$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa File: 14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa (raw, json) Hash identifier: UDjIY94ixMVgmHAWurDoHlSeZ4zTcfYecQawlfvbNOo= Subject key identifier: 51:B0:E2:96:C7:C6:05:D2:79:8E:90:98:22:0A:86:A7:05:DF:14:1D Certificate issuer: /CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Certificate serial: 010D0C9F4328584D7CCFDAFE247960D7D22019A0 Authority key identifier: 67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 40569 IP address blocks: 23.171.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:da:fe:24:79:60:d7:d2:20:19:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=13e71fb5-9c64-48fd-9cbd-0fa020c7ad4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:ef:e8:cb:3b:65:40:48:7e:2a:f4:f9:30: 41:56:6d:93:62:f8:89:d2:a0:0c:07:81:b6:28:5c: 46:cf:30:d4:60:1c:68:0a:db:9f:e6:14:90:01:5b: 81:44:d7:ee:77:6e:e6:09:14:ec:5d:eb:19:50:55: 7c:db:15:59:4c:ff:08:ba:b9:a2:9c:9c:56:10:3e: 21:cf:e1:49:60:44:bb:43:ce:fe:2b:db:5f:f3:94: be:36:c9:c8:53:68:78:44:8e:23:e0:00:04:ef:cb: e8:00:83:ec:55:33:5e:4e:db:fe:6f:b3:56:27:7a: 09:17:0c:a0:01:d3:68:4f:2e:97:e9:ab:c3:32:aa: 3a:c1:d9:91:2e:76:2a:d1:6c:cb:1d:9f:c2:30:c9: 7d:57:42:ed:21:0b:5e:60:50:90:c2:6d:68:0c:26: a5:fe:72:a3:f6:ae:c2:6f:45:9f:58:7b:27:39:ea: ee:ae:e9:eb:da:4d:82:f0:fc:41:68:56:b1:ac:1d: fa:29:61:ff:fa:01:ac:be:7e:eb:64:45:b8:c0:06: 5e:1c:97:29:57:a9:ca:ce:e5:ad:c9:97:74:c1:4f: 02:ae:62:bd:3d:cb:65:16:12:fa:fc:89:40:06:a0: d7:55:38:08:61:81:90:18:00:d1:23:c8:4b:f2:75: e9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B0:E2:96:C7:C6:05:D2:79:8E:90:98:22:0A:86:A7:05:DF:14:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl X509v3 Authority Key Identifier: keyid:67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer sbgp-ipAddrBlock: critical IPv4: 23.171.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:7c:7e:b7:e5:6d:0d:eb:26:3f:ab:eb:72:d9:b7:21:f7:77: dc:9a:0b:a0:a1:9a:5b:f5:45:9a:75:dc:6b:35:4f:9a:7d:7e: 98:dd:49:12:e6:3f:0b:c9:32:6c:22:4a:43:2a:56:87:a4:88: 45:f4:40:a5:bc:87:4b:f5:f5:35:14:10:90:76:81:10:39:7d: 23:89:3a:51:e0:c8:b4:43:a1:0a:3e:84:bc:ce:c5:29:0d:4a: 76:92:7f:6f:92:be:c5:3a:c6:90:fc:1c:b5:4f:09:32:0a:9d: d1:5a:2c:9e:b4:aa:f2:74:70:39:ca:f3:c0:18:de:8b:bc:e2: 2c:ab:fc:93:8f:c2:5a:f3:e3:3d:32:4e:a3:1d:ed:12:83:bb: ab:c8:35:81:77:58:59:8e:bc:b7:57:34:d9:fd:79:31:ba:b4: 00:fe:9b:65:f9:24:1d:29:e7:0f:37:1f:73:91:be:82:49:94: 48:bd:71:62:7a:b7:91:39:8c:5e:cc:19:f0:e1:d0:82:a5:6d: ab:17:37:3b:d2:fa:de:d2:db:f4:ad:1f:bb:73:09:12:ca:e2: 50:48:47:85:b5:ac:52:e9:54:f7:34:9e:45:d4:df:1f:43:9d: cc:b5:83:1a:1b:e0:83:00:83:f9:06:89:f3:c3:8e:ef:c8:b4: 45:a5:ba:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z9r+JHlg19IgGaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjliODc0MzQtMDBkZS00ZDJmLWE0NWQtYWJlMWVmZTVl Y2ZkMB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk MTNlNzFmYjUtOWM2NC00OGZkLTljYmQtMGZhMDIwYzdhZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3Tv6Ms7ZUBIfir0+TBBVm2TYviJ0qAMB4G2 KFxGzzDUYBxoCtuf5hSQAVuBRNfud27mCRTsXesZUFV82xVZTP8IurminJxWED4h z+FJYES7Q87+K9tf85S+NsnIU2h4RI4j4AAE78voAIPsVTNeTtv+b7NWJ3oJFwyg AdNoTy6X6avDMqo6wdmRLnYq0WzLHZ/CMMl9V0LtIQteYFCQwm1oDCal/nKj9q7C b0WfWHsnOerurunr2k2C8PxBaFaxrB36KWH/+gGsvn7rZEW4wAZeHJcpV6nKzuWt yZd0wU8CrmK9PctlFhL6/IlABqDXVTgIYYGQGADRI8hL8nXpRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGw4pbHxgXSeY6QmCIKhqcF3xQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOWI4 NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUxZWZlNWVjZmQvMTRmNjNmMjMtNGRkNi0z OWI0LWJlZTEtMWNmMWExMTJiODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjliODc0MzQtMDBkZS00ZDJmLWE0 NWQtYWJlMWVmZTVlY2ZkL2I5Yjg3NDM0LTAwZGUtNGQyZi1hNDVkLWFiZTFlZmU1 ZWNmZC5jcmwwHwYDVR0jBBgwFoAUZ7qrgtUltq3erC7/J+WFnJfOPGswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iOWI4NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUx ZWZlNWVjZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6uoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA98frflbQ3rJj+r63LZtyH3d9yaC6Chmlv1RZp13Gs1T5p9fpjdSRLm PwvJMmwiSkMqVoekiEX0QKW8h0v19TUUEJB2gRA5fSOJOlHgyLRDoQo+hLzOxSkN SnaSf2+SvsU6xpD8HLVPCTIKndFaLJ60qvJ0cDnK88AY3ou84iyr/JOPwlrz4z0y TqMd7RKDu6vINYF3WFmOvLdXNNn9eTG6tAD+m2X5JB0p5w83H3ORvoJJlEi9cWJ6 t5E5jF7MGfDh0IKlbasXNzvS+t7S2/StH7tzCRLK4lBIR4W1rFLpVPc0nkXU3x9D ncy1gxob4IMAg/kGifPDju/ItEWluqI= -----END CERTIFICATE-----Generated at Fri Apr 17 13:52:57 2026 by rpki-client