$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/9a8c514a-5fb3-38bf-9ce7-e9d5e7942004.roa File: 9a8c514a-5fb3-38bf-9ce7-e9d5e7942004.roa (raw, json) Hash identifier: oRi6B7gdpB/KEr4R09q4VCSxDDqLY+g5qzMCFt4Z/B8= Subject key identifier: D5:B4:35:EB:47:78:83:6A:FF:77:2E:22:21:56:07:82:ED:2C:7F:6A Certificate issuer: /CN=14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa Certificate serial: 010D0C9F4328584D5243C6C1AB42EF70E06A8A20 Authority key identifier: AF:7E:74:FC:70:9F:AB:B7:AA:68:46:E8:30:D2:DD:9B:F3:08:30:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/9a8c514a-5fb3-38bf-9ce7-e9d5e7942004.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 401160 IP address blocks: 23.145.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:c6:c1:ab:42:ef:70:e0:6a:8a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=38f306dc-7b3a-4dee-8800-4d84aad33cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8c:3c:fb:fa:e7:39:2f:ed:b6:db:75:41:02: 2f:f7:2a:a6:af:8f:a4:9a:3d:2c:8c:8c:72:bc:2c: 97:f0:cc:44:c4:ec:f2:23:42:eb:5f:83:db:ff:60: f1:7b:89:e0:85:95:ff:a8:9b:ca:e4:40:b8:33:25: 36:e0:49:f2:bc:58:df:3b:00:3a:cc:bf:14:bb:71: 79:dc:70:66:24:59:26:43:2e:42:76:01:b6:65:d0: cd:f6:e4:ac:39:5b:d8:ea:29:6d:42:b3:15:8d:d9: c6:9b:38:52:8a:a8:97:23:79:16:a8:2c:80:10:0f: 39:04:cc:21:1d:92:a3:b0:93:c9:ab:57:c4:ff:64: f7:09:da:a4:7f:3b:0e:7a:8c:7b:9e:7e:b3:2a:72: 3f:1a:09:ac:56:dc:84:26:49:ef:c8:bd:83:01:c4: 74:24:2e:d5:47:21:40:63:2d:21:4a:37:1b:cc:46: a3:98:96:37:f1:05:3c:e7:95:f6:d9:01:2a:22:c1: ac:c7:fc:75:b8:18:b4:cf:8d:59:32:2b:66:3c:b9: fe:b2:10:bf:75:2e:6b:51:ad:46:cb:5c:89:a3:2b: 15:52:65:c5:33:99:ec:fb:c8:b0:65:bb:43:3b:83: bc:d9:16:c6:dc:88:9c:6a:8e:98:ec:e3:25:cd:0f: 10:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B4:35:EB:47:78:83:6A:FF:77:2E:22:21:56:07:82:ED:2C:7F:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/9a8c514a-5fb3-38bf-9ce7-e9d5e7942004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.crl X509v3 Authority Key Identifier: keyid:AF:7E:74:FC:70:9F:AB:B7:AA:68:46:E8:30:D2:DD:9B:F3:08:30:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer sbgp-ipAddrBlock: critical IPv4: 23.145.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:92:c2:18:75:80:aa:4b:c9:35:cc:a7:aa:83:b7:a5:aa:ce: 32:24:56:62:31:5b:b9:7b:1d:5d:c4:0b:2f:6d:e3:00:b7:97: b2:30:7d:39:f0:4e:f4:9f:c9:db:95:c9:50:88:e8:c8:dd:e0: 19:63:47:1d:4b:ae:60:b0:16:fe:0a:7b:0f:0e:92:cd:d5:f5: a9:59:8d:97:5d:e9:d9:99:c4:fb:33:f2:54:9f:b5:c3:b1:c1: 9e:74:e7:a5:b6:2b:9f:3e:06:f2:ef:8f:9d:c1:de:c7:5f:90: b4:06:36:79:32:b1:09:79:7a:c6:93:2a:8e:d4:ac:de:e9:e2: 86:64:66:1f:0d:29:e2:39:9d:0a:9c:5b:65:cd:76:34:36:19: d5:4d:8f:1c:5d:b9:d0:50:60:7b:bf:6f:3a:84:76:ac:de:ec: 82:1e:d0:70:6b:f3:81:3d:23:fe:83:d6:c2:3b:8f:a8:c2:40: dc:fe:f3:7f:1c:f3:9d:77:83:75:76:e7:f3:7f:c8:f5:0c:c7: 4b:87:63:db:cb:ff:37:08:65:9d:0b:c7:8c:67:f5:3e:06:a2: 0f:58:85:ef:8c:39:12:b6:02:98:42:52:af:a3:30:52:5b:71: b2:db:25:95:c1:c9:08:99:e3:6c:9f:b9:86:06:32:d3:43:61: f1:53:f3:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ8bBq0LvcOBqiiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTRmNWE4ZTEtM2QxYS00N2E1LWI2YzgtY2Y2YzEyNDJk MmFhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk MzhmMzA2ZGMtN2IzYS00ZGVlLTg4MDAtNGQ4NGFhZDMzY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIw8+/rnOS/tttt1QQIv9yqmr4+kmj0sjIxy vCyX8MxExOzyI0LrX4Pb/2Dxe4nghZX/qJvK5EC4MyU24EnyvFjfOwA6zL8Uu3F5 3HBmJFkmQy5CdgG2ZdDN9uSsOVvY6iltQrMVjdnGmzhSiqiXI3kWqCyAEA85BMwh HZKjsJPJq1fE/2T3CdqkfzsOeox7nn6zKnI/GgmsVtyEJknvyL2DAcR0JC7VRyFA Yy0hSjcbzEajmJY38QU855X22QEqIsGsx/x1uBi0z41ZMitmPLn+shC/dS5rUa1G y1yJoysVUmXFM5ns+8iwZbtDO4O82RbG3Iicao6Y7OMlzQ8QgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNW0NetHeINq/3cuIiFWB4LtLH9qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNGY1 YThlMS0zZDFhLTQ3YTUtYjZjOC1jZjZjMTI0MmQyYWEvOWE4YzUxNGEtNWZiMy0z OGJmLTljZTctZTlkNWU3OTQyMDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTRmNWE4ZTEtM2QxYS00N2E1LWI2 YzgtY2Y2YzEyNDJkMmFhLzE0ZjVhOGUxLTNkMWEtNDdhNS1iNmM4LWNmNmMxMjQy ZDJhYS5jcmwwHwYDVR0jBBgwFoAUr350/HCfq7eqaEboMNLdm/MIMDowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNGY1YThlMS0zZDFhLTQ3YTUtYjZjOC1jZjZj MTI0MmQyYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5H4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWSwhh1gKpLyTXMp6qDt6WqzjIkVmIxW7l7HV3ECy9t4wC3l7IwfTnw TvSfyduVyVCI6Mjd4BljRx1LrmCwFv4Kew8Oks3V9alZjZdd6dmZxPsz8lSftcOx wZ5056W2K58+BvLvj53B3sdfkLQGNnkysQl5esaTKo7UrN7p4oZkZh8NKeI5nQqc W2XNdjQ2GdVNjxxdudBQYHu/bzqEdqze7IIe0HBr84E9I/6D1sI7j6jCQNz+838c 8513g3V25/N/yPUMx0uHY9vL/zcIZZ0Lx4xn9T4Gog9Yhe+MORK2AphCUq+jMFJb cbLbJZXByQiZ42yfuYYGMtNDYfFT8w4= -----END CERTIFICATE-----Generated at Fri Apr 17 15:48:11 2026 by rpki-client