$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/2307101c-a448-3f6e-b60c-140a7a61a087.roa File: 2307101c-a448-3f6e-b60c-140a7a61a087.roa (raw, json) Hash identifier: CdY9Qm45sx8Rkjo4q4WqTDoXzPAUR70jj38g7VS1vWQ= Subject key identifier: 41:00:EF:79:5B:0C:F2:B5:C3:90:76:E8:FE:00:BC:BC:21:40:29:43 Certificate issuer: /CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211 Certificate serial: 010D0C9F4328584D9E501D23D22887B3FD6B7DC0 Authority key identifier: D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/2307101c-a448-3f6e-b60c-140a7a61a087.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 399825 IP address blocks: 23.177.144.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:1d:23:d2:28:87:b3:fd:6b:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=24c6a5be-661f-47c2-a52b-5a10418d76ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a1:9e:6d:da:de:97:48:bc:5c:dd:a1:90:0e: b7:97:ab:d0:69:c9:0b:b9:2e:04:fd:e8:4b:a8:5c: 9a:72:fc:3a:82:1c:21:a6:e9:c7:57:b4:1b:0c:3a: ad:db:77:e0:50:fc:70:6d:b4:e4:da:ba:85:80:f8: a9:5b:4f:db:d7:ed:6c:95:03:c4:ca:b1:c6:fb:6d: b7:17:37:90:6f:51:2d:ad:c9:c9:05:d9:ed:6f:99: 9c:88:0e:f7:c1:44:dd:7d:a1:9d:0c:b7:5c:83:a4: 6a:97:d5:a8:b8:6e:5e:3b:a6:14:b6:53:3e:6c:5c: 5e:72:45:f5:b5:7f:01:73:b3:f9:3b:f7:3a:75:ad: 97:3b:f9:f4:03:6e:fd:0f:60:03:6e:9b:29:4f:32: 6d:70:92:d2:ba:da:1e:e4:2c:4e:50:6e:af:b3:a6: af:ef:88:da:93:73:e3:3c:4a:34:e0:5e:fa:ce:8f: 70:09:03:c7:0e:81:b1:29:5d:ce:e9:ee:f7:ee:7c: 0e:a6:64:81:07:3d:01:db:ed:a3:95:fb:4d:8f:d8: 80:74:59:45:b3:d9:66:c6:dd:48:54:6a:7e:92:4d: 9d:4b:6b:01:cb:6e:28:a2:41:55:0a:b0:80:3d:91: 3f:56:f9:21:cb:67:3b:54:5f:ed:bf:a2:0e:54:bf: 88:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:00:EF:79:5B:0C:F2:B5:C3:90:76:E8:FE:00:BC:BC:21:40:29:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/2307101c-a448-3f6e-b60c-140a7a61a087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl X509v3 Authority Key Identifier: keyid:D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer sbgp-ipAddrBlock: critical IPv4: 23.177.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f4:24:76:f8:c2:0d:e2:f8:bd:93:2a:4e:4e:be:b8:51:c7: 2f:ee:14:44:db:60:a0:ea:9d:e2:fc:95:7c:87:73:6e:9e:63: 42:48:61:03:10:41:91:23:da:30:92:bd:5e:c9:43:59:9a:1c: c3:fc:00:1f:91:70:9b:cc:21:3e:d6:78:10:e3:c8:14:88:c6: 0d:bb:9a:09:21:df:ce:01:55:bb:3e:03:4f:7b:46:5e:1d:e9: 2d:f0:d6:1e:e9:f2:e8:b2:c1:3b:22:b5:28:01:f7:c3:dd:8f: fc:8c:fb:a3:f3:95:f2:4c:31:a4:12:34:6d:ef:9d:19:47:79: 23:6c:69:eb:e1:d5:5d:22:3f:8f:f6:14:0a:5e:a8:0f:86:ad: 2b:e2:90:c6:d7:60:6e:de:63:ae:3d:d2:14:55:42:ad:e7:9f: c9:ba:57:10:45:0d:f5:49:c1:12:75:3e:69:06:6a:2c:81:39: 15:0d:d5:61:14:60:e7:6c:e4:99:22:37:ab:7c:cf:dd:33:a1: b0:39:51:2c:ec:76:9a:7e:e2:de:8c:19:67:a4:b0:bd:2a:5f: 6d:2b:7f:68:51:2b:f2:16:65:a9:cf:88:d8:ea:ab:c9:8e:32: b5:cd:2a:c3:6c:3c:a8:72:a6:55:95:f8:40:2f:ca:bd:9b:c7: 12:9c:9b:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUB0j0iiHs/1rfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODgyNWU4ZmItMWI5Yy00M2M0LThmOWYtNDBkZjFjNzE2 MjExMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MjRjNmE1YmUtNjYxZi00N2MyLWE1MmItNWExMDQxOGQ3NmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqGebdrel0i8XN2hkA63l6vQackLuS4E/ehL qFyacvw6ghwhpunHV7QbDDqt23fgUPxwbbTk2rqFgPipW0/b1+1slQPEyrHG+223 FzeQb1EtrcnJBdntb5mciA73wUTdfaGdDLdcg6Rql9WouG5eO6YUtlM+bFxeckX1 tX8Bc7P5O/c6da2XO/n0A279D2ADbpspTzJtcJLSutoe5CxOUG6vs6av74jak3Pj PEo04F76zo9wCQPHDoGxKV3O6e737nwOpmSBBz0B2+2jlftNj9iAdFlFs9lmxt1I VGp+kk2dS2sBy24ookFVCrCAPZE/Vvkhy2c7VF/tv6IOVL+IiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEA73lbDPK1w5B26P4AvLwhQClDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ODI1 ZThmYi0xYjljLTQzYzQtOGY5Zi00MGRmMWM3MTYyMTEvMjMwNzEwMWMtYTQ0OC0z ZjZlLWI2MGMtMTQwYTdhNjFhMDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODgyNWU4ZmItMWI5Yy00M2M0LThm OWYtNDBkZjFjNzE2MjExLzg4MjVlOGZiLTFiOWMtNDNjNC04ZjlmLTQwZGYxYzcx NjIxMS5jcmwwHwYDVR0jBBgwFoAU1MWAixuM7+uEMt0GMxiIU9SksN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ODI1ZThmYi0xYjljLTQzYzQtOGY5Zi00MGRm MWM3MTYyMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7GQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACn0JHb4wg3i+L2TKk5OvrhRxy/uFETbYKDqneL8lXyHc26eY0JIYQMQ QZEj2jCSvV7JQ1maHMP8AB+RcJvMIT7WeBDjyBSIxg27mgkh384BVbs+A097Rl4d 6S3w1h7p8uiywTsitSgB98Pdj/yM+6PzlfJMMaQSNG3vnRlHeSNsaevh1V0iP4/2 FApeqA+GrSvikMbXYG7eY6490hRVQq3nn8m6VxBFDfVJwRJ1PmkGaiyBORUN1WEU YOds5JkiN6t8z90zobA5USzsdpp+4t6MGWeksL0qX20rf2hRK/IWZanPiNjqq8mO MrXNKsNsPKhyplWV+EAvyr2bxxKcm1k= -----END CERTIFICATE-----Generated at Wed May 13 19:07:06 2026 by rpki-client