$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/0c49c65e-2f24-3cd2-90e9-71b3184dfa36.roa File: 0c49c65e-2f24-3cd2-90e9-71b3184dfa36.roa (raw, json) Hash identifier: h4Yy7eyIfNEeH1xFIuV9iPAOZRMLCohguVmwiNMZSUY= Subject key identifier: B9:12:23:96:58:61:DB:BE:13:6D:0B:77:C9:5B:DA:59:C2:4E:1B:EA Certificate issuer: /CN=910396e7-2d32-4040-a73d-ad686b8445b3 Certificate serial: 010D0C9F4328584D80FFF978249EB4E32D6DFDC0 Authority key identifier: 4B:45:16:53:A2:29:87:95:52:DD:ED:B6:AF:5D:CF:0A:21:84:CD:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/0c49c65e-2f24-3cd2-90e9-71b3184dfa36.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 63127 IP address blocks: 23.168.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:f9:78:24:9e:b4:e3:2d:6d:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=910396e7-2d32-4040-a73d-ad686b8445b3 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=8ca0a894-81bb-4352-8d24-a06857893748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0c:32:c1:d3:cb:47:3d:73:51:b3:5c:5a:20: 65:b4:54:b4:93:97:e8:e3:de:bc:e6:9b:0b:f7:79: 15:43:23:a3:59:ba:db:3c:64:47:d9:ae:59:c9:58: 92:ae:b0:c7:55:0c:db:ff:27:5d:e6:17:c6:74:ee: e3:a5:9d:87:2d:24:39:c7:cc:40:bf:ca:35:34:01: dd:62:db:95:ec:5f:7d:79:4f:ea:17:9d:60:56:48: 30:78:e1:80:e1:3c:29:d0:87:d4:9b:84:d4:61:c9: 1a:83:7d:27:2f:bf:73:41:87:bc:c8:de:3d:05:3d: be:a1:32:c5:7f:a9:81:94:33:58:58:67:e6:19:56: f4:cf:11:e5:f3:c6:a9:7e:0c:06:d2:31:19:f9:21: 8e:39:3e:36:24:f9:b5:11:25:aa:10:91:aa:68:d7: ad:1c:29:7a:68:f8:4a:a6:73:0a:7a:dd:b6:3f:b1: f8:49:aa:60:07:af:8c:77:db:1d:9b:44:5d:85:1a: 09:b1:41:6f:b9:15:26:2b:ab:7b:cf:29:79:45:a6: e5:aa:28:fd:33:53:85:61:c0:5a:00:fe:2b:7a:46: 4e:3f:85:a5:87:cf:70:29:b4:41:80:3d:dc:a7:73: f7:63:9d:ae:11:92:59:42:02:f4:c8:25:6d:36:79: 18:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:12:23:96:58:61:DB:BE:13:6D:0B:77:C9:5B:DA:59:C2:4E:1B:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/0c49c65e-2f24-3cd2-90e9-71b3184dfa36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.crl X509v3 Authority Key Identifier: keyid:4B:45:16:53:A2:29:87:95:52:DD:ED:B6:AF:5D:CF:0A:21:84:CD:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3.cer sbgp-ipAddrBlock: critical IPv4: 23.168.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:f8:0d:53:0f:66:ad:a0:9c:6d:82:fc:ea:0f:9a:18:0c:bb: f1:71:51:6d:ec:51:86:e8:90:89:58:bb:ae:75:a4:1b:67:dc: 54:ee:ea:5b:e1:e8:93:ba:9d:2d:4b:d8:aa:22:3d:46:f2:d5: cf:9e:62:f7:77:36:60:1c:c4:14:c5:59:27:66:94:f3:f2:44: d7:89:55:4c:a1:63:20:a1:e5:77:9e:d3:c5:5c:bc:14:05:cb: 3c:e7:0f:98:5f:11:71:6e:3f:c8:41:16:ed:7b:d7:ab:1a:02: b2:94:6c:a9:74:6d:87:6f:fc:4b:81:d5:52:b4:67:9b:b8:5a: d6:c4:f1:1f:1a:58:99:1e:7d:44:69:92:85:2c:d4:65:d1:c6: 9a:79:5c:d0:af:25:d9:70:15:31:d1:69:ce:4a:1f:13:e6:82: e0:31:df:83:60:53:5d:16:ea:44:77:71:d3:e5:47:bd:df:62: 51:21:79:67:55:36:9e:ee:7a:69:0f:20:62:c6:f3:bf:f3:96: 21:9c:91:b6:35:1b:58:5c:88:8a:c3:dd:91:3f:a6:9d:45:1e: af:54:01:0d:ff:0f:fb:db:8f:60:a3:e0:3e:27:25:5b:30:99: 42:0e:ee:78:e0:ac:42:a6:b7:64:35:2f:0b:b7:d9:d8:c0:d1: cf:ca:6b:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A//l4JJ604y1t/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEwMzk2ZTctMmQzMi00MDQwLWE3M2QtYWQ2ODZiODQ0 NWIzMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk OGNhMGE4OTQtODFiYi00MzUyLThkMjQtYTA2ODU3ODkzNzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwwywdPLRz1zUbNcWiBltFS0k5fo49685psL 93kVQyOjWbrbPGRH2a5ZyViSrrDHVQzb/ydd5hfGdO7jpZ2HLSQ5x8xAv8o1NAHd YtuV7F99eU/qF51gVkgweOGA4Twp0IfUm4TUYckag30nL79zQYe8yN49BT2+oTLF f6mBlDNYWGfmGVb0zxHl88apfgwG0jEZ+SGOOT42JPm1ESWqEJGqaNetHCl6aPhK pnMKet22P7H4SapgB6+Md9sdm0RdhRoJsUFvuRUmK6t7zyl5Rablqij9M1OFYcBa AP4rekZOP4Wlh89wKbRBgD3cp3P3Y52uEZJZQgL0yCVtNnkY0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkSI5ZYYdu+E20Ld8lb2lnCThvqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MTAz OTZlNy0yZDMyLTQwNDAtYTczZC1hZDY4NmI4NDQ1YjMvMGM0OWM2NWUtMmYyNC0z Y2QyLTkwZTktNzFiMzE4NGRmYTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTEwMzk2ZTctMmQzMi00MDQwLWE3 M2QtYWQ2ODZiODQ0NWIzLzkxMDM5NmU3LTJkMzItNDA0MC1hNzNkLWFkNjg2Yjg0 NDViMy5jcmwwHwYDVR0jBBgwFoAUS0UWU6Iph5VS3e22r13PCiGEzTowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85MTAzOTZlNy0yZDMyLTQwNDAtYTczZC1hZDY4 NmI4NDQ1YjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6g4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIb4DVMPZq2gnG2C/OoPmhgMu/FxUW3sUYbokIlYu651pBtn3FTu6lvh 6JO6nS1L2KoiPUby1c+eYvd3NmAcxBTFWSdmlPPyRNeJVUyhYyCh5Xee08VcvBQF yzznD5hfEXFuP8hBFu1716saArKUbKl0bYdv/EuB1VK0Z5u4WtbE8R8aWJkefURp koUs1GXRxpp5XNCvJdlwFTHRac5KHxPmguAx34NgU10W6kR3cdPlR73fYlEheWdV Np7uemkPIGLG87/zliGckbY1G1hciIrD3ZE/pp1FHq9UAQ3/D/vbj2Cj4D4nJVsw mUIO7njgrEKmt2Q1Lwu32djA0c/Kawk= -----END CERTIFICATE-----Generated at Fri Apr 17 09:46:43 2026 by rpki-client