$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa File: 2d0718a0-7c15-3300-af7e-f83127e2444a.roa (raw, json) Hash identifier: fsK/dYAfMfrfEp2cI2MhFXooXqVs92cpvP4hqLIUjqw= Subject key identifier: BD:7F:5C:8B:3C:A8:DE:41:9A:F3:D6:32:1F:7F:7D:8A:D2:50:32:44 Certificate issuer: /CN=ec7ea071-9ad8-46c5-97de-de149c4a5a78 Certificate serial: 010D0C9F4328584E104EE71708B41D8F56616F00 Authority key identifier: 54:37:C6:D0:49:4F:D4:29:D0:C4:97:3B:92:99:0B:BC:40:6B:C9:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 400893 IP address blocks: 23.153.0.0/24 maxlen: 24 172.82.8.0/22 maxlen: 24 2602:ff2a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:e7:17:08:b4:1d:8f:56:61:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec7ea071-9ad8-46c5-97de-de149c4a5a78 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=7581a29a-43e2-4e04-8b5d-5583a415937d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bd:ba:2b:c7:b0:37:0a:05:05:02:07:03:38: d0:d6:2b:a4:05:93:5d:dc:83:0a:b5:07:af:d0:9c: 21:47:68:48:0d:fd:bd:04:45:ab:15:ff:ac:19:84: 2d:cd:96:32:fb:30:c2:aa:b2:27:db:5f:3d:10:bc: 64:18:00:36:5e:f6:2d:d3:10:97:d9:77:70:1e:b4: 62:3a:5f:aa:21:e0:23:13:3d:bb:26:c5:61:62:83: 04:b8:3f:64:07:93:ba:1b:d8:37:2c:25:2b:e0:8c: 50:ab:cc:b3:be:4b:5e:3a:db:50:78:3d:4a:00:16: 6b:d2:ae:e6:f8:2e:36:9a:82:98:3b:bc:fa:19:44: 15:36:46:65:e7:13:c9:3e:eb:5c:16:e3:73:0a:02: 9b:1b:f9:a9:a5:f7:4b:33:97:13:7c:24:7f:5d:5d: 5e:34:32:e4:d0:ca:fe:16:f3:8a:4d:8c:eb:17:b1: 23:92:8d:00:7d:f1:20:72:9b:ce:d8:09:bc:ca:09: 70:03:ce:17:c1:e4:7f:a1:84:9b:ec:42:84:2b:9e: 27:5c:6e:43:1a:e2:36:89:6a:6d:81:d4:bb:30:dc: 8d:62:ac:6f:f9:56:e6:59:26:6e:de:2e:b7:89:40: 38:af:d8:ee:af:9d:85:bf:3c:e0:0a:62:17:9b:fb: dd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7F:5C:8B:3C:A8:DE:41:9A:F3:D6:32:1F:7F:7D:8A:D2:50:32:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.crl X509v3 Authority Key Identifier: keyid:54:37:C6:D0:49:4F:D4:29:D0:C4:97:3B:92:99:0B:BC:40:6B:C9:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer sbgp-ipAddrBlock: critical IPv4: 23.153.0.0/24 172.82.8.0/22 IPv6: 2602:ff2a::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:fd:34:48:7e:67:69:51:ec:ca:5e:66:1c:87:5b:46:85:0b: ce:d6:25:95:f6:67:5f:96:44:c2:5c:da:d7:7c:0a:6e:8e:35: 4c:3d:3b:cb:45:0e:f1:df:f4:70:e8:e0:dc:90:0f:54:a8:2c: 45:af:20:1d:72:4f:35:b5:70:6d:58:fc:9c:9d:75:65:59:7d: cf:81:0e:8a:c2:07:05:21:cd:b6:65:11:5d:0d:79:57:8e:36: 20:2d:2e:62:ad:c9:48:04:95:73:26:a1:64:0b:87:38:38:55: a2:e1:6b:af:8b:f9:da:3a:e6:8d:5d:7c:24:c2:15:c7:c8:e6: ef:aa:0b:50:5b:ca:0e:d1:c0:19:82:47:a0:47:bd:fd:96:d3: fa:c2:d0:ae:11:f6:cc:0f:45:98:9c:6c:51:41:e6:f4:ce:26: 8d:3e:d5:49:b6:9d:11:7f:86:cf:5d:df:fe:50:85:25:10:2c: d5:78:9c:19:a4:a5:f5:1b:25:8b:dc:6a:a5:c4:4f:62:8b:92: 8a:19:01:d7:66:0b:e6:4e:ae:50:b5:f4:6d:a0:92:aa:9f:bc: 78:e6:6f:ac:87:3d:bc:70:17:ca:6b:1b:84:db:f1:e5:a3:0b: 57:71:c6:59:b1:e1:64:a1:6b:94:cf:a1:38:2d:10:03:ed:5d: c8:75:ab:aa -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE4QTucXCLQdj1ZhbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM3ZWEwNzEtOWFkOC00NmM1LTk3ZGUtZGUxNDljNGE1 YTc4MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NzU4MWEyOWEtNDNlMi00ZTA0LThiNWQtNTU4M2E0MTU5MzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob26K8ewNwoFBQIHAzjQ1iukBZNd3IMKtQev 0JwhR2hIDf29BEWrFf+sGYQtzZYy+zDCqrIn2189ELxkGAA2XvYt0xCX2XdwHrRi Ol+qIeAjEz27JsVhYoMEuD9kB5O6G9g3LCUr4IxQq8yzvkteOttQeD1KABZr0q7m +C42moKYO7z6GUQVNkZl5xPJPutcFuNzCgKbG/mppfdLM5cTfCR/XV1eNDLk0Mr+ FvOKTYzrF7Ejko0AffEgcpvO2Am8yglwA84XweR/oYSb7EKEK54nXG5DGuI2iWpt gdS7MNyNYqxv+VbmWSZu3i63iUA4r9jur52FvzzgCmIXm/vdXwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFL1/XIs8qN5BmvPWMh9/fYrSUDJEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzdl YTA3MS05YWQ4LTQ2YzUtOTdkZS1kZTE0OWM0YTVhNzgvMmQwNzE4YTAtN2MxNS0z MzAwLWFmN2UtZjgzMTI3ZTI0NDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWM3ZWEwNzEtOWFkOC00NmM1LTk3 ZGUtZGUxNDljNGE1YTc4L2VjN2VhMDcxLTlhZDgtNDZjNS05N2RlLWRlMTQ5YzRh NWE3OC5jcmwwHwYDVR0jBBgwFoAUVDfG0ElP1CnQxJc7kpkLvEBryc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzdlYTA3MS05YWQ4LTQ2YzUtOTdkZS1kZTE0 OWM0YTVhNzguY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF5kAAwQC rFIIMA0EAgACMAcDBQAmAv8qMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGj9NEh+Z2lR7MpeZhyHW0aFC87W JZX2Z1+WRMJc2td8Cm6ONUw9O8tFDvHf9HDo4NyQD1SoLEWvIB1yTzW1cG1Y/Jyd dWVZfc+BDorCBwUhzbZlEV0NeVeONiAtLmKtyUgElXMmoWQLhzg4VaLha6+L+do6 5o1dfCTCFcfI5u+qC1Bbyg7RwBmCR6BHvf2W0/rC0K4R9swPRZicbFFB5vTOJo0+ 1Um2nRF/hs9d3/5QhSUQLNV4nBmkpfUbJYvcaqXET2KLkooZAddmC+ZOrlC19G2g kqqfvHjmb6yHPbxwF8prG4Tb8eWjC1dxxlmx4WSha5TPoTgtEAPtXch1q6o= -----END CERTIFICATE-----Generated at Sun Jun 14 01:08:49 2026 by rpki-client