$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/175b01ae-d440-3465-a430-3580015e4b3c.roa File: 175b01ae-d440-3465-a430-3580015e4b3c.roa (raw, json) Hash identifier: Wt8lveewVqYPfS91xOMc9wWZi/XaUjtqr2pmb4WzBUk= Subject key identifier: 8B:C3:56:6F:AA:1F:02:14:EB:7D:A6:59:A3:AD:3E:52:8B:41:3E:D3 Certificate issuer: /CN=24570cf0-6be7-4f66-a550-b04cfd954538 Certificate serial: 010D0C9F4328584DA3E568394756183C88087FE8 Authority key identifier: 0A:C0:D2:13:85:AA:09:75:83:97:EF:B6:FB:54:0A:9B:77:8D:D2:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/175b01ae-d440-3465-a430-3580015e4b3c.roa Signing time: Mon 27 Apr 2026 01:00:24 +0000 ROA not before: Mon 27 Apr 2026 01:00:24 +0000 ROA not after: Sun 26 Jul 2026 01:00:24 +0000 asID: 64079 IP address blocks: 23.144.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/24570cf0-6be7-4f66-a550-b04cfd954538.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/24570cf0-6be7-4f66-a550-b04cfd954538.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:68:39:47:56:18:3c:88:08:7f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24570cf0-6be7-4f66-a550-b04cfd954538 Validity Not Before: Apr 27 01:00:24 2026 GMT Not After : Jul 26 01:00:24 2026 GMT Subject: CN=c8ee246c-5511-4634-b0b2-cb0f07580e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ed:89:67:34:45:fa:01:64:22:ec:0f:43:dd: 15:e3:da:26:8b:49:23:7b:ec:6b:1d:52:b7:5f:70: fb:02:a0:c7:36:72:5c:a1:86:b4:91:95:78:0c:73: 15:85:60:96:e0:94:fb:3e:06:69:23:0b:51:ee:8d: 69:55:73:2d:fa:35:47:91:63:b2:13:6a:43:82:fd: 6c:c6:68:f0:c5:09:d2:5e:c1:6f:83:be:13:0b:3d: f0:62:fa:46:71:59:77:c3:a1:b0:82:42:15:16:e6: 89:02:c0:79:23:c4:25:e3:03:64:94:da:2d:6a:75: 4b:20:90:58:21:82:35:cc:65:5c:c1:43:ef:11:f3: ef:c3:62:0a:80:8d:e2:b7:2c:b2:e1:ef:d6:e7:87: b9:9f:48:5e:a5:f4:6e:ba:b6:4e:a8:7f:fa:b2:f5: 0e:3b:af:c4:78:ad:6b:21:cf:51:64:47:c3:b8:3a: d8:91:cd:d8:35:18:14:4d:f6:30:80:db:73:a2:1c: eb:c0:c8:04:b7:1d:5b:0d:26:63:d9:40:84:e7:01: 36:9f:cf:46:94:bf:bd:9c:a1:f4:af:f8:d3:a5:f7: 4f:ec:5e:4d:b3:85:e5:53:12:4d:8d:cc:0a:b5:59: c5:ab:d8:79:f5:7a:8f:29:53:2f:d9:bd:b0:1f:af: 3e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C3:56:6F:AA:1F:02:14:EB:7D:A6:59:A3:AD:3E:52:8B:41:3E:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/175b01ae-d440-3465-a430-3580015e4b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/24570cf0-6be7-4f66-a550-b04cfd954538.crl X509v3 Authority Key Identifier: keyid:0A:C0:D2:13:85:AA:09:75:83:97:EF:B6:FB:54:0A:9B:77:8D:D2:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538.cer sbgp-ipAddrBlock: critical IPv4: 23.144.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:9e:f0:79:ab:d1:15:cf:09:0d:2d:65:91:a3:54:5a:88:3d: e9:c9:3a:73:1e:39:29:cc:c6:ef:24:f5:61:66:1a:13:0a:be: 66:f9:2a:1f:0f:4c:24:51:fa:fa:2b:75:73:f3:67:ac:9c:b0: 27:51:74:9b:6d:87:b0:ac:b0:d1:6e:bb:4b:00:6c:9f:c8:76: dc:e9:36:fd:dd:aa:79:0d:a8:eb:99:ed:ac:ad:c1:b5:5d:8b: 0f:de:66:ef:b0:f4:29:37:6a:d0:91:7f:11:e3:4d:e4:78:54: 81:c0:3d:d0:04:7d:61:c9:df:2f:40:7e:56:1a:2b:c7:84:cf: a0:b3:b5:e2:5e:8c:ca:9f:45:bb:79:94:d0:b7:cd:09:ce:50: 8d:68:49:cd:61:f5:6d:c6:89:8c:b7:5d:78:40:e2:d3:f6:74: c2:4b:ee:15:50:2e:f0:9e:ec:ae:0c:75:8a:e1:b7:18:1e:f1: ea:a5:54:8f:af:3a:0b:67:75:6c:3b:c8:ee:ee:21:2f:fa:56: 9b:f5:17:34:5b:e6:c6:84:66:b6:6c:9a:ad:e9:cb:0d:f7:c9: ae:70:5f:8e:76:5c:5a:6c:2d:48:5e:69:ba:cd:29:a5:e4:81: 64:91:a6:e3:9f:5c:94:03:a3:96:6a:39:12:74:0b:74:4a:c7: cc:8e:79:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2j5Wg5R1YYPIgIf+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ1NzBjZjAtNmJlNy00ZjY2LWE1NTAtYjA0Y2ZkOTU0 NTM4MB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk YzhlZTI0NmMtNTUxMS00NjM0LWIwYjItY2IwZjA3NTgwZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou2JZzRF+gFkIuwPQ90V49omi0kje+xrHVK3 X3D7AqDHNnJcoYa0kZV4DHMVhWCW4JT7PgZpIwtR7o1pVXMt+jVHkWOyE2pDgv1s xmjwxQnSXsFvg74TCz3wYvpGcVl3w6GwgkIVFuaJAsB5I8Ql4wNklNotanVLIJBY IYI1zGVcwUPvEfPvw2IKgI3ityyy4e/W54e5n0hepfRuurZOqH/6svUOO6/EeK1r Ic9RZEfDuDrYkc3YNRgUTfYwgNtzohzrwMgEtx1bDSZj2UCE5wE2n89GlL+9nKH0 r/jTpfdP7F5Ns4XlUxJNjcwKtVnFq9h59XqPKVMv2b2wH68+0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvDVm+qHwIU632mWaOtPlKLQT7TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNDU3 MGNmMC02YmU3LTRmNjYtYTU1MC1iMDRjZmQ5NTQ1MzgvMTc1YjAxYWUtZDQ0MC0z NDY1LWE0MzAtMzU4MDAxNWU0YjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjQ1NzBjZjAtNmJlNy00ZjY2LWE1 NTAtYjA0Y2ZkOTU0NTM4LzI0NTcwY2YwLTZiZTctNGY2Ni1hNTUwLWIwNGNmZDk1 NDUzOC5jcmwwHwYDVR0jBBgwFoAUCsDSE4WqCXWDl++2+1QKm3eN0v4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNDU3MGNmMC02YmU3LTRmNjYtYTU1MC1iMDRj ZmQ5NTQ1MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5CMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2e8Hmr0RXPCQ0tZZGjVFqIPenJOnMeOSnMxu8k9WFmGhMKvmb5Kh8P TCRR+vordXPzZ6ycsCdRdJtth7CssNFuu0sAbJ/IdtzpNv3dqnkNqOuZ7aytwbVd iw/eZu+w9Ck3atCRfxHjTeR4VIHAPdAEfWHJ3y9AflYaK8eEz6CzteJejMqfRbt5 lNC3zQnOUI1oSc1h9W3GiYy3XXhA4tP2dMJL7hVQLvCe7K4MdYrhtxge8eqlVI+v OgtndWw7yO7uIS/6Vpv1FzRb5saEZrZsmq3pyw33ya5wX452XFpsLUheabrNKaXk gWSRpuOfXJQDo5ZqORJ0C3RKx8yOeR0= -----END CERTIFICATE-----Generated at Wed May 13 13:49:29 2026 by rpki-client