$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/9ecb2996-7f58-31dd-9561-7c0f6374da48.roa File: 9ecb2996-7f58-31dd-9561-7c0f6374da48.roa (raw, json) Hash identifier: GLc+vHUXFXbLcZfBCr3ciiFVJ8u6wmXtAsGLx/AWCVw= Subject key identifier: 48:AB:FC:A4:A5:E3:E0:E7:EE:CB:4A:7F:BC:DF:FC:D0:C8:37:74:45 Certificate issuer: /CN=89089cbd-0f7a-444f-95e7-38535bb2fc45 Certificate serial: 010D0C9F4328584D852FD990EE2362403BACC280 Authority key identifier: 38:2A:5A:14:16:40:82:F8:CA:90:33:DD:00:00:78:7D:21:E0:F1:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/9ecb2996-7f58-31dd-9561-7c0f6374da48.roa Signing time: Thu 16 Apr 2026 01:00:23 +0000 ROA not before: Thu 16 Apr 2026 01:00:23 +0000 ROA not after: Wed 15 Jul 2026 01:00:23 +0000 asID: 214483 IP address blocks: 23.147.36.0/24 maxlen: 24 2602:f524::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:85:2f:d9:90:ee:23:62:40:3b:ac:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89089cbd-0f7a-444f-95e7-38535bb2fc45 Validity Not Before: Apr 16 01:00:23 2026 GMT Not After : Jul 15 01:00:23 2026 GMT Subject: CN=fd07aabd-a762-476e-98f4-5df53a64e07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:60:9b:7e:8e:8b:dc:eb:1a:7d:4f:55:fa:4c: d0:fe:de:14:80:01:d3:85:44:2e:94:2a:b3:35:64: 9b:4d:10:34:fa:ac:22:c7:4d:39:3b:9c:fd:1c:ae: 1b:db:d8:d3:60:12:c0:35:68:76:fe:87:e6:aa:11: 1a:e6:91:af:e9:9d:e9:00:3a:d3:53:e0:53:22:c6: db:31:98:15:71:5f:64:a5:78:d8:aa:af:64:06:75: be:65:84:34:f0:79:35:16:7f:3b:71:af:a9:48:55: ae:a7:ef:ae:23:6f:ef:96:b1:36:e7:df:0d:1a:43: 9c:e9:f2:e2:e0:09:8e:de:7a:b1:60:6e:ce:f6:f6: b3:62:02:b5:c4:35:24:53:da:55:5e:e8:c7:57:38: 4e:1e:0f:5e:e5:f6:fe:75:11:5c:ef:d6:e9:70:d1: fe:ba:68:90:74:a9:14:e6:56:a5:20:eb:ee:41:09: 4d:18:0b:bf:46:db:4c:27:b5:07:8d:dc:09:bd:0e: 89:cb:43:be:8e:5c:e8:fc:6d:cd:3b:64:73:91:36: dd:bb:96:66:c9:54:fd:37:86:7f:27:e6:d0:34:63: 0a:f3:cf:75:e1:2d:4e:7c:bc:c8:f4:f3:70:78:54: 61:e0:92:3f:38:d8:49:72:54:0b:ba:ee:96:3a:6d: 47:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AB:FC:A4:A5:E3:E0:E7:EE:CB:4A:7F:BC:DF:FC:D0:C8:37:74:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/9ecb2996-7f58-31dd-9561-7c0f6374da48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.crl X509v3 Authority Key Identifier: keyid:38:2A:5A:14:16:40:82:F8:CA:90:33:DD:00:00:78:7D:21:E0:F1:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45.cer sbgp-ipAddrBlock: critical IPv4: 23.147.36.0/24 IPv6: 2602:f524::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:48:5d:e1:6a:fc:69:8e:12:b2:9c:10:c0:3a:6a:1b:40:9c: 1c:c0:3f:0a:66:e6:d5:67:a1:5d:54:c5:14:15:ac:e5:02:15: ff:79:12:9e:7a:99:d0:5a:ed:d7:56:fc:04:1b:b9:67:1b:ca: 80:03:ba:88:90:0b:9e:c4:80:f6:6e:1a:b9:9f:a5:4b:94:a9: 46:34:72:25:32:ef:4e:f9:26:97:29:c2:d0:8a:0c:2d:b9:6a: 52:0a:b1:12:89:c8:47:0f:e7:e3:1e:3e:ba:4a:02:8c:c3:cf: b8:fa:20:ec:aa:67:17:4c:08:d7:f7:26:28:26:dc:01:17:be: e2:22:a1:69:ab:d2:b9:88:43:92:74:90:39:42:1d:5a:f2:93: 51:8d:94:0b:ae:f5:0b:49:2a:2b:e4:d7:02:0f:88:e8:c7:b6: 16:6a:13:7c:d4:48:e7:78:61:89:6a:e3:e6:eb:4f:80:5d:ba: 18:1e:06:e5:f7:b4:f9:a6:61:d9:ba:f2:a4:b0:18:d7:b8:be: 0e:44:34:23:d6:47:77:86:99:43:bd:34:c2:96:6a:89:9e:99: 51:5e:96:1c:c4:0c:01:55:8f:68:12:8e:ac:75:ad:b0:de:d9: f3:43:2b:9b:27:8d:08:5f:33:aa:7e:6f:72:b6:08:16:dc:3a: 33:7b:b2:41 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2FL9mQ7iNiQDuswoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkwODljYmQtMGY3YS00NDRmLTk1ZTctMzg1MzViYjJm YzQ1MB4XDTI2MDQxNjAxMDAyM1oXDTI2MDcxNTAxMDAyM1owLzEtMCsGA1UEAxMk ZmQwN2FhYmQtYTc2Mi00NzZlLTk4ZjQtNWRmNTNhNjRlMDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GCbfo6L3OsafU9V+kzQ/t4UgAHThUQulCqz NWSbTRA0+qwix005O5z9HK4b29jTYBLANWh2/ofmqhEa5pGv6Z3pADrTU+BTIsbb MZgVcV9kpXjYqq9kBnW+ZYQ08Hk1Fn87ca+pSFWup++uI2/vlrE2598NGkOc6fLi 4AmO3nqxYG7O9vazYgK1xDUkU9pVXujHVzhOHg9e5fb+dRFc79bpcNH+umiQdKkU 5lalIOvuQQlNGAu/RttMJ7UHjdwJvQ6Jy0O+jlzo/G3NO2RzkTbdu5ZmyVT9N4Z/ J+bQNGMK88914S1OfLzI9PNweFRh4JI/ONhJclQLuu6WOm1H/wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEir/KSl4+Dn7stKf7zf/NDIN3RFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84OTA4 OWNiZC0wZjdhLTQ0NGYtOTVlNy0zODUzNWJiMmZjNDUvOWVjYjI5OTYtN2Y1OC0z MWRkLTk1NjEtN2MwZjYzNzRkYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODkwODljYmQtMGY3YS00NDRmLTk1 ZTctMzg1MzViYjJmYzQ1Lzg5MDg5Y2JkLTBmN2EtNDQ0Zi05NWU3LTM4NTM1YmIy ZmM0NS5jcmwwHwYDVR0jBBgwFoAUOCpaFBZAgvjKkDPdAAB4fSHg8WgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84OTA4OWNiZC0wZjdhLTQ0NGYtOTVlNy0zODUz NWJiMmZjNDUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5MkMA4E AgACMAgDBgAmAvUkADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjSF3havxpjhKynBDAOmobQJwcwD8KZubV Z6FdVMUUFazlAhX/eRKeepnQWu3XVvwEG7lnG8qAA7qIkAuexID2bhq5n6VLlKlG NHIlMu9O+SaXKcLQigwtuWpSCrESichHD+fjHj66SgKMw8+4+iDsqmcXTAjX9yYo JtwBF77iIqFpq9K5iEOSdJA5Qh1a8pNRjZQLrvULSSor5NcCD4jox7YWahN81Ejn eGGJauPm60+AXboYHgbl97T5pmHZuvKksBjXuL4ORDQj1kd3hplDvTTClmqJnplR XpYcxAwBVY9oEo6sda2w3tnzQyubJ40IXzOqfm9ytggW3Doze7JB -----END CERTIFICATE-----Generated at Fri Apr 17 16:17:14 2026 by rpki-client