$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/bdf24030-6cf4-3022-9a48-94149172212a.roa File: bdf24030-6cf4-3022-9a48-94149172212a.roa (raw, json) Hash identifier: ITnCNkH6pPOMdKrhjUzWTrPGStIKoC1rtPnyPRU9z5w= Subject key identifier: D7:4C:A3:7C:3F:67:6D:F1:09:68:EF:7C:92:08:E3:46:DE:75:CC:A1 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D80C9BDAFC2B4D693D1BB2300 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/bdf24030-6cf4-3022-9a48-94149172212a.roa Signing time: Tue 14 Apr 2026 11:11:32 +0000 ROA not before: Tue 14 Apr 2026 11:11:32 +0000 ROA not after: Mon 13 Jul 2026 11:11:32 +0000 asID: 834 IP address blocks: 23.231.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:c9:bd:af:c2:b4:d6:93:d1:bb:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 14 11:11:32 2026 GMT Not After : Jul 13 11:11:32 2026 GMT Subject: CN=67690e11-7484-4337-bb03-b6d670f93079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ae:3d:28:ac:de:3e:a6:72:4c:84:02:ce:f6: b0:96:52:3b:af:51:38:c7:d1:79:61:53:53:62:6f: df:07:b1:0d:b4:a2:d3:27:c5:10:36:b8:2e:7f:d7: 16:54:a1:6d:dc:3d:60:91:d7:4e:48:c5:61:8c:23: b5:c1:ff:b4:09:00:0d:c0:0d:c5:9d:26:1d:87:bc: 84:dc:31:da:b8:03:73:8d:6b:b1:d0:d2:0c:ec:c3: 5b:09:4f:89:2e:72:00:36:5a:b1:80:a1:e0:2c:e1: f2:0c:2c:a1:2c:a4:98:c3:12:01:15:6e:2d:78:75: eb:b8:41:96:8d:32:27:02:c0:5c:5c:c0:a3:26:d0: 2f:b1:e6:f2:4a:92:fc:81:9f:db:fd:df:f6:d3:13: 73:f0:61:1d:1a:81:05:0e:8c:58:3b:39:55:8c:41: ea:72:74:a1:4d:fd:b9:94:b2:f2:40:1a:a2:46:b7: bd:63:e3:24:6f:31:1e:0d:7e:ad:2c:ac:dc:5c:e5: e0:6a:a0:5a:05:28:a8:07:4b:a7:54:ea:5a:c7:0a: 8a:4b:af:34:6d:14:6c:cd:95:65:86:fb:93:2d:41: d5:e2:df:a4:d0:84:7c:dc:36:f9:2e:8c:43:a9:4a: a3:ec:a7:cd:e2:67:02:cd:03:e3:9e:c6:fa:e2:9a: 05:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4C:A3:7C:3F:67:6D:F1:09:68:EF:7C:92:08:E3:46:DE:75:CC:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/bdf24030-6cf4-3022-9a48-94149172212a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 23.231.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:82:e5:e4:e9:34:da:b9:ff:87:1d:14:43:17:ae:3c:a5:c6: a3:be:87:d5:aa:b1:fb:78:8a:7b:24:05:31:da:ce:ec:ad:3c: bf:eb:07:cd:58:a3:e1:0c:ba:78:27:45:46:97:f4:b5:f7:48: fb:f8:b3:c5:68:b6:f9:f9:87:07:f9:74:82:f0:2c:e3:d3:bb: fe:04:ce:15:f9:3f:64:cc:28:d9:8e:3f:a9:0d:d7:31:78:62: 23:3b:45:dd:d4:5c:70:84:44:bb:c9:e3:5d:96:9f:25:f7:a9: 3a:61:18:ef:f5:e6:00:74:68:29:31:4f:85:aa:f1:1b:b2:02: b8:83:b2:f9:0f:11:dc:08:7a:ce:b7:d2:79:1d:a6:e3:b7:cf: 7f:0a:a3:d4:7c:d5:d8:16:ca:4f:7f:aa:6d:3a:71:c2:04:b5: b9:a1:46:f5:1a:ad:ef:49:f5:2a:a0:3f:53:bb:69:22:f1:b6: 6d:7a:76:70:86:39:e4:d2:ad:2c:01:a9:a1:db:80:3c:d1:89: d6:05:b5:6c:7f:6b:61:bb:e5:42:1c:ec:be:ee:f2:d6:42:80: 61:2a:da:48:4e:56:12:94:2f:78:da:96:81:a8:5b:0d:27:7c: 6f:26:40:59:21:9e:81:12:f7:1d:64:e3:91:03:71:73:15:58: ed:4f:62:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Ayb2vwrTWk9G7IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDQxNDExMTEzMloXDTI2MDcxMzExMTEzMlowLzEtMCsGA1UEAxMk Njc2OTBlMTEtNzQ4NC00MzM3LWJiMDMtYjZkNjcwZjkzMDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq49KKzePqZyTIQCzvawllI7r1E4x9F5YVNT Ym/fB7ENtKLTJ8UQNrguf9cWVKFt3D1gkddOSMVhjCO1wf+0CQANwA3FnSYdh7yE 3DHauANzjWux0NIM7MNbCU+JLnIANlqxgKHgLOHyDCyhLKSYwxIBFW4teHXruEGW jTInAsBcXMCjJtAvsebySpL8gZ/b/d/20xNz8GEdGoEFDoxYOzlVjEHqcnShTf25 lLLyQBqiRre9Y+MkbzEeDX6tLKzcXOXgaqBaBSioB0unVOpaxwqKS680bRRszZVl hvuTLUHV4t+k0IR83Db5LoxDqUqj7KfN4mcCzQPjnsb64poFfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdMo3w/Z23xCWjvfJII40bedcyhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYmRmMjQwMzAtNmNmNC0z MDIyLTlhNDgtOTQxNDkxNzIyMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+cOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqC5eTpNNq5/4cdFEMXrjylxqO+h9Wqsft4inskBTHazuytPL/rB81Y o+EMungnRUaX9LX3SPv4s8Votvn5hwf5dILwLOPTu/4EzhX5P2TMKNmOP6kN1zF4 YiM7Rd3UXHCERLvJ412WnyX3qTphGO/15gB0aCkxT4Wq8RuyAriDsvkPEdwIes63 0nkdpuO3z38Ko9R81dgWyk9/qm06ccIEtbmhRvUare9J9SqgP1O7aSLxtm16dnCG OeTSrSwBqaHbgDzRidYFtWx/a2G75UIc7L7u8tZCgGEq2khOVhKUL3jaloGoWw0n fG8mQFkhnoES9x1k45EDcXMVWO1PYuQ= -----END CERTIFICATE-----Generated at Fri Apr 17 19:09:28 2026 by rpki-client