$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/062098c5-0138-3dd6-b2b3-0b23b92be422.roa File: 062098c5-0138-3dd6-b2b3-0b23b92be422.roa (raw, json) Hash identifier: GVnrPGxGtVFxDzMbVwBDJhBu6wnUe1JIBpzfpLm3nsc= Subject key identifier: E7:E1:71:84:2E:B1:39:E4:7C:B9:E4:F6:23:49:D8:FF:A8:BA:4C:60 Certificate issuer: /CN=a8d70f86-b257-4225-9609-989938a4164f Certificate serial: 010D0C9F4328584D852FD9801AA0224A884B99C0 Authority key identifier: 02:6F:4A:69:37:74:48:96:C9:80:79:8E:15:BD:04:55:3A:43:0C:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/062098c5-0138-3dd6-b2b3-0b23b92be422.roa Signing time: Thu 16 Apr 2026 01:00:23 +0000 ROA not before: Thu 16 Apr 2026 01:00:23 +0000 ROA not after: Wed 15 Jul 2026 01:00:23 +0000 asID: 214483 IP address blocks: 23.147.44.0/24 maxlen: 24 2602:f52b::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:85:2f:d9:80:1a:a0:22:4a:88:4b:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8d70f86-b257-4225-9609-989938a4164f Validity Not Before: Apr 16 01:00:23 2026 GMT Not After : Jul 15 01:00:23 2026 GMT Subject: CN=6ec294f9-5538-4ef3-9914-0667c5d1b06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:83:be:ee:f4:43:40:7a:de:fa:d6:73:4d:b7: fa:6f:b8:a3:ea:dc:a0:fc:e2:ff:12:28:22:cc:b0: 4c:08:af:c8:43:c5:6e:34:0a:60:f0:74:b5:2f:ad: 8a:4b:f7:8a:8e:3f:1c:b8:02:08:a1:dd:3e:a3:4b: e8:14:64:a1:f5:03:6b:86:56:44:07:0e:e4:86:df: 55:d0:c8:b4:09:1c:e8:af:e0:10:8c:8a:83:f0:5c: 43:1a:ba:d0:0f:12:f0:7d:1a:cf:78:33:c6:c0:7b: 7d:bc:ae:06:85:23:62:1e:31:4d:9b:2a:be:5b:fb: 50:23:21:a4:de:61:16:88:7d:8d:af:0e:1e:18:5a: ea:f2:bc:73:16:b9:d8:58:01:34:f6:ef:6d:63:1a: 03:bd:8c:ac:2a:27:7a:bb:cd:2e:a1:63:e1:c8:5a: 10:b0:c7:bb:95:1d:26:dd:ed:86:ee:b2:d4:4b:6e: 0a:c2:21:23:24:3d:94:ed:9f:4d:9b:2c:5d:ab:35: 94:75:07:73:3b:55:81:89:1c:f5:bb:61:c2:81:b4: 63:5c:9b:ba:02:a5:18:35:ca:14:a8:27:a7:10:bd: 70:c3:80:aa:f8:98:64:c7:0d:8e:8e:3a:4c:e1:5e: 0b:15:fe:7d:0e:b8:d9:b0:52:55:75:33:c0:66:cc: 95:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E1:71:84:2E:B1:39:E4:7C:B9:E4:F6:23:49:D8:FF:A8:BA:4C:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/062098c5-0138-3dd6-b2b3-0b23b92be422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.crl X509v3 Authority Key Identifier: keyid:02:6F:4A:69:37:74:48:96:C9:80:79:8E:15:BD:04:55:3A:43:0C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer sbgp-ipAddrBlock: critical IPv4: 23.147.44.0/24 IPv6: 2602:f52b::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:81:27:4f:0c:dd:89:aa:d8:fa:43:cb:1f:79:be:ea:fb:2e: 3c:43:cc:15:1e:cd:be:2d:2f:42:3e:31:2f:c3:6b:8e:0c:42: 70:04:3e:39:06:eb:30:0c:c8:a8:9a:07:a6:52:30:46:eb:c4: 5e:e9:3d:c3:f9:61:1c:23:c5:76:5b:20:7f:3d:3a:2b:05:f0: eb:12:44:50:bd:28:af:8a:cb:a0:27:f6:56:18:67:96:6d:39: 34:e9:64:e0:f1:ec:7f:96:45:44:97:56:e8:9b:e2:f7:da:08: ab:93:4a:b1:6b:66:2a:0f:a2:13:c3:ad:5c:1d:61:25:65:d2: 77:2f:46:46:99:a9:46:38:aa:62:dc:85:ae:ef:33:3c:ed:06: 38:a4:81:49:ff:49:eb:12:80:da:60:81:05:27:96:97:c5:1b: d9:c9:72:d8:e9:9c:e6:cd:e4:57:67:19:2c:ba:07:e5:6f:13: 57:f4:2d:57:bd:5d:0e:b6:07:a3:f7:37:10:8b:c0:d6:4e:4e: 7e:d5:41:57:f1:bb:b5:58:f5:1c:33:5d:9f:34:74:28:9a:d6: de:1f:0b:d0:8d:3f:03:4e:31:3f:57:9c:a6:e4:33:b9:3b:63: 90:99:de:f1:cf:79:06:a0:84:61:2b:3c:86:fd:9c:d8:87:44: b3:50:1f:67 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2FL9mAGqAiSohLmcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThkNzBmODYtYjI1Ny00MjI1LTk2MDktOTg5OTM4YTQx NjRmMB4XDTI2MDQxNjAxMDAyM1oXDTI2MDcxNTAxMDAyM1owLzEtMCsGA1UEAxMk NmVjMjk0ZjktNTUzOC00ZWYzLTk5MTQtMDY2N2M1ZDFiMDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+oO+7vRDQHre+tZzTbf6b7ij6tyg/OL/Eigi zLBMCK/IQ8VuNApg8HS1L62KS/eKjj8cuAIIod0+o0voFGSh9QNrhlZEBw7kht9V 0Mi0CRzor+AQjIqD8FxDGrrQDxLwfRrPeDPGwHt9vK4GhSNiHjFNmyq+W/tQIyGk 3mEWiH2Nrw4eGFrq8rxzFrnYWAE09u9tYxoDvYysKid6u80uoWPhyFoQsMe7lR0m 3e2G7rLUS24KwiEjJD2U7Z9NmyxdqzWUdQdzO1WBiRz1u2HCgbRjXJu6AqUYNcoU qCenEL1ww4Cq+Jhkxw2OjjpM4V4LFf59DrjZsFJVdTPAZsyV3QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOfhcYQusTnkfLnk9iNJ2P+oukxgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOGQ3 MGY4Ni1iMjU3LTQyMjUtOTYwOS05ODk5MzhhNDE2NGYvMDYyMDk4YzUtMDEzOC0z ZGQ2LWIyYjMtMGIyM2I5MmJlNDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYThkNzBmODYtYjI1Ny00MjI1LTk2 MDktOTg5OTM4YTQxNjRmL2E4ZDcwZjg2LWIyNTctNDIyNS05NjA5LTk4OTkzOGE0 MTY0Zi5jcmwwHwYDVR0jBBgwFoAUAm9KaTd0SJbJgHmOFb0EVTpDDEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOGQ3MGY4Ni1iMjU3LTQyMjUtOTYwOS05ODk5 MzhhNDE2NGYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5MsMA4E AgACMAgDBgAmAvUrADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBngSdPDN2Jqtj6Q8sfeb7q+y48Q8wVHs2+ LS9CPjEvw2uODEJwBD45BuswDMiomgemUjBG68Re6T3D+WEcI8V2WyB/PTorBfDr EkRQvSivisugJ/ZWGGeWbTk06WTg8ex/lkVEl1bom+L32girk0qxa2YqD6ITw61c HWElZdJ3L0ZGmalGOKpi3IWu7zM87QY4pIFJ/0nrEoDaYIEFJ5aXxRvZyXLY6Zzm zeRXZxksugflbxNX9C1XvV0Otgej9zcQi8DWTk5+1UFX8bu1WPUcM12fNHQomtbe HwvQjT8DTjE/V5ym5DO5O2OQmd7xz3kGoIRhKzyG/ZzYh0SzUB9n -----END CERTIFICATE-----Generated at Fri Apr 17 16:59:50 2026 by rpki-client