$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4c688d32-0fde-330d-94c8-0cad4282e0dd.roa File: 4c688d32-0fde-330d-94c8-0cad4282e0dd.roa (raw, json) Hash identifier: gUmWXc0YbnSKqpMcGna00BYxmibsyrbAXN5mycE9dbA= Subject key identifier: E8:5D:8A:EA:5E:13:F1:6C:FA:00:7E:EE:B2:20:EC:CB:CE:7C:44:58 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584D746FC2ED0C02BFAF55CB8300 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4c688d32-0fde-330d-94c8-0cad4282e0dd.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 20454 IP address blocks: 23.235.240.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:c2:ed:0c:02:bf:af:55:cb:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=ab6a4013-1e00-4ee3-b8b2-c078a2fa10b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1b:5e:ce:4c:7f:89:5a:68:33:ca:a5:a2:13: a2:66:d1:c5:09:bb:e6:c9:94:c0:30:b3:55:2e:28: d7:5b:35:19:f6:3b:16:74:da:e3:bd:f8:d7:ff:ac: c1:c9:85:b1:e9:88:fa:c9:66:6b:49:39:04:e7:66: 0d:23:a0:bd:7b:14:e4:23:e5:1f:10:c2:a4:13:48: 4f:41:c9:99:56:33:d4:91:c7:07:f3:a6:00:dd:dc: b0:d8:da:79:25:81:50:0a:d6:c4:f1:0c:ec:e3:9b: 8e:d2:43:51:d4:f9:09:bc:8a:bb:54:e6:ff:c1:30: 6b:99:62:15:c8:5d:5c:59:19:2f:9d:39:49:7c:0a: f9:d1:b9:cc:51:90:82:97:86:00:39:f5:df:e9:26: aa:6b:a2:71:38:40:3f:b6:2f:5d:68:53:74:4c:e6: 62:9a:b3:33:b7:a3:f5:8d:e0:c7:44:b4:9a:fe:0f: 6b:92:e3:92:5e:14:4b:a6:f2:b8:51:b9:e5:d5:86: 39:04:d7:75:f1:0c:08:ef:d1:41:82:da:de:18:38: 91:ea:10:1b:b6:37:a8:07:e4:86:11:6e:e8:45:ad: 52:94:4e:da:0c:db:bb:c5:4d:14:c5:b7:10:2b:e3: 8b:94:e4:19:c9:c4:d6:a7:22:86:26:e3:ba:93:d4: cf:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5D:8A:EA:5E:13:F1:6C:FA:00:7E:EE:B2:20:EC:CB:CE:7C:44:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4c688d32-0fde-330d-94c8-0cad4282e0dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 23.235.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ff:7c:c8:7d:d3:ac:7d:ec:e2:31:e0:e9:6e:53:6e:f6:e2: 5e:8c:a0:4b:60:23:11:b6:23:9d:b2:be:90:0c:3c:3f:0a:81: 2f:44:cb:c7:c6:1d:c5:f1:5e:a0:9e:2a:29:c9:f0:b3:96:69: 12:b6:9a:74:c1:3b:ae:33:65:47:52:14:e0:30:aa:0f:88:0f: ed:ac:85:f1:fd:7c:01:5b:e6:a7:ac:7d:b1:89:0f:f3:0e:7e: 47:89:0b:e8:e7:92:3d:0e:c2:13:af:b1:7d:77:9c:60:73:a6: f7:40:2a:af:08:df:f2:3b:0a:3d:11:8f:4f:9c:d4:64:fd:6b: b8:64:fa:ac:e9:4a:a9:1a:a8:a9:7d:b2:f7:e6:d1:51:e3:f5: 30:98:6d:36:29:a3:d9:63:b4:91:12:c1:29:83:48:ca:64:a0: 8e:a5:2a:4a:dc:5f:0f:ff:c6:de:8e:a5:d1:be:4d:65:fc:aa: a4:ba:3b:23:18:6f:5d:36:ac:6f:6c:9c:75:37:71:3b:a9:2a: ad:ef:be:ff:3b:46:0d:73:81:0f:bd:d0:d9:b3:89:99:17:e7: 05:70:41:69:69:53:2d:0b:d2:44:8e:c3:7d:0d:7b:4a:2a:1b: 89:0f:f6:8a:67:e8:b0:5f:19:2d:a0:9f:f8:21:6b:06:2f:08: 92:a2:43:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b8LtDAK/r1XLgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk YWI2YTQwMTMtMWUwMC00ZWUzLWI4YjItYzA3OGEyZmExMGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghtezkx/iVpoM8qlohOiZtHFCbvmyZTAMLNV LijXWzUZ9jsWdNrjvfjX/6zByYWx6Yj6yWZrSTkE52YNI6C9exTkI+UfEMKkE0hP QcmZVjPUkccH86YA3dyw2Np5JYFQCtbE8Qzs45uO0kNR1PkJvIq7VOb/wTBrmWIV yF1cWRkvnTlJfAr50bnMUZCCl4YAOfXf6Saqa6JxOEA/ti9daFN0TOZimrMzt6P1 jeDHRLSa/g9rkuOSXhRLpvK4Ubnl1YY5BNd18QwI79FBgtreGDiR6hAbtjeoB+SG EW7oRa1SlE7aDNu7xU0UxbcQK+OLlOQZycTWpyKGJuO6k9TPyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhdiupeE/Fs+gB+7rIg7MvOfERYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNGM2ODhkMzItMGZkZS0z MzBkLTk0YzgtMGNhZDQyODJlMGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+vwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL/fMh906x97OIx4OluU2724l6MoEtgIxG2I52yvpAMPD8KgS9Ey8fG HcXxXqCeKinJ8LOWaRK2mnTBO64zZUdSFOAwqg+ID+2shfH9fAFb5qesfbGJD/MO fkeJC+jnkj0OwhOvsX13nGBzpvdAKq8I3/I7Cj0Rj0+c1GT9a7hk+qzpSqkaqKl9 svfm0VHj9TCYbTYpo9ljtJESwSmDSMpkoI6lKkrcXw//xt6OpdG+TWX8qqS6OyMY b102rG9snHU3cTupKq3vvv87Rg1zgQ+90NmziZkX5wVwQWlpUy0L0kSOw30Ne0oq G4kP9opn6LBfGS2gn/ghawYvCJKiQ+M= -----END CERTIFICATE-----Generated at Fri Apr 17 19:03:43 2026 by rpki-client