$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/a48abf00-c06c-348f-93b5-677951e2c9f1.roa File: a48abf00-c06c-348f-93b5-677951e2c9f1.roa (raw, json) Hash identifier: Z7j43tpu5Bs0EklWxw1y9zu8TNuxxILDDa3drCOvkDg= Subject key identifier: 74:13:73:09:E1:ED:99:88:45:35:5F:D4:B9:22:6F:5E:E6:0D:CE:80 Certificate issuer: /CN=21f498b5-84f8-4255-a971-76e62e3a212d Certificate serial: 010D0C9F4328584D9FB58E73CD0CEFE63BFFF600 Authority key identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/a48abf00-c06c-348f-93b5-677951e2c9f1.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 23.136.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:8e:73:cd:0c:ef:e6:3b:ff:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21f498b5-84f8-4255-a971-76e62e3a212d Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=101ed797-5e12-49cc-a245-23d4e7aeb7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6e:23:84:48:cb:49:79:8d:07:bc:0e:82:55: 0a:ee:5c:e7:1c:9f:7c:d9:34:6e:50:11:38:96:49: d2:f7:14:59:80:84:2a:2b:0f:81:49:5d:42:a4:3c: e1:b4:0f:08:a7:eb:8f:f5:c9:09:20:7e:9c:a1:d6: 2d:c2:e8:7e:b2:8d:09:62:1c:8d:8d:b6:81:f8:4e: 3c:e4:1d:a4:7e:5a:80:a5:58:b9:a0:10:73:54:4b: 41:00:65:b6:2c:29:b6:f4:18:76:4a:b9:fb:c7:ec: 52:a0:b8:f3:e6:21:c0:d7:65:21:82:01:3e:91:2a: 7a:be:68:11:eb:76:07:f4:79:84:2a:d4:4e:1b:6d: 18:5c:83:a0:f8:08:a0:b0:5f:30:36:e4:43:b6:98: 0b:db:a0:43:75:6d:0f:15:5d:bf:d6:c1:e8:aa:54: 3c:8e:74:9c:12:9c:6a:c9:c9:1a:30:7c:94:02:ba: e1:11:db:5c:6c:71:72:60:cd:78:79:b1:4e:cb:32: 5c:f0:25:d2:61:d6:be:ca:36:6f:cf:55:53:e9:eb: 4e:c6:9a:fd:49:15:25:2e:19:2b:e0:57:b1:46:f2: 18:0a:33:9b:07:fe:70:db:12:44:44:eb:eb:bd:02: 5d:c8:cc:74:10:8f:69:b9:6d:de:bd:bd:36:4a:cd: 52:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:13:73:09:E1:ED:99:88:45:35:5F:D4:B9:22:6F:5E:E6:0D:CE:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/a48abf00-c06c-348f-93b5-677951e2c9f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl X509v3 Authority Key Identifier: keyid:9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer sbgp-ipAddrBlock: critical IPv4: 23.136.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:bc:ae:cc:dd:81:b9:32:ac:df:39:ea:e2:b0:99:a2:bc:c1: f3:53:f8:32:50:1b:bd:b5:4e:80:a7:48:4f:6d:78:d5:74:02: 05:dc:fb:ea:97:c0:63:40:99:71:0b:f2:03:f3:f0:df:4d:f8: 47:46:17:54:33:17:2f:01:a7:ab:77:10:14:a9:d8:ac:ae:23: 5d:fa:fc:c8:7f:06:81:e8:3c:54:e1:35:63:ea:1a:4e:76:43: 35:15:05:cd:bb:da:76:b2:bd:c8:b8:03:a3:06:e4:d8:ca:f4: c2:97:53:3c:b4:7e:ce:b7:73:e2:f6:db:c8:5d:37:ed:85:bc: a2:ee:b2:09:71:8c:72:ca:80:ca:89:ea:51:82:0e:e5:ac:71: 1a:ca:af:d2:98:32:fe:b2:ba:32:5e:1d:1d:cb:ab:eb:35:95: a7:2f:a0:5c:e5:bc:e9:32:bb:cc:96:fe:69:d9:10:3f:b3:de: bf:7f:e8:cc:1b:2d:eb:8d:c1:d3:20:ea:6c:30:49:79:49:e4: 18:2f:49:db:f4:b3:c8:2e:e9:84:91:2a:aa:67:ab:ed:9c:0b: 64:0d:da:25:8d:14:ee:ce:e5:08:80:03:62:0e:30:58:46:b8: f2:97:fa:22:82:7d:de:47:24:9c:c3:6c:aa:c3:a0:6a:e7:c4: da:82:7d:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftY5zzQzv5jv/9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFmNDk4YjUtODRmOC00MjU1LWE5NzEtNzZlNjJlM2Ey MTJkMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk MTAxZWQ3OTctNWUxMi00OWNjLWEyNDUtMjNkNGU3YWViN2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj24jhEjLSXmNB7wOglUK7lznHJ982TRuUBE4 lknS9xRZgIQqKw+BSV1CpDzhtA8Ip+uP9ckJIH6codYtwuh+so0JYhyNjbaB+E48 5B2kflqApVi5oBBzVEtBAGW2LCm29Bh2Srn7x+xSoLjz5iHA12UhggE+kSp6vmgR 63YH9HmEKtROG20YXIOg+AigsF8wNuRDtpgL26BDdW0PFV2/1sHoqlQ8jnScEpxq yckaMHyUArrhEdtcbHFyYM14ebFOyzJc8CXSYda+yjZvz1VT6etOxpr9SRUlLhkr 4FexRvIYCjObB/5w2xJEROvrvQJdyMx0EI9puW3evb02Ss1S6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQTcwnh7ZmIRTVf1Lkib17mDc6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0 OThiNS04NGY4LTQyNTUtYTk3MS03NmU2MmUzYTIxMmQvYTQ4YWJmMDAtYzA2Yy0z NDhmLTkzYjUtNjc3OTUxZTJjOWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFmNDk4YjUtODRmOC00MjU1LWE5 NzEtNzZlNjJlM2EyMTJkLzIxZjQ5OGI1LTg0ZjgtNDI1NS1hOTcxLTc2ZTYyZTNh MjEyZC5jcmwwHwYDVR0jBBgwFoAUmgR98ziE753bbSDZIK1d1AZld90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0OThiNS04NGY4LTQyNTUtYTk3MS03NmU2 MmUzYTIxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4hkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABy8rszdgbkyrN856uKwmaK8wfNT+DJQG721ToCnSE9teNV0AgXc++qX wGNAmXEL8gPz8N9N+EdGF1QzFy8Bp6t3EBSp2KyuI136/Mh/BoHoPFThNWPqGk52 QzUVBc272nayvci4A6MG5NjK9MKXUzy0fs63c+L228hdN+2FvKLusglxjHLKgMqJ 6lGCDuWscRrKr9KYMv6yujJeHR3Lq+s1lacvoFzlvOkyu8yW/mnZED+z3r9/6Mwb LeuNwdMg6mwwSXlJ5BgvSdv0s8gu6YSRKqpnq+2cC2QN2iWNFO7O5QiAA2IOMFhG uPKX+iKCfd5HJJzDbKrDoGrnxNqCffM= -----END CERTIFICATE-----Generated at Wed May 13 14:42:40 2026 by rpki-client