$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/4708d4a6-bebc-30cc-a144-769712f0b0b1.roa File: 4708d4a6-bebc-30cc-a144-769712f0b0b1.roa (raw, json) Hash identifier: k52HcfVn/JYu6DkIuNWdDQDdWPXHmmYB85Ix7IpMTJI= Subject key identifier: BB:49:CA:6E:C3:F2:C7:DE:B1:4A:68:44:09:AA:88:3A:2E:89:09:57 Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4 Certificate serial: 010D0C9F4328584DAAE03523AACB8631BD0BE500 Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/4708d4a6-bebc-30cc-a144-769712f0b0b1.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 11870 IP address blocks: 167.23.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:35:23:aa:cb:86:31:bd:0b:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=734e51b0-5f84-467d-8ff0-87d67be6e1b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:15:7d:df:b8:7b:52:14:62:0c:12:b9:9a: 37:d5:4d:87:2d:86:c1:31:b9:50:bc:0a:4a:15:08: 77:92:57:a6:0c:0e:15:12:06:ac:02:1d:10:26:41: f2:83:18:53:64:b6:0d:69:81:2a:36:b8:4c:29:2d: b0:b2:24:7e:40:9e:ab:8d:a5:6c:45:dd:58:11:3b: 3e:a8:ab:36:a3:54:bd:dc:08:90:77:39:ee:c5:da: ea:d6:dc:59:93:26:bb:66:08:a6:ff:6a:4c:8c:14: 92:5a:89:09:b0:a0:c8:2b:14:70:3a:f9:fa:b9:60: 66:7b:7b:af:99:04:ad:29:2a:a4:32:44:94:2e:dc: 52:74:c4:22:5d:09:0f:e9:ca:6b:02:07:4e:4b:c2: 1b:d0:77:e2:91:c5:dd:32:f2:f5:30:7f:74:65:dd: 1f:51:d3:32:37:c1:73:00:f1:c1:89:d4:24:70:e9: ae:5c:b0:02:97:92:5f:19:97:7f:fa:78:5d:66:a0: 9a:b1:30:54:10:8b:17:cf:d7:c5:5f:68:1e:32:d1: 68:59:5a:54:50:b1:c4:15:0f:b6:a5:3f:df:43:dd: d6:f2:fb:ed:8d:06:e6:52:31:0f:c7:82:50:95:42: 2d:b3:8f:69:4e:5e:f7:11:1b:8c:64:b7:84:84:c0: 9b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:49:CA:6E:C3:F2:C7:DE:B1:4A:68:44:09:AA:88:3A:2E:89:09:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/4708d4a6-bebc-30cc-a144-769712f0b0b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl X509v3 Authority Key Identifier: keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer sbgp-ipAddrBlock: critical IPv4: 167.23.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b3:50:c4:9a:09:20:5c:89:1e:32:df:2a:85:24:44:1d:6c: d4:44:f5:fe:9b:26:92:96:63:04:b4:c5:d7:d5:cf:9c:33:df: 89:81:db:3a:6e:63:ad:a6:a4:03:15:1c:52:94:18:43:d9:bb: d1:ba:42:16:3e:d8:2a:cf:76:28:0b:01:2d:30:43:21:d3:15: 4c:22:7c:ea:4c:ad:1f:c3:b2:c7:a8:46:34:7c:c7:18:e6:4f: c2:16:83:bd:53:be:0e:9a:86:6d:14:cd:5b:39:eb:6a:59:a2: c7:56:98:fe:88:eb:85:ec:9c:07:9b:77:18:f5:79:61:c5:a5: 98:74:b0:03:98:5d:c3:9e:28:b9:83:00:ca:9b:3a:df:45:2a: a7:d1:32:4a:1a:22:6d:da:57:50:86:80:b2:72:5c:ce:d8:d1: 95:44:28:de:03:a2:38:f9:a4:6b:c6:7f:dd:71:02:09:8e:19: e2:e1:f3:bf:1f:6e:f6:4d:8e:af:1f:9d:7e:18:4a:d2:4b:15: 16:4c:b0:66:92:62:64:e7:2b:0a:e9:3b:fd:ba:78:a5:c7:00: 0f:0b:c8:e1:1d:69:f3:bf:6b:5d:a9:0e:33:cb:bc:fb:b6:c7: ee:9e:5c:61:39:8c:b3:a5:ba:6d:c9:a9:7f:bf:5e:0f:54:43: 80:4b:b3:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4DUjqsuGMb0L5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm OGM0MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk NzM0ZTUxYjAtNWY4NC00NjdkLThmZjAtODdkNjdiZTZlMWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4MVfd+4e1IUYgwSuZo31U2HLYbBMblQvApK FQh3klemDA4VEgasAh0QJkHygxhTZLYNaYEqNrhMKS2wsiR+QJ6rjaVsRd1YETs+ qKs2o1S93AiQdznuxdrq1txZkya7Zgim/2pMjBSSWokJsKDIKxRwOvn6uWBme3uv mQStKSqkMkSULtxSdMQiXQkP6cprAgdOS8Ib0HfikcXdMvL1MH90Zd0fUdMyN8Fz APHBidQkcOmuXLACl5JfGZd/+nhdZqCasTBUEIsXz9fFX2geMtFoWVpUULHEFQ+2 pT/fQ93W8vvtjQbmUjEPx4JQlUIts49pTl73ERuMZLeEhMCbQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtJym7D8sfesUpoRAmqiDouiQlXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1 OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvNDcwOGQ0YTYtYmViYy0z MGNjLWExNDQtNzY5NzEyZjBiMGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5 NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpxdYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIezUMSaCSBciR4y3yqFJEQdbNRE9f6bJpKWYwS0xdfVz5wz34mB2zpu Y62mpAMVHFKUGEPZu9G6QhY+2CrPdigLAS0wQyHTFUwifOpMrR/DsseoRjR8xxjm T8IWg71Tvg6ahm0UzVs562pZosdWmP6I64XsnAebdxj1eWHFpZh0sAOYXcOeKLmD AMqbOt9FKqfRMkoaIm3aV1CGgLJyXM7Y0ZVEKN4Dojj5pGvGf91xAgmOGeLh878f bvZNjq8fnX4YStJLFRZMsGaSYmTnKwrpO/26eKXHAA8LyOEdafO/a12pDjPLvPu2 x+6eXGE5jLOlum3JqX+/Xg9UQ4BLs6g= -----END CERTIFICATE-----Generated at Wed May 13 11:57:40 2026 by rpki-client