$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8459abed-f045-31a6-8fe6-16d82354e576.roa File: 8459abed-f045-31a6-8fe6-16d82354e576.roa (raw, json) Hash identifier: ePFcV33DQRpt6F9TOgVNcAYk16Wrs32x7GvpZQFDT8U= Subject key identifier: E8:13:7A:F6:C5:6E:38:9D:82:79:67:AF:AF:1C:59:24:78:DC:0A:50 Certificate issuer: /CN=65192f53-8b07-4c3f-a6b0-e9e42292d31c Certificate serial: 010D0C9F4328584D4D5A664DD114A37EBBE46E80 Authority key identifier: 42:5F:9D:FB:E3:9D:14:8D:07:C4:35:16:CE:E5:25:0D:38:F6:14:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8459abed-f045-31a6-8fe6-16d82354e576.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 399976 IP address blocks: 23.153.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:66:4d:d1:14:a3:7e:bb:e4:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65192f53-8b07-4c3f-a6b0-e9e42292d31c Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=6a98cd97-efde-4db9-ad4f-f35cc5341c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:19:45:31:e5:12:f6:c4:56:05:b8:a0:bc:d3: 0e:b5:51:45:35:25:5f:cd:44:ee:fc:4c:59:50:8f: e4:4f:25:41:0a:29:68:1a:9d:ec:2f:9f:e3:19:a5: b6:83:d6:51:2d:a3:f7:3d:72:77:fd:67:0b:bd:d3: 3c:4c:ee:85:b1:60:49:8d:0a:23:03:a0:9d:1f:a8: 51:e4:ba:52:37:cf:91:7d:c5:ed:4a:62:cd:3c:3f: c0:24:17:c1:ec:0c:8f:61:33:74:1e:c0:4e:24:18: 7b:07:2d:97:5e:8f:bd:74:76:72:34:12:88:53:49: bd:43:d4:5d:2f:2b:9e:ab:c7:93:db:1d:06:95:49: d5:63:b7:8f:74:86:ee:f9:f2:15:08:f6:77:39:d9: f4:79:c5:a3:0f:1e:15:a1:fe:86:fe:4a:2d:4a:56: 88:fb:f2:ed:d9:0a:5e:bb:61:1e:3b:03:8d:f0:fd: 19:68:7d:bc:be:a2:b8:9d:a8:ad:d4:59:6c:7b:6a: 20:3f:8e:f5:a6:15:66:80:95:a7:9a:db:e1:7b:87: ee:d2:cd:88:14:a3:e5:ff:03:1d:80:43:56:4f:60: 4c:61:b6:76:56:52:e7:01:ec:de:1d:b8:f8:e3:49: 41:a6:79:b1:9a:ff:79:cc:64:3c:24:53:32:dc:e8: e7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:13:7A:F6:C5:6E:38:9D:82:79:67:AF:AF:1C:59:24:78:DC:0A:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8459abed-f045-31a6-8fe6-16d82354e576.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.crl X509v3 Authority Key Identifier: keyid:42:5F:9D:FB:E3:9D:14:8D:07:C4:35:16:CE:E5:25:0D:38:F6:14:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer sbgp-ipAddrBlock: critical IPv4: 23.153.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:97:55:45:e6:4f:48:9b:d1:e0:18:1a:49:3d:0f:fb:62:0f: c2:60:83:28:29:50:22:c6:b2:a5:fd:fc:4a:1f:5e:c3:6f:07: 9d:f5:62:72:0e:9b:ab:b8:81:4b:7a:16:ce:dd:a4:63:36:f1: ed:d3:83:a4:1b:a5:5c:2b:6c:dc:aa:7e:b8:c7:d3:e6:c0:64: a0:7e:53:b9:25:1b:6b:f6:83:68:4c:20:32:30:b9:c8:82:3d: c5:2b:18:7a:db:40:7f:49:06:b2:b7:7f:0c:f4:c2:61:0e:9b: 57:dd:64:73:e8:d6:3c:44:b9:e8:2c:85:ed:bb:6e:44:78:6a: 31:58:37:be:86:68:5d:c2:9a:db:4b:cc:6e:bc:c0:8a:30:61: fe:89:2c:b7:21:43:0a:f2:03:f9:49:c3:d0:96:f9:f1:fd:bd: fe:4a:24:ae:45:8c:b2:98:d2:bc:97:c4:c0:c7:bb:c2:55:bc: a8:63:97:51:53:f9:b6:c2:77:e7:5e:98:74:be:9a:4d:a2:89: 9d:b1:5b:ab:92:5f:f0:3b:8d:bb:89:c3:f2:73:6d:62:1f:c1: 8a:26:cf:20:5c:4a:9b:41:46:d6:cb:6d:6c:fc:57:46:d6:3e: 16:c4:ee:e7:c0:a8:e5:8b:f0:7d:9b:f0:24:75:80:35:f5:1e: 54:5c:12:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWmZN0RSjfrvkboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUxOTJmNTMtOGIwNy00YzNmLWE2YjAtZTllNDIyOTJk MzFjMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NmE5OGNkOTctZWZkZS00ZGI5LWFkNGYtZjM1Y2M1MzQxYzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRlFMeUS9sRWBbigvNMOtVFFNSVfzUTu/ExZ UI/kTyVBCiloGp3sL5/jGaW2g9ZRLaP3PXJ3/WcLvdM8TO6FsWBJjQojA6CdH6hR 5LpSN8+RfcXtSmLNPD/AJBfB7AyPYTN0HsBOJBh7By2XXo+9dHZyNBKIU0m9Q9Rd Lyueq8eT2x0GlUnVY7ePdIbu+fIVCPZ3Odn0ecWjDx4Vof6G/kotSlaI+/Lt2Qpe u2EeOwON8P0ZaH28vqK4nait1Flse2ogP471phVmgJWnmtvhe4fu0s2IFKPl/wMd gENWT2BMYbZ2VlLnAezeHbj440lBpnmxmv95zGQ8JFMy3OjnzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgTevbFbjidgnlnr68cWSR43ApQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NTE5 MmY1My04YjA3LTRjM2YtYTZiMC1lOWU0MjI5MmQzMWMvODQ1OWFiZWQtZjA0NS0z MWE2LThmZTYtMTZkODIzNTRlNTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjUxOTJmNTMtOGIwNy00YzNmLWE2 YjAtZTllNDIyOTJkMzFjLzY1MTkyZjUzLThiMDctNGMzZi1hNmIwLWU5ZTQyMjky ZDMxYy5jcmwwHwYDVR0jBBgwFoAUQl+d++OdFI0HxDUWzuUlDTj2FOIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NTE5MmY1My04YjA3LTRjM2YtYTZiMC1lOWU0 MjI5MmQzMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5mIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeXVUXmT0ib0eAYGkk9D/tiD8JggygpUCLGsqX9/EofXsNvB531YnIO m6u4gUt6Fs7dpGM28e3Tg6QbpVwrbNyqfrjH0+bAZKB+U7klG2v2g2hMIDIwuciC PcUrGHrbQH9JBrK3fwz0wmEOm1fdZHPo1jxEuegshe27bkR4ajFYN76GaF3CmttL zG68wIowYf6JLLchQwryA/lJw9CW+fH9vf5KJK5FjLKY0ryXxMDHu8JVvKhjl1FT +bbCd+demHS+mk2iiZ2xW6uSX/A7jbuJw/JzbWIfwYomzyBcSptBRtbLbWz8V0bW PhbE7ufAqOWL8H2b8CR1gDX1HlRcEmI= -----END CERTIFICATE-----Generated at Fri Apr 17 16:46:01 2026 by rpki-client