$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/bedc2541-9f1d-3098-ad90-8907351a956b.roa File: bedc2541-9f1d-3098-ad90-8907351a956b.roa (raw, json) Hash identifier: P44/mYg5DGHkedfDP1ImX1JDd91e/oQX3Gmiv9Uo8QI= Subject key identifier: D4:19:80:89:6F:8C:66:BA:E3:91:33:AA:54:C2:B9:0C:B3:0C:A1:5E Certificate issuer: /CN=f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d Certificate serial: 010D0C9F4328584E0435F960CB4CE71EE1ED25C0 Authority key identifier: 26:96:45:A4:79:6C:86:91:3C:0B:3D:35:A2:3B:A2:35:7F:81:18:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/bedc2541-9f1d-3098-ad90-8907351a956b.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 8095 IP address blocks: 23.154.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:f9:60:cb:4c:e7:1e:e1:ed:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=16cb606d-5b02-4200-a743-3e3329923588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3a:dc:58:78:f7:47:03:98:20:2e:11:78:21: 5f:a0:9f:d1:c3:6b:03:46:7c:f6:49:57:02:77:9e: 94:c5:14:ba:43:92:22:09:0f:4c:18:5b:7e:30:5e: 72:93:fe:f2:9f:6f:3e:21:fd:15:75:34:f2:7f:72: 86:1a:63:22:42:be:1b:f7:61:e0:e6:f8:02:1e:ff: 84:04:a5:e1:cc:4a:27:78:47:b0:61:06:4b:0c:df: a9:41:63:2c:07:54:3e:e8:66:13:78:b8:45:c1:0f: 1a:7e:24:bb:00:b6:9c:2d:0a:70:e6:80:39:41:35: 51:8d:51:cb:96:be:38:a9:1a:ab:8b:7c:6a:8f:1d: 5c:23:5e:61:3a:1b:3a:c7:c1:3b:26:86:6d:17:53: f8:25:0d:38:13:19:2b:4f:c3:7c:64:3e:46:2d:2a: 20:89:13:9e:87:de:f6:1a:59:c9:9a:8a:ce:4a:6b: 97:cf:1b:eb:f2:db:1a:37:f7:84:13:5c:72:33:1e: 14:05:3f:52:47:9a:85:a1:34:4c:a4:63:dc:c8:69: 55:ef:10:8f:c1:fd:28:99:f6:cc:a3:bf:a7:4c:d8: 07:85:2f:7a:98:a6:99:e6:af:6a:7c:dc:6b:e7:c0: 93:d2:26:cc:c6:a0:b7:ce:fb:fd:59:c5:66:cd:74: d9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:19:80:89:6F:8C:66:BA:E3:91:33:AA:54:C2:B9:0C:B3:0C:A1:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/bedc2541-9f1d-3098-ad90-8907351a956b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.crl X509v3 Authority Key Identifier: keyid:26:96:45:A4:79:6C:86:91:3C:0B:3D:35:A2:3B:A2:35:7F:81:18:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer sbgp-ipAddrBlock: critical IPv4: 23.154.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:73:62:27:e8:87:c5:44:c0:99:5f:61:d7:fd:f1:3b:1e:3a: 58:7f:e2:1e:41:c0:92:f6:aa:f9:73:0b:d3:b7:d1:80:ea:9d: f8:03:d7:b8:a3:bb:1e:e7:fb:0f:08:d2:9b:21:48:03:44:d4: c0:b0:69:82:85:bd:ed:53:e0:62:82:60:32:ef:ca:9f:62:a9: 29:07:4d:08:59:b7:f0:fc:d7:c5:42:8c:2e:19:aa:bd:94:db: 12:b5:a5:07:e1:41:ba:3a:ec:97:b4:36:13:b9:4f:d6:2b:be: 9a:f5:f0:c9:5e:cd:00:5d:67:da:e5:7e:a1:38:06:27:09:28: 9d:a4:34:90:ca:0e:1b:9d:77:93:af:99:40:b9:56:3d:93:99: 2d:a3:3b:a2:38:a8:50:dc:84:48:89:0e:3b:f7:e3:f6:9d:38: 87:5d:a1:8a:9f:29:ea:4e:6f:e7:c4:0c:de:7d:64:4f:dc:4b: fe:56:2f:ee:23:25:2a:ea:68:f1:3e:0b:16:8a:73:79:5f:54: 48:9c:71:40:df:ed:b8:20:69:d3:fb:b7:4f:bd:53:0b:ec:f1: eb:e9:50:26:cb:82:ca:71:a0:49:72:8f:b6:7f:d0:b3:1d:39: 46:56:12:cc:c5:80:62:50:97:9d:5a:62:54:fb:3a:5a:6a:45: 92:66:14:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENflgy0znHuHtJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhkZTg5YWItY2E4Yy00ZWE1LWI4YjktYjc5MzEzZjBk NDhkMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk MTZjYjYwNmQtNWIwMi00MjAwLWE3NDMtM2UzMzI5OTIzNTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjrcWHj3RwOYIC4ReCFfoJ/Rw2sDRnz2SVcC d56UxRS6Q5IiCQ9MGFt+MF5yk/7yn28+If0VdTTyf3KGGmMiQr4b92Hg5vgCHv+E BKXhzEoneEewYQZLDN+pQWMsB1Q+6GYTeLhFwQ8afiS7ALacLQpw5oA5QTVRjVHL lr44qRqri3xqjx1cI15hOhs6x8E7JoZtF1P4JQ04ExkrT8N8ZD5GLSogiROeh972 GlnJmorOSmuXzxvr8tsaN/eEE1xyMx4UBT9SR5qFoTRMpGPcyGlV7xCPwf0omfbM o7+nTNgHhS96mKaZ5q9qfNxr58CT0ibMxqC3zvv9WcVmzXTZ7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQZgIlvjGa645EzqlTCuQyzDKFeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOGRl ODlhYi1jYThjLTRlYTUtYjhiOS1iNzkzMTNmMGQ0OGQvYmVkYzI1NDEtOWYxZC0z MDk4LWFkOTAtODkwNzM1MWE5NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjhkZTg5YWItY2E4Yy00ZWE1LWI4 YjktYjc5MzEzZjBkNDhkL2Y4ZGU4OWFiLWNhOGMtNGVhNS1iOGI5LWI3OTMxM2Yw ZDQ4ZC5jcmwwHwYDVR0jBBgwFoAUJpZFpHlshpE8Cz01ojuiNX+BGMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mOGRlODlhYi1jYThjLTRlYTUtYjhiOS1iNzkz MTNmMGQ0OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5rIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxzYifoh8VEwJlfYdf98TseOlh/4h5BwJL2qvlzC9O30YDqnfgD17ij ux7n+w8I0pshSANE1MCwaYKFve1T4GKCYDLvyp9iqSkHTQhZt/D818VCjC4Zqr2U 2xK1pQfhQbo67Je0NhO5T9Yrvpr18MlezQBdZ9rlfqE4BicJKJ2kNJDKDhudd5Ov mUC5Vj2TmS2jO6I4qFDchEiJDjv34/adOIddoYqfKepOb+fEDN59ZE/cS/5WL+4j JSrqaPE+CxaKc3lfVEiccUDf7bggadP7t0+9Uwvs8evpUCbLgspxoElyj7Z/0LMd OUZWEszFgGJQl51aYlT7OlpqRZJmFL4= -----END CERTIFICATE-----Generated at Sat Jun 13 19:26:03 2026 by rpki-client