$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/695d61bf-ab61-3b56-b7a5-7c188f499e59.roa File: 695d61bf-ab61-3b56-b7a5-7c188f499e59.roa (raw, json) Hash identifier: I8LhE8jWnxf+zqJF9ys5tjpS7judU5GEHjfIYn9b3OQ= Subject key identifier: 56:47:3D:0B:85:24:0B:2C:95:87:47:10:17:FD:80:C2:F2:A6:99:89 Certificate issuer: /CN=8d335843-a776-4e8d-949e-8217822b7151 Certificate serial: 010D0C9F4328584D9325631D7059F43169345460 Authority key identifier: F4:D1:12:A6:8C:DB:75:56:5D:AD:9A:FD:A6:92:14:D9:04:80:89:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/695d61bf-ab61-3b56-b7a5-7c188f499e59.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 399087 IP address blocks: 23.183.176.0/24 maxlen: 24 2602:fc5a::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/8d335843-a776-4e8d-949e-8217822b7151.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/8d335843-a776-4e8d-949e-8217822b7151.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:63:1d:70:59:f4:31:69:34:54:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d335843-a776-4e8d-949e-8217822b7151 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=769020a4-085a-4691-926c-30e424093602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b5:61:02:46:d5:8c:b3:c3:a1:88:b2:fb:d0: 66:39:c5:15:8d:24:30:f0:07:57:be:33:bf:d9:c0: 43:b1:b0:49:ce:5a:36:6a:d9:0d:a8:82:5e:06:95: 59:f7:bf:da:d5:f3:20:0a:b1:06:06:d9:d3:9a:00: c8:1f:ee:43:2c:50:3f:f1:73:63:8b:81:64:74:b8: c4:90:cb:56:93:f6:6d:51:e2:d1:12:44:63:16:41: 10:0a:93:1c:63:0e:28:f6:bb:c8:6d:1e:0c:85:e5: b1:df:73:99:e3:99:1e:f3:e9:6c:f6:b0:e7:f8:20: f0:53:fb:15:64:90:dc:42:12:18:8b:f7:cc:02:73: c7:e2:66:73:57:0e:c6:7f:4c:6b:0a:dd:f9:70:3d: 29:d6:c6:0a:16:1c:e1:06:79:98:59:94:b1:13:1c: 90:b3:47:28:fa:e5:4b:bb:8f:c2:44:5e:e8:f8:89: e3:10:57:85:2c:c6:f9:93:05:4b:bb:84:b6:60:70: bb:e6:d5:73:f2:5f:6b:11:4c:8d:21:8e:c6:e1:6a: e4:62:15:5a:ee:43:84:cb:f5:39:c0:3b:12:bb:ed: 00:4c:1d:c8:03:db:0a:02:5b:df:54:64:9a:9b:4b: 7c:c2:04:28:fc:95:2f:06:c8:ba:72:1b:19:18:42: a7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:47:3D:0B:85:24:0B:2C:95:87:47:10:17:FD:80:C2:F2:A6:99:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/695d61bf-ab61-3b56-b7a5-7c188f499e59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/8d335843-a776-4e8d-949e-8217822b7151.crl X509v3 Authority Key Identifier: keyid:F4:D1:12:A6:8C:DB:75:56:5D:AD:9A:FD:A6:92:14:D9:04:80:89:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151.cer sbgp-ipAddrBlock: critical IPv4: 23.183.176.0/24 IPv6: 2602:fc5a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:9a:57:8b:ed:4c:28:0f:cd:25:66:e5:40:ec:58:19:d9:4f: 32:78:76:b3:59:30:56:65:21:09:09:fa:f9:14:f4:fd:77:66: 78:55:6f:71:91:b7:7c:46:91:3f:e3:82:07:d0:ab:80:cf:be: 0c:98:6c:9e:50:b1:c3:b6:1a:02:de:4a:47:4d:cf:3e:43:3d: 88:06:f5:99:ae:e1:86:9f:a7:91:b0:06:83:b8:93:a8:2d:21: b0:67:28:74:bf:7d:5e:7f:44:b4:8b:95:93:88:5b:2c:7e:c1: 8b:21:03:46:63:b7:43:b8:12:96:88:33:da:1a:82:ab:b3:b1: 33:6d:6b:e9:1a:a3:1b:aa:3e:e7:14:c4:bc:40:c8:97:b3:f2: 60:eb:0f:48:6c:8e:57:69:13:2d:89:7a:8a:c5:60:06:7c:4d: aa:74:eb:ad:14:ed:74:64:7e:22:75:03:6b:d0:8a:98:30:2e: de:a6:07:c7:b0:6f:0d:1c:0b:dc:49:b3:75:4d:71:11:3a:7a: 6a:8a:db:99:eb:ee:fb:65:41:44:8d:40:dd:71:a9:65:4a:09: 5a:fe:c4:60:3e:e3:08:2e:40:be:d1:d6:78:de:8a:db:c0:25: 87:d5:03:8b:67:17:da:d4:51:49:bb:da:24:0a:11:c2:e9:d6: 79:19:8c:dd -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2TJWMdcFn0MWk0VGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzMzU4NDMtYTc3Ni00ZThkLTk0OWUtODIxNzgyMmI3 MTUxMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NzY5MDIwYTQtMDg1YS00NjkxLTkyNmMtMzBlNDI0MDkzNjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbVhAkbVjLPDoYiy+9BmOcUVjSQw8AdXvjO/ 2cBDsbBJzlo2atkNqIJeBpVZ97/a1fMgCrEGBtnTmgDIH+5DLFA/8XNji4FkdLjE kMtWk/ZtUeLREkRjFkEQCpMcYw4o9rvIbR4MheWx33OZ45ke8+ls9rDn+CDwU/sV ZJDcQhIYi/fMAnPH4mZzVw7Gf0xrCt35cD0p1sYKFhzhBnmYWZSxExyQs0co+uVL u4/CRF7o+InjEFeFLMb5kwVLu4S2YHC75tVz8l9rEUyNIY7G4WrkYhVa7kOEy/U5 wDsSu+0ATB3IA9sKAlvfVGSam0t8wgQo/JUvBsi6chsZGEKniQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFZHPQuFJAsslYdHEBf9gMLyppmJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZDMz NTg0My1hNzc2LTRlOGQtOTQ5ZS04MjE3ODIyYjcxNTEvNjk1ZDYxYmYtYWI2MS0z YjU2LWI3YTUtN2MxODhmNDk5ZTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGQzMzU4NDMtYTc3Ni00ZThkLTk0 OWUtODIxNzgyMmI3MTUxLzhkMzM1ODQzLWE3NzYtNGU4ZC05NDllLTgyMTc4MjJi NzE1MS5jcmwwHwYDVR0jBBgwFoAU9NESpozbdVZdrZr9ppIU2QSAiUQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZDMzNTg0My1hNzc2LTRlOGQtOTQ5ZS04MjE3 ODIyYjcxNTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7ewMA4E AgACMAgDBgQmAvxaADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2mleL7UwoD80lZuVA7FgZ2U8yeHazWTBW ZSEJCfr5FPT9d2Z4VW9xkbd8RpE/44IH0KuAz74MmGyeULHDthoC3kpHTc8+Qz2I BvWZruGGn6eRsAaDuJOoLSGwZyh0v31ef0S0i5WTiFssfsGLIQNGY7dDuBKWiDPa GoKrs7EzbWvpGqMbqj7nFMS8QMiXs/Jg6w9IbI5XaRMtiXqKxWAGfE2qdOutFO10 ZH4idQNr0IqYMC7epgfHsG8NHAvcSbN1TXEROnpqituZ6+77ZUFEjUDdcallSgla /sRgPuMILkC+0dZ43orbwCWH1QOLZxfa1FFJu9okChHC6dZ5GYzd -----END CERTIFICATE-----Generated at Wed May 13 09:01:59 2026 by rpki-client