$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/e58c3c0b-5966-3138-bbde-accd99524427.roa File: e58c3c0b-5966-3138-bbde-accd99524427.roa (raw, json) Hash identifier: YQx06wqijqjpup5CE6FaVYWDFD2nJwvRtPdwAniAiHw= Subject key identifier: AB:03:31:2C:12:C3:66:E5:E1:3C:9F:9C:8E:1A:8B:BE:64:07:7F:45 Certificate issuer: /CN=917f6233-a0b4-4398-980d-f443910c2d2e Certificate serial: 010D0C9F4328584DA8156D0170BFB65CF2DAC800 Authority key identifier: 0D:5F:05:D2:AF:C1:9E:BC:96:90:B6:FB:6A:DF:B1:9C:13:53:29:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/e58c3c0b-5966-3138-bbde-accd99524427.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 174 IP address blocks: 23.144.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/917f6233-a0b4-4398-980d-f443910c2d2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/917f6233-a0b4-4398-980d-f443910c2d2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:6d:01:70:bf:b6:5c:f2:da:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917f6233-a0b4-4398-980d-f443910c2d2e Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=044c35b0-9ace-4a77-bf6a-f85c57bb5512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ac:c9:67:93:31:5d:ae:d9:54:a9:b6:86:5d: f7:03:c7:af:61:2b:ef:e5:7e:7a:c9:7c:91:fc:c1: ba:63:ee:0c:0a:ad:11:06:a4:4a:0f:5a:55:55:9c: ae:3f:f2:5a:df:b1:4c:bc:2d:6d:7f:c8:da:5f:a4: 6d:bd:ff:c8:a1:c1:dc:15:ee:c1:be:34:48:84:a9: 29:42:48:e7:46:41:54:b8:93:cb:e0:7f:79:ac:42: 0a:15:c6:84:c8:a9:bd:4d:2a:91:6f:27:26:78:ce: 9f:7c:3a:d2:7e:bb:b8:dd:07:80:dd:1e:8c:61:41: ab:66:b7:07:e6:78:6a:51:72:e5:65:5d:5b:41:ea: 63:c8:0e:4a:3d:6a:3d:31:1c:89:03:d6:d4:83:69: f1:a7:e4:f0:98:16:f3:3b:56:28:df:95:1f:46:fd: 20:0b:82:f1:c5:e0:46:40:7c:87:50:f7:db:c0:4c: e0:c0:b4:20:22:2b:f8:31:95:9b:f0:79:f5:a7:21: db:b8:36:05:4e:e4:ce:bb:af:90:3f:e0:16:e0:53: 18:17:29:8e:83:c4:de:be:43:ed:2c:e3:3c:3d:f0: d6:bf:00:f1:41:0e:d4:b9:21:5d:9e:1c:90:08:ef: 36:f5:31:6a:2b:fe:31:fe:d6:ed:e8:7c:57:ce:71: d7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:03:31:2C:12:C3:66:E5:E1:3C:9F:9C:8E:1A:8B:BE:64:07:7F:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/e58c3c0b-5966-3138-bbde-accd99524427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/917f6233-a0b4-4398-980d-f443910c2d2e.crl X509v3 Authority Key Identifier: keyid:0D:5F:05:D2:AF:C1:9E:BC:96:90:B6:FB:6A:DF:B1:9C:13:53:29:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e.cer sbgp-ipAddrBlock: critical IPv4: 23.144.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:41:c1:21:3e:a9:18:35:aa:97:56:1f:2c:44:bf:7d:f4:7f: f6:3a:2e:0e:fa:10:32:19:95:40:15:09:18:dd:68:ad:c7:a6: 1d:08:83:f3:42:5d:47:02:4f:05:7d:07:d8:c2:99:51:41:d2: 93:88:d6:f3:d6:2b:83:5b:94:b0:20:c8:b8:5c:cd:b7:c9:e1: 08:a2:b3:97:22:9c:4e:35:1f:e6:8d:57:43:84:d4:70:4e:b4: ca:b0:8d:0f:0a:5a:1a:93:98:74:3a:54:50:c7:e6:f0:a1:d2: 7a:21:69:55:81:d2:e8:9d:92:71:5e:a0:8e:a8:6d:fb:ef:75: 0e:5a:40:b4:3b:22:13:13:76:11:50:c8:be:3e:70:4a:42:8b: 05:75:6b:fd:79:72:bb:9b:49:e7:1e:4c:b9:63:2d:72:34:03: 30:45:e4:39:ab:fd:91:60:4d:0a:ca:dd:38:41:ef:67:ad:61: e4:b8:bd:15:4d:d0:7e:0d:77:dd:3b:87:6d:1d:d7:59:79:04: 78:a2:20:92:57:7c:35:9f:5c:b4:a6:0d:a9:1e:72:9f:d8:31: 41:f4:92:15:61:a0:50:c4:54:16:7c:3b:c4:3d:3a:c2:d6:84: 69:ae:c4:a1:92:e4:24:5b:97:9a:de:09:f4:1c:6e:39:bd:49: 31:9c:8a:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFW0BcL+2XPLayAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3ZjYyMzMtYTBiNC00Mzk4LTk4MGQtZjQ0MzkxMGMy ZDJlMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk MDQ0YzM1YjAtOWFjZS00YTc3LWJmNmEtZjg1YzU3YmI1NTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KzJZ5MxXa7ZVKm2hl33A8evYSvv5X56yXyR /MG6Y+4MCq0RBqRKD1pVVZyuP/Ja37FMvC1tf8jaX6Rtvf/IocHcFe7BvjRIhKkp QkjnRkFUuJPL4H95rEIKFcaEyKm9TSqRbycmeM6ffDrSfru43QeA3R6MYUGrZrcH 5nhqUXLlZV1bQepjyA5KPWo9MRyJA9bUg2nxp+TwmBbzO1Yo35UfRv0gC4LxxeBG QHyHUPfbwEzgwLQgIiv4MZWb8Hn1pyHbuDYFTuTOu6+QP+AW4FMYFymOg8TevkPt LOM8PfDWvwDxQQ7UuSFdnhyQCO829TFqK/4x/tbt6HxXznHXNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsDMSwSw2bl4TyfnI4ai75kB39FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85MTdm NjIzMy1hMGI0LTQzOTgtOTgwZC1mNDQzOTEwYzJkMmUvZTU4YzNjMGItNTk2Ni0z MTM4LWJiZGUtYWNjZDk5NTI0NDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTE3ZjYyMzMtYTBiNC00Mzk4LTk4 MGQtZjQ0MzkxMGMyZDJlLzkxN2Y2MjMzLWEwYjQtNDM5OC05ODBkLWY0NDM5MTBj MmQyZS5jcmwwHwYDVR0jBBgwFoAUDV8F0q/BnryWkLb7at+xnBNTKcYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85MTdmNjIzMy1hMGI0LTQzOTgtOTgwZC1mNDQz OTEwYzJkMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5AEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1BwSE+qRg1qpdWHyxEv330f/Y6Lg76EDIZlUAVCRjdaK3Hph0Ig/NC XUcCTwV9B9jCmVFB0pOI1vPWK4NblLAgyLhczbfJ4Qiis5cinE41H+aNV0OE1HBO tMqwjQ8KWhqTmHQ6VFDH5vCh0nohaVWB0uidknFeoI6obfvvdQ5aQLQ7IhMTdhFQ yL4+cEpCiwV1a/15crubSeceTLljLXI0AzBF5Dmr/ZFgTQrK3ThB72etYeS4vRVN 0H4Nd907h20d11l5BHiiIJJXfDWfXLSmDakecp/YMUH0khVhoFDEVBZ8O8Q9OsLW hGmuxKGS5CRbl5reCfQcbjm9STGcilI= -----END CERTIFICATE-----Generated at Tue May 12 21:33:18 2026 by rpki-client