$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/2973c52c-5659-3596-8301-dc3e576e7381.roa File: 2973c52c-5659-3596-8301-dc3e576e7381.roa (raw, json) Hash identifier: ui9PZkoxPxBxg6+zWQpjjzYeOlMlzoS7mErjLuhX1aw= Subject key identifier: 9D:C6:45:31:55:B6:32:AA:FA:7F:B2:F6:82:EC:3A:73:D7:6C:E8:AD Certificate issuer: /CN=c857cadf-4120-46e1-8a77-61ed14f8dbc9 Certificate serial: 010D0C9F4328584DA6B01E246476F0FAAD651980 Authority key identifier: FB:6E:81:0E:25:AB:93:AF:83:03:2C:44:28:84:70:32:89:84:AD:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/2973c52c-5659-3596-8301-dc3e576e7381.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 216435 IP address blocks: 23.157.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:1e:24:64:76:f0:fa:ad:65:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c857cadf-4120-46e1-8a77-61ed14f8dbc9 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=22ffe80f-4cdd-40ca-ac7d-1616035948f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:40:f1:1a:55:c7:1c:8a:fc:06:31:65:4c:9c: e4:ea:9c:1a:e4:de:db:5a:27:15:15:21:1c:05:4c: ce:f3:a6:ba:98:ec:ab:b6:a1:ce:54:ca:6f:e0:2e: b0:96:e6:46:55:26:75:a9:9e:53:74:64:6f:2c:20: 7a:da:24:bf:78:5f:0d:95:77:3d:26:14:04:1d:d1: 04:f6:f2:00:03:8e:bb:ec:dc:7a:b4:05:2c:18:f0: 30:4b:9a:38:80:7b:37:1f:ce:6a:ca:2e:d0:a0:3b: fc:dd:2f:1b:04:39:53:e3:8b:1d:71:b1:24:c2:e7: 9a:68:21:66:fe:76:1a:ba:3f:4e:99:b2:d2:ca:65: 11:37:29:52:f6:dd:31:ee:04:f7:5c:88:ab:ea:e0: 54:df:d8:50:7d:32:54:78:1e:33:da:e9:8a:4f:8d: 70:a1:45:23:fb:bd:b2:b7:6f:12:cb:a0:60:db:ee: 87:8b:98:5d:66:8f:0e:42:2b:9a:48:33:f6:61:28: 48:e1:95:d7:53:3c:78:4f:7e:51:8b:08:e0:8a:6d: 24:af:71:11:45:11:66:c6:1c:76:97:b8:20:4b:22: 9d:0f:d2:ce:79:cf:cd:05:26:56:e4:38:ea:40:d5: df:3b:44:99:94:91:2f:eb:81:92:c1:5a:c1:86:e7: 1b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C6:45:31:55:B6:32:AA:FA:7F:B2:F6:82:EC:3A:73:D7:6C:E8:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/2973c52c-5659-3596-8301-dc3e576e7381.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl X509v3 Authority Key Identifier: keyid:FB:6E:81:0E:25:AB:93:AF:83:03:2C:44:28:84:70:32:89:84:AD:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer sbgp-ipAddrBlock: critical IPv4: 23.157.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:2e:46:7c:6c:04:8f:7a:31:14:59:c5:b5:fb:be:95:65:4a: a1:2b:37:6e:55:fe:ee:64:46:37:a2:6a:88:22:2a:3e:98:4d: 2b:ae:56:a4:fb:53:02:7f:55:4b:9b:16:66:40:37:39:7e:63: b3:15:2e:3a:b7:e1:25:bb:86:0c:21:11:fa:bc:8b:a0:29:ef: 13:1d:6c:90:cc:92:12:64:3c:98:59:78:93:af:5a:03:8c:dd: 22:fc:6f:b8:d0:11:c1:59:7e:75:c2:c8:b5:3a:6d:86:6e:d1: 47:ac:1f:0f:84:d4:9b:f5:ec:8f:79:0e:83:c1:52:1a:0c:e1: 78:c7:02:3d:a0:45:1a:ed:18:87:74:37:69:90:21:5a:72:ed: b8:27:66:12:aa:0d:db:1b:5d:ac:95:c6:75:19:41:de:9c:4a: aa:07:75:1e:ce:79:a7:8c:f5:8e:14:5d:c2:08:07:c2:91:32: 23:80:ab:0b:c5:34:a0:71:66:c8:d0:f4:76:8c:7e:a6:43:b0: f6:4c:71:61:74:90:cc:b3:b2:13:8e:44:e6:90:09:9a:9a:fa: 55:a9:42:49:12:e3:b8:84:93:d1:a7:d7:9a:1c:b4:7f:d8:05: dc:64:40:0f:4d:da:1f:a5:81:75:86:03:9c:14:68:bd:52:6b: ee:2e:13:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msB4kZHbw+q1lGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1N2NhZGYtNDEyMC00NmUxLThhNzctNjFlZDE0Zjhk YmM5MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MjJmZmU4MGYtNGNkZC00MGNhLWFjN2QtMTYxNjAzNTk0OGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0DxGlXHHIr8BjFlTJzk6pwa5N7bWicVFSEc BUzO86a6mOyrtqHOVMpv4C6wluZGVSZ1qZ5TdGRvLCB62iS/eF8NlXc9JhQEHdEE 9vIAA4677Nx6tAUsGPAwS5o4gHs3H85qyi7QoDv83S8bBDlT44sdcbEkwueaaCFm /nYauj9OmbLSymURNylS9t0x7gT3XIir6uBU39hQfTJUeB4z2umKT41woUUj+72y t28Sy6Bg2+6Hi5hdZo8OQiuaSDP2YShI4ZXXUzx4T35Riwjgim0kr3ERRRFmxhx2 l7ggSyKdD9LOec/NBSZW5DjqQNXfO0SZlJEv64GSwVrBhucbtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3GRTFVtjKq+n+y9oLsOnPXbOitMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jODU3 Y2FkZi00MTIwLTQ2ZTEtOGE3Ny02MWVkMTRmOGRiYzkvMjk3M2M1MmMtNTY1OS0z NTk2LTgzMDEtZGMzZTU3NmU3MzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzg1N2NhZGYtNDEyMC00NmUxLThh NzctNjFlZDE0ZjhkYmM5L2M4NTdjYWRmLTQxMjAtNDZlMS04YTc3LTYxZWQxNGY4 ZGJjOS5jcmwwHwYDVR0jBBgwFoAU+26BDiWrk6+DAyxEKIRwMomEra0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jODU3Y2FkZi00MTIwLTQ2ZTEtOGE3Ny02MWVk MTRmOGRiYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF525MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMYuRnxsBI96MRRZxbX7vpVlSqErN25V/u5kRjeiaogiKj6YTSuuVqT7 UwJ/VUubFmZANzl+Y7MVLjq34SW7hgwhEfq8i6Ap7xMdbJDMkhJkPJhZeJOvWgOM 3SL8b7jQEcFZfnXCyLU6bYZu0UesHw+E1Jv17I95DoPBUhoM4XjHAj2gRRrtGId0 N2mQIVpy7bgnZhKqDdsbXayVxnUZQd6cSqoHdR7OeaeM9Y4UXcIIB8KRMiOAqwvF NKBxZsjQ9HaMfqZDsPZMcWF0kMyzshOOROaQCZqa+lWpQkkS47iEk9Gn15octH/Y BdxkQA9N2h+lgXWGA5wUaL1Sa+4uE0U= -----END CERTIFICATE-----Generated at Wed May 13 10:55:42 2026 by rpki-client