$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/dba63869-4b1a-3e23-9b17-f38a9a8e30a2.roa File: dba63869-4b1a-3e23-9b17-f38a9a8e30a2.roa (raw, json) Hash identifier: OLcenH9a5g4BJ9BBjmc8pUiIvy6V2zVecDVHf1KxgOY= Subject key identifier: F6:F8:82:83:24:4A:2B:1F:CF:89:68:3F:85:00:6D:96:4D:86:42:30 Certificate issuer: /CN=cf2b524b-14b9-47ee-b938-34b0cc40ec5e Certificate serial: 010D0C9F4328584DEF45DF85EED1E9CB4872C080 Authority key identifier: 58:75:2F:2C:FB:91:D0:C5:D6:87:B1:CE:3C:32:B6:4E:17:85:EF:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/dba63869-4b1a-3e23-9b17-f38a9a8e30a2.roa Signing time: Sun 24 May 2026 01:00:27 +0000 ROA not before: Sun 24 May 2026 01:00:27 +0000 ROA not after: Sat 22 Aug 2026 01:00:27 +0000 asID: 400289 IP address blocks: 23.132.40.0/24 maxlen: 24 23.152.8.0/24 maxlen: 24 2606:9440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ef:45:df:85:ee:d1:e9:cb:48:72:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf2b524b-14b9-47ee-b938-34b0cc40ec5e Validity Not Before: May 24 01:00:27 2026 GMT Not After : Aug 22 01:00:27 2026 GMT Subject: CN=f26d3cc7-0c1e-420e-8199-067a5d7a81a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:c5:4a:66:99:7c:76:2c:b9:21:ba:cf:62: 92:b6:20:96:28:72:73:2e:72:1d:c5:16:f3:e5:fd: 3f:97:a7:c6:01:c9:5a:f5:83:32:d2:c0:10:ad:1d: d5:e6:97:f6:ba:65:43:9e:ec:f9:c4:db:9e:ae:50: 54:e7:60:38:f1:f8:28:2c:99:8e:23:cd:86:1e:f3: 94:8d:c6:a2:6f:22:9b:f2:80:a0:0a:23:22:70:7c: f6:ce:ea:a3:47:c2:10:89:67:71:8f:9e:1e:a2:3f: 05:98:5c:e8:a0:ae:6b:fe:6d:bf:fa:58:ce:a6:ba: 42:9b:57:42:2e:a0:eb:de:f1:d3:dd:3d:d4:78:95: cb:8a:69:0a:61:6a:01:07:22:b8:84:77:e9:fb:58: 26:fb:f1:7c:35:94:a2:90:4b:ac:55:92:d8:2a:07: 7c:06:cf:1c:ed:fa:df:c8:29:07:6f:1e:af:00:3d: dd:78:f8:97:7e:18:82:37:14:6c:34:64:c8:77:a2: 50:93:44:d2:8b:6e:0c:75:88:8b:e3:a4:c1:cd:f0: 3e:d2:75:a3:81:e2:d4:8f:57:01:6f:60:a3:13:c5: 52:7a:35:69:85:53:38:48:39:f3:0a:f6:a2:ca:c5: dc:8f:bb:97:9b:c0:fc:ab:9a:85:be:d0:c8:09:cf: af:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F8:82:83:24:4A:2B:1F:CF:89:68:3F:85:00:6D:96:4D:86:42:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/dba63869-4b1a-3e23-9b17-f38a9a8e30a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.crl X509v3 Authority Key Identifier: keyid:58:75:2F:2C:FB:91:D0:C5:D6:87:B1:CE:3C:32:B6:4E:17:85:EF:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.cer sbgp-ipAddrBlock: critical IPv4: 23.132.40.0/24 23.152.8.0/24 IPv6: 2606:9440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:71:88:53:1a:aa:cf:36:73:15:0b:a3:74:7a:db:43:e6:10: fb:2c:46:39:1d:6e:48:70:b4:91:14:43:99:ec:80:32:fb:3b: 5f:83:7e:24:c5:4b:00:73:35:bd:32:80:5e:b1:2a:84:fa:18: dd:37:c8:f2:ae:a5:82:98:2c:97:d2:eb:34:1d:7a:70:ab:71: e9:43:a8:70:0f:7e:32:67:54:8c:27:71:b9:62:88:bc:1e:19: fc:e1:fc:bd:bd:05:f3:22:04:e1:05:21:77:81:79:93:cc:a3: 54:12:59:7a:0e:1e:75:5c:a7:7d:e3:b2:3b:21:fd:34:1e:7d: 4b:40:a4:fc:06:8c:4e:6a:aa:d0:a8:56:4b:ce:72:0d:89:5e: 30:a1:02:41:3c:14:72:3e:ba:e5:c7:65:ad:0a:fe:f7:6c:15: 74:bc:80:ed:62:01:0a:b0:37:1d:21:5e:b9:54:f7:16:e0:cc: e5:36:da:78:50:0d:be:44:32:0e:df:d2:b7:fc:00:30:75:0d: 4c:ee:2b:02:b8:81:34:af:92:7f:ce:41:cd:3d:04:e3:ea:3c: 7a:43:fc:ac:fe:2d:08:56:22:6a:98:34:33:58:bb:e8:16:ca: c1:12:57:d5:d7:72:f5:cf:89:b9:f5:0f:33:09:0e:b8:53:bd: 84:2e:06:46 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE3vRd+F7tHpy0hywIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YyYjUyNGItMTRiOS00N2VlLWI5MzgtMzRiMGNjNDBl YzVlMB4XDTI2MDUyNDAxMDAyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk ZjI2ZDNjYzctMGMxZS00MjBlLTgxOTktMDY3YTVkN2E4MWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5jFSmaZfHYsuSG6z2KStiCWKHJzLnIdxRbz 5f0/l6fGAcla9YMy0sAQrR3V5pf2umVDnuz5xNuerlBU52A48fgoLJmOI82GHvOU jcaibyKb8oCgCiMicHz2zuqjR8IQiWdxj54eoj8FmFzooK5r/m2/+ljOprpCm1dC LqDr3vHT3T3UeJXLimkKYWoBByK4hHfp+1gm+/F8NZSikEusVZLYKgd8Bs8c7frf yCkHbx6vAD3dePiXfhiCNxRsNGTId6JQk0TSi24MdYiL46TBzfA+0nWjgeLUj1cB b2CjE8VSejVphVM4SDnzCvaiysXcj7uXm8D8q5qFvtDICc+v7QIDAQABo4IDajCC A2YwHQYDVR0OBBYEFPb4goMkSisfz4loP4UAbZZNhkIwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjJi NTI0Yi0xNGI5LTQ3ZWUtYjkzOC0zNGIwY2M0MGVjNWUvZGJhNjM4NjktNGIxYS0z ZTIzLTliMTctZjM4YTlhOGUzMGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2YyYjUyNGItMTRiOS00N2VlLWI5 MzgtMzRiMGNjNDBlYzVlL2NmMmI1MjRiLTE0YjktNDdlZS1iOTM4LTM0YjBjYzQw ZWM1ZS5jcmwwHwYDVR0jBBgwFoAUWHUvLPuR0MXWh7HOPDK2TheF76kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjJiNTI0Yi0xNGI5LTQ3ZWUtYjkzOC0zNGIw Y2M0MGVjNWUuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF4QoAwQA F5gIMA0EAgACMAcDBQAmBpRAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGVxiFMaqs82cxULo3R620PmEPss RjkdbkhwtJEUQ5nsgDL7O1+DfiTFSwBzNb0ygF6xKoT6GN03yPKupYKYLJfS6zQd enCrcelDqHAPfjJnVIwncbliiLweGfzh/L29BfMiBOEFIXeBeZPMo1QSWXoOHnVc p33jsjsh/TQefUtApPwGjE5qqtCoVkvOcg2JXjChAkE8FHI+uuXHZa0K/vdsFXS8 gO1iAQqwNx0hXrlU9xbgzOU22nhQDb5EMg7f0rf8ADB1DUzuKwK4gTSvkn/OQc09 BOPqPHpD/Kz+LQhWImqYNDNYu+gWysESV9XXcvXPibn1DzMJDrhTvYQuBkY= -----END CERTIFICATE-----Generated at Sat Jun 13 23:43:20 2026 by rpki-client