$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/85283290-bdb9-441f-99c2-e0b387f44798/b30a0164-f497-38b4-a6c1-d1f0757e3e70.roa File: b30a0164-f497-38b4-a6c1-d1f0757e3e70.roa (raw, json) Hash identifier: n05ydAHquJdw9thaj7XsySwHErK8dgaPg+5MUzdmSSg= Subject key identifier: 31:A1:7D:8C:C2:23:57:4C:5F:CF:0D:98:E8:C1:84:A4:A9:28:48:85 Certificate issuer: /CN=85283290-bdb9-441f-99c2-e0b387f44798 Certificate serial: 010D0C9F4328584E174988C43BAC706BECC37580 Authority key identifier: 0E:89:7F:77:3C:54:8D:A3:C5:19:24:C4:82:79:47:0E:68:A7:AF:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/85283290-bdb9-441f-99c2-e0b387f44798.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/85283290-bdb9-441f-99c2-e0b387f44798/b30a0164-f497-38b4-a6c1-d1f0757e3e70.roa Signing time: Sun 07 Jun 2026 09:00:13 +0000 ROA not before: Sun 07 Jun 2026 09:00:13 +0000 ROA not after: Sat 05 Sep 2026 09:00:13 +0000 asID: 152179 IP address blocks: 23.142.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/85283290-bdb9-441f-99c2-e0b387f44798/85283290-bdb9-441f-99c2-e0b387f44798.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/85283290-bdb9-441f-99c2-e0b387f44798/85283290-bdb9-441f-99c2-e0b387f44798.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/85283290-bdb9-441f-99c2-e0b387f44798.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:17:49:88:c4:3b:ac:70:6b:ec:c3:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85283290-bdb9-441f-99c2-e0b387f44798 Validity Not Before: Jun 7 09:00:13 2026 GMT Not After : Sep 5 09:00:13 2026 GMT Subject: CN=76703128-15b4-4644-a078-db8abfb09774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0e:ae:93:be:33:cf:a2:fc:89:0d:45:dc:24: c6:17:c5:e8:31:d7:af:43:74:2d:49:e0:d3:d3:d9: df:fd:15:0d:d2:21:c0:47:90:03:50:c5:a6:5e:3f: e0:97:b7:9e:0a:7c:40:ed:56:47:fa:60:df:e5:4b: 94:a2:b6:8b:ad:f1:f9:04:0a:d4:2a:a1:c2:95:1a: e1:df:78:1e:06:8c:3a:cc:4d:62:d0:d2:4b:76:c7: fb:4c:17:3c:30:4a:43:49:00:17:e6:03:4e:c5:dc: 2b:d0:d4:61:a0:c1:4d:ff:f6:1b:39:4d:f2:80:ca: 3e:54:8f:b8:a3:76:1a:ac:83:f2:df:c2:9a:df:d9: 06:b6:cb:05:7b:24:b3:73:1b:85:43:83:aa:f0:1d: a7:d7:88:d3:ae:76:8d:8a:f2:d3:5d:dc:a8:cb:d2: b5:49:ea:ce:48:72:18:56:e4:f0:cf:98:cd:28:24: 37:9d:ca:3d:d4:9d:72:ef:43:fb:5d:c8:4e:59:1b: d9:55:6a:a1:e9:3a:0a:0f:c2:09:ce:c0:92:d1:4f: bb:e4:af:be:12:aa:7a:0b:62:ad:eb:40:d3:34:fa: b7:cb:8d:2f:60:56:c2:d3:84:93:f8:db:b3:e6:df: c4:ec:23:52:e5:f7:11:37:b4:02:aa:0c:cd:b6:c4: 7b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A1:7D:8C:C2:23:57:4C:5F:CF:0D:98:E8:C1:84:A4:A9:28:48:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/85283290-bdb9-441f-99c2-e0b387f44798/b30a0164-f497-38b4-a6c1-d1f0757e3e70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/85283290-bdb9-441f-99c2-e0b387f44798/85283290-bdb9-441f-99c2-e0b387f44798.crl X509v3 Authority Key Identifier: keyid:0E:89:7F:77:3C:54:8D:A3:C5:19:24:C4:82:79:47:0E:68:A7:AF:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/85283290-bdb9-441f-99c2-e0b387f44798.cer sbgp-ipAddrBlock: critical IPv4: 23.142.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a3:21:dc:7a:12:1b:c3:35:ca:72:1a:86:a1:e9:14:d8:9d: 7c:a0:24:ee:6a:13:6f:6d:d5:3b:8e:5f:54:de:2e:f4:d6:c6: 19:86:3e:e8:6b:53:5e:e7:99:ec:a7:59:e1:de:0c:79:68:0c: 06:75:c8:de:d8:d0:75:32:75:bb:15:6c:3a:d9:90:8d:50:3d: 3a:03:62:83:34:d4:e0:69:cd:09:a6:07:61:b7:60:69:b7:c2: d5:c1:78:fc:58:60:27:3f:59:83:af:f0:b1:ad:f4:28:32:fe: 50:6c:cd:69:bc:53:91:dd:5c:06:75:50:c8:54:be:69:3d:d8: 54:9b:45:c0:19:e5:d2:ad:b7:1b:c8:ce:e7:2b:3c:b2:31:20: be:21:05:db:84:6f:f6:91:3c:38:00:c9:09:a5:61:20:d5:1c: 49:5f:25:86:bd:63:ad:eb:1c:11:d8:d9:24:10:76:dd:41:98: 42:3c:e0:61:39:94:3b:e5:72:4d:b9:35:7a:f8:2b:6a:dd:2f: ff:4a:f3:4c:d5:7e:80:62:ea:95:31:4d:51:57:b1:84:ed:7f: 90:65:50:84:40:c8:c1:f2:80:1b:89:3e:65:8a:9c:5a:ab:29: d8:26:c1:dd:bc:74:95:b3:e2:a2:94:5e:03:3c:d1:d7:ec:cc: 0e:58:27:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4XSYjEO6xwa+zDdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUyODMyOTAtYmRiOS00NDFmLTk5YzItZTBiMzg3ZjQ0 Nzk4MB4XDTI2MDYwNzA5MDAxM1oXDTI2MDkwNTA5MDAxM1owLzEtMCsGA1UEAxMk NzY3MDMxMjgtMTViNC00NjQ0LWEwNzgtZGI4YWJmYjA5Nzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ6uk74zz6L8iQ1F3CTGF8XoMdevQ3QtSeDT 09nf/RUN0iHAR5ADUMWmXj/gl7eeCnxA7VZH+mDf5UuUoraLrfH5BArUKqHClRrh 33geBow6zE1i0NJLdsf7TBc8MEpDSQAX5gNOxdwr0NRhoMFN//YbOU3ygMo+VI+4 o3YarIPy38Ka39kGtssFeySzcxuFQ4Oq8B2n14jTrnaNivLTXdyoy9K1SerOSHIY VuTwz5jNKCQ3nco91J1y70P7XchOWRvZVWqh6ToKD8IJzsCS0U+75K++Eqp6C2Kt 60DTNPq3y40vYFbC04ST+Nuz5t/E7CNS5fcRN7QCqgzNtsR7UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGhfYzCI1dMX88NmOjBhKSpKEiFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84NTI4 MzI5MC1iZGI5LTQ0MWYtOTljMi1lMGIzODdmNDQ3OTgvYjMwYTAxNjQtZjQ5Ny0z OGI0LWE2YzEtZDFmMDc1N2UzZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODUyODMyOTAtYmRiOS00NDFmLTk5 YzItZTBiMzg3ZjQ0Nzk4Lzg1MjgzMjkwLWJkYjktNDQxZi05OWMyLWUwYjM4N2Y0 NDc5OC5jcmwwHwYDVR0jBBgwFoAUDol/dzxUjaPFGSTEgnlHDminr7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84NTI4MzI5MC1iZGI5LTQ0MWYtOTljMi1lMGIz ODdmNDQ3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF45sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGjIdx6EhvDNcpyGoah6RTYnXygJO5qE29t1TuOX1TeLvTWxhmGPuhr U17nmeynWeHeDHloDAZ1yN7Y0HUydbsVbDrZkI1QPToDYoM01OBpzQmmB2G3YGm3 wtXBePxYYCc/WYOv8LGt9Cgy/lBszWm8U5HdXAZ1UMhUvmk92FSbRcAZ5dKttxvI zucrPLIxIL4hBduEb/aRPDgAyQmlYSDVHElfJYa9Y63rHBHY2SQQdt1BmEI84GE5 lDvlck25NXr4K2rdL/9K80zVfoBi6pUxTVFXsYTtf5BlUIRAyMHygBuJPmWKnFqr Kdgmwd28dJWz4qKUXgM80dfszA5YJ7A= -----END CERTIFICATE-----Generated at Sun Jun 14 00:01:12 2026 by rpki-client