$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/401c5756-9626-3e7c-ad12-d22241ff196a.roa File: 401c5756-9626-3e7c-ad12-d22241ff196a.roa (raw, json) Hash identifier: KCllezZxE1BN0u9sLfLvYCqtSGcjW/1t2beLJjiu0gA= Subject key identifier: D8:B7:5B:41:83:8C:D7:6D:56:22:E7:E9:0F:E2:8C:AD:FE:C1:52:33 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584DA81585BD35D3ACC97A5B6E00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/401c5756-9626-3e7c-ad12-d22241ff196a.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 11525 IP address blocks: 63.208.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:85:bd:35:d3:ac:c9:7a:5b:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=d9dfae21-8b14-4551-b1d7-35db6d63e9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7c:a9:f5:81:cf:92:23:36:d8:ad:23:ac:9f: ae:f8:6d:4c:4b:8b:5b:dc:0e:95:4c:fd:80:15:7f: 33:6f:f6:31:a5:7a:07:2d:98:fb:9d:db:e8:8e:e1: dd:77:d3:ae:96:72:d2:81:b5:20:6b:a1:a7:91:2a: 7d:da:bf:0c:09:cb:cf:87:ac:bc:8a:61:20:3d:08: 38:e4:7b:05:c1:7f:c7:47:0b:de:39:bf:06:9c:a1: 3d:7c:1f:dc:5e:35:cb:78:26:5d:93:49:2f:23:f2: 11:b4:6d:20:1b:62:5c:cc:cd:75:84:63:fc:fc:0a: 43:8a:b2:52:74:2c:63:ea:09:04:c2:47:9b:5f:a0: c1:85:36:a3:8c:45:45:00:0b:3b:a4:65:cc:16:46: 17:94:ce:e6:13:79:14:b4:41:97:2a:da:16:ce:ef: d9:e9:e4:56:42:5d:e2:06:ab:51:fa:08:ef:b9:59: 54:f6:44:af:b9:8b:8e:e6:55:5a:25:95:9d:3a:a1: a3:45:f0:68:1e:26:2e:0b:a5:f5:f2:29:87:9e:ca: 09:93:3d:fc:16:4e:2b:66:8c:5b:5e:29:59:f8:89: 65:7a:16:f0:77:54:d0:f2:f4:0f:c1:22:be:e7:a8: db:1a:6b:ad:fe:3c:01:39:ac:1d:e2:1b:a7:f1:e8: ac:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B7:5B:41:83:8C:D7:6D:56:22:E7:E9:0F:E2:8C:AD:FE:C1:52:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/401c5756-9626-3e7c-ad12-d22241ff196a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 63.208.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:93:c3:33:c0:24:67:03:cd:1c:a3:12:d0:3d:5f:27:d1:d3: c9:77:7d:02:83:4d:13:29:32:14:fd:e7:42:04:f7:03:f2:d7: 60:d8:a3:23:5d:5d:be:c1:f8:cc:6a:f7:52:03:2d:e1:36:95: d8:3a:66:c2:77:85:26:a3:02:6b:ea:c6:a3:9f:d3:8c:0e:a9: f6:27:e0:1a:a9:af:de:1d:d3:15:a9:e1:c6:6a:79:39:95:83: 16:25:62:28:85:17:69:3a:19:f2:e2:ad:e2:a8:9b:91:e6:c9: bc:89:5b:82:8b:65:75:ed:f8:fe:62:ae:93:3e:fb:8d:e6:7d: 4f:f7:49:31:ad:4a:44:70:db:3c:6a:63:da:38:6f:82:82:89: 46:3f:46:3c:a4:55:fa:48:02:c3:66:cd:75:bf:c8:1a:d6:57: 53:be:c6:09:74:41:cd:e7:c3:5a:ab:a4:b6:2b:2c:24:88:70: fa:1c:57:3a:0f:67:52:f3:49:8a:91:f0:6d:3e:10:18:d6:e8: df:0d:ef:a7:97:c2:64:88:31:73:48:49:a2:0f:c6:1d:46:dc: 24:b1:9e:42:c8:3b:93:05:0c:9d:c6:92:0f:f6:ba:3f:b5:22: 14:e6:f5:a3:c0:d4:20:31:dd:8b:63:42:eb:03:27:4c:39:22: ea:27:e7:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFYW9NdOsyXpbbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk ZDlkZmFlMjEtOGIxNC00NTUxLWIxZDctMzVkYjZkNjNlOWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3yp9YHPkiM22K0jrJ+u+G1MS4tb3A6VTP2A FX8zb/YxpXoHLZj7ndvojuHdd9OulnLSgbUga6GnkSp92r8MCcvPh6y8imEgPQg4 5HsFwX/HRwveOb8GnKE9fB/cXjXLeCZdk0kvI/IRtG0gG2JczM11hGP8/ApDirJS dCxj6gkEwkebX6DBhTajjEVFAAs7pGXMFkYXlM7mE3kUtEGXKtoWzu/Z6eRWQl3i BqtR+gjvuVlU9kSvuYuO5lVaJZWdOqGjRfBoHiYuC6X18imHnsoJkz38Fk4rZoxb XilZ+Illehbwd1TQ8vQPwSK+56jbGmut/jwBOawd4hun8eisJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNi3W0GDjNdtViLn6Q/ijK3+wVIzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNDAxYzU3NTYtOTYyNi0z ZTdjLWFkMTItZDIyMjQxZmYxOTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP9CLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2TwzPAJGcDzRyjEtA9XyfR08l3fQKDTRMpMhT950IE9wPy12DYoyNd Xb7B+Mxq91IDLeE2ldg6ZsJ3hSajAmvqxqOf04wOqfYn4Bqpr94d0xWp4cZqeTmV gxYlYiiFF2k6GfLireKom5HmybyJW4KLZXXt+P5irpM++43mfU/3STGtSkRw2zxq Y9o4b4KCiUY/RjykVfpIAsNmzXW/yBrWV1O+xgl0Qc3nw1qrpLYrLCSIcPocVzoP Z1LzSYqR8G0+EBjW6N8N76eXwmSIMXNISaIPxh1G3CSxnkLIO5MFDJ3Gkg/2uj+1 IhTm9aPA1CAx3YtjQusDJ0w5Iuon5yo= -----END CERTIFICATE-----Generated at Wed May 13 16:00:16 2026 by rpki-client