$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/a49bf951-af88-38e3-8f94-50c2ce38d3f2.roa File: a49bf951-af88-38e3-8f94-50c2ce38d3f2.roa (raw, json) Hash identifier: RLva0nL0F5qQLHG64IHtKcj1JM0xwRguOo5K6qOSgkQ= Subject key identifier: 09:1D:CD:EF:2A:3C:D0:D0:44:34:BB:0C:F2:79:9A:AE:45:20:C4:62 Certificate issuer: /CN=0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e Certificate serial: 010D0C9F4328584D6C0FDBB5176A0ADD2EA99A00 Authority key identifier: 75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/a49bf951-af88-38e3-8f94-50c2ce38d3f2.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 21939 IP address blocks: 23.144.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:db:b5:17:6a:0a:dd:2e:a9:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=d3ec5eec-321b-4e20-8593-7d1f190aa4cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cf:1b:64:db:99:09:50:42:13:5d:c4:56:4a: e6:79:f3:08:63:f5:68:67:9b:83:c0:13:03:67:da: 35:5b:8b:30:10:c5:fa:ee:49:fb:5c:05:ad:d5:1c: 36:2f:0f:92:c8:9a:59:02:1d:42:44:a4:a2:24:89: 1c:4c:9b:e8:df:0b:d2:bf:98:38:ae:05:63:16:6a: bc:14:64:80:08:0c:4c:e5:6c:a4:d8:b8:29:9c:f8: 88:77:c8:6d:24:01:c8:34:f2:24:53:9a:1f:80:d3: 91:37:c7:15:9d:3c:97:ca:d6:cb:68:a4:3d:a0:4e: c2:c1:5e:2f:c3:ca:a5:ae:83:7f:75:76:04:d5:93: f3:14:b6:2d:db:11:99:e4:ac:90:fe:c4:e7:43:4c: 4c:d8:5f:74:9e:85:bb:90:cf:12:44:56:e6:7f:92: 3b:67:2a:6a:e1:41:37:7a:35:6f:10:19:b9:9a:fa: f4:8b:44:cc:fc:2a:25:0c:d0:ed:48:08:e3:5f:aa: f7:58:44:22:a1:85:d2:ee:28:55:e8:8f:94:ce:cc: 7a:67:a0:7d:b6:f5:f4:34:b6:43:d3:8d:ed:89:e3: cd:02:4e:90:d6:5d:e0:ac:59:56:4b:dd:4c:23:d8: cc:92:8b:7e:73:7a:4a:e0:71:95:5c:bd:b6:db:e0: fd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1D:CD:EF:2A:3C:D0:D0:44:34:BB:0C:F2:79:9A:AE:45:20:C4:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/a49bf951-af88-38e3-8f94-50c2ce38d3f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.crl X509v3 Authority Key Identifier: keyid:75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer sbgp-ipAddrBlock: critical IPv4: 23.144.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:12:96:f4:f7:5d:7f:85:1d:b5:b1:58:8a:4d:f1:6a:ff:f4: c6:a7:29:09:52:fd:78:26:65:66:2f:7f:c6:4b:80:06:09:2b: f6:c2:d5:6a:f4:f0:b5:7b:c5:af:83:36:f9:79:b2:4c:7f:b3: 0f:4f:e2:35:15:be:89:d5:55:fa:d1:d4:8b:e0:27:3d:4f:01: 99:c1:65:c5:b6:2a:06:c9:b5:f0:e0:5b:d6:52:53:6d:ce:f7: bd:0a:f9:df:cb:be:a2:51:e3:5d:6d:cd:c0:27:96:2e:58:9c: 2d:f6:a0:90:18:9c:bb:27:09:73:95:20:d4:03:6e:89:e1:ae: 55:a4:bc:8d:e6:7d:68:06:b0:56:1c:56:73:95:09:91:d5:39: f9:f6:19:09:59:0e:3f:67:b2:df:52:59:01:35:76:4e:85:77: 28:90:6f:4d:1c:38:05:5f:6a:50:79:ef:20:79:8a:c9:52:ee: 0b:d2:d9:67:c8:fb:ea:bb:b7:76:51:54:70:c2:b4:e5:b5:4d: 23:d6:06:7f:0f:e6:2c:df:b1:94:1c:9d:28:32:75:6e:a1:ae: 42:e4:21:48:05:87:fc:a2:23:f4:28:45:6d:a6:f7:77:9a:15: 1c:e7:78:e5:48:bf:1f:08:4f:6e:5e:86:6b:1b:e1:cc:4d:3f: 38:1d:82:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD9u1F2oK3S6pmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI2MWRiOGItNTFkNi00NjRjLTlkZTktNmUwYTdiNmEz ZjVlMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk ZDNlYzVlZWMtMzIxYi00ZTIwLTg1OTMtN2QxZjE5MGFhNGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks8bZNuZCVBCE13EVkrmefMIY/VoZ5uDwBMD Z9o1W4swEMX67kn7XAWt1Rw2Lw+SyJpZAh1CRKSiJIkcTJvo3wvSv5g4rgVjFmq8 FGSACAxM5Wyk2LgpnPiId8htJAHINPIkU5ofgNORN8cVnTyXytbLaKQ9oE7CwV4v w8qlroN/dXYE1ZPzFLYt2xGZ5KyQ/sTnQ0xM2F90noW7kM8SRFbmf5I7Zypq4UE3 ejVvEBm5mvr0i0TM/ColDNDtSAjjX6r3WEQioYXS7ihV6I+Uzsx6Z6B9tvX0NLZD 043tiePNAk6Q1l3grFlWS91MI9jMkot+c3pK4HGVXL222+D9sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkdze8qPNDQRDS7DPJ5mq5FIMRiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYjYx ZGI4Yi01MWQ2LTQ2NGMtOWRlOS02ZTBhN2I2YTNmNWUvYTQ5YmY5NTEtYWY4OC0z OGUzLThmOTQtNTBjMmNlMzhkM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGI2MWRiOGItNTFkNi00NjRjLTlk ZTktNmUwYTdiNmEzZjVlLzBiNjFkYjhiLTUxZDYtNDY0Yy05ZGU5LTZlMGE3YjZh M2Y1ZS5jcmwwHwYDVR0jBBgwFoAUdS0qoZtZVQWYC24FjN009fr+Mk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYjYxZGI4Yi01MWQ2LTQ2NGMtOWRlOS02ZTBh N2I2YTNmNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5CUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcSlvT3XX+FHbWxWIpN8Wr/9ManKQlS/XgmZWYvf8ZLgAYJK/bC1Wr0 8LV7xa+DNvl5skx/sw9P4jUVvonVVfrR1IvgJz1PAZnBZcW2KgbJtfDgW9ZSU23O 970K+d/LvqJR411tzcAnli5YnC32oJAYnLsnCXOVINQDbonhrlWkvI3mfWgGsFYc VnOVCZHVOfn2GQlZDj9nst9SWQE1dk6FdyiQb00cOAVfalB57yB5islS7gvS2WfI ++q7t3ZRVHDCtOW1TSPWBn8P5izfsZQcnSgydW6hrkLkIUgFh/yiI/QoRW2m93ea FRzneOVIvx8IT25ehmsb4cxNPzgdgiA= -----END CERTIFICATE-----Generated at Fri Apr 17 13:08:46 2026 by rpki-client