$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/af1533ae-3210-3520-b3ab-9c27721dcb6c.roa File: af1533ae-3210-3520-b3ab-9c27721dcb6c.roa (raw, json) Hash identifier: NIyMR7E44d3Wf6XLqoN/uR4vm/iMRsQqUQohDZGgRy8= Subject key identifier: 30:5C:2A:8D:E7:8A:00:81:25:30:39:42:B0:E7:EC:06:82:F9:4E:22 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584D80FFF87619C893F9A3256400 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/af1533ae-3210-3520-b3ab-9c27721dcb6c.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 30058 IP address blocks: 23.237.28.0/23 maxlen: 23 2001:49f0:d076::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:f8:76:19:c8:93:f9:a3:25:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=02e38ee9-1297-4dca-9bd3-5d1946ec3e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6f:ad:77:c9:0f:55:2c:24:2f:4c:db:9d:bc: d4:f2:76:a5:bb:54:c0:56:90:c7:eb:b8:18:2e:56: d2:65:c0:54:fb:25:0c:84:d8:ea:01:15:bb:a8:1d: 02:90:f2:25:66:ae:e8:35:a2:e1:3e:99:3b:89:cc: 85:1c:21:91:83:c8:b7:76:48:fb:df:d8:3a:8d:3e: ae:c9:52:c3:85:81:fb:03:5d:50:1e:de:d5:c2:7b: 42:e6:38:46:63:45:53:2a:b2:e6:c1:91:7f:89:50: eb:d9:c5:be:2c:a9:f7:c6:2f:b3:b5:dd:41:5e:09: 80:c4:29:2a:94:db:e7:e2:73:0e:3a:fb:2a:6d:3b: 5a:1c:e1:8c:8c:cf:cc:53:98:65:7e:42:53:d7:42: 7c:1f:27:d5:31:69:51:5d:94:a9:15:b4:00:d7:26: 53:b2:a5:2f:ab:d9:90:b7:4a:b9:ad:b6:78:94:d3: bd:f3:db:83:fa:12:b3:8e:fa:fc:e2:9e:b7:86:3f: 2c:27:4d:e8:54:d9:11:cf:3c:e0:33:ee:c9:91:9e: 58:55:fe:ec:fd:38:92:d3:9c:6c:e3:6b:c8:6c:bd: 3f:d7:c8:b2:cb:f5:6e:56:f0:7d:e9:89:90:a1:52: 9a:fd:59:a4:83:67:16:41:b7:f9:df:fb:eb:97:82: 8c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5C:2A:8D:E7:8A:00:81:25:30:39:42:B0:E7:EC:06:82:F9:4E:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/af1533ae-3210-3520-b3ab-9c27721dcb6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.28.0/23 IPv6: 2001:49f0:d076::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:22:2d:37:b7:e3:5b:ac:fe:34:b0:1a:4f:74:fd:e0:ec:6d: d9:16:ea:65:6a:ba:fb:b4:36:24:4a:e7:a7:9c:09:38:27:08: e9:78:02:43:bf:21:7e:c2:37:54:43:ad:d7:06:56:18:0c:59: 78:85:71:20:c3:96:3a:a7:a1:5c:76:f4:4e:f2:2b:04:9b:07: de:b1:9b:8f:f5:58:36:b9:10:61:60:84:a9:ab:00:d2:70:fb: 74:4d:dc:9f:e2:6f:8f:55:76:81:11:b2:b7:81:37:7b:1d:5d: 57:0b:cc:a2:e3:40:71:09:bf:7c:fd:b1:4d:d0:ca:87:62:79: 8c:7a:ad:ac:43:02:bd:34:86:9a:fd:38:f2:3e:75:ad:54:c8: c4:b6:7a:fe:f8:a9:22:10:92:ca:fd:79:7a:0b:b5:66:7c:35: 82:cc:55:d4:63:48:c1:fd:f4:f6:6f:62:3b:47:1e:31:07:1b: 8c:f9:df:d5:c6:df:7c:95:93:c5:bc:2a:56:8c:3b:c2:84:55: 21:5b:d0:24:ab:4b:36:74:bf:1c:1c:25:e1:ea:af:c7:64:46: 44:36:49:61:39:1b:7c:ad:a2:98:42:5b:8a:02:ef:a9:73:af: 84:cf:3e:d8:75:8b:88:06:71:5f:ee:a7:11:39:f5:9b:84:a1: d4:2c:2b:63 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE2A//h2GciT+aMlZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk MDJlMzhlZTktMTI5Ny00ZGNhLTliZDMtNWQxOTQ2ZWMzZTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG+td8kPVSwkL0zbnbzU8nalu1TAVpDH67gY LlbSZcBU+yUMhNjqARW7qB0CkPIlZq7oNaLhPpk7icyFHCGRg8i3dkj739g6jT6u yVLDhYH7A11QHt7VwntC5jhGY0VTKrLmwZF/iVDr2cW+LKn3xi+ztd1BXgmAxCkq lNvn4nMOOvsqbTtaHOGMjM/MU5hlfkJT10J8HyfVMWlRXZSpFbQA1yZTsqUvq9mQ t0q5rbZ4lNO989uD+hKzjvr84p63hj8sJ03oVNkRzzzgM+7JkZ5YVf7s/TiS05xs 42vIbL0/18iyy/VuVvB96YmQoVKa/Vmkg2cWQbf53/vrl4KMVwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFDBcKo3nigCBJTA5QrDn7AaC+U4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYWYxNTMzYWUtMzIxMC0z NTIwLWIzYWItOWMyNzcyMWRjYjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBF+0cMA8E AgACMAkDBwAgAUnw0HYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEApCItN7fjW6z+NLAaT3T94Oxt2RbqZWq6 +7Q2JErnp5wJOCcI6XgCQ78hfsI3VEOt1wZWGAxZeIVxIMOWOqehXHb0TvIrBJsH 3rGbj/VYNrkQYWCEqasA0nD7dE3cn+Jvj1V2gRGyt4E3ex1dVwvMouNAcQm/fP2x TdDKh2J5jHqtrEMCvTSGmv048j51rVTIxLZ6/vipIhCSyv15egu1Znw1gsxV1GNI wf309m9iO0ceMQcbjPnf1cbffJWTxbwqVow7woRVIVvQJKtLNnS/HBwl4eqvx2RG RDZJYTkbfK2imEJbigLvqXOvhM8+2HWLiAZxX+6nETn1m4Sh1CwrYw== -----END CERTIFICATE-----Generated at Fri Apr 17 16:54:14 2026 by rpki-client