$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/ad20c86a-0cdb-3038-930f-35b57b1e5885.roa File: ad20c86a-0cdb-3038-930f-35b57b1e5885.roa (raw, json) Hash identifier: b8YJlmLuzP8oc9C10CUNKg7pZX8JQjvwsHKq+rElvh4= Subject key identifier: 20:00:6E:28:DB:80:9A:49:63:3F:BC:86:C8:1C:F7:EA:88:4B:64:88 Certificate issuer: /CN=0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e Certificate serial: 010D0C9F4328584DAF102C9C272839529060BAA0 Authority key identifier: 75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/ad20c86a-0cdb-3038-930f-35b57b1e5885.roa Signing time: Fri 01 May 2026 01:00:24 +0000 ROA not before: Fri 01 May 2026 01:00:24 +0000 ROA not after: Thu 30 Jul 2026 01:00:24 +0000 asID: 40581 IP address blocks: 23.144.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:10:2c:9c:27:28:39:52:90:60:ba:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e Validity Not Before: May 1 01:00:24 2026 GMT Not After : Jul 30 01:00:24 2026 GMT Subject: CN=6c5886b3-6b00-49af-b4de-5a3541de171f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:77:a0:d9:39:ca:b3:65:88:c9:bc:54:f8:03: ae:f4:ad:cc:a5:54:9b:f6:ac:2c:9d:a0:2b:3a:4b: bd:18:32:9e:f4:79:37:32:f4:a2:cb:13:60:78:e2: 6a:75:7a:c4:7f:bd:7e:0f:13:2c:e4:ea:69:7a:a1: 20:10:f5:20:4a:fc:73:f4:d0:ef:2e:37:6e:ec:54: b9:23:34:8f:0b:93:ad:7a:80:57:b2:4f:ec:4f:44: 1d:4f:ba:e5:26:18:51:76:30:37:12:4b:fc:da:0b: b1:00:02:87:e2:b8:44:a7:41:d3:ea:3a:7d:1b:2d: 2f:cd:a0:24:1c:87:9f:ba:bf:f0:44:55:b6:5c:24: b1:46:c3:e2:09:73:a4:4e:86:ea:6d:e3:e3:ff:e1: ee:75:5f:99:59:cd:5b:fe:da:86:02:bc:db:d1:07: 4e:5c:1e:55:a4:cb:b8:6b:4e:c1:b7:f8:60:e1:6c: 81:ff:43:77:19:9c:6f:b0:9d:2c:d8:b8:1c:9a:60: 38:05:67:0a:cd:34:cc:da:da:c3:a6:6c:97:85:23: 79:6d:48:cc:8f:82:0e:64:eb:78:d1:05:e0:98:cb: 2e:31:26:4c:6e:0f:d7:de:28:aa:04:8f:7c:60:02: 89:5c:86:74:a0:98:f3:19:a7:95:ee:af:ed:2d:51: 79:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:00:6E:28:DB:80:9A:49:63:3F:BC:86:C8:1C:F7:EA:88:4B:64:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/ad20c86a-0cdb-3038-930f-35b57b1e5885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.crl X509v3 Authority Key Identifier: keyid:75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer sbgp-ipAddrBlock: critical IPv4: 23.144.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:17:65:dc:c1:7f:43:21:3a:70:d6:52:9c:ba:7a:08:ba:84: ee:62:c1:b2:2a:d2:de:5e:4e:ca:57:fb:c2:71:05:21:96:99: 25:06:94:77:5e:0e:d7:d6:36:58:ce:e5:7e:6b:be:a2:cd:b2: c8:89:48:f8:ec:23:98:f4:98:9b:c8:37:4c:0f:12:c8:43:da: d6:c3:13:85:cb:6d:95:0d:ca:89:f5:3a:3b:5f:53:96:70:3b: b4:d3:18:96:18:dc:25:9c:f2:cc:95:c3:3a:21:f0:c9:ec:c4: db:da:16:d0:b8:17:b4:51:33:89:f8:fe:0f:17:02:b4:6d:34: 04:8e:d0:a0:e9:b1:92:28:49:b0:5d:31:a0:2d:2c:da:f0:4a: a3:53:59:67:04:96:11:00:bb:dc:2e:e6:c7:44:12:57:a7:1e: ea:66:d7:eb:cd:72:0b:b8:8a:81:85:16:3c:ca:f5:8e:c4:93: df:4c:4b:27:98:f5:f4:f5:78:18:e9:3c:cc:e2:ec:fb:fd:61: 8b:6a:f6:c5:09:1f:e9:23:f0:91:f6:77:85:9b:b2:9e:44:2f: 19:a1:89:e3:b6:b7:92:85:a0:88:9a:4c:f6:e6:80:f2:fe:96: d5:cd:8d:03:55:e8:6b:4c:fc:e2:8f:e5:4f:1d:69:c3:ef:69: f2:3f:ea:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vECycJyg5UpBguqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI2MWRiOGItNTFkNi00NjRjLTlkZTktNmUwYTdiNmEz ZjVlMB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk NmM1ODg2YjMtNmIwMC00OWFmLWI0ZGUtNWEzNTQxZGUxNzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2neg2TnKs2WIybxU+AOu9K3MpVSb9qwsnaAr Oku9GDKe9Hk3MvSiyxNgeOJqdXrEf71+DxMs5OppeqEgEPUgSvxz9NDvLjdu7FS5 IzSPC5OteoBXsk/sT0QdT7rlJhhRdjA3Ekv82guxAAKH4rhEp0HT6jp9Gy0vzaAk HIefur/wRFW2XCSxRsPiCXOkTobqbePj/+HudV+ZWc1b/tqGArzb0QdOXB5VpMu4 a07Bt/hg4WyB/0N3GZxvsJ0s2LgcmmA4BWcKzTTM2trDpmyXhSN5bUjMj4IOZOt4 0QXgmMsuMSZMbg/X3iiqBI98YAKJXIZ0oJjzGaeV7q/tLVF5dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAAbijbgJpJYz+8hsgc9+qIS2SIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYjYx ZGI4Yi01MWQ2LTQ2NGMtOWRlOS02ZTBhN2I2YTNmNWUvYWQyMGM4NmEtMGNkYi0z MDM4LTkzMGYtMzViNTdiMWU1ODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGI2MWRiOGItNTFkNi00NjRjLTlk ZTktNmUwYTdiNmEzZjVlLzBiNjFkYjhiLTUxZDYtNDY0Yy05ZGU5LTZlMGE3YjZh M2Y1ZS5jcmwwHwYDVR0jBBgwFoAUdS0qoZtZVQWYC24FjN009fr+Mk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYjYxZGI4Yi01MWQ2LTQ2NGMtOWRlOS02ZTBh N2I2YTNmNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5CUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8XZdzBf0MhOnDWUpy6egi6hO5iwbIq0t5eTspX+8JxBSGWmSUGlHde DtfWNljO5X5rvqLNssiJSPjsI5j0mJvIN0wPEshD2tbDE4XLbZUNyon1OjtfU5Zw O7TTGJYY3CWc8syVwzoh8MnsxNvaFtC4F7RRM4n4/g8XArRtNASO0KDpsZIoSbBd MaAtLNrwSqNTWWcElhEAu9wu5sdEElenHupm1+vNcgu4ioGFFjzK9Y7Ek99MSyeY 9fT1eBjpPMzi7Pv9YYtq9sUJH+kj8JH2d4Wbsp5ELxmhieO2t5KFoIiaTPbmgPL+ ltXNjQNV6GtM/OKP5U8dacPvafI/6tM= -----END CERTIFICATE-----Generated at Wed May 13 11:16:36 2026 by rpki-client