$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/399a7856-294a-3666-870e-a30376203f04.roa File: 399a7856-294a-3666-870e-a30376203f04.roa (raw, json) Hash identifier: rC1/N1Qhn4xN3lCLDDqdHQibl/R5EkOCiaD8e5mFXuk= Subject key identifier: 77:59:BF:25:B1:34:02:3A:E2:C8:09:F2:8E:75:D0:92:55:0D:C8:DC Certificate issuer: /CN=20044893-520c-4759-8537-c02648d4012e Certificate serial: 010D0C9F4328584D852FD9F390CBC9AE68BCF3CC Authority key identifier: 44:01:A3:4E:E8:95:A1:A5:35:F5:3B:BE:5D:9D:60:D6:59:1F:2F:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/399a7856-294a-3666-870e-a30376203f04.roa Signing time: Thu 16 Apr 2026 01:00:23 +0000 ROA not before: Thu 16 Apr 2026 01:00:23 +0000 ROA not after: Wed 15 Jul 2026 01:00:23 +0000 asID: 394904 IP address blocks: 23.152.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/20044893-520c-4759-8537-c02648d4012e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/20044893-520c-4759-8537-c02648d4012e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:85:2f:d9:f3:90:cb:c9:ae:68:bc:f3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20044893-520c-4759-8537-c02648d4012e Validity Not Before: Apr 16 01:00:23 2026 GMT Not After : Jul 15 01:00:23 2026 GMT Subject: CN=157a72ce-2598-4c46-b6ec-c1c072b7d73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:03:88:74:ac:5e:3d:69:70:21:2d:46:70:ab: c0:46:22:aa:6b:dc:ba:b9:52:89:80:87:f7:1b:a1: c9:21:10:bf:da:66:d4:76:c7:52:f7:f0:c1:fe:7f: 58:b2:7e:3a:38:0a:2d:88:57:8c:23:04:3a:28:f9: 63:3e:78:4d:6a:20:d5:0c:86:3e:16:7f:92:84:35: 27:3e:62:e9:58:70:fb:e5:47:8e:00:cd:1c:96:80: 4f:50:a4:c9:ed:92:a6:e5:cb:27:f6:f1:4a:7b:ea: f2:b2:06:75:9d:6d:19:69:a4:c3:b5:47:1b:9b:e4: 14:4a:b2:dc:74:c5:9d:cc:04:8c:09:bb:61:ce:7f: c9:f1:35:13:61:14:b1:8e:ce:88:c3:72:e3:cd:62: ff:d1:c6:b9:78:37:70:5b:7a:98:39:77:e6:50:cd: ce:2b:54:6e:d2:31:61:92:3d:b1:0a:58:f2:e7:92: 1d:d4:97:c2:24:56:ca:0a:13:c3:0f:6e:ae:1b:91: e3:ef:92:ea:be:60:cd:d0:d5:68:82:6e:6a:8d:ce: 43:1e:a0:0e:3a:c6:6d:b3:e6:d3:1e:cf:c1:83:16: 33:2f:c6:31:6d:aa:5c:ca:ac:86:19:38:87:ef:09: c3:d1:7c:07:5e:92:e2:d6:f6:0c:ba:89:a4:9b:16: 01:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:59:BF:25:B1:34:02:3A:E2:C8:09:F2:8E:75:D0:92:55:0D:C8:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/399a7856-294a-3666-870e-a30376203f04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/20044893-520c-4759-8537-c02648d4012e.crl X509v3 Authority Key Identifier: keyid:44:01:A3:4E:E8:95:A1:A5:35:F5:3B:BE:5D:9D:60:D6:59:1F:2F:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e.cer sbgp-ipAddrBlock: critical IPv4: 23.152.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ab:74:92:fe:1a:58:3d:1c:e5:ed:8e:c8:3f:96:62:f8:31: bf:d2:c1:ce:a3:cf:58:e0:62:3e:5f:2c:21:10:09:dd:0c:e7: 89:e7:1a:d8:a9:99:4e:97:cb:f5:57:f0:28:e2:ac:0e:ad:a0: 58:f1:c1:cb:7f:18:b4:a0:49:c5:81:19:82:9e:9f:34:03:80: 26:e2:cc:69:b3:08:7a:b3:06:df:8b:4d:b6:a0:f7:16:fd:7d: 4e:37:10:8c:a6:50:59:4d:31:3a:7d:3a:42:3e:ef:59:b1:c0: 9e:8b:83:36:9b:05:2f:51:c3:10:8d:1d:14:92:fd:28:c5:6d: 8a:ae:d9:84:2e:19:b4:3d:ed:5c:c0:1f:fa:2f:02:75:60:6e: 14:3b:b3:5b:93:15:31:1b:74:da:eb:f1:67:3a:a5:91:42:19: e5:c0:77:de:c8:80:51:1b:64:46:db:96:8a:78:b0:91:d6:3d: 42:64:b7:d6:b5:4d:33:df:73:51:77:51:21:db:8a:38:4b:d3: c8:f0:5e:6c:fa:ad:b0:da:01:6c:56:97:8f:eb:aa:7b:ad:26: 32:c4:49:ba:4a:52:f6:7c:d9:9c:b7:1f:65:16:e5:68:45:27: 44:f0:c3:9b:9f:d0:10:4d:96:44:f9:cb:3f:61:55:f0:dd:71: 09:8c:c6:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2FL9nzkMvJrmi888wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAwNDQ4OTMtNTIwYy00NzU5LTg1MzctYzAyNjQ4ZDQw MTJlMB4XDTI2MDQxNjAxMDAyM1oXDTI2MDcxNTAxMDAyM1owLzEtMCsGA1UEAxMk MTU3YTcyY2UtMjU5OC00YzQ2LWI2ZWMtYzFjMDcyYjdkNzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wOIdKxePWlwIS1GcKvARiKqa9y6uVKJgIf3 G6HJIRC/2mbUdsdS9/DB/n9Ysn46OAotiFeMIwQ6KPljPnhNaiDVDIY+Fn+ShDUn PmLpWHD75UeOAM0cloBPUKTJ7ZKm5csn9vFKe+rysgZ1nW0ZaaTDtUcbm+QUSrLc dMWdzASMCbthzn/J8TUTYRSxjs6Iw3LjzWL/0ca5eDdwW3qYOXfmUM3OK1Ru0jFh kj2xCljy55Id1JfCJFbKChPDD26uG5Hj75LqvmDN0NVogm5qjc5DHqAOOsZts+bT Hs/BgxYzL8YxbapcyqyGGTiH7wnD0XwHXpLi1vYMuomkmxYBGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdZvyWxNAI64sgJ8o510JJVDcjcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMDA0 NDg5My01MjBjLTQ3NTktODUzNy1jMDI2NDhkNDAxMmUvMzk5YTc4NTYtMjk0YS0z NjY2LTg3MGUtYTMwMzc2MjAzZjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMjAwNDQ4OTMtNTIwYy00NzU5LTg1 MzctYzAyNjQ4ZDQwMTJlLzIwMDQ0ODkzLTUyMGMtNDc1OS04NTM3LWMwMjY0OGQ0 MDEyZS5jcmwwHwYDVR0jBBgwFoAURAGjTuiVoaU19Tu+XZ1g1lkfL3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMDA0NDg5My01MjBjLTQ3NTktODUzNy1jMDI2 NDhkNDAxMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5i8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+rdJL+Glg9HOXtjsg/lmL4Mb/Swc6jz1jgYj5fLCEQCd0M54nnGtip mU6Xy/VX8CjirA6toFjxwct/GLSgScWBGYKenzQDgCbizGmzCHqzBt+LTbag9xb9 fU43EIymUFlNMTp9OkI+71mxwJ6LgzabBS9RwxCNHRSS/SjFbYqu2YQuGbQ97VzA H/ovAnVgbhQ7s1uTFTEbdNrr8Wc6pZFCGeXAd97IgFEbZEbblop4sJHWPUJkt9a1 TTPfc1F3USHbijhL08jwXmz6rbDaAWxWl4/rqnutJjLESbpKUvZ82Zy3H2UW5WhF J0Tww5uf0BBNlkT5yz9hVfDdcQmMxgs= -----END CERTIFICATE-----Generated at Fri Apr 17 22:49:49 2026 by rpki-client