$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/455b85de-a208-333d-ad2f-1cacd114a2e0.roa File: 455b85de-a208-333d-ad2f-1cacd114a2e0.roa (raw, json) Hash identifier: UEUZp6yq3X9V4ZrbLx5MOLKCBWY4DGwcFfqWRQmDLV4= Subject key identifier: D5:82:A2:28:5C:75:10:FD:3E:1E:96:15:15:EC:DC:AD:5C:9F:09:EC Certificate issuer: /CN=d90dc44b-85b6-4247-b579-eb8cfd8e97fe Certificate serial: 010D0C9F4328584D9FB56CBB59CCD7585984C620 Authority key identifier: 49:E5:24:6E:2B:90:48:3B:5E:6B:B4:77:16:E9:94:54:0F:B3:18:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/455b85de-a208-333d-ad2f-1cacd114a2e0.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 21557 IP address blocks: 23.128.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:6c:bb:59:cc:d7:58:59:84:c6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90dc44b-85b6-4247-b579-eb8cfd8e97fe Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=cb6ed0b2-c850-495f-bd69-a6cde7f970d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f1:48:93:45:5a:cf:c4:c1:44:f2:d8:13:1e: 2a:e7:d3:29:3a:a2:68:65:ca:0f:47:d3:c4:e7:ea: 2e:e6:ff:2d:a9:e9:59:75:e8:87:6c:1c:01:dc:b2: 17:5c:6b:28:5c:b7:13:f2:5b:7f:11:11:0f:a5:28: 01:21:a9:6d:37:e7:a0:43:d7:dc:89:dd:d5:eb:47: 3a:a5:93:f3:99:db:cb:a7:29:bd:f0:9c:0b:f6:68: 5b:86:2e:28:6a:2d:33:03:91:5f:4e:35:04:33:47: 4d:7a:75:21:00:eb:75:9a:b7:d3:3c:7c:71:16:17: 1b:2b:f0:bd:6f:34:2e:cb:bf:c1:fe:13:9b:26:00: 16:ad:79:2f:41:c2:78:15:76:20:68:b8:d8:ea:7a: dc:5f:1b:ae:0b:c6:0b:67:9a:71:e9:47:c1:df:a4: 5f:59:ff:c8:56:8c:36:65:76:b1:38:90:e7:8f:6c: 48:b4:cc:f2:06:33:13:c0:f8:0d:0d:b3:27:9f:52: 1f:39:8a:e5:3f:99:f3:58:c4:b9:af:f5:d2:75:67: 7b:94:47:cf:5c:64:1a:64:13:86:90:86:47:be:de: 82:0a:1f:46:54:87:a6:d3:40:5f:be:a2:3e:0a:76: ca:6e:ee:31:d4:47:26:8d:6f:3b:53:7c:2d:f7:c3: 60:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:82:A2:28:5C:75:10:FD:3E:1E:96:15:15:EC:DC:AD:5C:9F:09:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/455b85de-a208-333d-ad2f-1cacd114a2e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.crl X509v3 Authority Key Identifier: keyid:49:E5:24:6E:2B:90:48:3B:5E:6B:B4:77:16:E9:94:54:0F:B3:18:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer sbgp-ipAddrBlock: critical IPv4: 23.128.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:56:c9:0e:aa:7b:1e:60:c6:74:bf:d3:2b:47:2a:e3:f3:95: 3c:b9:21:ab:51:ba:36:cd:40:7b:61:75:cc:95:b3:0c:63:0d: c4:68:80:6e:bb:0e:b8:6c:9e:d4:ca:84:89:9c:e2:9f:fa:11: 0c:d8:f8:80:32:fb:f8:0a:83:a1:81:43:d5:8e:bf:17:80:83: 59:df:b2:e1:03:69:4e:99:10:88:63:2c:d6:b5:8b:39:b4:d4: 72:4a:d9:67:e0:bd:06:03:bb:3b:8c:e1:85:60:bd:e0:70:47: 0c:58:95:a6:d9:1e:df:76:2a:8a:95:63:0a:49:4e:77:e0:a1: b1:ca:38:b8:b7:17:f1:a4:4b:1c:7c:c0:ff:da:12:59:eb:07: 97:e8:c4:41:ff:0a:a1:61:2b:98:55:4a:b4:6c:1b:76:67:b1: 17:8f:6d:da:62:04:0e:60:1f:90:ab:8b:af:95:96:ce:60:6d: 8e:52:e8:5d:0a:2d:10:eb:21:53:48:6f:d1:8d:43:00:9d:a5: 29:b5:3b:92:03:18:76:63:38:40:9f:6f:60:d1:2b:3d:7c:8a: ee:89:a5:20:6f:cb:67:66:81:c1:28:79:bd:a4:16:01:4d:a4: 13:bc:a9:23:34:44:43:aa:fc:69:15:9a:85:25:29:cd:b4:07: 24:04:ad:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftWy7WczXWFmExiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDkwZGM0NGItODViNi00MjQ3LWI1NzktZWI4Y2ZkOGU5 N2ZlMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk Y2I2ZWQwYjItYzg1MC00OTVmLWJkNjktYTZjZGU3Zjk3MGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofFIk0Vaz8TBRPLYEx4q59MpOqJoZcoPR9PE 5+ou5v8tqelZdeiHbBwB3LIXXGsoXLcT8lt/EREPpSgBIaltN+egQ9fcid3V60c6 pZPzmdvLpym98JwL9mhbhi4oai0zA5FfTjUEM0dNenUhAOt1mrfTPHxxFhcbK/C9 bzQuy7/B/hObJgAWrXkvQcJ4FXYgaLjY6nrcXxuuC8YLZ5px6UfB36RfWf/IVow2 ZXaxOJDnj2xItMzyBjMTwPgNDbMnn1IfOYrlP5nzWMS5r/XSdWd7lEfPXGQaZBOG kIZHvt6CCh9GVIem00BfvqI+CnbKbu4x1EcmjW87U3wt98Ng7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWCoihcdRD9Ph6WFRXs3K1cnwnsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kOTBk YzQ0Yi04NWI2LTQyNDctYjU3OS1lYjhjZmQ4ZTk3ZmUvNDU1Yjg1ZGUtYTIwOC0z MzNkLWFkMmYtMWNhY2QxMTRhMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDkwZGM0NGItODViNi00MjQ3LWI1 NzktZWI4Y2ZkOGU5N2ZlL2Q5MGRjNDRiLTg1YjYtNDI0Ny1iNTc5LWViOGNmZDhl OTdmZS5jcmwwHwYDVR0jBBgwFoAUSeUkbiuQSDtea7R3FumUVA+zGEYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kOTBkYzQ0Yi04NWI2LTQyNDctYjU3OS1lYjhj ZmQ4ZTk3ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4BpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFWyQ6qex5gxnS/0ytHKuPzlTy5IatRujbNQHthdcyVswxjDcRogG67 DrhsntTKhImc4p/6EQzY+IAy+/gKg6GBQ9WOvxeAg1nfsuEDaU6ZEIhjLNa1izm0 1HJK2WfgvQYDuzuM4YVgveBwRwxYlabZHt92KoqVYwpJTnfgobHKOLi3F/GkSxx8 wP/aElnrB5foxEH/CqFhK5hVSrRsG3ZnsRePbdpiBA5gH5Cri6+Vls5gbY5S6F0K LRDrIVNIb9GNQwCdpSm1O5IDGHZjOECfb2DRKz18iu6JpSBvy2dmgcEoeb2kFgFN pBO8qSM0REOq/GkVmoUlKc20ByQErRc= -----END CERTIFICATE-----Generated at Wed May 13 12:37:00 2026 by rpki-client