$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/29949da6-8cb5-3545-95c6-65e47a0cc103.roa File: 29949da6-8cb5-3545-95c6-65e47a0cc103.roa (raw, json) Hash identifier: RRHIrP2tT8vpIExhNJ5kbZmgivRYCD0uRhOrRZ4WwqM= Subject key identifier: 6A:BE:72:F2:77:4E:B1:5F:D4:F7:D6:74:31:B1:E8:29:2F:D3:B9:74 Certificate issuer: /CN=68e273c1-e39f-464b-8c1f-b45c8df2b148 Certificate serial: 010D0C9F4328584DD35B223C6A0589DC91898740 Authority key identifier: 4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/29949da6-8cb5-3545-95c6-65e47a0cc103.roa Signing time: Thu 14 May 2026 01:00:25 +0000 ROA not before: Thu 14 May 2026 01:00:25 +0000 ROA not after: Wed 12 Aug 2026 01:00:25 +0000 asID: 26886 IP address blocks: 23.167.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:5b:22:3c:6a:05:89:dc:91:89:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e273c1-e39f-464b-8c1f-b45c8df2b148 Validity Not Before: May 14 01:00:25 2026 GMT Not After : Aug 12 01:00:25 2026 GMT Subject: CN=b7c88be2-974d-446e-9581-ffce2fd36de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c4:f1:87:93:39:f7:42:c1:00:64:f6:bf:4b: 3e:0a:90:4f:42:ac:74:24:a1:a7:02:b1:ec:e6:11: 4c:ac:8f:f2:79:15:5c:3b:2f:44:b1:6b:e4:bf:8a: dd:37:b0:2e:3f:49:01:d4:03:ca:a0:75:1e:fa:c5: 37:13:19:88:7a:5c:95:2c:f6:a6:0f:f8:99:ae:70: c1:0d:37:f1:df:a6:c5:6b:16:41:b0:b3:ed:f3:85: 59:1b:59:06:bb:73:c4:b0:7a:cd:05:3d:2f:b2:b6: c3:08:7c:80:51:ca:07:dc:f7:9e:cd:9c:70:47:1e: c4:fd:4e:25:22:d7:ee:5f:f7:80:ec:b7:3b:21:80: 0d:f6:8a:b4:57:79:a5:45:0e:60:01:6a:d8:43:06: c7:cf:47:29:8b:c9:b8:be:ba:27:3a:d5:63:13:cd: d4:3b:4a:4d:4a:b6:ba:fa:15:ba:8e:c3:bf:ac:6a: ca:4f:6a:cc:b5:8a:75:cf:51:ee:78:9d:42:b4:e0: 58:8a:c3:4b:54:2f:0a:52:d2:c2:7b:d7:4d:6b:66: c8:5e:cd:88:64:13:c5:f7:59:2d:02:6e:1a:ab:f9: ee:ff:90:e8:c2:7e:98:5c:08:49:54:7f:83:07:6e: f2:9c:5e:ba:39:ea:9a:19:d5:ea:b3:ac:09:f9:e3: 27:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BE:72:F2:77:4E:B1:5F:D4:F7:D6:74:31:B1:E8:29:2F:D3:B9:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/29949da6-8cb5-3545-95c6-65e47a0cc103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.crl X509v3 Authority Key Identifier: keyid:4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer sbgp-ipAddrBlock: critical IPv4: 23.167.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:77:35:5c:00:53:fd:00:0d:05:88:91:7d:3e:d0:45:f6:6f: 61:22:1c:86:5a:58:b3:19:b3:66:13:79:b0:25:14:cb:4a:33: 7a:ee:ed:ca:70:fc:c2:3f:3f:44:77:71:3f:4b:73:bf:7a:f7: 76:36:96:97:fe:91:bc:9e:3d:1e:65:1b:7f:c0:f6:4b:a6:aa: 86:09:04:29:b6:43:1c:9f:3b:ff:46:e1:9f:12:ab:85:06:ce: 77:11:53:39:c5:76:db:72:7c:b9:17:98:39:c1:d9:24:33:5f: 96:79:88:e3:58:28:66:3c:d8:59:1c:a6:08:fd:b7:56:35:0a: e8:d2:42:23:0f:05:91:04:11:0a:15:a2:88:97:d4:6a:c4:fb: fc:ab:0b:2a:1a:08:30:31:25:10:0d:3a:1c:58:42:64:8d:7a: 32:67:8b:77:3a:1e:4b:e8:8b:36:cc:c5:81:bd:22:fc:ac:68: 71:55:73:2a:53:8f:14:e3:07:eb:2e:39:6d:be:de:53:84:96: 1f:f8:13:b8:0e:da:12:3b:9e:b4:7c:3f:cd:b9:e7:ad:b4:63: 69:41:5d:07:b8:c0:76:cf:9f:98:37:8c:9d:46:6d:e0:d5:8a: 99:8e:37:f6:5d:4d:ce:66:09:f7:2b:ed:e3:78:b5:fd:0c:7e: c9:ad:76:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3TWyI8agWJ3JGJh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhlMjczYzEtZTM5Zi00NjRiLThjMWYtYjQ1YzhkZjJi MTQ4MB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk YjdjODhiZTItOTc0ZC00NDZlLTk1ODEtZmZjZTJmZDM2ZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsTxh5M590LBAGT2v0s+CpBPQqx0JKGnArHs 5hFMrI/yeRVcOy9EsWvkv4rdN7AuP0kB1APKoHUe+sU3ExmIelyVLPamD/iZrnDB DTfx36bFaxZBsLPt84VZG1kGu3PEsHrNBT0vsrbDCHyAUcoH3PeezZxwRx7E/U4l ItfuX/eA7Lc7IYAN9oq0V3mlRQ5gAWrYQwbHz0cpi8m4vronOtVjE83UO0pNSra6 +hW6jsO/rGrKT2rMtYp1z1HueJ1CtOBYisNLVC8KUtLCe9dNa2bIXs2IZBPF91kt Am4aq/nu/5Down6YXAhJVH+DB27ynF66OeqaGdXqs6wJ+eMnjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGq+cvJ3TrFf1PfWdDGx6Ckv07l0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82OGUy NzNjMS1lMzlmLTQ2NGItOGMxZi1iNDVjOGRmMmIxNDgvMjk5NDlkYTYtOGNiNS0z NTQ1LTk1YzYtNjVlNDdhMGNjMTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjhlMjczYzEtZTM5Zi00NjRiLThj MWYtYjQ1YzhkZjJiMTQ4LzY4ZTI3M2MxLWUzOWYtNDY0Yi04YzFmLWI0NWM4ZGYy YjE0OC5jcmwwHwYDVR0jBBgwFoAUTS+LfVGd0REBVTtzG9uaer5iv6UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82OGUyNzNjMS1lMzlmLTQ2NGItOGMxZi1iNDVj OGRmMmIxNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6eIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC93NVwAU/0ADQWIkX0+0EX2b2EiHIZaWLMZs2YTebAlFMtKM3ru7cpw /MI/P0R3cT9Lc79693Y2lpf+kbyePR5lG3/A9kumqoYJBCm2QxyfO/9G4Z8Sq4UG zncRUznFdttyfLkXmDnB2SQzX5Z5iONYKGY82Fkcpgj9t1Y1CujSQiMPBZEEEQoV ooiX1GrE+/yrCyoaCDAxJRANOhxYQmSNejJni3c6HkvoizbMxYG9IvysaHFVcypT jxTjB+suOW2+3lOElh/4E7gO2hI7nrR8P8255620Y2lBXQe4wHbPn5g3jJ1GbeDV ipmON/ZdTc5mCfcr7eN4tf0Mfsmtdk4= -----END CERTIFICATE-----Generated at Sat Jun 13 23:18:59 2026 by rpki-client