$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/246a9945-e728-367d-9f55-59504f6985c6.roa File: 246a9945-e728-367d-9f55-59504f6985c6.roa (raw, json) Hash identifier: beYjf/RMkfnCyGqtIIeS758NwHSxGwpw2tta5M+xT4s= Subject key identifier: 86:8E:6B:33:89:B3:8B:77:98:1E:82:A5:B7:5E:D9:34:AB:AF:54:FE Certificate issuer: /CN=ad697a12-b25f-4a7b-8c14-097935c18e5b Certificate serial: 010D0C9F4328584D5243546241BC3E2619B93F40 Authority key identifier: C4:09:D9:07:5A:4B:0E:66:CF:34:3D:CC:88:C3:80:97:80:4C:D5:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/246a9945-e728-367d-9f55-59504f6985c6.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 23.189.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/ad697a12-b25f-4a7b-8c14-097935c18e5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/ad697a12-b25f-4a7b-8c14-097935c18e5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:54:62:41:bc:3e:26:19:b9:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad697a12-b25f-4a7b-8c14-097935c18e5b Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=4d11d0c4-2878-4558-9f48-0c275ba148c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:25:07:22:89:4e:ac:90:f4:eb:06:66:81:bf: 22:bd:7a:62:0b:61:eb:43:1c:86:e6:0d:01:9c:41: fe:ab:c6:8b:6d:9b:72:03:8c:63:fe:b4:06:4c:ee: 1b:b5:76:cb:bf:98:2e:9c:27:00:0e:c3:05:ae:2c: 2a:14:2f:a0:2e:8c:13:01:48:c7:e3:37:f2:a7:16: 91:9f:ed:c1:a0:dd:b2:9d:b7:19:51:86:9e:26:5c: 8d:d8:8e:8c:a3:bb:30:ee:17:4b:dc:75:0f:59:12: a9:92:43:31:c4:d7:9d:42:15:5a:95:a7:3f:bd:1c: cf:d8:ec:3a:c1:40:c7:05:00:35:73:43:cd:26:e0: 64:ff:05:5b:e9:6c:5b:44:f6:84:2a:b3:7e:f5:ed: 98:0d:81:f3:21:ec:57:7f:05:d7:16:6d:8f:ec:88: be:a1:b9:75:22:2c:c6:41:33:3a:73:e1:ea:3c:82: 99:3e:3f:ab:4b:15:82:06:93:0c:d4:4f:1b:48:ec: d1:94:48:bf:48:74:0c:eb:8c:4b:81:3c:94:28:4b: 77:19:96:fe:04:7e:41:d6:53:5c:19:7e:56:37:91: 47:b0:2c:67:00:86:07:df:81:91:64:49:4e:a3:ec: 4d:07:63:f9:4d:9b:16:c0:bd:70:0e:95:8b:38:4b: d8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8E:6B:33:89:B3:8B:77:98:1E:82:A5:B7:5E:D9:34:AB:AF:54:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/246a9945-e728-367d-9f55-59504f6985c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/ad697a12-b25f-4a7b-8c14-097935c18e5b.crl X509v3 Authority Key Identifier: keyid:C4:09:D9:07:5A:4B:0E:66:CF:34:3D:CC:88:C3:80:97:80:4C:D5:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b.cer sbgp-ipAddrBlock: critical IPv4: 23.189.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:06:06:8c:e9:9c:5a:a3:3d:95:27:b8:7f:e2:e1:38:44:61: 33:2b:e0:8a:2a:ee:ac:11:3f:85:92:68:05:f9:77:a2:c8:f0: 96:93:60:be:57:31:c2:48:47:70:04:bc:97:99:6a:dd:93:44: 52:a2:d2:99:94:4f:a2:36:14:60:e8:01:15:29:91:9e:f3:dc: eb:80:5a:45:63:00:7b:e0:50:d4:3c:55:cd:7d:31:01:00:3c: 61:e3:86:a0:f0:54:68:e0:64:36:5a:13:02:98:e8:7f:bb:1a: b5:03:a7:92:f4:1f:d2:64:19:a9:00:f3:79:01:6b:de:a7:49: 97:c5:3b:e8:8c:4c:e6:a2:93:92:9c:8d:25:64:9f:a0:9c:6d: 9a:f1:62:46:9b:fb:7c:c2:e9:82:49:19:87:13:cb:3a:42:e5: cb:26:e6:9e:b0:26:85:7b:bc:1f:ff:b8:c4:89:fc:8b:38:ae: e1:61:4c:2e:8d:ea:9f:ba:0b:33:33:9a:49:1c:f1:b8:18:71: 6f:0f:ed:33:c3:3c:c8:a6:a5:72:31:63:37:23:89:f3:f8:2f: 38:7b:ca:5b:ef:1c:1a:b6:f6:b9:0c:25:a7:a2:db:f0:07:18: 22:2f:58:f7:cf:cb:ba:79:8d:98:24:c2:78:0c:8b:1d:0f:41: 30:bd:23:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1RiQbw+Jhm5P0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ2OTdhMTItYjI1Zi00YTdiLThjMTQtMDk3OTM1YzE4 ZTViMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NGQxMWQwYzQtMjg3OC00NTU4LTlmNDgtMGMyNzViYTE0OGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziUHIolOrJD06wZmgb8ivXpiC2HrQxyG5g0B nEH+q8aLbZtyA4xj/rQGTO4btXbLv5gunCcADsMFriwqFC+gLowTAUjH4zfypxaR n+3BoN2ynbcZUYaeJlyN2I6Mo7sw7hdL3HUPWRKpkkMxxNedQhValac/vRzP2Ow6 wUDHBQA1c0PNJuBk/wVb6WxbRPaEKrN+9e2YDYHzIexXfwXXFm2P7Ii+obl1IizG QTM6c+HqPIKZPj+rSxWCBpMM1E8bSOzRlEi/SHQM64xLgTyUKEt3GZb+BH5B1lNc GX5WN5FHsCxnAIYH34GRZElOo+xNB2P5TZsWwL1wDpWLOEvYYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaOazOJs4t3mB6Cpbde2TSrr1T+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZDY5 N2ExMi1iMjVmLTRhN2ItOGMxNC0wOTc5MzVjMThlNWIvMjQ2YTk5NDUtZTcyOC0z NjdkLTlmNTUtNTk1MDRmNjk4NWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWQ2OTdhMTItYjI1Zi00YTdiLThj MTQtMDk3OTM1YzE4ZTViL2FkNjk3YTEyLWIyNWYtNGE3Yi04YzE0LTA5NzkzNWMx OGU1Yi5jcmwwHwYDVR0jBBgwFoAUxAnZB1pLDmbPND3MiMOAl4BM1cEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZDY5N2ExMi1iMjVmLTRhN2ItOGMxNC0wOTc5 MzVjMThlNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF72IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUGBozpnFqjPZUnuH/i4ThEYTMr4Ioq7qwRP4WSaAX5d6LI8JaTYL5X McJIR3AEvJeZat2TRFKi0pmUT6I2FGDoARUpkZ7z3OuAWkVjAHvgUNQ8Vc19MQEA PGHjhqDwVGjgZDZaEwKY6H+7GrUDp5L0H9JkGakA83kBa96nSZfFO+iMTOaik5Kc jSVkn6CcbZrxYkab+3zC6YJJGYcTyzpC5csm5p6wJoV7vB//uMSJ/Is4ruFhTC6N 6p+6CzMzmkkc8bgYcW8P7TPDPMimpXIxYzcjifP4Lzh7ylvvHBq29rkMJaei2/AH GCIvWPfPy7p5jZgkwngMix0PQTC9I/E= -----END CERTIFICATE-----Generated at Fri Apr 17 15:58:27 2026 by rpki-client