$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c/535a32ab-3dd9-3d77-84e0-1305e35edb43.roa File: 535a32ab-3dd9-3d77-84e0-1305e35edb43.roa (raw, json) Hash identifier: 9GMm6krzOzjgKDls88vyyTXvNNFUnrTBEEJM2Vi2e80= Subject key identifier: 8B:2E:9B:D6:9D:5F:D1:33:8A:24:FF:83:6A:63:7E:C7:E5:70:7C:43 Certificate issuer: /CN=ea182918-fbda-4bd7-9427-e289276ef48c Certificate serial: 010D0C9F4328584DEEE88E5CDAADCEF3CD2A8680 Authority key identifier: F4:EE:97:6B:CE:0C:49:07:0C:32:C2:B0:E0:F3:27:89:C8:21:7A:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c/535a32ab-3dd9-3d77-84e0-1305e35edb43.roa Signing time: Sat 23 May 2026 21:52:32 +0000 ROA not before: Sat 23 May 2026 21:52:32 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 21868 IP address blocks: 23.168.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c/ea182918-fbda-4bd7-9427-e289276ef48c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c/ea182918-fbda-4bd7-9427-e289276ef48c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ee:e8:8e:5c:da:ad:ce:f3:cd:2a:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea182918-fbda-4bd7-9427-e289276ef48c Validity Not Before: May 23 21:52:32 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=52d3ec18-4819-4110-bea8-780bf7c3d5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a5:1a:c6:7f:ad:d0:4b:e9:88:a2:0a:e8:cd: 34:39:b4:0d:ea:3f:b9:3a:70:21:2e:43:75:0f:22: c5:ed:c1:27:98:25:c7:fd:68:eb:47:05:11:96:f2: 39:e2:b7:34:2d:03:eb:db:08:b2:cb:74:4a:d2:b2: a5:25:5a:47:d5:76:3c:76:95:12:12:49:6e:24:34: 8c:42:6f:56:d0:12:ca:99:02:7a:22:37:45:ff:ee: 0c:a0:93:39:a6:74:c0:c3:92:40:bc:30:66:f3:4a: 0e:12:8d:3a:4a:1b:30:d9:db:c5:e4:b3:6d:ea:ed: e4:e6:14:9c:3a:5e:9a:dd:84:0f:08:ad:24:27:1a: a7:dd:16:38:ae:8c:bd:22:1e:db:7c:a8:56:ba:5d: 67:1d:69:75:27:94:97:31:7c:af:8f:a9:cb:c4:dc: 47:ca:76:86:dc:ff:37:8a:81:3a:db:b0:48:78:a5: fc:b5:05:65:ce:47:40:aa:96:26:25:65:6f:4d:50: ee:07:6c:71:82:7d:50:dc:39:78:58:61:fb:c4:af: 54:d9:e1:1c:de:8e:25:5a:17:f2:4c:93:cc:0d:19: ce:18:2f:0e:be:fd:da:aa:a9:98:d4:c3:e8:60:43: 83:79:a7:78:00:2a:79:6a:53:ec:1c:f2:25:8f:f4: 02:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2E:9B:D6:9D:5F:D1:33:8A:24:FF:83:6A:63:7E:C7:E5:70:7C:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c/535a32ab-3dd9-3d77-84e0-1305e35edb43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c/ea182918-fbda-4bd7-9427-e289276ef48c.crl X509v3 Authority Key Identifier: keyid:F4:EE:97:6B:CE:0C:49:07:0C:32:C2:B0:E0:F3:27:89:C8:21:7A:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c.cer sbgp-ipAddrBlock: critical IPv4: 23.168.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:e7:e2:30:02:76:59:c6:77:58:12:0a:a6:00:e7:4e:20:1f: e5:cb:93:b4:5f:67:cc:90:48:b2:d2:18:af:a3:09:4f:28:8a: 32:b2:89:52:cb:c2:9b:73:fc:eb:86:14:0b:f5:5c:85:5b:7a: ef:ce:70:a5:5b:a9:91:35:eb:9a:cf:0a:bb:fe:75:a0:6c:9c: f8:fe:3f:02:4f:b4:b7:29:8d:b3:9f:60:cc:37:f9:72:1b:6a: 72:1f:d3:56:4c:3c:95:ac:84:94:e9:af:91:0e:9f:fd:9d:ed: 52:77:44:5d:6f:f0:48:b1:2a:b9:c8:53:b9:a5:9a:31:a6:fc: 15:09:1f:e8:c3:a7:2a:be:a2:88:02:b5:33:da:7b:64:65:a8: ae:e9:c3:3f:e2:c7:90:dd:0d:d3:0f:10:d7:38:6c:3a:16:99: be:f2:e7:90:9f:68:4f:85:90:82:17:f4:5e:ca:1f:93:12:9a: 61:ab:63:37:7f:be:8e:22:ee:a9:d9:d0:31:fb:45:d4:b4:ef: b5:06:46:93:47:55:78:42:07:f9:97:5d:2e:49:e5:ce:54:73: ae:98:06:da:30:92:80:a0:34:12:9b:8d:87:d6:22:2e:6e:ad: e6:7d:ee:b8:b0:d7:e2:33:b0:18:c3:78:61:23:b6:c6:e9:45: d1:47:33:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3u6I5c2q3O880qhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWExODI5MTgtZmJkYS00YmQ3LTk0MjctZTI4OTI3NmVm NDhjMB4XDTI2MDUyMzIxNTIzMloXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk NTJkM2VjMTgtNDgxOS00MTEwLWJlYTgtNzgwYmY3YzNkNWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKUaxn+t0EvpiKIK6M00ObQN6j+5OnAhLkN1 DyLF7cEnmCXH/WjrRwURlvI54rc0LQPr2wiyy3RK0rKlJVpH1XY8dpUSEkluJDSM Qm9W0BLKmQJ6IjdF/+4MoJM5pnTAw5JAvDBm80oOEo06Shsw2dvF5LNt6u3k5hSc Ol6a3YQPCK0kJxqn3RY4roy9Ih7bfKhWul1nHWl1J5SXMXyvj6nLxNxHynaG3P83 ioE627BIeKX8tQVlzkdAqpYmJWVvTVDuB2xxgn1Q3Dl4WGH7xK9U2eEc3o4lWhfy TJPMDRnOGC8Ovv3aqqmY1MPoYEODead4ACp5alPsHPIlj/QCvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsum9adX9EziiT/g2pjfsflcHxDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lYTE4 MjkxOC1mYmRhLTRiZDctOTQyNy1lMjg5Mjc2ZWY0OGMvNTM1YTMyYWItM2RkOS0z ZDc3LTg0ZTAtMTMwNWUzNWVkYjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZWExODI5MTgtZmJkYS00YmQ3LTk0 MjctZTI4OTI3NmVmNDhjL2VhMTgyOTE4LWZiZGEtNGJkNy05NDI3LWUyODkyNzZl ZjQ4Yy5jcmwwHwYDVR0jBBgwFoAU9O6Xa84MSQcMMsKw4PMnicgheowwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lYTE4MjkxOC1mYmRhLTRiZDctOTQyNy1lMjg5 Mjc2ZWY0OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6h4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrn4jACdlnGd1gSCqYA504gH+XLk7RfZ8yQSLLSGK+jCU8oijKyiVLL wptz/OuGFAv1XIVbeu/OcKVbqZE165rPCrv+daBsnPj+PwJPtLcpjbOfYMw3+XIb anIf01ZMPJWshJTpr5EOn/2d7VJ3RF1v8EixKrnIU7mlmjGm/BUJH+jDpyq+oogC tTPae2RlqK7pwz/ix5DdDdMPENc4bDoWmb7y55CfaE+FkIIX9F7KH5MSmmGrYzd/ vo4i7qnZ0DH7RdS077UGRpNHVXhCB/mXXS5J5c5Uc66YBtowkoCgNBKbjYfWIi5u reZ97riw1+IzsBjDeGEjtsbpRdFHM1M= -----END CERTIFICATE-----Generated at Sat Jun 13 19:28:21 2026 by rpki-client