$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6/3b5d706f-a48e-3efe-af6c-bfee0e835b37.roa File: 3b5d706f-a48e-3efe-af6c-bfee0e835b37.roa (raw, json) Hash identifier: Cj3ohVMesFE50cCUD3i+WWK/ZkgSqtJ9R/pS11RMIUI= Subject key identifier: CA:12:01:5B:5D:D3:E1:71:B6:C8:F2:3E:D2:AB:74:FF:48:4C:73:5B Certificate issuer: /CN=fdd9493c-4150-4957-92ed-ba65ee3083d6 Certificate serial: 010D0C9F4328584D8EF550054623810730D03D00 Authority key identifier: C9:56:85:07:37:1E:A9:D2:B8:2A:31:A7:7A:A7:11:29:A7:AF:3E:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6/3b5d706f-a48e-3efe-af6c-bfee0e835b37.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 401816 IP address blocks: 23.144.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6/fdd9493c-4150-4957-92ed-ba65ee3083d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6/fdd9493c-4150-4957-92ed-ba65ee3083d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:50:05:46:23:81:07:30:d0:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd9493c-4150-4957-92ed-ba65ee3083d6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=08d07807-5d87-4d2a-805a-1985797394b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b6:1c:b5:56:58:f8:f3:0f:aa:cb:b7:a1:3e: da:bb:a7:20:3c:1c:b7:08:e8:3c:e9:ec:94:e7:9a: 78:8e:1b:21:4e:e8:15:38:14:cc:ad:af:64:b8:63: 84:da:08:3a:df:c7:c4:ca:32:91:87:30:73:7b:5d: 92:91:51:d6:92:86:d3:29:23:8e:0e:3b:18:21:38: 87:77:51:2c:2c:30:1b:c9:21:53:f3:76:ef:e0:d3: c4:59:ea:6a:25:9e:7e:b7:60:6b:13:cf:7d:08:99: 63:1b:0f:55:59:b5:c0:86:ed:45:aa:14:47:60:09: 27:25:e4:d5:ea:41:18:60:85:ad:9f:4f:09:68:e6: 1e:12:83:a6:ca:2c:02:26:3a:f3:3a:1f:3b:a5:60: ed:e3:48:a1:93:dd:52:76:9e:45:54:67:cc:77:ff: 0f:89:92:60:23:c9:5b:03:40:b4:ab:b2:f0:40:60: 55:7d:42:1f:9f:8f:81:c6:20:19:de:2a:e4:81:51: 3c:75:8d:04:18:a8:70:a4:98:fe:de:9e:d6:57:fc: 42:d3:3d:85:7e:7d:70:98:b8:5c:5e:d5:64:c7:b8: c4:f5:66:31:f0:f5:dd:e7:33:d3:27:43:e9:b2:91: 14:df:0f:18:f6:67:99:06:83:ce:ba:86:c3:36:c9: 61:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:12:01:5B:5D:D3:E1:71:B6:C8:F2:3E:D2:AB:74:FF:48:4C:73:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6/3b5d706f-a48e-3efe-af6c-bfee0e835b37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6/fdd9493c-4150-4957-92ed-ba65ee3083d6.crl X509v3 Authority Key Identifier: keyid:C9:56:85:07:37:1E:A9:D2:B8:2A:31:A7:7A:A7:11:29:A7:AF:3E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6.cer sbgp-ipAddrBlock: critical IPv4: 23.144.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:80:51:57:71:a4:5d:13:30:3f:78:89:b4:f7:a4:ff:b7:c9: 72:e4:4b:87:9e:2f:90:ec:40:56:0c:cd:be:11:00:f2:5f:53: 3f:0a:32:45:b7:23:6d:59:23:55:07:fd:13:67:da:5e:9e:d4: be:fd:b6:bd:28:53:6b:9b:b3:4a:7b:97:e2:3a:0f:f1:a2:6b: a2:dd:cc:db:25:ba:09:21:ee:35:77:a4:0b:2b:5d:c7:88:a1: 89:91:f2:54:d2:3b:20:4c:2b:17:ce:f1:f4:ba:27:01:2d:6b: f4:db:19:cf:17:77:4d:96:25:51:d4:60:fb:c4:39:a4:5c:15: cf:47:1d:b1:50:2c:69:17:13:b0:97:28:c6:64:08:44:62:cc: d0:ca:e6:52:5c:3a:7a:91:cd:7e:75:b4:a7:93:c0:75:84:17: 93:5a:b5:9d:28:50:51:c4:09:1c:3e:38:4b:64:ac:43:aa:b3: b6:c3:b6:fd:69:4a:09:eb:ad:a3:fe:7c:49:b8:b2:d3:2b:3a: a6:70:b9:4e:1d:3e:df:01:8d:c5:99:7a:b3:cd:1c:94:53:bb: fe:c8:b6:4b:2d:91:02:b9:43:2b:9e:1d:06:31:b6:db:64:73: d5:70:6a:aa:69:92:b7:3e:ca:18:52:33:e0:3f:0b:18:f0:19: 6b:6f:88:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9VAFRiOBBzDQPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkOTQ5M2MtNDE1MC00OTU3LTkyZWQtYmE2NWVlMzA4 M2Q2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MDhkMDc4MDctNWQ4Ny00ZDJhLTgwNWEtMTk4NTc5NzM5NGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibYctVZY+PMPqsu3oT7au6cgPBy3COg86eyU 55p4jhshTugVOBTMra9kuGOE2gg638fEyjKRhzBze12SkVHWkobTKSOODjsYITiH d1EsLDAbySFT83bv4NPEWepqJZ5+t2BrE899CJljGw9VWbXAhu1FqhRHYAknJeTV 6kEYYIWtn08JaOYeEoOmyiwCJjrzOh87pWDt40ihk91Sdp5FVGfMd/8PiZJgI8lb A0C0q7LwQGBVfUIfn4+BxiAZ3irkgVE8dY0EGKhwpJj+3p7WV/xC0z2Ffn1wmLhc XtVkx7jE9WYx8PXd5zPTJ0PpspEU3w8Y9meZBoPOuobDNslhZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoSAVtd0+FxtsjyPtKrdP9ITHNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGQ5 NDkzYy00MTUwLTQ5NTctOTJlZC1iYTY1ZWUzMDgzZDYvM2I1ZDcwNmYtYTQ4ZS0z ZWZlLWFmNmMtYmZlZTBlODM1YjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmRkOTQ5M2MtNDE1MC00OTU3LTky ZWQtYmE2NWVlMzA4M2Q2L2ZkZDk0OTNjLTQxNTAtNDk1Ny05MmVkLWJhNjVlZTMw ODNkNi5jcmwwHwYDVR0jBBgwFoAUyVaFBzceqdK4KjGneqcRKaevPtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mZGQ5NDkzYy00MTUwLTQ5NTctOTJlZC1iYTY1 ZWUzMDgzZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5BkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSAUVdxpF0TMD94ibT3pP+3yXLkS4eeL5DsQFYMzb4RAPJfUz8KMkW3 I21ZI1UH/RNn2l6e1L79tr0oU2ubs0p7l+I6D/Gia6LdzNslugkh7jV3pAsrXceI oYmR8lTSOyBMKxfO8fS6JwEta/TbGc8Xd02WJVHUYPvEOaRcFc9HHbFQLGkXE7CX KMZkCERizNDK5lJcOnqRzX51tKeTwHWEF5NatZ0oUFHECRw+OEtkrEOqs7bDtv1p SgnrraP+fEm4stMrOqZwuU4dPt8BjcWZerPNHJRTu/7ItkstkQK5QyueHQYxtttk c9Vwaqppkrc+yhhSM+A/CxjwGWtviKs= -----END CERTIFICATE-----Generated at Wed May 13 13:51:19 2026 by rpki-client