$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa File: af16373c-3287-341a-a7b4-1cec1a5c9f48.roa (raw, json) Hash identifier: 5tbaLMOEBH08KVDTsCUxqGb2oJHo4/wzpOFSUV1eU+0= Subject key identifier: 10:B3:05:B8:30:54:2F:5C:45:AA:9F:0E:43:36:D0:EB:EC:CE:79:57 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584D746FC2C8AF4A55F7927115D0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 19437 IP address blocks: 23.235.224.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:c2:c8:af:4a:55:f7:92:71:15:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=e92184a7-e9f9-4fce-87eb-39e88ccfe1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cb:88:74:12:b9:bf:bb:5e:a1:2c:8e:18:b2: 45:d9:82:02:17:4e:28:82:0b:9c:a6:e7:a4:61:92: dc:be:d0:48:4d:87:e0:d2:2b:2e:9e:ef:d7:a5:44: 22:c0:f9:89:8f:2f:3c:16:ca:4f:55:af:34:b9:68: 92:4e:9b:61:4f:02:26:77:18:96:66:9a:18:c3:c2: 4f:82:47:e0:fc:60:45:b2:ae:38:59:f0:da:d0:33: 4d:de:e9:e0:cf:42:02:7f:a0:b6:43:c9:00:b0:69: 79:5d:1b:b1:95:e3:70:ab:0d:0b:a5:39:e6:03:74: d2:bc:2b:ff:8f:4d:9a:e6:98:05:57:b2:b9:63:ce: da:eb:d6:2f:c6:5e:e7:8e:bd:b4:df:72:c6:1b:ec: f5:37:ee:13:7e:29:fe:6b:8b:1e:f6:c3:9f:b9:90: e6:4b:da:cb:88:13:67:06:b1:93:3e:dd:5e:b0:63: 37:97:8f:f8:1a:46:fc:50:29:97:41:ad:74:96:c7: b0:e7:96:db:af:86:0f:eb:13:a6:d6:5a:81:df:a3: 03:81:41:15:15:98:68:91:9a:20:7f:76:29:0c:c0: d8:54:eb:fe:77:cb:98:c5:8a:1c:74:4e:c1:1c:70: 67:36:65:a4:bf:8f:21:7d:2c:b3:eb:21:60:db:99: ad:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B3:05:B8:30:54:2F:5C:45:AA:9F:0E:43:36:D0:EB:EC:CE:79:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 23.235.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:38:26:7b:11:39:70:9d:78:62:08:04:59:c3:fb:08:5a:0c: 03:1c:38:59:43:eb:f6:35:24:13:2e:95:69:8f:74:62:82:7e: ec:93:6b:e0:25:2b:e5:02:cc:4f:e0:fa:64:cd:71:15:00:15: 3e:4e:d4:2a:46:8d:cb:be:a3:a8:0c:d3:fa:69:5e:fc:f2:9b: 6d:95:4d:4b:da:a3:92:ce:67:14:2c:34:0a:c8:d5:df:22:16: 85:d8:6d:88:da:fa:c7:3e:8c:42:25:e5:e3:36:ee:8e:f2:d5: 42:8f:f8:51:7b:e3:20:26:c4:79:cb:44:4d:59:f2:50:59:7a: 54:cf:d0:16:ff:84:9d:6e:c4:8b:9d:27:be:ee:f8:96:62:01: 47:17:57:ba:40:3e:68:f2:24:ef:1f:fb:d4:a0:9c:bb:2d:20: aa:ba:c5:1a:58:a3:23:0b:d2:d9:e2:aa:02:32:c4:34:8d:8d: 41:f0:af:01:00:e2:c9:1d:7f:fa:02:e3:c8:36:8c:0f:d2:f4: f6:94:ad:aa:d9:5b:21:36:21:c8:0c:01:21:98:08:e4:6a:34: 3e:14:48:20:9b:5e:13:6a:11:24:e7:e1:2f:78:03:ec:47:ec: 92:ce:f6:54:de:55:7a:64:a7:52:38:62:9e:70:5d:ad:b3:d2: 26:e4:3a:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b8LIr0pV95JxFdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZTkyMTg0YTctZTlmOS00ZmNlLTg3ZWItMzllODhjY2ZlMWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcuIdBK5v7teoSyOGLJF2YICF04oggucpuek YZLcvtBITYfg0isunu/XpUQiwPmJjy88FspPVa80uWiSTpthTwImdxiWZpoYw8JP gkfg/GBFsq44WfDa0DNN3ungz0ICf6C2Q8kAsGl5XRuxleNwqw0LpTnmA3TSvCv/ j02a5pgFV7K5Y87a69Yvxl7njr2033LGG+z1N+4Tfin+a4se9sOfuZDmS9rLiBNn BrGTPt1esGM3l4/4Gkb8UCmXQa10lsew55bbr4YP6xOm1lqB36MDgUEVFZhokZog f3YpDMDYVOv+d8uYxYocdE7BHHBnNmWkv48hfSyz6yFg25mtzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCzBbgwVC9cRaqfDkM20OvsznlXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYWYxNjM3M2MtMzI4Ny0z NDFhLWE3YjQtMWNlYzFhNWM5ZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF+vgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs4JnsROXCdeGIIBFnD+whaDAMcOFlD6/Y1JBMulWmPdGKCfuyTa+Al K+UCzE/g+mTNcRUAFT5O1CpGjcu+o6gM0/ppXvzym22VTUvao5LOZxQsNArI1d8i FoXYbYja+sc+jEIl5eM27o7y1UKP+FF74yAmxHnLRE1Z8lBZelTP0Bb/hJ1uxIud J77u+JZiAUcXV7pAPmjyJO8f+9SgnLstIKq6xRpYoyML0tniqgIyxDSNjUHwrwEA 4skdf/oC48g2jA/S9PaUrarZWyE2IcgMASGYCORqND4USCCbXhNqESTn4S94A+xH 7JLO9lTeVXpkp1I4Yp5wXa2z0ibkOiw= -----END CERTIFICATE-----Generated at Fri Apr 17 18:05:12 2026 by rpki-client