$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/9bef9ce3-ff36-3c05-bace-1eca3ff3dbd5.roa File: 9bef9ce3-ff36-3c05-bace-1eca3ff3dbd5.roa (raw, json) Hash identifier: IXLwvvvYE+HUYjtA/TbwR9qIIidicwWmoxt0m4sQvAg= Subject key identifier: 01:CA:D0:F9:FB:15:26:7D:7F:C4:14:CF:3A:82:FA:1E:E4:77:09:DB Certificate issuer: /CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Certificate serial: 010D0C9F4328584E104EED51DDC68CB04EA2DC60 Authority key identifier: 96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/9bef9ce3-ff36-3c05-bace-1eca3ff3dbd5.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 133199 IP address blocks: 23.154.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:ed:51:dd:c6:8c:b0:4e:a2:dc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=e0550d5d-2797-445d-9b1f-ee15b6826d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f9:c8:9f:c8:74:88:2d:5c:b6:da:a5:28:ad: 92:22:a4:ea:a4:8a:aa:71:90:45:a4:53:27:05:75: 13:43:b1:34:d1:92:9b:f7:42:aa:ae:26:b1:62:0d: 26:25:e2:0d:3f:68:16:66:96:32:ab:44:ce:32:91: 41:83:56:5d:38:5b:c2:ec:7e:ed:b3:87:af:e9:11: e5:ce:6c:8e:11:29:28:56:62:28:89:6f:27:e6:82: d9:25:e0:58:fd:6c:70:42:c2:f1:f2:54:d0:d5:38: 3b:9c:20:87:d8:d2:b7:de:a6:8f:af:30:e0:a8:ac: 8a:08:da:9e:ee:a8:3a:7e:69:ca:14:76:9a:c3:83: 88:a4:3a:bf:dc:14:53:b2:81:fb:45:09:72:e4:40: 9c:03:bc:e6:60:31:a4:36:b5:6f:e4:0c:69:4c:25: 3e:92:30:39:bf:7f:46:8d:8b:d2:df:27:46:f9:4b: b7:dd:77:d3:b3:13:73:fb:33:3c:7c:eb:c9:26:a8: c4:30:83:db:93:91:7c:da:dc:b8:e0:30:9e:e2:ad: 6b:86:cc:ba:51:5b:52:bc:26:66:a8:0d:34:79:7a: 64:1b:dc:98:86:07:e7:7e:49:53:78:f6:53:7e:18: 71:2b:93:21:13:7d:ab:2a:65:4c:30:c5:a9:07:76: 17:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CA:D0:F9:FB:15:26:7D:7F:C4:14:CF:3A:82:FA:1E:E4:77:09:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/9bef9ce3-ff36-3c05-bace-1eca3ff3dbd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl X509v3 Authority Key Identifier: keyid:96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer sbgp-ipAddrBlock: critical IPv4: 23.154.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:e7:4f:fc:93:6f:80:a5:54:c8:db:41:b5:e3:fa:3e:bd:43: d9:ab:d2:22:98:44:53:aa:76:83:31:74:c2:ac:7b:ce:92:fc: 11:cd:c8:0b:cb:da:84:03:d1:4c:fd:90:0e:10:ed:4f:9e:af: c5:07:56:31:f6:b4:75:bb:7c:f4:30:06:74:8c:e5:1d:c4:01: bf:77:1d:0e:61:6d:e8:88:22:cb:dc:ed:1d:65:d3:1f:18:43: b5:b6:73:89:fa:71:a7:6f:a6:cc:b6:9c:db:80:a4:3e:4b:b3: 69:e4:8f:d8:b9:11:9d:52:6e:65:11:33:d0:26:45:4e:8b:ce: f7:fe:e7:3b:cb:f6:da:76:00:16:54:e9:99:db:0c:32:7f:4a: b2:17:db:26:39:b6:61:c2:69:90:5b:92:c2:88:9a:a7:16:44: 91:cd:09:3c:2f:9f:b6:ff:98:98:68:f4:db:8a:e3:24:6e:f0: 18:1c:f5:23:d6:13:5d:fd:bc:4d:57:8b:06:03:71:71:1c:2e: 4a:73:7e:35:5c:a7:05:b0:7e:d5:70:b7:ac:f7:0f:32:a7:1b: 4a:59:5d:b5:7a:29:86:4d:26:6e:3f:e6:ab:4e:0a:43:3e:34: 8a:49:69:36:00:ae:3b:3f:43:ea:2b:c0:cb:29:56:48:4a:98: 9b:cf:ca:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTu1R3caMsE6i3GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YjgzZmEtMzdhYS00Y2E4LWIwN2MtNWQ3YTYxM2Fm MDliMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk ZTA1NTBkNWQtMjc5Ny00NDVkLTliMWYtZWUxNWI2ODI2ZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvnIn8h0iC1cttqlKK2SIqTqpIqqcZBFpFMn BXUTQ7E00ZKb90KqriaxYg0mJeINP2gWZpYyq0TOMpFBg1ZdOFvC7H7ts4ev6RHl zmyOESkoVmIoiW8n5oLZJeBY/WxwQsLx8lTQ1Tg7nCCH2NK33qaPrzDgqKyKCNqe 7qg6fmnKFHaaw4OIpDq/3BRTsoH7RQly5ECcA7zmYDGkNrVv5AxpTCU+kjA5v39G jYvS3ydG+Uu33XfTsxNz+zM8fOvJJqjEMIPbk5F82ty44DCe4q1rhsy6UVtSvCZm qA00eXpkG9yYhgfnfklTePZTfhhxK5MhE32rKmVMMMWpB3YXWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHK0Pn7FSZ9f8QUzzqC+h7kdwnbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Zjli ODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdhNjEzYWYwOWIvOWJlZjljZTMtZmYzNi0z YzA1LWJhY2UtMWVjYTNmZjNkYmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGY5YjgzZmEtMzdhYS00Y2E4LWIw N2MtNWQ3YTYxM2FmMDliLzRmOWI4M2ZhLTM3YWEtNGNhOC1iMDdjLTVkN2E2MTNh ZjA5Yi5jcmwwHwYDVR0jBBgwFoAUludc273pvvJ5z9UzPWmH7hV7AfowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZjliODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdh NjEzYWYwOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3nT/yTb4ClVMjbQbXj+j69Q9mr0iKYRFOqdoMxdMKse86S/BHNyAvL 2oQD0Uz9kA4Q7U+er8UHVjH2tHW7fPQwBnSM5R3EAb93HQ5hbeiIIsvc7R1l0x8Y Q7W2c4n6cadvpsy2nNuApD5Ls2nkj9i5EZ1SbmURM9AmRU6Lzvf+5zvL9tp2ABZU 6ZnbDDJ/SrIX2yY5tmHCaZBbksKImqcWRJHNCTwvn7b/mJho9NuK4yRu8Bgc9SPW E139vE1XiwYDcXEcLkpzfjVcpwWwftVwt6z3DzKnG0pZXbV6KYZNJm4/5qtOCkM+ NIpJaTYArjs/Q+orwMspVkhKmJvPylM= -----END CERTIFICATE-----Generated at Sat Jun 13 16:54:54 2026 by rpki-client