$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46773a05-ae39-36bd-a950-0d64b5b7e334.roa File: 46773a05-ae39-36bd-a950-0d64b5b7e334.roa (raw, json) Hash identifier: DnXzySsuzZQWSnpazz7yRsp65XFQI/BJNoi1gJCygpE= Subject key identifier: 88:70:CC:A8:F5:57:28:BD:A6:A4:43:C6:1B:E8:8C:B2:3C:77:C4:FC Certificate issuer: /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Certificate serial: 010D0C9F4328584CAE570DF20FD709D275500680 Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46773a05-ae39-36bd-a950-0d64b5b7e334.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 17017 IP address blocks: 23.247.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:0d:f2:0f:d7:09:d2:75:50:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=89729785-8e89-456a-84bd-7a3f8a648d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e6:df:dd:af:a4:72:a0:52:16:db:e9:3e:e9: 74:6b:1b:69:5d:60:2f:82:b4:cc:8e:30:8b:44:99: 95:75:cf:4e:e3:9c:e4:0d:13:25:c2:60:4a:9e:11: 33:24:e6:51:3c:06:e0:69:38:d4:6c:1e:2d:e9:bf: bd:57:89:23:6c:3f:6f:52:36:da:3b:ad:98:80:81: 07:fd:b8:3a:38:b3:8f:8c:31:1a:fd:6a:56:d4:c9: 3a:4c:f0:d9:09:c7:dd:0d:6d:eb:f0:db:ba:b6:1e: 09:0c:ed:21:be:aa:67:2e:5f:9b:38:fe:f7:b5:77: b3:6c:9d:e3:fe:2d:3b:c2:aa:48:e3:03:1c:f8:75: aa:00:0b:5b:a0:7b:99:e6:07:fa:0d:cc:a7:e0:b0: 52:ea:ca:26:a0:7d:b3:da:95:12:6c:68:c3:fc:53: 99:9e:ef:99:10:ab:6b:f8:81:ae:26:61:e2:1a:25: 41:97:c7:0f:a5:14:07:63:31:04:ae:3f:b2:0b:d8: 6c:54:50:c3:68:cb:a7:c7:cc:b1:48:d7:06:ae:d1: eb:44:40:3c:94:77:b3:82:ee:d1:0f:97:53:84:4f: 61:9b:58:91:68:7c:70:96:79:71:b6:77:ae:71:2a: 39:e9:f8:4e:65:54:66:3c:cc:5e:2a:58:14:da:2c: 44:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:70:CC:A8:F5:57:28:BD:A6:A4:43:C6:1B:E8:8C:B2:3C:77:C4:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46773a05-ae39-36bd-a950-0d64b5b7e334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl X509v3 Authority Key Identifier: keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer sbgp-ipAddrBlock: critical IPv4: 23.247.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:d0:1f:ad:00:6e:10:37:ad:75:4c:43:2b:52:b0:ca:11:b9: 62:84:9b:37:84:7e:f8:c4:b6:be:c5:a9:fb:6c:84:f8:bf:f4: b9:69:f4:83:0f:c2:38:ec:ff:03:37:d9:9c:75:3f:ed:ab:17: cf:48:98:5b:07:95:fb:af:3c:aa:39:d3:d0:57:55:f9:2d:7b: e0:b1:71:e8:77:24:f4:f2:91:64:a5:f3:ed:73:60:33:15:32: 59:89:1e:af:54:7e:7e:fe:89:ba:fc:0d:c3:ab:f1:9e:55:89: 20:45:07:29:d0:2b:b4:e3:ce:e6:d7:e7:5f:a0:ca:bb:68:ff: cc:1c:00:68:c9:bf:93:c4:75:07:03:ec:21:f2:18:c5:aa:03: a0:98:7d:df:95:74:38:18:52:f0:77:88:01:ad:3b:e4:ac:67: 6d:d0:c0:e0:d7:54:51:5e:1d:74:49:9f:7a:55:d4:1c:39:a4: 5b:1d:14:b7:7a:f5:92:ca:12:db:19:03:97:59:3d:c1:21:a8: 2e:e7:9b:c2:12:00:38:25:ff:b9:02:a3:14:06:a1:b5:c4:19: 04:c0:4f:69:45:d9:0d:c4:ab:43:35:55:83:81:c0:c3:c1:3b: 2a:ea:33:52:8b:9d:1a:fe:f7:0f:19:66:45:58:07:7b:83:8f: d2:43:4b:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVw3yD9cJ0nVQBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0M2FkZmQtZjZlNC00NTA0LTg2ZjAtMmVmYWRmOWQ0 ZDIxMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODk3Mjk3ODUtOGU4OS00NTZhLTg0YmQtN2EzZjhhNjQ4ZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgebf3a+kcqBSFtvpPul0axtpXWAvgrTMjjCL RJmVdc9O45zkDRMlwmBKnhEzJOZRPAbgaTjUbB4t6b+9V4kjbD9vUjbaO62YgIEH /bg6OLOPjDEa/WpW1Mk6TPDZCcfdDW3r8Nu6th4JDO0hvqpnLl+bOP73tXezbJ3j /i07wqpI4wMc+HWqAAtboHuZ5gf6Dcyn4LBS6somoH2z2pUSbGjD/FOZnu+ZEKtr +IGuJmHiGiVBl8cPpRQHYzEErj+yC9hsVFDDaMunx8yxSNcGrtHrREA8lHezgu7R D5dThE9hm1iRaHxwlnlxtneucSo56fhOZVRmPMxeKlgU2ixEswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhwzKj1Vyi9pqRDxhvojLI8d8T8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQz YWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZhZGY5ZDRkMjEvNDY3NzNhMDUtYWUzOS0z NmJkLWE5NTAtMGQ2NGI1YjdlMzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGQ0M2FkZmQtZjZlNC00NTA0LTg2 ZjAtMmVmYWRmOWQ0ZDIxLzRkNDNhZGZkLWY2ZTQtNDUwNC04NmYwLTJlZmFkZjlk NGQyMS5jcmwwHwYDVR0jBBgwFoAUHLPKVHX2AJyrqb/kFUAJQKHvOZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQzYWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZh ZGY5ZDRkMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/fsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzQH60AbhA3rXVMQytSsMoRuWKEmzeEfvjEtr7FqftshPi/9Llp9IMP wjjs/wM32Zx1P+2rF89ImFsHlfuvPKo509BXVfkte+Cxceh3JPTykWSl8+1zYDMV MlmJHq9Ufn7+ibr8DcOr8Z5ViSBFBynQK7TjzubX51+gyrto/8wcAGjJv5PEdQcD 7CHyGMWqA6CYfd+VdDgYUvB3iAGtO+SsZ23QwODXVFFeHXRJn3pV1Bw5pFsdFLd6 9ZLKEtsZA5dZPcEhqC7nm8ISADgl/7kCoxQGobXEGQTAT2lF2Q3Eq0M1VYOBwMPB OyrqM1KLnRr+9w8ZZkVYB3uDj9JDS14= -----END CERTIFICATE-----Generated at Mon Mar 2 06:50:54 2026 by rpki-client