$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/4fa2c668-4824-3485-a970-ba019a4f4f2f.roa File: 4fa2c668-4824-3485-a970-ba019a4f4f2f.roa (raw, json) Hash identifier: Xaaz8c7Gm9Oi95ZUaGI+ndMOLmpSE6vUlcgPxrJp3U4= Subject key identifier: A0:0C:E4:EF:7F:8F:C4:FE:3E:D9:0D:F7:67:28:54:70:2A:83:CF:5D Certificate issuer: /CN=e1c66f08-5c7f-40e3-8548-bff01ed700d5 Certificate serial: 010D0C9F4328584E104F2F214DCE1EA9A5B6E340 Authority key identifier: 2B:01:3A:6A:59:99:92:D2:4B:EF:36:05:2F:65:6B:EC:D2:D7:1E:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/4fa2c668-4824-3485-a970-ba019a4f4f2f.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 3257 IP address blocks: 23.140.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/e1c66f08-5c7f-40e3-8548-bff01ed700d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/e1c66f08-5c7f-40e3-8548-bff01ed700d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:2f:21:4d:ce:1e:a9:a5:b6:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1c66f08-5c7f-40e3-8548-bff01ed700d5 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=03c39234-0e56-4ad4-9239-60b66abcdf4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:64:a7:bc:ad:40:ee:bf:33:99:db:56:ca:4b: 37:5b:5c:2f:88:ce:d9:7e:c6:9a:14:55:05:c2:a0: 7c:70:9e:45:3e:0b:eb:87:3f:e0:6a:4f:5c:b8:4e: cb:4f:0a:cb:1a:0c:1c:74:d9:85:75:1a:7d:b7:64: 5d:e8:fc:95:aa:1c:4b:3b:92:fb:57:b3:01:4a:38: ec:2e:27:a9:12:d5:8f:32:7a:e6:85:51:ec:26:55: 79:f1:5a:06:9b:06:6c:83:5e:c3:57:83:bb:ad:ff: cb:32:a1:3a:c2:b5:03:84:c5:ef:ec:82:04:3b:b2: 10:52:c3:a9:4c:ef:4d:2b:fd:56:f5:c4:34:40:cf: ac:90:d7:9f:d2:e2:ca:51:34:33:61:4b:3e:dd:20: a1:32:e5:79:0d:e5:aa:8e:8a:ef:2e:00:dc:26:90: 21:5b:8b:ac:1c:8d:52:43:39:e8:36:7c:25:b7:99: 54:5c:e6:20:12:a4:61:60:6d:66:3b:3d:0d:e9:08: 00:50:80:de:db:ef:3c:4b:d4:a7:20:d4:43:35:18: 89:58:4f:94:c6:1f:8c:c6:d4:42:2d:c4:4b:eb:9b: a0:05:bb:36:45:18:86:4c:0a:34:e8:dc:c6:2d:ac: 59:da:b3:44:02:91:43:63:f3:59:a5:a5:96:1c:41: a2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0C:E4:EF:7F:8F:C4:FE:3E:D9:0D:F7:67:28:54:70:2A:83:CF:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/4fa2c668-4824-3485-a970-ba019a4f4f2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/e1c66f08-5c7f-40e3-8548-bff01ed700d5.crl X509v3 Authority Key Identifier: keyid:2B:01:3A:6A:59:99:92:D2:4B:EF:36:05:2F:65:6B:EC:D2:D7:1E:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5.cer sbgp-ipAddrBlock: critical IPv4: 23.140.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:97:73:ff:b0:84:e9:e0:c1:e2:0d:59:3c:d4:06:48:92:13: 60:95:7c:42:1e:83:cd:2f:6f:87:20:01:a4:ff:e5:d4:1c:e4: ec:56:40:55:0a:49:2c:27:cb:dc:c7:d3:06:65:cb:b4:17:05: 92:6e:b8:49:62:96:3f:02:2f:64:e2:85:8a:8d:1d:f8:b7:77: 1f:a4:24:d6:dc:ef:36:3a:8b:b2:e6:78:b9:ab:47:c7:ca:21: 93:4e:1d:31:b7:73:cd:c4:35:45:fd:ce:81:4e:30:39:9e:30: e0:77:b9:5c:c8:aa:63:e6:b6:ac:37:cf:63:85:c6:c1:07:46: 75:2a:c7:07:8a:ff:2d:6e:39:1f:b7:9b:0b:79:6f:44:16:32: 1c:f2:77:26:7b:83:cb:58:52:f0:f9:e4:b2:ed:c9:46:ae:07: 98:4e:b9:10:c4:50:20:98:bb:82:ba:8c:fb:2c:f2:64:dc:00: 1d:64:b7:75:2d:d3:d1:77:6d:de:f6:c2:21:6f:bd:f2:ee:07: cb:8c:64:af:f0:2f:3f:0c:18:35:5a:1f:42:d1:fe:65:d9:c3: cf:2a:a9:2e:5b:88:f3:61:52:bb:e2:fa:46:f5:01:de:18:a4: d8:68:e9:dd:40:12:7b:05:7a:57:42:e7:ce:fe:4c:65:eb:c0: 27:c9:06:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTy8hTc4eqaW240AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTFjNjZmMDgtNWM3Zi00MGUzLTg1NDgtYmZmMDFlZDcw MGQ1MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MDNjMzkyMzQtMGU1Ni00YWQ0LTkyMzktNjBiNjZhYmNkZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmSnvK1A7r8zmdtWyks3W1wviM7ZfsaaFFUF wqB8cJ5FPgvrhz/gak9cuE7LTwrLGgwcdNmFdRp9t2Rd6PyVqhxLO5L7V7MBSjjs LiepEtWPMnrmhVHsJlV58VoGmwZsg17DV4O7rf/LMqE6wrUDhMXv7IIEO7IQUsOp TO9NK/1W9cQ0QM+skNef0uLKUTQzYUs+3SChMuV5DeWqjorvLgDcJpAhW4usHI1S QznoNnwlt5lUXOYgEqRhYG1mOz0N6QgAUIDe2+88S9SnINRDNRiJWE+Uxh+MxtRC LcRL65ugBbs2RRiGTAo06NzGLaxZ2rNEApFDY/NZpaWWHEGiVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAM5O9/j8T+PtkN92coVHAqg89dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMWM2 NmYwOC01YzdmLTQwZTMtODU0OC1iZmYwMWVkNzAwZDUvNGZhMmM2NjgtNDgyNC0z NDg1LWE5NzAtYmEwMTlhNGY0ZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTFjNjZmMDgtNWM3Zi00MGUzLTg1 NDgtYmZmMDFlZDcwMGQ1L2UxYzY2ZjA4LTVjN2YtNDBlMy04NTQ4LWJmZjAxZWQ3 MDBkNS5jcmwwHwYDVR0jBBgwFoAUKwE6almZktJL7zYFL2Vr7NLXHvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lMWM2NmYwOC01YzdmLTQwZTMtODU0OC1iZmYw MWVkNzAwZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4zMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyXc/+whOngweINWTzUBkiSE2CVfEIeg80vb4cgAaT/5dQc5OxWQFUK SSwny9zH0wZly7QXBZJuuElilj8CL2TihYqNHfi3dx+kJNbc7zY6i7LmeLmrR8fK IZNOHTG3c83ENUX9zoFOMDmeMOB3uVzIqmPmtqw3z2OFxsEHRnUqxweK/y1uOR+3 mwt5b0QWMhzydyZ7g8tYUvD55LLtyUauB5hOuRDEUCCYu4K6jPss8mTcAB1kt3Ut 09F3bd72wiFvvfLuB8uMZK/wLz8MGDVaH0LR/mXZw88qqS5biPNhUrvi+kb1Ad4Y pNho6d1AEnsFeldC587+TGXrwCfJBsE= -----END CERTIFICATE-----Generated at Sat Jun 13 17:00:36 2026 by rpki-client