$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa File: 853d2761-430f-3406-8353-e291e87c8b19.roa (raw, json) Hash identifier: 5aFzcFSK5hO9BmczcAnkYWiEgYUt7kDuB9SIxoYb5xY= Subject key identifier: B8:1C:68:F1:1E:BC:49:D6:BD:C6:18:BD:2E:39:F4:F1:36:DA:6D:32 Certificate issuer: /CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098 Certificate serial: 010D0C9F4328584E1FA9A947D0407A1F77719200 Authority key identifier: 10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 399935 IP address blocks: 23.168.216.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:a9:47:d0:40:7a:1f:77:71:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098 Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=7bf58290-d64e-48c1-9f73-b58c97053875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5e:d3:16:cb:b5:fa:53:9d:47:a9:92:c4:c1: c3:06:1f:5d:bb:37:7f:38:2a:ff:d9:2f:23:54:cc: eb:9f:49:16:98:86:eb:90:45:0d:99:1b:53:01:c6: f8:93:ec:1a:e7:cd:bc:1b:a7:5f:48:89:47:73:ca: 6a:8e:84:8b:57:84:39:a7:cb:18:cf:0f:9a:72:46: d0:e9:f5:52:8f:e2:b2:31:81:8d:f6:eb:85:eb:64: 06:e7:c6:ff:1c:cc:e4:58:66:7a:c4:78:45:b6:ea: 00:54:e2:87:67:a3:8a:c0:8e:3b:b1:4f:b6:51:f9: 4d:cc:5c:fb:a9:5b:af:fa:b3:77:b6:61:42:ff:78: b5:8e:b8:9e:3a:16:71:de:cc:54:44:58:3f:cf:db: b9:cd:74:4b:7a:e2:67:bf:85:6d:38:a7:c3:58:cc: 43:5c:37:b1:30:42:c7:7e:5c:11:da:01:98:ee:6f: 28:5a:0b:98:8b:ba:c2:55:2c:81:58:ea:38:68:70: 5d:38:9c:5e:5f:e2:d5:80:2e:9c:63:b4:14:43:5e: 76:eb:98:1e:f7:bb:2f:31:f8:71:76:fa:db:83:e7: 76:7b:70:60:28:9e:06:2f:c6:e9:9d:3f:c8:e0:15: 1e:af:1c:8b:01:3b:2d:81:fd:10:02:23:1b:60:87: f4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1C:68:F1:1E:BC:49:D6:BD:C6:18:BD:2E:39:F4:F1:36:DA:6D:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.crl X509v3 Authority Key Identifier: keyid:10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer sbgp-ipAddrBlock: critical IPv4: 23.168.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ac:8c:8a:d1:76:67:ed:34:f7:ff:c9:12:32:15:92:81:56: b1:4f:b8:77:43:0d:57:8c:de:b7:8c:c8:39:6d:62:67:51:4e: 70:b7:28:86:13:8b:85:e5:96:50:a7:6b:b8:0d:6c:a6:ae:98: e1:cb:ee:5b:b7:78:7e:67:18:c9:8a:16:cc:ab:2b:91:40:3d: b1:bc:48:16:67:7d:21:4e:73:34:aa:3c:0b:d6:dc:90:78:b5: 8f:29:48:5a:aa:5f:7a:e3:9c:f5:50:2c:ea:f6:05:98:2d:03: 37:fc:07:a2:61:f6:f1:77:2c:1f:0a:d7:ad:df:d0:c9:45:59: ef:ba:18:d3:67:06:cd:97:31:ad:67:26:e1:63:ba:c6:05:81: 06:4b:a5:90:65:4f:05:67:21:c3:19:36:09:c8:fb:f9:66:82: f5:b9:65:9d:93:6a:0c:ad:be:0f:76:20:a1:be:d1:35:90:06: 97:aa:de:76:6c:61:c4:02:04:0f:56:6b:6c:3c:cd:0e:43:63: 12:16:0c:ea:9d:d9:1d:6a:69:eb:9f:34:c2:d5:48:1b:c7:ab: 2a:fe:a0:3d:6f:b9:f4:ad:d7:38:fa:3c:8b:fb:a3:42:5f:5a: 4f:be:4b:c8:5a:1a:45:4a:81:05:b5:32:af:67:b6:66:82:d7: 44:9a:c8:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqalH0EB6H3dxkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU2OWU3YWUtNDY5ZC00MDBlLThmMmUtNGViZmMxYmUw MDk4MB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk N2JmNTgyOTAtZDY0ZS00OGMxLTlmNzMtYjU4Yzk3MDUzODc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol7TFsu1+lOdR6mSxMHDBh9duzd/OCr/2S8j VMzrn0kWmIbrkEUNmRtTAcb4k+wa5828G6dfSIlHc8pqjoSLV4Q5p8sYzw+ackbQ 6fVSj+KyMYGN9uuF62QG58b/HMzkWGZ6xHhFtuoAVOKHZ6OKwI47sU+2UflNzFz7 qVuv+rN3tmFC/3i1jrieOhZx3sxURFg/z9u5zXRLeuJnv4VtOKfDWMxDXDexMELH flwR2gGY7m8oWguYi7rCVSyBWOo4aHBdOJxeX+LVgC6cY7QUQ15265ge97svMfhx dvrbg+d2e3BgKJ4GL8bpnT/I4BUerxyLATstgf0QAiMbYIf0PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgcaPEevEnWvcYYvS459PE22m0yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZTY5 ZTdhZS00NjlkLTQwMGUtOGYyZS00ZWJmYzFiZTAwOTgvODUzZDI3NjEtNDMwZi0z NDA2LTgzNTMtZTI5MWU4N2M4YjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmU2OWU3YWUtNDY5ZC00MDBlLThm MmUtNGViZmMxYmUwMDk4L2JlNjllN2FlLTQ2OWQtNDAwZS04ZjJlLTRlYmZjMWJl MDA5OC5jcmwwHwYDVR0jBBgwFoAUEESif13LewEam23rbUc+n7ZRpYQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iZTY5ZTdhZS00NjlkLTQwMGUtOGYyZS00ZWJm YzFiZTAwOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6jYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqsjIrRdmftNPf/yRIyFZKBVrFPuHdDDVeM3reMyDltYmdRTnC3KIYT i4XlllCna7gNbKaumOHL7lu3eH5nGMmKFsyrK5FAPbG8SBZnfSFOczSqPAvW3JB4 tY8pSFqqX3rjnPVQLOr2BZgtAzf8B6Jh9vF3LB8K163f0MlFWe+6GNNnBs2XMa1n JuFjusYFgQZLpZBlTwVnIcMZNgnI+/lmgvW5ZZ2Tagytvg92IKG+0TWQBpeq3nZs YcQCBA9Wa2w8zQ5DYxIWDOqd2R1qaeufNMLVSBvHqyr+oD1vufSt1zj6PIv7o0Jf Wk++S8haGkVKgQW1Mq9ntmaC10SayG4= -----END CERTIFICATE-----Generated at Sat Jun 13 23:18:27 2026 by rpki-client