$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/af430e62-6e79-35bf-be60-5d6fdfd7fca2.roa File: af430e62-6e79-35bf-be60-5d6fdfd7fca2.roa (raw, json) Hash identifier: UiGOqHGk0/4ZuH6tqb723BdIX6DA4cjHGAmSaUgPFNQ= Subject key identifier: 98:D3:AF:88:4F:14:C6:3C:63:95:D0:98:76:E3:F0:A1:92:F0:BB:53 Certificate issuer: /CN=e9769409-4db3-443e-9837-3afd4dca595d Certificate serial: 010D0C9F4328584D5B4F9CFF894DA7FF021DC3E0 Authority key identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/af430e62-6e79-35bf-be60-5d6fdfd7fca2.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 23316 IP address blocks: 23.227.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:9c:ff:89:4d:a7:ff:02:1d:c3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9769409-4db3-443e-9837-3afd4dca595d Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=543d5426-a686-454d-b2f7-afab1812225f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2b:7e:dc:e3:d6:6c:de:af:c4:6d:b3:e3:0d: 64:13:2f:00:a0:8c:21:e5:6b:14:d1:dd:d3:63:b8: a0:ac:b1:90:b3:0b:09:d0:70:99:d0:e5:c9:0f:ba: 01:77:0a:00:84:19:2c:35:e3:34:d1:4a:75:35:f5: db:b8:6e:c1:1b:6f:95:f6:63:aa:57:67:5e:b1:17: ac:2a:aa:00:f4:c5:f8:3e:e4:c1:09:24:65:e3:ca: 6e:b0:d9:e8:c8:9f:f6:d5:a5:ef:7a:eb:ba:48:eb: 7d:03:d2:dc:46:5e:47:22:fd:45:64:85:5f:70:47: 6e:50:0d:76:1a:3d:18:11:b1:bb:3d:a3:b5:07:41: 93:16:40:92:86:b4:fb:21:2d:4b:c7:7f:b7:c7:76: 1c:d9:38:b1:f9:da:bc:0e:47:c0:2e:ef:ba:e0:10: 65:cb:34:4b:8a:41:4f:ea:fa:21:34:71:71:e8:db: 60:a5:e0:d1:17:72:a2:32:d4:47:d5:c9:56:c5:6a: 7d:db:a6:93:83:c7:95:27:af:12:5d:5c:99:06:4d: d8:3d:5c:bc:6c:3f:a2:42:b9:e7:90:67:d5:79:f8: e7:0d:c9:2c:64:2d:3c:68:14:c0:ad:ce:76:ab:cf: 1e:40:22:a9:a4:f6:48:1b:7a:05:58:9f:b5:0a:9d: 58:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D3:AF:88:4F:14:C6:3C:63:95:D0:98:76:E3:F0:A1:92:F0:BB:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/af430e62-6e79-35bf-be60-5d6fdfd7fca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl X509v3 Authority Key Identifier: keyid:F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer sbgp-ipAddrBlock: critical IPv4: 23.227.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:83:df:4e:23:26:87:32:c3:db:cc:09:b0:f9:dd:56:82:a0: a7:10:e8:7e:d3:2c:2c:fa:e8:dd:0a:50:8e:3e:16:19:73:e5: fd:19:47:b3:5c:68:df:84:96:2d:ac:60:ae:9d:60:eb:59:3d: ef:80:5d:67:ac:4d:c9:02:1f:7f:69:9e:93:9f:48:40:b0:b7: 1f:19:fb:85:08:82:af:85:b8:bb:88:b8:06:dc:21:50:aa:00: ae:5f:db:b3:ed:60:5d:65:bd:8e:97:ec:8d:f4:b1:e4:7b:00: 63:af:2a:f9:6c:7d:65:99:66:9c:54:7e:36:dc:04:0b:91:4f: 27:af:f7:17:66:60:0c:de:6e:e4:ec:82:b0:65:1f:12:ae:d9: b0:fd:ef:56:76:9f:ed:f4:6d:24:08:e2:98:a6:7f:cd:b0:c9: b2:e5:b7:b5:e9:4d:fd:60:db:56:09:19:cc:37:da:43:13:0f: 93:85:58:28:fc:d2:50:4c:d8:43:6e:06:ba:c0:96:f8:fc:fc: b3:f5:44:00:91:7e:49:aa:4e:9e:02:2b:ef:c7:5a:50:9e:47: 1f:71:15:39:dc:a7:f8:cd:27:c2:c1:53:b8:a9:31:61:e1:a5: 6a:63:11:67:98:b3:5d:8b:fc:22:8d:6d:e1:34:cf:8e:e7:65: 32:81:69:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5z/iU2n/wIdw+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk3Njk0MDktNGRiMy00NDNlLTk4MzctM2FmZDRkY2E1 OTVkMB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk NTQzZDU0MjYtYTY4Ni00NTRkLWIyZjctYWZhYjE4MTIyMjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0it+3OPWbN6vxG2z4w1kEy8AoIwh5WsU0d3T Y7igrLGQswsJ0HCZ0OXJD7oBdwoAhBksNeM00Up1NfXbuG7BG2+V9mOqV2desRes KqoA9MX4PuTBCSRl48pusNnoyJ/21aXveuu6SOt9A9LcRl5HIv1FZIVfcEduUA12 Gj0YEbG7PaO1B0GTFkCShrT7IS1Lx3+3x3Yc2Tix+dq8DkfALu+64BBlyzRLikFP 6vohNHFx6NtgpeDRF3KiMtRH1clWxWp926aTg8eVJ68SXVyZBk3YPVy8bD+iQrnn kGfVefjnDcksZC08aBTArc52q88eQCKppPZIG3oFWJ+1Cp1YVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjTr4hPFMY8Y5XQmHbj8KGS8LtTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2 OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZkNGRjYTU5NWQvYWY0MzBlNjItNmU3OS0z NWJmLWJlNjAtNWQ2ZmRmZDdmY2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTk3Njk0MDktNGRiMy00NDNlLTk4 MzctM2FmZDRkY2E1OTVkL2U5NzY5NDA5LTRkYjMtNDQzZS05ODM3LTNhZmQ0ZGNh NTk1ZC5jcmwwHwYDVR0jBBgwFoAU9sgJduTwzi4GSBnxH9jLBMH/tewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZk NGRjYTU5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF+PgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCD304jJocyw9vMCbD53VaCoKcQ6H7TLCz66N0KUI4+Fhlz5f0ZR7Nc aN+Eli2sYK6dYOtZPe+AXWesTckCH39pnpOfSECwtx8Z+4UIgq+FuLuIuAbcIVCq AK5f27PtYF1lvY6X7I30seR7AGOvKvlsfWWZZpxUfjbcBAuRTyev9xdmYAzebuTs grBlHxKu2bD971Z2n+30bSQI4pimf82wybLlt7XpTf1g21YJGcw32kMTD5OFWCj8 0lBM2ENuBrrAlvj8/LP1RACRfkmqTp4CK+/HWlCeRx9xFTncp/jNJ8LBU7ipMWHh pWpjEWeYs12L/CKNbeE0z47nZTKBaR4= -----END CERTIFICATE-----Generated at Fri Apr 17 18:57:56 2026 by rpki-client