$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/7c20deec-1152-3c56-8ea4-d899a929dad8.roa File: 7c20deec-1152-3c56-8ea4-d899a929dad8.roa (raw, json) Hash identifier: GRB1Ls1Clo94TXOC9Cl9BcE7mrDBzzW5m7RT2NPtY7A= Subject key identifier: B0:30:D7:55:58:D2:FB:29:AB:11:D9:97:2B:63:53:A3:D8:4B:69:28 Certificate issuer: /CN=dafb7b4c-08cc-4d76-ada2-b572a2d233a9 Certificate serial: 010D0C9F4328584D746FC14F6B72850576DFAC80 Authority key identifier: 35:7F:E0:80:07:13:C0:91:F4:F7:40:D0:BA:63:B9:0A:E8:F5:B3:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/7c20deec-1152-3c56-8ea4-d899a929dad8.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 398193 IP address blocks: 23.165.112.0/24 maxlen: 24 148.59.95.0/24 maxlen: 24 2602:fd18::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:c1:4f:6b:72:85:05:76:df:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafb7b4c-08cc-4d76-ada2-b572a2d233a9 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=4372d8b5-78e6-44c4-9daf-ffa4467439ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ae:f4:cd:a3:67:d9:ae:f3:62:ca:80:97:62: 1c:a1:d6:e2:95:45:60:e6:be:e2:e8:15:84:0c:01: c7:da:3c:20:4f:ce:df:bd:2f:a1:06:c5:58:2b:7f: be:7b:4e:fe:c8:ae:03:73:6a:58:bc:96:35:6e:6b: 76:f0:d6:5f:cc:62:c8:3f:b3:e9:9c:cf:c7:9a:55: 32:75:1b:ef:73:e5:95:c3:d2:b9:3c:2e:e8:8c:0d: 92:39:0f:60:b0:ea:39:5a:7e:32:49:0a:4b:1b:d9: 14:1d:21:b0:50:05:ef:cb:f8:fc:c6:aa:43:71:f6: 26:6f:96:f9:fa:09:08:23:ae:c5:ee:c6:a1:6f:eb: 94:dd:ca:d7:f1:82:50:c5:41:a9:ab:e0:cd:5d:a1: 05:22:b4:af:70:ae:30:b0:1f:f0:d8:97:c9:f8:49: 9e:a1:14:d9:72:f1:21:67:94:96:83:a0:f5:87:9d: c7:db:e9:d8:cf:44:24:f2:49:39:51:f0:9d:da:05: 09:e9:45:56:25:c0:47:34:68:c0:a1:37:44:7b:3a: 26:b9:2c:8c:7d:4e:f4:19:5c:1c:ae:29:74:a4:8e: 43:cb:18:14:80:7c:2d:21:53:ca:8b:13:ae:d8:c9: 3e:53:e4:ef:fe:66:2b:13:66:53:3f:3f:03:85:61: d4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:30:D7:55:58:D2:FB:29:AB:11:D9:97:2B:63:53:A3:D8:4B:69:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/7c20deec-1152-3c56-8ea4-d899a929dad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.crl X509v3 Authority Key Identifier: keyid:35:7F:E0:80:07:13:C0:91:F4:F7:40:D0:BA:63:B9:0A:E8:F5:B3:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer sbgp-ipAddrBlock: critical IPv4: 23.165.112.0/24 148.59.95.0/24 IPv6: 2602:fd18::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:86:9c:da:85:4f:5e:9e:3e:6d:b3:70:e1:8c:56:02:d1:d2: 50:9f:17:d9:28:c1:c5:ca:b9:ae:b3:51:9d:44:b7:1f:67:33: c7:15:b2:4d:62:c2:49:ca:c6:6b:00:48:93:97:8a:b8:01:e1: 1b:c4:b9:31:4e:39:64:19:81:ec:07:12:3e:b4:20:8b:26:2f: 2f:a5:0c:4e:33:85:39:92:7c:c8:e9:f1:c7:66:be:d4:22:30: 2b:70:52:c1:23:1c:09:bf:50:f4:fb:50:57:2f:ae:e2:24:8d: 28:14:60:5d:d6:be:19:fe:43:1e:e8:76:37:29:9a:0e:3e:6b: 1b:f6:33:55:60:2d:a3:e9:02:94:ab:d3:43:69:51:06:0e:4c: 95:8a:02:d1:c1:95:78:2d:fe:39:5d:b9:2d:6e:e1:81:57:fd: e5:45:f4:bd:c0:86:75:22:e1:f9:36:e0:9e:5f:c4:ac:b7:dd: a4:3b:ec:05:60:71:a3:e4:08:26:72:bb:3a:e1:3c:19:c1:0d: 6e:cc:e7:dc:13:cd:c2:1d:66:54:2c:16:6e:13:9e:0e:c6:d7: 50:5e:92:66:50:57:5b:31:13:81:93:f2:a9:f0:3d:74:5c:aa: cb:0b:33:1f:c3:b7:55:f7:a5:ef:6b:64:ad:67:4b:c1:08:1f: b7:1b:7c:60 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE10b8FPa3KFBXbfrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFmYjdiNGMtMDhjYy00ZDc2LWFkYTItYjU3MmEyZDIz M2E5MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk NDM3MmQ4YjUtNzhlNi00NGM0LTlkYWYtZmZhNDQ2NzQzOWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK70zaNn2a7zYsqAl2IcodbilUVg5r7i6BWE DAHH2jwgT87fvS+hBsVYK3++e07+yK4Dc2pYvJY1bmt28NZfzGLIP7PpnM/HmlUy dRvvc+WVw9K5PC7ojA2SOQ9gsOo5Wn4ySQpLG9kUHSGwUAXvy/j8xqpDcfYmb5b5 +gkII67F7sahb+uU3crX8YJQxUGpq+DNXaEFIrSvcK4wsB/w2JfJ+EmeoRTZcvEh Z5SWg6D1h53H2+nYz0Qk8kk5UfCd2gUJ6UVWJcBHNGjAoTdEezomuSyMfU70GVwc ril0pI5DyxgUgHwtIVPKixOu2Mk+U+Tv/mYrE2ZTPz8DhWHUlQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFLAw11VY0vspqxHZlytjU6PYS2koMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWZi N2I0Yy0wOGNjLTRkNzYtYWRhMi1iNTcyYTJkMjMzYTkvN2MyMGRlZWMtMTE1Mi0z YzU2LThlYTQtZDg5OWE5MjlkYWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFmYjdiNGMtMDhjYy00ZDc2LWFk YTItYjU3MmEyZDIzM2E5L2RhZmI3YjRjLTA4Y2MtNGQ3Ni1hZGEyLWI1NzJhMmQy MzNhOS5jcmwwHwYDVR0jBBgwFoAUNX/ggAcTwJH090DQumO5Cuj1sxEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWZiN2I0Yy0wOGNjLTRkNzYtYWRhMi1iNTcy YTJkMjMzYTkuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6VwAwQA lDtfMA4EAgACMAgDBgQmAv0YADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8hpzahU9enj5ts3DhjFYC0dJQ nxfZKMHFyrmus1GdRLcfZzPHFbJNYsJJysZrAEiTl4q4AeEbxLkxTjlkGYHsBxI+ tCCLJi8vpQxOM4U5knzI6fHHZr7UIjArcFLBIxwJv1D0+1BXL67iJI0oFGBd1r4Z /kMe6HY3KZoOPmsb9jNVYC2j6QKUq9NDaVEGDkyVigLRwZV4Lf45XbktbuGBV/3l RfS9wIZ1IuH5NuCeX8Sst92kO+wFYHGj5Agmcrs64TwZwQ1uzOfcE83CHWZULBZu E54OxtdQXpJmUFdbMROBk/Kp8D10XKrLCzMfw7dV96Xva2StZ0vBCB+3G3xg -----END CERTIFICATE-----Generated at Fri Apr 17 15:29:45 2026 by rpki-client