$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027/23449119-80cd-3377-8e2e-c365ff0bf70a.roa File: 23449119-80cd-3377-8e2e-c365ff0bf70a.roa (raw, json) Hash identifier: VxynWPhuy/hrZnbQx6NASWNYo6rgR9AgLC26UrYmm0Q= Subject key identifier: 81:C3:1A:C4:33:8F:10:03:97:11:60:8C:41:C6:50:B6:BC:41:4F:F6 Certificate issuer: /CN=47d24712-56c2-4597-9573-0e2b1b7c1027 Certificate serial: 010D0C9F4328584D74701CD5885336B406973EE8 Authority key identifier: 45:B8:77:EF:84:E0:37:C8:90:84:D5:01:B0:CA:55:A9:C3:A6:01:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027/23449119-80cd-3377-8e2e-c365ff0bf70a.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 33091 IP address blocks: 136.159.0.0/16 maxlen: 16 198.161.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027/47d24712-56c2-4597-9573-0e2b1b7c1027.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027/47d24712-56c2-4597-9573-0e2b1b7c1027.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:70:1c:d5:88:53:36:b4:06:97:3e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47d24712-56c2-4597-9573-0e2b1b7c1027 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=c181a1f8-2fa8-42ee-a9b9-d6f52e6d23b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0d:18:a2:c1:b0:ea:f2:e3:c2:93:17:05:5f: 2f:bc:20:eb:4f:f6:5b:c7:32:9f:b6:18:25:5f:fa: b9:57:e9:cf:4f:19:cc:80:df:00:3a:00:2c:ab:68: 72:77:0a:f8:56:39:97:b5:ef:23:37:b2:d7:cc:61: 3e:07:1b:84:27:25:93:8a:14:45:68:7e:3e:42:db: 75:cc:fe:01:94:d1:e3:ad:66:7e:8a:59:f9:34:5c: e5:59:c4:73:13:70:15:17:da:b6:c2:4a:b6:50:ec: 6f:d4:8b:9a:86:a4:8b:7b:50:6d:38:5d:9d:68:07: 8c:2d:66:17:8b:6f:dc:e2:c5:41:60:e9:88:d9:62: 13:02:f0:39:88:9b:29:49:89:bb:73:60:2c:c9:0e: a4:c7:d9:74:f7:b8:4a:9f:a4:09:fa:37:c4:61:83: c6:dd:f1:7e:5d:83:48:44:12:1c:a3:11:06:3e:9a: 63:1e:fd:d9:89:b0:90:ff:b0:fa:fc:a3:40:4e:e2: d2:04:5d:3e:fb:ae:e9:d0:97:57:12:7b:e0:eb:cf: a9:0b:c0:85:68:0e:bb:5e:ee:e2:5c:66:13:b8:19: 36:a4:e3:fc:c7:7d:db:fa:4a:07:ba:4b:95:20:99: 95:90:58:8a:f3:e7:86:f6:4a:e7:8d:c6:40:10:47: ff:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C3:1A:C4:33:8F:10:03:97:11:60:8C:41:C6:50:B6:BC:41:4F:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027/23449119-80cd-3377-8e2e-c365ff0bf70a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027/47d24712-56c2-4597-9573-0e2b1b7c1027.crl X509v3 Authority Key Identifier: keyid:45:B8:77:EF:84:E0:37:C8:90:84:D5:01:B0:CA:55:A9:C3:A6:01:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027.cer sbgp-ipAddrBlock: critical IPv4: 136.159.0.0/16 198.161.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f4:d6:5b:88:db:8f:77:6b:37:77:f3:c7:6e:30:d2:c5:65: c0:d7:bc:c4:61:bd:7e:90:12:40:f9:9d:72:a1:c2:c9:fc:f0: bf:84:b3:5a:73:14:78:d8:77:41:02:15:81:8c:c3:7c:58:59: b4:b8:2b:91:44:57:59:ca:3a:38:31:76:e9:c0:0e:56:73:2d: 27:08:d3:f8:05:63:e7:40:ea:d1:1c:d8:dc:d3:d0:ff:62:3f: 10:31:55:cf:79:0b:89:33:a1:38:8f:0d:e6:32:e1:a5:12:ce: d3:3d:b9:1c:d8:35:61:b2:23:f4:82:18:9e:68:3b:a4:71:c1: 79:60:e9:8c:c5:45:33:fd:a6:29:73:8d:b5:6d:2d:7a:e9:95: 3d:9a:3c:6d:3e:07:c3:fe:64:85:c2:35:ae:9d:98:68:a7:e6: e3:71:6c:c9:b6:03:22:27:e0:2e:f7:bd:3a:29:d8:83:57:7d: 1a:26:31:b8:84:cb:ef:a8:08:5c:02:ff:9d:c5:1a:70:5a:ab: dc:88:32:ca:22:3a:0f:58:9a:98:cb:ec:d7:6a:7f:be:67:5e: e1:86:a1:a4:a9:8e:28:d9:66:61:c1:15:9d:76:c6:e7:a0:dc: 69:6f:4e:ef:b9:c8:37:bb:e0:06:54:71:ba:03:c8:6d:96:e0: 67:9d:67:03 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE10cBzViFM2tAaXPugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdkMjQ3MTItNTZjMi00NTk3LTk1NzMtMGUyYjFiN2Mx MDI3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk YzE4MWExZjgtMmZhOC00MmVlLWE5YjktZDZmNTJlNmQyM2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ0YosGw6vLjwpMXBV8vvCDrT/ZbxzKfthgl X/q5V+nPTxnMgN8AOgAsq2hydwr4VjmXte8jN7LXzGE+BxuEJyWTihRFaH4+Qtt1 zP4BlNHjrWZ+iln5NFzlWcRzE3AVF9q2wkq2UOxv1IuahqSLe1BtOF2daAeMLWYX i2/c4sVBYOmI2WITAvA5iJspSYm7c2AsyQ6kx9l097hKn6QJ+jfEYYPG3fF+XYNI RBIcoxEGPppjHv3ZibCQ/7D6/KNATuLSBF0++67p0JdXEnvg68+pC8CFaA67Xu7i XGYTuBk2pOP8x33b+koHukuVIJmVkFiK8+eG9krnjcZAEEf/awIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFIHDGsQzjxADlxFgjEHGULa8QU/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80N2Qy NDcxMi01NmMyLTQ1OTctOTU3My0wZTJiMWI3YzEwMjcvMjM0NDkxMTktODBjZC0z Mzc3LThlMmUtYzM2NWZmMGJmNzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDdkMjQ3MTItNTZjMi00NTk3LTk1 NzMtMGUyYjFiN2MxMDI3LzQ3ZDI0NzEyLTU2YzItNDU5Ny05NTczLTBlMmIxYjdj MTAyNy5jcmwwHwYDVR0jBBgwFoAURbh374TgN8iQhNUBsMpVqcOmAYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80N2QyNDcxMi01NmMyLTQ1OTctOTU3My0wZTJi MWI3YzEwMjcuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAiJ8DBADG oX8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAiPTWW4jbj3drN3fzx24w0sVlwNe8xGG9fpASQPmdcqHCyfzw v4SzWnMUeNh3QQIVgYzDfFhZtLgrkURXWco6ODF26cAOVnMtJwjT+AVj50Dq0RzY 3NPQ/2I/EDFVz3kLiTOhOI8N5jLhpRLO0z25HNg1YbIj9IIYnmg7pHHBeWDpjMVF M/2mKXONtW0teumVPZo8bT4Hw/5khcI1rp2YaKfm43FsybYDIifgLve9OinYg1d9 GiYxuITL76gIXAL/ncUacFqr3IgyyiI6D1iamMvs12p/vmde4YahpKmOKNlmYcEV nXbG56DcaW9O77nIN7vgBlRxugPIbZbgZ51nAw== -----END CERTIFICATE-----Generated at Sat Apr 18 04:40:33 2026 by rpki-client