$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/465e34e0-7c4f-3fc0-a7d7-4e062dc9b1c9.roa File: 465e34e0-7c4f-3fc0-a7d7-4e062dc9b1c9.roa (raw, json) Hash identifier: zsRtvoXt/zt0i+9ydS/5MWd6Hc6Fcg/1S/n4IzqqmUY= Subject key identifier: 93:BB:20:52:EC:C2:0A:D3:F3:F3:E7:8D:27:7F:F2:99:FD:6F:3C:54 Certificate issuer: /CN=858c4eda-1c14-4575-affe-9e4368bf208d Certificate serial: 010D0C9F4328584D667A4EC6F5948C80C015AB00 Authority key identifier: 3F:78:6B:A8:C4:71:A2:5B:59:61:A0:42:6B:C4:88:EE:2D:BB:13:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/465e34e0-7c4f-3fc0-a7d7-4e062dc9b1c9.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 401914 IP address blocks: 23.226.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/858c4eda-1c14-4575-affe-9e4368bf208d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/858c4eda-1c14-4575-affe-9e4368bf208d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:4e:c6:f5:94:8c:80:c0:15:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=858c4eda-1c14-4575-affe-9e4368bf208d Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=958afd57-7c4e-447b-b78b-96b057e36c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6d:5a:34:a9:9f:d1:f3:86:5d:e2:47:e5:9f: 87:ae:b3:96:9d:62:0c:c2:d0:70:0d:a4:f4:34:6a: 49:3c:80:82:d5:ec:11:34:21:3d:27:8c:1c:a7:cd: 10:40:5d:03:51:a4:a7:c8:e6:47:1e:12:d8:47:14: 38:26:2c:8e:af:9f:d6:5f:70:b6:9f:c5:05:ca:ea: 3f:22:07:09:d0:6c:64:c2:ad:d8:d2:43:be:f8:ff: 51:bd:b9:39:07:af:68:e8:44:85:59:0c:19:da:13: aa:16:85:d8:78:c5:d2:29:f8:2e:fa:67:1d:c9:7f: fe:71:b4:6e:29:b1:a3:70:7c:05:f1:c0:5d:17:c5: 51:5e:8f:75:99:27:53:f4:6a:f5:af:bd:23:14:d8: 3a:11:db:93:b2:fd:97:46:ac:35:2e:8b:a8:8b:09: da:66:5a:0c:b7:e3:66:65:3e:14:b6:a8:04:f7:3c: 5d:fb:1c:9c:de:f4:60:25:01:d2:19:27:82:bf:76: f1:98:a2:2b:95:66:4a:d7:0a:2c:51:20:ac:81:ee: ae:b1:61:4a:16:65:4d:80:eb:09:49:18:7d:01:2d: bb:d1:90:e6:56:69:4a:f5:4d:d9:69:61:d1:c4:39: be:76:d1:e9:6d:1f:0a:0c:8a:25:4e:1e:9a:f5:2a: 0a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BB:20:52:EC:C2:0A:D3:F3:F3:E7:8D:27:7F:F2:99:FD:6F:3C:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/465e34e0-7c4f-3fc0-a7d7-4e062dc9b1c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/858c4eda-1c14-4575-affe-9e4368bf208d.crl X509v3 Authority Key Identifier: keyid:3F:78:6B:A8:C4:71:A2:5B:59:61:A0:42:6B:C4:88:EE:2D:BB:13:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d.cer sbgp-ipAddrBlock: critical IPv4: 23.226.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:62:a2:b8:e1:d5:45:ea:74:4b:08:a3:a6:b0:74:52:6a:99: 70:cd:b8:fe:b8:74:94:ea:a2:72:9c:73:d0:52:91:bb:17:53: 20:b1:4d:49:44:60:47:14:b4:a9:0a:56:99:8d:43:4d:f9:e3: 66:57:f0:0f:a8:d1:7c:a5:70:27:d4:dc:c2:ce:70:d3:8f:4f: 5d:2b:2b:5c:07:24:e2:59:3c:04:b9:71:49:85:94:96:ca:91: 61:88:c8:17:46:86:a8:86:33:16:8d:b5:f5:cc:f8:62:d2:e4: 1b:56:ae:2b:22:40:5e:eb:8a:e7:46:59:18:04:51:7d:c7:98: 3f:09:72:ca:2a:82:84:8f:dd:29:0d:6d:78:e1:b1:05:a5:53: a0:f8:09:a9:6a:de:09:cc:04:91:29:9a:3c:6a:5c:4e:81:31: c5:1e:fd:f7:1a:1f:d2:a0:f4:89:35:dc:38:c6:6a:dc:19:21: 37:d8:58:f6:99:f5:17:14:29:e6:09:99:5b:62:bf:f9:e7:7b: cb:bb:5d:71:66:50:d3:52:a7:86:87:9d:43:b4:00:2e:d7:bf: 9d:68:d6:75:c2:df:04:8e:c9:6a:f0:22:fa:64:d5:89:1b:49: 4c:65:86:fa:4d:a2:21:ec:1b:fa:47:dc:e6:ca:19:c0:8c:1e: 7b:07:c3:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1mek7G9ZSMgMAVqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODU4YzRlZGEtMWMxNC00NTc1LWFmZmUtOWU0MzY4YmYy MDhkMB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk OTU4YWZkNTctN2M0ZS00NDdiLWI3OGItOTZiMDU3ZTM2YzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG1aNKmf0fOGXeJH5Z+HrrOWnWIMwtBwDaT0 NGpJPICC1ewRNCE9J4wcp80QQF0DUaSnyOZHHhLYRxQ4JiyOr5/WX3C2n8UFyuo/ IgcJ0Gxkwq3Y0kO++P9Rvbk5B69o6ESFWQwZ2hOqFoXYeMXSKfgu+mcdyX/+cbRu KbGjcHwF8cBdF8VRXo91mSdT9Gr1r70jFNg6EduTsv2XRqw1LouoiwnaZloMt+Nm ZT4UtqgE9zxd+xyc3vRgJQHSGSeCv3bxmKIrlWZK1wosUSCsge6usWFKFmVNgOsJ SRh9AS270ZDmVmlK9U3ZaWHRxDm+dtHpbR8KDIolTh6a9SoKcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJO7IFLswgrT8/PnjSd/8pn9bzxUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84NThj NGVkYS0xYzE0LTQ1NzUtYWZmZS05ZTQzNjhiZjIwOGQvNDY1ZTM0ZTAtN2M0Zi0z ZmMwLWE3ZDctNGUwNjJkYzliMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODU4YzRlZGEtMWMxNC00NTc1LWFm ZmUtOWU0MzY4YmYyMDhkLzg1OGM0ZWRhLTFjMTQtNDU3NS1hZmZlLTllNDM2OGJm MjA4ZC5jcmwwHwYDVR0jBBgwFoAUP3hrqMRxoltZYaBCa8SI7i27E4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84NThjNGVkYS0xYzE0LTQ1NzUtYWZmZS05ZTQz NjhiZjIwOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+JyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFiorjh1UXqdEsIo6awdFJqmXDNuP64dJTqonKcc9BSkbsXUyCxTUlE YEcUtKkKVpmNQ03542ZX8A+o0XylcCfU3MLOcNOPT10rK1wHJOJZPAS5cUmFlJbK kWGIyBdGhqiGMxaNtfXM+GLS5BtWrisiQF7riudGWRgEUX3HmD8JcsoqgoSP3SkN bXjhsQWlU6D4Calq3gnMBJEpmjxqXE6BMcUe/fcaH9Kg9Ik13DjGatwZITfYWPaZ 9RcUKeYJmVtiv/nne8u7XXFmUNNSp4aHnUO0AC7Xv51o1nXC3wSOyWrwIvpk1Ykb SUxlhvpNoiHsG/pH3ObKGcCMHnsHw6w= -----END CERTIFICATE-----Generated at Fri Apr 17 19:43:45 2026 by rpki-client