$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/afe04a10-6d20-3764-bd84-54723556b6bc.roa File: afe04a10-6d20-3764-bd84-54723556b6bc.roa (raw, json) Hash identifier: FzezR1m43LU+D0q/ZGFj95BnedG4ewBJbJk+yMeifQE= Subject key identifier: 58:FD:6E:B3:FA:05:E3:4D:5B:AE:54:91:CD:56:2F:4A:E0:34:B7:0E Certificate issuer: /CN=1f1cdae5-b041-4993-963d-6f855f74efa1 Certificate serial: 010D0C9F4328584D869552AA2FB01420F366E780 Authority key identifier: 3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/afe04a10-6d20-3764-bd84-54723556b6bc.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 54082 IP address blocks: 23.168.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:52:aa:2f:b0:14:20:f3:66:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1cdae5-b041-4993-963d-6f855f74efa1 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=d65f0433-1df4-4efa-807f-ecb28dbb4568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:66:b1:c9:6e:3c:66:72:71:be:f2:d1:82:6c: 8d:0b:87:35:72:b6:fc:1f:20:a1:43:b8:34:ad:cc: f0:3d:36:d8:0b:44:35:89:be:69:db:5e:41:b6:85: 36:2b:ed:16:b9:e8:a1:55:c0:68:70:a5:15:2e:59: 7c:87:4d:1a:32:32:6d:d7:5a:90:f0:00:c9:5e:de: 86:ce:8a:2f:96:0b:6a:9f:da:fa:8f:9b:c2:bc:e2: e5:f1:b6:6a:31:59:4f:17:6d:0d:b1:0e:92:82:54: ae:f0:40:15:fa:0c:4f:c0:4a:ad:0f:60:ee:bd:0c: c0:c8:b7:95:26:1c:74:a9:6d:bb:1b:b6:59:51:c4: 89:b5:39:9b:e0:2d:91:64:67:24:82:71:9e:8f:54: 1f:d7:8a:86:8a:bc:94:57:e7:2b:39:87:ec:6e:b7: 42:d3:2a:a9:56:cf:2e:60:2a:f2:71:8f:df:13:ba: 74:21:53:36:ff:4e:93:6b:7d:43:04:1b:71:73:04: ee:3a:b6:9d:b4:41:1b:1b:b1:be:d1:e9:8f:87:11: c7:b3:80:02:1c:a8:98:08:47:2b:95:9b:ef:19:87: f6:96:40:c8:c2:cd:63:c0:db:c7:1f:c7:1b:77:a4: ce:f7:b8:57:9e:47:ea:ca:81:f8:eb:72:31:b5:e3: f0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FD:6E:B3:FA:05:E3:4D:5B:AE:54:91:CD:56:2F:4A:E0:34:B7:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/afe04a10-6d20-3764-bd84-54723556b6bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.crl X509v3 Authority Key Identifier: keyid:3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer sbgp-ipAddrBlock: critical IPv4: 23.168.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:58:63:93:ab:3d:e4:54:00:0e:26:1a:25:cb:88:7a:61:49: e9:a6:a6:97:37:cb:7e:ec:a1:68:e6:5d:69:96:6a:0d:54:34: 34:24:19:93:99:1d:35:05:5f:a3:41:b6:3b:52:46:f8:42:a2: 30:fa:49:74:fc:53:49:8b:47:82:f1:d0:72:d3:87:7e:6b:fc: 49:40:13:73:75:d3:df:34:a5:85:5e:c9:7b:6b:a8:19:70:26: fe:34:d5:fb:13:d2:97:ae:d2:5a:38:2f:3d:36:0f:e1:2b:30: ec:95:b3:96:65:75:80:13:5b:09:19:2a:b9:f5:88:c8:32:7a: 96:f1:d5:d6:49:da:cc:43:a1:40:0f:0f:8c:70:04:23:d8:70: 86:64:7f:ec:91:db:c8:ad:f6:29:3e:d8:33:88:19:80:69:e4: 44:35:1e:1c:83:9c:69:6b:a2:b3:48:21:16:e7:84:9c:9c:27: a7:81:57:c1:3c:82:fe:c4:70:4e:8a:35:5c:1b:cd:e2:84:19: 0b:af:87:18:09:02:4d:bd:83:c8:c6:2d:07:bb:89:a8:69:80: 44:5c:7d:dd:1c:af:68:d3:e1:0c:39:cd:bf:d4:cf:e4:e9:5a: fa:55:c2:aa:6c:0d:6f:ff:73:eb:91:53:d3:99:7e:70:6f:b8: 7a:61:8a:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlVKqL7AUIPNm54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYxY2RhZTUtYjA0MS00OTkzLTk2M2QtNmY4NTVmNzRl ZmExMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ZDY1ZjA0MzMtMWRmNC00ZWZhLTgwN2YtZWNiMjhkYmI0NTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WaxyW48ZnJxvvLRgmyNC4c1crb8HyChQ7g0 rczwPTbYC0Q1ib5p215BtoU2K+0WueihVcBocKUVLll8h00aMjJt11qQ8ADJXt6G zoovlgtqn9r6j5vCvOLl8bZqMVlPF20NsQ6SglSu8EAV+gxPwEqtD2DuvQzAyLeV Jhx0qW27G7ZZUcSJtTmb4C2RZGckgnGej1Qf14qGiryUV+crOYfsbrdC0yqpVs8u YCrycY/fE7p0IVM2/06Ta31DBBtxcwTuOradtEEbG7G+0emPhxHHs4ACHKiYCEcr lZvvGYf2lkDIws1jwNvHH8cbd6TO97hXnkfqyoH463IxtePwJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFj9brP6BeNNW65Ukc1WL0rgNLcOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjFj ZGFlNS1iMDQxLTQ5OTMtOTYzZC02Zjg1NWY3NGVmYTEvYWZlMDRhMTAtNmQyMC0z NzY0LWJkODQtNTQ3MjM1NTZiNmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWYxY2RhZTUtYjA0MS00OTkzLTk2 M2QtNmY4NTVmNzRlZmExLzFmMWNkYWU1LWIwNDEtNDk5My05NjNkLTZmODU1Zjc0 ZWZhMS5jcmwwHwYDVR0jBBgwFoAUPqQNj3LysTdkekv3WOeHd1ylvpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjFjZGFlNS1iMDQxLTQ5OTMtOTYzZC02Zjg1 NWY3NGVmYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6hoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFYY5OrPeRUAA4mGiXLiHphSemmppc3y37soWjmXWmWag1UNDQkGZOZ HTUFX6NBtjtSRvhCojD6SXT8U0mLR4Lx0HLTh35r/ElAE3N10980pYVeyXtrqBlw Jv401fsT0peu0lo4Lz02D+ErMOyVs5ZldYATWwkZKrn1iMgyepbx1dZJ2sxDoUAP D4xwBCPYcIZkf+yR28it9ik+2DOIGYBp5EQ1HhyDnGlrorNIIRbnhJycJ6eBV8E8 gv7EcE6KNVwbzeKEGQuvhxgJAk29g8jGLQe7iahpgERcfd0cr2jT4Qw5zb/Uz+Tp WvpVwqpsDW//c+uRU9OZfnBvuHphilE= -----END CERTIFICATE-----Generated at Fri Apr 17 23:42:55 2026 by rpki-client