$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/d8b37bd7-5020-3ad9-a437-682d4f786e55.roa File: d8b37bd7-5020-3ad9-a437-682d4f786e55.roa (raw, json) Hash identifier: QCeO0H9oFS1D0WGgnn/SdiMSMc206XW+vlQK3tC1XnE= Subject key identifier: 15:71:C6:69:21:5C:A3:9D:3E:85:B2:A7:25:A5:FF:AE:9D:93:E9:77 Certificate issuer: /CN=0a590b75-f68e-4b76-ac6c-42096c2d7738 Certificate serial: 010D0C9F4328584D9E502FD34C38BD524FA507C8 Authority key identifier: 5B:E3:C8:58:A6:2A:D0:83:69:51:79:6E:D1:EE:39:7D:0E:7F:14:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/d8b37bd7-5020-3ad9-a437-682d4f786e55.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 214483 IP address blocks: 23.149.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/0a590b75-f68e-4b76-ac6c-42096c2d7738.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/0a590b75-f68e-4b76-ac6c-42096c2d7738.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:2f:d3:4c:38:bd:52:4f:a5:07:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a590b75-f68e-4b76-ac6c-42096c2d7738 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=aa5aae74-956a-470f-b247-3a277b38f6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ee:78:ad:bb:0c:38:6d:b0:29:49:f5:8e:d0: 7b:32:9c:4b:0f:e0:a3:70:1a:fd:9b:dd:f4:21:28: 8b:24:c8:28:3a:ef:3a:f0:ca:9b:f1:5c:f9:95:98: 5d:03:72:0c:4f:fd:44:23:08:14:4d:5f:6c:a6:a1: c4:56:07:c0:7b:9a:a3:93:c2:04:52:d7:68:31:d1: 7b:a7:60:db:20:d7:3b:b3:24:de:13:14:1f:a9:c1: 81:f9:37:f0:b8:4d:aa:63:e0:59:58:fb:5b:ea:ce: 38:59:09:f7:f9:89:df:a7:14:c3:47:52:62:fa:15: 0d:3f:ee:5c:4d:b2:f2:a1:fc:02:b4:ed:6d:e9:34: 1e:da:33:78:71:6c:e4:79:a7:bd:c9:91:c5:8f:ed: ac:54:59:33:e1:74:3a:e2:d3:1c:2a:a1:d2:0e:7f: a1:2a:a4:f3:54:9b:68:f1:09:ba:d4:bb:5a:6a:59: 5b:9c:c9:a5:70:24:cd:3c:37:f4:0a:3c:07:36:7e: b8:e4:db:f7:d7:16:8c:3c:6e:0f:8d:97:00:59:92: c8:8e:d7:7d:e3:00:dd:7c:d5:92:a5:7f:cb:8b:0a: 4a:0e:ba:94:ec:76:b3:a1:7c:d0:ce:03:b2:81:8b: a5:a1:c4:b5:ac:33:3a:24:83:73:8a:cc:b2:6a:4f: 51:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:71:C6:69:21:5C:A3:9D:3E:85:B2:A7:25:A5:FF:AE:9D:93:E9:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/d8b37bd7-5020-3ad9-a437-682d4f786e55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/0a590b75-f68e-4b76-ac6c-42096c2d7738.crl X509v3 Authority Key Identifier: keyid:5B:E3:C8:58:A6:2A:D0:83:69:51:79:6E:D1:EE:39:7D:0E:7F:14:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738.cer sbgp-ipAddrBlock: critical IPv4: 23.149.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:6a:19:7a:e6:15:57:30:34:f1:cf:ca:c3:58:57:f2:f5:a5: 38:cf:09:c5:d4:ba:5a:37:3b:13:e8:1c:23:45:e1:a8:16:b8: 6e:91:78:ba:da:30:77:f9:7f:d8:f9:77:ae:ad:88:27:72:b1: 0c:b9:b6:f3:17:e9:cb:ce:ee:6a:fd:15:df:db:b6:33:ea:9f: ad:47:c4:db:df:40:0f:2b:e4:c9:a2:14:6b:c9:07:11:0e:11: d7:3b:f5:95:e1:7f:43:13:bb:e0:59:91:ce:2f:99:ed:53:ca: 36:d7:60:a6:a4:9b:c2:56:31:5a:75:b7:c9:16:82:40:73:9e: df:1d:33:bb:96:5d:96:9d:53:c9:34:42:34:ae:c1:45:a4:e5: f1:84:8c:c5:6b:30:01:27:d4:f6:e3:76:03:6e:e7:7c:d8:0a: d6:36:dd:bb:50:0f:1b:73:2a:00:37:27:2e:4b:cd:ee:95:fd: 74:64:17:ec:34:4c:57:e3:a2:a1:68:b3:32:f8:3c:a6:7b:79: bb:00:83:26:f4:38:3f:16:50:ea:44:a0:85:34:03:45:bb:6a: 54:d8:12:85:0a:38:d7:e4:c3:74:ca:df:a3:ba:c1:fc:4d:fa: 2c:7a:76:28:d2:5a:2c:75:8c:29:b8:53:29:1c:3c:92:f1:1a: 28:1f:57:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUC/TTDi9Uk+lB8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE1OTBiNzUtZjY4ZS00Yjc2LWFjNmMtNDIwOTZjMmQ3 NzM4MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk YWE1YWFlNzQtOTU2YS00NzBmLWIyNDctM2EyNzdiMzhmNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+54rbsMOG2wKUn1jtB7MpxLD+CjcBr9m930 ISiLJMgoOu868Mqb8Vz5lZhdA3IMT/1EIwgUTV9spqHEVgfAe5qjk8IEUtdoMdF7 p2DbINc7syTeExQfqcGB+TfwuE2qY+BZWPtb6s44WQn3+YnfpxTDR1Ji+hUNP+5c TbLyofwCtO1t6TQe2jN4cWzkeae9yZHFj+2sVFkz4XQ64tMcKqHSDn+hKqTzVJto 8Qm61LtaallbnMmlcCTNPDf0CjwHNn645Nv31xaMPG4PjZcAWZLIjtd94wDdfNWS pX/LiwpKDrqU7HazoXzQzgOygYulocS1rDM6JINzisyyak9R1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVxxmkhXKOdPoWypyWl/66dk+l3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTU5 MGI3NS1mNjhlLTRiNzYtYWM2Yy00MjA5NmMyZDc3MzgvZDhiMzdiZDctNTAyMC0z YWQ5LWE0MzctNjgyZDRmNzg2ZTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMGE1OTBiNzUtZjY4ZS00Yjc2LWFj NmMtNDIwOTZjMmQ3NzM4LzBhNTkwYjc1LWY2OGUtNGI3Ni1hYzZjLTQyMDk2YzJk NzczOC5jcmwwHwYDVR0jBBgwFoAUW+PIWKYq0INpUXlu0e45fQ5/FIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTU5MGI3NS1mNjhlLTRiNzYtYWM2Yy00MjA5 NmMyZDc3MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5V0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtqGXrmFVcwNPHPysNYV/L1pTjPCcXUulo3OxPoHCNF4agWuG6ReLra MHf5f9j5d66tiCdysQy5tvMX6cvO7mr9Fd/btjPqn61HxNvfQA8r5MmiFGvJBxEO Edc79ZXhf0MTu+BZkc4vme1TyjbXYKakm8JWMVp1t8kWgkBznt8dM7uWXZadU8k0 QjSuwUWk5fGEjMVrMAEn1PbjdgNu53zYCtY23btQDxtzKgA3Jy5Lze6V/XRkF+w0 TFfjoqFoszL4PKZ7ebsAgyb0OD8WUOpEoIU0A0W7alTYEoUKONfkw3TK36O6wfxN +ix6dijSWix1jCm4UykcPJLxGigfV+4= -----END CERTIFICATE-----Generated at Wed May 13 08:23:18 2026 by rpki-client