpogFuhbqQmokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjliZjJmNC1jODMxLTRmMWUtYTJkNS1kN2Zj NDA1MzVjOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMqscMqm8NjGFY9JRcf4kO7Cm7MBnZrlUh/bCY2EJUqvwh23IJ9UUq9V ak+r0K1XFV1fZu0bn9OZmKUU6YcJN24wVAcfSGWileBIyxKu904jjbPqsCraFotH 8dQJUptXzIMxECwTR5ijVwAvfwN8UQd033MBSDJDez/JeagXH95+j+F557d1V+T4 mPhBRsq3LNN+sJtYKeZrZrDAS4B8XbKxhXUNhoRGUgJhNYTqmb8tFdsb9O2SNCW1 uoQZVIm5RCEN+IE88t09BA7RcixOmgWNG0ljl5w8dsOErmey4XLHG4UBbQ0c/P77 Wd8hbpAyNe9PF3YJqSuGniyu5yTYK3c= -----END CERTIFICATE-----Generated at Sat Jun 13 13:57:45 2026 by rpki-client