$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596/a4f8bf34-a312-37a5-90cb-8bb65297ac04.roa File: a4f8bf34-a312-37a5-90cb-8bb65297ac04.roa (raw, json) Hash identifier: 4u08F3IWUfH33Ky1a8qC0vpeIajE2YatdxkcLYJEfNw= Subject key identifier: 8E:6A:E3:4B:82:67:3B:FC:D5:84:CF:7C:67:95:EC:6F:F2:4D:17:39 Certificate issuer: /CN=00cffc7d-f9dd-4e0e-8d5c-9570a317b596 Certificate serial: 010D0C9F4328584D730A757651C9664BC5157A80 Authority key identifier: FF:C4:90:5F:CA:F4:B3:3A:69:E9:56:DA:D4:CD:1A:C5:FC:7A:66:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596/a4f8bf34-a312-37a5-90cb-8bb65297ac04.roa Signing time: Thu 09 Apr 2026 13:00:30 +0000 ROA not before: Thu 09 Apr 2026 13:00:30 +0000 ROA not after: Wed 08 Jul 2026 13:00:30 +0000 asID: 214483 IP address blocks: 23.150.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596/00cffc7d-f9dd-4e0e-8d5c-9570a317b596.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596/00cffc7d-f9dd-4e0e-8d5c-9570a317b596.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:0a:75:76:51:c9:66:4b:c5:15:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00cffc7d-f9dd-4e0e-8d5c-9570a317b596 Validity Not Before: Apr 9 13:00:30 2026 GMT Not After : Jul 8 13:00:30 2026 GMT Subject: CN=02802a1b-2372-42d8-afbb-8ea9bc50994d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2b:67:29:7b:17:5b:1c:84:63:13:a3:a8:aa: 8a:00:3b:de:a1:8c:a4:da:17:cd:99:fa:57:74:b0: e4:c4:b5:c1:c7:bd:e6:97:58:36:b5:b6:64:69:92: c2:0c:24:00:7c:75:3e:5e:06:bb:4b:7f:65:99:38: e6:f4:60:bf:67:1c:00:f6:61:68:6b:5b:9f:f8:7f: d6:90:3a:ef:45:0a:1e:a4:22:1f:cb:be:65:35:de: f8:fc:05:92:25:1e:4a:f3:08:48:ab:57:21:48:1a: 0a:39:3b:f6:c8:87:6c:0d:ee:f6:ee:b4:43:4c:92: 0e:6f:fc:ab:82:7f:12:68:a4:0f:b2:2a:fb:b9:95: 4b:ef:40:ab:23:53:85:89:ed:05:12:76:ea:91:d4: fb:56:c3:b5:d4:c6:db:fe:ff:c7:e0:51:45:5b:59: 22:ac:00:c5:f6:f6:1d:2e:27:90:5c:54:b3:81:6d: ba:ad:0a:e2:11:e3:4d:0d:4f:4b:96:8e:71:1d:ed: db:3a:65:94:7e:0f:58:42:31:9b:c0:64:5a:11:06: 44:d5:56:bd:b3:39:90:46:2b:fd:d5:8a:54:96:9f: 97:63:97:c8:7b:63:f4:66:48:5d:3a:b1:71:fe:09: b5:f7:a2:12:4b:a5:6d:e3:06:c4:ac:2c:1f:05:1c: d2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6A:E3:4B:82:67:3B:FC:D5:84:CF:7C:67:95:EC:6F:F2:4D:17:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596/a4f8bf34-a312-37a5-90cb-8bb65297ac04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596/00cffc7d-f9dd-4e0e-8d5c-9570a317b596.crl X509v3 Authority Key Identifier: keyid:FF:C4:90:5F:CA:F4:B3:3A:69:E9:56:DA:D4:CD:1A:C5:FC:7A:66:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/00cffc7d-f9dd-4e0e-8d5c-9570a317b596.cer sbgp-ipAddrBlock: critical IPv4: 23.150.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:32:05:be:d2:6c:ab:56:2a:bd:0a:15:68:f3:ad:d4:b5:8d: 70:43:0a:b3:34:44:aa:22:29:eb:e9:52:c0:60:a2:0e:b8:8b: f8:d0:d7:34:95:ac:dc:b4:be:93:97:fa:99:03:ed:28:5a:6b: 59:57:6b:13:b2:d8:f5:3e:98:a3:3b:8f:1e:e0:67:7e:22:d7: f8:51:1f:93:f6:7c:eb:23:08:d5:7d:23:41:96:4a:62:eb:2e: dc:81:3f:d1:c2:8a:bd:65:4d:6f:f1:89:67:35:bd:97:28:d9: 27:7c:a7:29:c4:65:1e:63:b3:5f:a6:41:0c:54:11:08:07:fd: b5:81:78:4a:1b:29:ce:02:23:d5:5b:af:5a:6b:12:9f:76:04: fe:b4:9f:46:f4:cb:de:99:9d:a4:33:83:4c:16:47:46:3b:72: 8e:d6:09:91:20:d3:27:6b:53:5d:2a:93:b0:c6:31:81:e2:c6: d4:52:b3:83:31:47:9a:12:1f:f2:91:59:d2:07:14:15:82:92: 49:49:09:26:eb:a8:b6:f3:53:62:4f:64:f9:c2:a5:93:74:62: 7d:a7:14:58:f7:b1:b5:9b:2c:e3:ab:93:8a:6f:0f:75:1a:da: 18:17:81:f3:09:6d:68:f6:77:f9:58:b9:b1:eb:bc:93:f0:9b: be:b8:f7:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1zCnV2UclmS8UVeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBjZmZjN2QtZjlkZC00ZTBlLThkNWMtOTU3MGEzMTdi NTk2MB4XDTI2MDQwOTEzMDAzMFoXDTI2MDcwODEzMDAzMFowLzEtMCsGA1UEAxMk MDI4MDJhMWItMjM3Mi00MmQ4LWFmYmItOGVhOWJjNTA5OTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCtnKXsXWxyEYxOjqKqKADveoYyk2hfNmfpX dLDkxLXBx73ml1g2tbZkaZLCDCQAfHU+Xga7S39lmTjm9GC/ZxwA9mFoa1uf+H/W kDrvRQoepCIfy75lNd74/AWSJR5K8whIq1chSBoKOTv2yIdsDe727rRDTJIOb/yr gn8SaKQPsir7uZVL70CrI1OFie0FEnbqkdT7VsO11Mbb/v/H4FFFW1kirADF9vYd LieQXFSzgW26rQriEeNNDU9Llo5xHe3bOmWUfg9YQjGbwGRaEQZE1Va9szmQRiv9 1YpUlp+XY5fIe2P0ZkhdOrFx/gm196ISS6Vt4wbErCwfBRzSJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5q40uCZzv81YTPfGeV7G/yTRc5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMGNm ZmM3ZC1mOWRkLTRlMGUtOGQ1Yy05NTcwYTMxN2I1OTYvYTRmOGJmMzQtYTMxMi0z N2E1LTkwY2ItOGJiNjUyOTdhYzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDBjZmZjN2QtZjlkZC00ZTBlLThk NWMtOTU3MGEzMTdiNTk2LzAwY2ZmYzdkLWY5ZGQtNGUwZS04ZDVjLTk1NzBhMzE3 YjU5Ni5jcmwwHwYDVR0jBBgwFoAU/8SQX8r0szpp6Vba1M0axfx6ZvUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMGNmZmM3ZC1mOWRkLTRlMGUtOGQ1Yy05NTcw YTMxN2I1OTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5ZMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4yBb7SbKtWKr0KFWjzrdS1jXBDCrM0RKoiKevpUsBgog64i/jQ1zSV rNy0vpOX+pkD7Shaa1lXaxOy2PU+mKM7jx7gZ34i1/hRH5P2fOsjCNV9I0GWSmLr LtyBP9HCir1lTW/xiWc1vZco2Sd8pynEZR5js1+mQQxUEQgH/bWBeEobKc4CI9Vb r1prEp92BP60n0b0y96ZnaQzg0wWR0Y7co7WCZEg0ydrU10qk7DGMYHixtRSs4Mx R5oSH/KRWdIHFBWCkklJCSbrqLbzU2JPZPnCpZN0Yn2nFFj3sbWbLOOrk4pvD3Ua 2hgXgfMJbWj2d/lYubHrvJPwm76490w= -----END CERTIFICATE-----Generated at Sun Apr 19 10:15:11 2026 by rpki-client