$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5da4659-9af2-4ab9-90ed-27de1a1c01e6/c5ba2b12-4ea3-3178-8518-06d35223dfba.roa File: c5ba2b12-4ea3-3178-8518-06d35223dfba.roa (raw, json) Hash identifier: XToR65XM3qO1WiMTISQuKKcBu+a6PQxm1WCIUOzfO2U= Subject key identifier: 73:7B:98:CB:A6:3B:94:25:D2:A8:24:D5:B1:29:C5:62:5A:8D:EE:38 Certificate issuer: /CN=b5da4659-9af2-4ab9-90ed-27de1a1c01e6 Certificate serial: 010D0C9F4328584D8AC53634F941DBE9FB9F2600 Authority key identifier: 89:69:B5:9D:42:D3:19:5A:3F:EF:B5:CF:A6:88:A5:3D:D3:F2:C4:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5da4659-9af2-4ab9-90ed-27de1a1c01e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5da4659-9af2-4ab9-90ed-27de1a1c01e6/c5ba2b12-4ea3-3178-8518-06d35223dfba.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 214483 IP address blocks: 23.148.244.0/24 maxlen: 24 2602:f4e0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5da4659-9af2-4ab9-90ed-27de1a1c01e6/b5da4659-9af2-4ab9-90ed-27de1a1c01e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5da4659-9af2-4ab9-90ed-27de1a1c01e6/b5da4659-9af2-4ab9-90ed-27de1a1c01e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5da4659-9af2-4ab9-90ed-27de1a1c01e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:36:34:f9:41:db:e9:fb:9f:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5da4659-9af2-4ab9-90ed-27de1a1c01e6 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=836f77a4-1d8e-42cf-b565-885bd077c07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d2:ad:f8:22:30:35:d5:eb:23:33:43:63:21: 22:f0:dc:2c:f4:ae:0a:1b:10:55:05:4d:f3:68:fd: 42:39:e1:df:2f:e7:ec:37:11:1d:8d:85:e2:4e:e4: 7c:05:f5:19:00:ce:27:0a:2f:ee:7e:52:89:7a:57: df:df:59:69:54:1e:e6:52:ae:51:30:38:56:57:7a: 90:c2:7b:ce:d8:b7:97:7a:0e:10:b1:de:6c:3b:21: 02:1f:16:01:67:c8:91:83:77:ca:55:5c:8b:d2:4e: cb:81:83:8e:7c:af:28:e3:cd:61:75:b6:69:3c:79: 16:96:33:30:71:59:8e:7e:ed:0d:a5:fa:9e:51:fa: a4:d7:f0:91:1e:a8:27:ed:22:c1:8a:5c:9a:bd:66: 24:07:f2:c1:87:67:43:ca:b8:0e:1d:e7:64:a2:fd: 71:fb:a6:aa:70:69:ea:8e:e1:3a:bd:8d:79:e7:a9: d8:e6:d5:f5:44:99:25:72:08:d2:4b:25:c7:e5:50: 7c:3e:42:55:c5:2c:84:ad:59:a7:6c:04:a1:40:71: 4f:80:29:6b:5e:21:1e:cf:50:e8:72:8f:f2:a4:69: ee:47:8c:f5:e9:33:b2:f6:43:ed:71:6a:af:c0:b7: 8c:2d:bb:f5:9e:12:d9:56:06:eb:43:2b:a5:65:d1: d5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7B:98:CB:A6:3B:94:25:D2:A8:24:D5:B1:29:C5:62:5A:8D:EE:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5da4659-9af2-4ab9-90ed-27de1a1c01e6/c5ba2b12-4ea3-3178-8518-06d35223dfba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5da4659-9af2-4ab9-90ed-27de1a1c01e6/b5da4659-9af2-4ab9-90ed-27de1a1c01e6.crl X509v3 Authority Key Identifier: keyid:89:69:B5:9D:42:D3:19:5A:3F:EF:B5:CF:A6:88:A5:3D:D3:F2:C4:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5da4659-9af2-4ab9-90ed-27de1a1c01e6.cer sbgp-ipAddrBlock: critical IPv4: 23.148.244.0/24 IPv6: 2602:f4e0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:74:27:6f:4c:ef:37:1a:ab:32:47:32:8c:f8:d9:e6:c1:09: d9:e9:9e:40:bf:9e:5e:a3:a7:15:70:da:88:fb:ba:fa:3e:fd: cf:f1:0e:dc:dc:37:58:f7:a9:fe:07:c9:77:9e:a0:db:10:36: 55:a3:0f:a1:88:41:7d:d1:f8:99:e6:4f:d2:1f:1a:12:3c:d5: 66:1f:22:c3:93:8f:6c:ce:c5:3a:20:eb:47:08:0c:c6:12:16: 7d:31:11:16:85:6d:21:70:0c:95:bf:89:17:bc:b0:d9:04:fd: 38:4f:61:5c:11:b0:f1:aa:21:3c:9b:b0:c5:c0:9c:21:27:99: fa:e0:58:e9:af:63:9b:f3:55:8d:68:d2:9e:c4:7c:d6:4e:57: 3a:8b:5e:0f:52:16:ac:5f:bf:ef:23:19:6a:9f:dc:d9:07:b0: 60:6e:34:a3:42:83:7c:12:fc:62:c3:51:62:45:f6:0a:26:c1: 91:0f:5f:94:7e:6d:f3:96:07:3e:b2:bb:82:57:a3:7e:cd:91: fb:b1:03:88:05:78:ea:70:2d:87:9b:f1:c8:74:9d:db:dd:5f: 4c:ef:56:84:10:50:01:31:dd:f3:79:7d:59:a6:e0:ec:a3:95: 30:ad:aa:c0:46:87:16:83:0a:61:63:57:68:5f:fb:f5:ee:df: 93:a4:55:c4 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2KxTY0+UHb6fufJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkYTQ2NTktOWFmMi00YWI5LTkwZWQtMjdkZTFhMWMw MWU2MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk ODM2Zjc3YTQtMWQ4ZS00MmNmLWI1NjUtODg1YmQwNzdjMDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodKt+CIwNdXrIzNDYyEi8Nws9K4KGxBVBU3z aP1COeHfL+fsNxEdjYXiTuR8BfUZAM4nCi/uflKJelff31lpVB7mUq5RMDhWV3qQ wnvO2LeXeg4Qsd5sOyECHxYBZ8iRg3fKVVyL0k7LgYOOfK8o481hdbZpPHkWljMw cVmOfu0NpfqeUfqk1/CRHqgn7SLBilyavWYkB/LBh2dDyrgOHedkov1x+6aqcGnq juE6vY1556nY5tX1RJklcgjSSyXH5VB8PkJVxSyErVmnbAShQHFPgClrXiEez1Do co/ypGnuR4z16TOy9kPtcWqvwLeMLbv1nhLZVgbrQyulZdHVawIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHN7mMumO5Ql0qgk1bEpxWJaje44MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iNWRh NDY1OS05YWYyLTRhYjktOTBlZC0yN2RlMWExYzAxZTYvYzViYTJiMTItNGVhMy0z MTc4LTg1MTgtMDZkMzUyMjNkZmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjVkYTQ2NTktOWFmMi00YWI5LTkw ZWQtMjdkZTFhMWMwMWU2L2I1ZGE0NjU5LTlhZjItNGFiOS05MGVkLTI3ZGUxYTFj MDFlNi5jcmwwHwYDVR0jBBgwFoAUiWm1nULTGVo/77XPpoilPdPyxMUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iNWRhNDY1OS05YWYyLTRhYjktOTBlZC0yN2Rl MWExYzAxZTYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5T0MA4E AgACMAgDBgAmAvTgADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4dCdvTO83GqsyRzKM+NnmwQnZ6Z5Av55e o6cVcNqI+7r6Pv3P8Q7c3DdY96n+B8l3nqDbEDZVow+hiEF90fiZ5k/SHxoSPNVm HyLDk49szsU6IOtHCAzGEhZ9MREWhW0hcAyVv4kXvLDZBP04T2FcEbDxqiE8m7DF wJwhJ5n64Fjpr2Ob81WNaNKexHzWTlc6i14PUhasX7/vIxlqn9zZB7BgbjSjQoN8 Evxiw1FiRfYKJsGRD1+Ufm3zlgc+sruCV6N+zZH7sQOIBXjqcC2Hm/HIdJ3b3V9M 71aEEFABMd3zeX1ZpuDso5UwrarARocWgwphY1doX/v17t+TpFXE -----END CERTIFICATE-----Generated at Sun Apr 19 11:35:22 2026 by rpki-client