$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/00583209-5ea8-3fc8-9999-e6dec99e63c9.roa File: 00583209-5ea8-3fc8-9999-e6dec99e63c9.roa (raw, json) Hash identifier: VmoTDsEYCun2Xf9AA7zUYUCrcTI82gLMwmRncBgOMwU= Subject key identifier: 2A:F0:28:CC:A8:98:18:A9:A6:0C:7F:A2:08:46:39:22:F9:6B:B6:04 Certificate issuer: /CN=4625cd05-e90e-4f91-9b34-2899122cfc5f Certificate serial: 010D0C9F4328584D571FAA348DDBB472F3FE3E00 Authority key identifier: 52:17:9E:71:6C:75:7E:1D:73:05:EF:16:BD:4D:56:21:CA:22:63:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/00583209-5ea8-3fc8-9999-e6dec99e63c9.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 979 IP address blocks: 23.144.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:aa:34:8d:db:b4:72:f3:fe:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4625cd05-e90e-4f91-9b34-2899122cfc5f Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=7f569298-81bf-4491-aef2-921a440a0b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:28:e0:43:ed:b5:eb:59:8b:56:cc:5f:ac:d2: 71:6e:e1:e5:2e:04:a2:06:39:58:62:a8:b9:9d:96: d3:ea:26:14:f3:c3:83:02:c4:67:96:dc:69:39:2e: 78:d5:cb:9e:d3:c7:9a:7b:80:2f:a4:8b:5d:ce:c6: 8b:38:94:4d:56:28:06:e9:fa:4a:f1:a4:bb:4c:5e: 07:ec:19:1f:81:0e:22:3a:4e:20:e5:85:09:62:7c: a2:6a:5e:bf:da:9c:66:04:61:ee:e2:d2:60:67:f0: 40:25:bc:36:ca:bb:10:36:96:0c:6b:c1:84:1c:85: 11:29:15:54:bc:66:fb:7c:42:82:3e:c1:c4:0b:6f: 1a:ea:da:7d:8b:b4:b5:03:36:c8:fa:11:e5:a9:af: 29:8e:72:18:a7:d7:e1:ea:2b:b9:d7:74:a9:dd:8c: cf:f2:85:e1:83:f7:2f:b8:3f:6b:22:bf:92:20:02: 1e:4f:21:1e:02:48:d1:01:10:da:45:79:f5:19:fc: 45:49:a7:80:91:46:50:76:e4:e6:54:24:fb:ef:3b: 66:f3:8a:38:9b:97:d4:79:4c:fd:63:3e:71:b2:29: 6d:e9:84:57:fd:a4:9c:e8:95:67:2c:19:78:33:fd: 1b:21:b1:88:de:30:18:56:5b:f8:cd:03:14:f4:15: 5c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F0:28:CC:A8:98:18:A9:A6:0C:7F:A2:08:46:39:22:F9:6B:B6:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/00583209-5ea8-3fc8-9999-e6dec99e63c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.crl X509v3 Authority Key Identifier: keyid:52:17:9E:71:6C:75:7E:1D:73:05:EF:16:BD:4D:56:21:CA:22:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f.cer sbgp-ipAddrBlock: critical IPv4: 23.144.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:fb:09:b7:76:5b:ea:74:15:48:16:6e:03:bf:22:37:45:b3: 9d:8f:90:ac:6e:8f:1f:28:26:74:50:38:14:3c:43:96:92:2f: 46:03:6e:09:71:91:f5:de:9e:76:d5:d4:05:c2:9e:3b:36:5d: c6:0d:14:de:47:9d:68:d6:d3:a3:df:2f:46:42:f0:c3:d9:f9: 5a:73:5d:ba:11:81:c6:ba:9a:1c:45:5b:6e:10:70:73:80:63: 2f:8d:ce:49:b9:27:da:0d:11:37:ad:1c:3d:3d:1c:c7:ec:b4: 78:b9:a0:56:9d:36:c8:0a:e5:69:74:85:e6:2b:55:e0:0a:d5: 80:18:be:e9:32:6c:3f:78:06:f4:63:de:7a:61:f2:80:93:67: 2e:bc:a4:eb:0f:55:8b:12:63:11:7f:f5:70:1c:5d:d0:93:62: d6:04:35:a0:20:95:c3:2f:5f:14:e1:f0:98:50:34:c4:e8:cb: 72:6b:96:c2:d8:b2:a1:95:d4:bf:39:02:43:c7:ca:ac:35:ab: 75:0e:79:8a:dd:26:0c:70:e2:bf:9c:18:5a:87:b8:36:c6:bf: 35:01:53:69:f4:f5:d4:45:40:77:60:af:a4:ac:b8:c0:95:ec: 59:0b:b8:f5:71:80:d9:d3:fc:94:45:8d:ba:b4:0d:a2:f7:5b: ce:6d:c3:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH6o0jdu0cvP+PgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDYyNWNkMDUtZTkwZS00ZjkxLTliMzQtMjg5OTEyMmNm YzVmMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk N2Y1NjkyOTgtODFiZi00NDkxLWFlZjItOTIxYTQ0MGEwYjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCjgQ+2161mLVsxfrNJxbuHlLgSiBjlYYqi5 nZbT6iYU88ODAsRnltxpOS541cue08eae4AvpItdzsaLOJRNVigG6fpK8aS7TF4H 7BkfgQ4iOk4g5YUJYnyial6/2pxmBGHu4tJgZ/BAJbw2yrsQNpYMa8GEHIURKRVU vGb7fEKCPsHEC28a6tp9i7S1AzbI+hHlqa8pjnIYp9fh6iu513Sp3YzP8oXhg/cv uD9rIr+SIAIeTyEeAkjRARDaRXn1GfxFSaeAkUZQduTmVCT77ztm84o4m5fUeUz9 Yz5xsilt6YRX/aSc6JVnLBl4M/0bIbGI3jAYVlv4zQMU9BVcpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrwKMyomBippgx/oghGOSL5a7YEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80NjI1 Y2QwNS1lOTBlLTRmOTEtOWIzNC0yODk5MTIyY2ZjNWYvMDA1ODMyMDktNWVhOC0z ZmM4LTk5OTktZTZkZWM5OWU2M2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDYyNWNkMDUtZTkwZS00ZjkxLTli MzQtMjg5OTEyMmNmYzVmLzQ2MjVjZDA1LWU5MGUtNGY5MS05YjM0LTI4OTkxMjJj ZmM1Zi5jcmwwHwYDVR0jBBgwFoAUUheecWx1fh1zBe8WvU1WIcoiY1owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80NjI1Y2QwNS1lOTBlLTRmOTEtOWIzNC0yODk5 MTIyY2ZjNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5BcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD37Cbd2W+p0FUgWbgO/IjdFs52PkKxujx8oJnRQOBQ8Q5aSL0YDbglx kfXennbV1AXCnjs2XcYNFN5HnWjW06PfL0ZC8MPZ+VpzXboRgca6mhxFW24QcHOA Yy+Nzkm5J9oNETetHD09HMfstHi5oFadNsgK5Wl0heYrVeAK1YAYvukybD94BvRj 3nph8oCTZy68pOsPVYsSYxF/9XAcXdCTYtYENaAglcMvXxTh8JhQNMToy3JrlsLY sqGV1L85AkPHyqw1q3UOeYrdJgxw4r+cGFqHuDbGvzUBU2n09dRFQHdgr6SsuMCV 7FkLuPVxgNnT/JRFjbq0DaL3W85tw/I= -----END CERTIFICATE-----Generated at Fri Apr 17 10:57:56 2026 by rpki-client