$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c23ac558-69f5-3c92-9a4a-e12e37e77616.roa File: c23ac558-69f5-3c92-9a4a-e12e37e77616.roa (raw, json) Hash identifier: f+Zv4S8lHetfICBTJqPegQTbWQeH+7RUSkpW6BidGxM= Subject key identifier: D0:C7:BE:7F:F8:B3:0D:AC:30:F8:EF:62:91:84:5E:77:AC:43:B6:58 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584D6515171AFC54F2604DC9C540 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c23ac558-69f5-3c92-9a4a-e12e37e77616.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 14297 IP address blocks: 199.189.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:17:1a:fc:54:f2:60:4d:c9:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=8e96be02-66ab-4660-baa6-8ef359203582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bc:8c:64:92:4c:1c:88:74:f1:e4:6a:1f:93: 38:e8:8a:7e:4b:ba:a1:1c:91:f2:d0:18:de:75:a3: 49:cd:a9:56:be:01:ab:ed:cc:cb:dc:94:55:6f:c6: a4:af:ac:bd:28:dc:4b:81:df:9a:fa:d0:a7:c2:4c: 5d:96:73:3c:c2:8c:31:a7:c1:bf:4c:fd:a0:8c:f6: 9d:22:34:4f:b5:4e:9c:ff:20:45:ee:85:9f:60:0b: 55:36:1c:ed:36:38:fc:6e:4d:7b:97:37:bb:3b:ef: 0e:60:35:91:93:f0:5f:85:c4:17:32:89:3d:aa:c1: dd:ba:16:83:b8:75:d3:16:28:4b:aa:27:60:ef:ca: 07:8a:68:79:37:3f:b4:68:78:f3:14:70:52:6f:1e: a5:a8:78:ce:25:68:98:c6:6a:e4:ea:f3:97:18:43: 0b:f5:64:83:98:e1:38:38:bc:4f:6b:1d:21:f2:45: b9:2e:58:95:29:27:31:40:9d:f7:ac:4b:46:cd:73: 57:eb:50:8a:96:c6:e9:b6:b1:23:2d:ac:d2:40:a5: 76:6c:3f:53:b5:b0:a4:c9:e2:4d:ae:85:83:30:49: 64:12:41:7d:46:0d:20:72:b8:78:0a:d3:4d:5b:44: 00:b4:99:53:af:94:a4:13:b2:a2:52:ed:b6:b9:3c: 86:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C7:BE:7F:F8:B3:0D:AC:30:F8:EF:62:91:84:5E:77:AC:43:B6:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c23ac558-69f5-3c92-9a4a-e12e37e77616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 199.189.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:0d:49:10:dd:35:57:e8:ce:1b:19:d7:84:df:dc:22:0b:ad: ed:9e:f3:92:a8:3b:e1:b0:c8:c2:1b:75:8f:a5:76:04:f3:5b: ad:61:11:2b:6a:c8:aa:82:8b:94:a6:07:bd:0a:76:49:5b:11: 84:ec:44:20:c5:5f:a5:f9:e9:9b:41:7a:4d:99:8d:ec:01:33: 8e:40:04:60:99:8e:a8:74:2f:62:06:a6:a3:1d:b7:09:da:3b: 9e:8d:f0:8b:1a:77:01:99:a4:58:7b:72:4b:63:b5:b9:79:a1: b4:2c:a8:24:2f:37:1e:c4:af:d6:97:47:d6:4a:9b:0d:70:fd: 2d:bd:63:38:a2:65:5d:6e:d8:ba:c5:c6:e3:82:e6:93:f8:28: a6:80:87:80:c6:1e:4b:f1:1b:73:a9:9a:1f:70:b3:57:7a:12: 84:f7:4b:d7:10:b9:6b:19:d6:ff:cd:cc:63:a3:8c:13:ee:99: 34:4d:b1:8b:da:b6:ea:ba:5f:00:3b:2c:0a:c2:d7:4f:ee:a4: 45:1e:e0:db:ad:3b:5b:44:5c:21:27:b5:ce:05:93:bf:d2:82: 90:18:08:63:5a:41:0e:15:8b:f8:71:19:5c:b8:e9:10:07:3a: 7f:f9:17:56:a5:ed:b8:a7:28:c5:9b:01:0e:a5:1a:12:9c:dc: f7:72:92:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFRca/FTyYE3JxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk OGU5NmJlMDItNjZhYi00NjYwLWJhYTYtOGVmMzU5MjAzNTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuryMZJJMHIh08eRqH5M46Ip+S7qhHJHy0Bje daNJzalWvgGr7czL3JRVb8akr6y9KNxLgd+a+tCnwkxdlnM8wowxp8G/TP2gjPad IjRPtU6c/yBF7oWfYAtVNhztNjj8bk17lze7O+8OYDWRk/BfhcQXMok9qsHduhaD uHXTFihLqidg78oHimh5Nz+0aHjzFHBSbx6lqHjOJWiYxmrk6vOXGEML9WSDmOE4 OLxPax0h8kW5LliVKScxQJ33rEtGzXNX61CKlsbptrEjLazSQKV2bD9TtbCkyeJN roWDMElkEkF9Rg0gcrh4CtNNW0QAtJlTr5SkE7KiUu22uTyGOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDHvn/4sw2sMPjvYpGEXnesQ7ZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvYzIzYWM1NTgtNjlmNS0z YzkyLTlhNGEtZTEyZTM3ZTc3NjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx73qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFINSRDdNVfozhsZ14Tf3CILre2e85KoO+GwyMIbdY+ldgTzW61hEStq yKqCi5SmB70KdklbEYTsRCDFX6X56ZtBek2ZjewBM45ABGCZjqh0L2IGpqMdtwna O56N8IsadwGZpFh7cktjtbl5obQsqCQvNx7Er9aXR9ZKmw1w/S29YziiZV1u2LrF xuOC5pP4KKaAh4DGHkvxG3Opmh9ws1d6EoT3S9cQuWsZ1v/NzGOjjBPumTRNsYva tuq6XwA7LArC10/upEUe4NutO1tEXCEntc4Fk7/SgpAYCGNaQQ4Vi/hxGVy46RAH On/5F1al7binKMWbAQ6lGhKc3Pdykvc= -----END CERTIFICATE-----Generated at Sat Apr 18 10:07:52 2026 by rpki-client