$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc/88f595c7-3e60-3e1b-a5a0-65b7f6bc25c6.roa File: 88f595c7-3e60-3e1b-a5a0-65b7f6bc25c6.roa (raw, json) Hash identifier: 345FHnWgQv0rrfFC9boHIe6Wq7ggNB/mVmUiHpWb6xQ= Subject key identifier: 3D:43:4E:78:C3:14:C2:B7:4D:5F:54:57:7C:A4:ED:DC:DF:D7:40:E1 Certificate issuer: /CN=a37f77d5-b5c8-4567-8b95-233330e463cc Certificate serial: 010D0C9F4328584D7B6A9D1DDA49F7F906F8A980 Authority key identifier: 2B:AE:0D:7D:61:C6:72:1E:0F:0E:66:03:60:A7:8B:4C:4F:9E:ED:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc/88f595c7-3e60-3e1b-a5a0-65b7f6bc25c6.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 11169 IP address blocks: 23.152.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc/a37f77d5-b5c8-4567-8b95-233330e463cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc/a37f77d5-b5c8-4567-8b95-233330e463cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:9d:1d:da:49:f7:f9:06:f8:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a37f77d5-b5c8-4567-8b95-233330e463cc Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=2ef38d50-a1db-4864-8296-f3159bd4f3e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:53:64:68:cf:88:5b:c2:ac:f9:fe:b8:83: f2:0f:4c:d6:18:3c:6c:7f:13:a8:60:d5:b4:53:a0: f4:54:48:46:f9:cc:94:8e:c8:a4:c4:30:47:8b:b4: 0e:d8:f1:81:73:1f:2c:a9:6b:40:3d:0d:c2:cd:74: 33:9b:75:75:d9:44:3f:94:d2:b4:5a:f6:ca:6c:f8: 34:a3:ec:c7:aa:f8:79:ff:d5:52:fd:39:9f:f7:db: 41:fe:f0:f3:02:09:fa:2b:d1:68:2c:aa:17:d4:5f: 0b:00:16:c2:52:f3:d3:22:5b:54:23:69:2f:96:3a: 86:d4:9f:9b:7a:f1:a8:ba:71:d7:a6:92:c6:9c:5c: 39:4b:c8:fb:cb:49:fc:c3:a9:23:5a:4a:8f:c7:86: d2:d3:c3:18:b2:69:45:fa:67:fc:f2:85:0a:7f:18: 3d:90:27:f2:ec:ad:d5:d8:1b:a0:f3:79:d4:0b:fe: 4b:67:8a:37:c3:03:f2:8f:bd:b0:1e:67:ba:08:74: 30:67:07:93:c2:e5:bf:7f:b9:e0:0a:75:32:4d:8e: 4e:4c:89:76:6c:db:3d:d0:d9:c7:aa:b5:38:ba:92: 5c:5b:b6:22:ac:b5:69:ff:03:ae:95:10:e4:cb:79: a3:13:33:76:c9:b4:6a:d0:39:0a:20:bc:39:1b:d0: a2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:43:4E:78:C3:14:C2:B7:4D:5F:54:57:7C:A4:ED:DC:DF:D7:40:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc/88f595c7-3e60-3e1b-a5a0-65b7f6bc25c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc/a37f77d5-b5c8-4567-8b95-233330e463cc.crl X509v3 Authority Key Identifier: keyid:2B:AE:0D:7D:61:C6:72:1E:0F:0E:66:03:60:A7:8B:4C:4F:9E:ED:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc.cer sbgp-ipAddrBlock: critical IPv4: 23.152.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:17:1e:88:29:94:8b:d4:f8:2a:79:8a:34:e4:cf:b3:8a:2f: d5:75:c1:82:d2:87:33:27:1a:36:54:1d:8f:c4:98:d9:e6:9e: 82:10:c6:8f:91:e6:de:29:78:fa:4d:97:0c:43:66:bf:14:c0: 4c:21:74:e5:1a:7f:5e:c0:5b:07:85:cd:fc:2e:4e:cd:87:c3: 03:75:62:6a:34:d2:c9:7a:8c:2e:59:8b:00:76:e5:f7:4f:b3: b7:be:90:9b:47:30:f7:28:80:49:81:48:4f:7b:53:ef:6e:48: ba:2f:04:38:07:db:73:6c:25:0d:5f:d9:ab:de:09:5e:76:be: d9:02:c5:22:ff:7c:e9:93:36:0a:20:bf:55:cc:7e:01:3a:57: 89:73:26:85:14:2b:4d:02:1f:d9:32:af:d4:1d:0e:d3:cf:c7: cf:07:19:0a:8b:46:ad:98:7a:44:fe:1a:61:02:b5:cf:23:68: bf:82:40:e6:08:73:41:e9:09:13:e1:88:c4:59:40:fd:98:60: 35:60:f2:02:1f:01:ec:10:da:cb:54:04:cd:55:19:f9:d8:cd: 9f:18:47:52:cd:d2:c1:b6:4d:0e:b3:cc:40:97:e0:c2:46:73: 0e:5d:a6:6e:bd:29:a7:a4:1d:88:33:8a:91:f9:fb:6b:16:6e: 9b:3c:83:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17ap0d2kn3+Qb4qYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM3Zjc3ZDUtYjVjOC00NTY3LThiOTUtMjMzMzMwZTQ2 M2NjMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk MmVmMzhkNTAtYTFkYi00ODY0LTgyOTYtZjMxNTliZDRmM2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4tTZGjPiFvCrPn+uIPyD0zWGDxsfxOoYNW0 U6D0VEhG+cyUjsikxDBHi7QO2PGBcx8sqWtAPQ3CzXQzm3V12UQ/lNK0WvbKbPg0 o+zHqvh5/9VS/Tmf99tB/vDzAgn6K9FoLKoX1F8LABbCUvPTIltUI2kvljqG1J+b evGounHXppLGnFw5S8j7y0n8w6kjWkqPx4bS08MYsmlF+mf88oUKfxg9kCfy7K3V 2Bug83nUC/5LZ4o3wwPyj72wHme6CHQwZweTwuW/f7ngCnUyTY5OTIl2bNs90NnH qrU4upJcW7YirLVp/wOulRDky3mjEzN2ybRq0DkKILw5G9CiywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1DTnjDFMK3TV9UV3yk7dzf10DhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzdm NzdkNS1iNWM4LTQ1NjctOGI5NS0yMzMzMzBlNDYzY2MvODhmNTk1YzctM2U2MC0z ZTFiLWE1YTAtNjViN2Y2YmMyNWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTM3Zjc3ZDUtYjVjOC00NTY3LThi OTUtMjMzMzMwZTQ2M2NjL2EzN2Y3N2Q1LWI1YzgtNDU2Ny04Yjk1LTIzMzMzMGU0 NjNjYy5jcmwwHwYDVR0jBBgwFoAUK64NfWHGch4PDmYDYKeLTE+e7dMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzdmNzdkNS1iNWM4LTQ1NjctOGI5NS0yMzMz MzBlNDYzY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5gcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIXHogplIvU+Cp5ijTkz7OKL9V1wYLShzMnGjZUHY/EmNnmnoIQxo+R 5t4pePpNlwxDZr8UwEwhdOUaf17AWweFzfwuTs2HwwN1Ymo00sl6jC5ZiwB25fdP s7e+kJtHMPcogEmBSE97U+9uSLovBDgH23NsJQ1f2aveCV52vtkCxSL/fOmTNgog v1XMfgE6V4lzJoUUK00CH9kyr9QdDtPPx88HGQqLRq2YekT+GmECtc8jaL+CQOYI c0HpCRPhiMRZQP2YYDVg8gIfAewQ2stUBM1VGfnYzZ8YR1LN0sG2TQ6zzECX4MJG cw5dpm69KaekHYgzipH5+2sWbps8g2E= -----END CERTIFICATE-----Generated at Fri Apr 17 15:33:34 2026 by rpki-client