$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/4b8af66a-af1d-325a-b05b-ca5f14d05fb6.roa File: 4b8af66a-af1d-325a-b05b-ca5f14d05fb6.roa (raw, json) Hash identifier: ZZk4sxnnhTQi/6XMUrzXd1ocBlEX57uVcNIWlC2JayY= Subject key identifier: 7E:BD:27:D0:8A:B5:09:BE:1C:F0:22:1D:4B:F1:3F:49:1E:56:11:73 Certificate issuer: /CN=9caf1aed-80da-474d-8e77-0000ca0d6025 Certificate serial: 010D0C9F4328584D7A0526033B6DADDB315FEA00 Authority key identifier: 10:EB:39:3F:86:C8:66:53:C6:41:1E:D4:8D:97:EB:71:99:4C:E6:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/4b8af66a-af1d-325a-b05b-ca5f14d05fb6.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 401911 IP address blocks: 23.143.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:26:03:3b:6d:ad:db:31:5f:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9caf1aed-80da-474d-8e77-0000ca0d6025 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=5590b342-976d-406b-b5ed-d00494056616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:23:5c:6a:08:d6:6d:1d:51:3e:cc:bc:87: 10:62:5f:61:cf:80:0f:62:de:8b:9f:4a:5a:0f:a8: 05:32:a0:c2:80:33:7c:66:99:5b:d4:59:3c:60:92: fb:52:e1:1a:ce:89:24:23:7b:57:3b:7b:3c:df:f6: 03:2c:18:6b:8e:04:e8:b0:78:21:cc:36:fb:f1:72: b4:bb:2f:5e:a5:10:18:c7:54:01:02:59:66:fd:99: ff:3b:ad:78:fb:1b:77:ff:fc:d1:10:55:41:ce:e9: 4b:b3:51:cb:de:10:d3:6b:47:88:a9:dc:69:7a:34: 2a:aa:d2:d6:53:40:43:10:e4:ee:51:96:b9:d3:83: f4:7b:2b:4c:86:c9:83:49:8b:86:e9:e9:16:0c:5c: 1a:cc:fb:0a:85:ce:b7:68:42:e8:57:38:b1:ce:71: 2f:77:e3:da:26:d6:05:17:6f:1b:5d:c3:03:e4:aa: 99:5c:bd:6f:e4:b5:c4:5c:52:21:1e:12:38:5e:7c: 94:18:42:03:46:9e:74:5e:5d:3b:38:90:de:d3:c5: 7f:b8:5b:37:d5:ab:62:1a:e2:76:1a:b1:54:17:4e: 4a:11:76:a2:69:3f:7c:6b:50:16:3b:fe:88:96:33: f6:b8:94:b2:96:5a:54:df:66:ea:bf:b7:60:71:60: 8f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BD:27:D0:8A:B5:09:BE:1C:F0:22:1D:4B:F1:3F:49:1E:56:11:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/4b8af66a-af1d-325a-b05b-ca5f14d05fb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.crl X509v3 Authority Key Identifier: keyid:10:EB:39:3F:86:C8:66:53:C6:41:1E:D4:8D:97:EB:71:99:4C:E6:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer sbgp-ipAddrBlock: critical IPv4: 23.143.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:88:dc:ca:f6:ae:4a:71:77:53:77:2c:66:cd:3e:00:6d:fc: 88:d8:e1:50:46:33:4e:1e:93:5b:03:ce:38:dd:fe:1b:28:45: 36:1f:61:91:ea:c3:34:81:35:ba:43:32:c5:a8:48:2b:0f:83: 28:ac:df:c6:66:97:de:b9:ae:a6:ca:c6:95:68:1e:6e:4b:17: 29:c7:33:41:6c:5e:b8:77:e5:ab:4a:3b:7b:2f:b8:cb:4a:c4: db:0d:6f:3c:85:90:5b:5b:2c:36:e0:82:a8:48:5d:4b:3c:2f: f7:da:df:c6:fc:48:42:09:ac:8e:21:7b:92:d6:1f:a0:59:0f: 4a:93:2a:63:8f:65:e6:20:be:4f:fc:e8:dd:58:8c:21:a4:24: ba:61:fa:8a:3c:37:3a:0f:77:e8:3f:c5:72:cd:37:c7:28:93: ee:c8:f2:0a:cf:a3:49:5e:ed:8a:88:11:89:93:47:1c:94:bf: 22:ab:49:8b:65:83:6e:0a:19:da:6f:93:d2:f9:08:bd:d3:51: 43:0a:73:1c:90:d8:3c:f6:d8:d7:d4:25:f7:c9:48:2f:96:d8: 68:bf:32:fb:b2:da:c7:18:6b:32:03:1d:7b:34:a2:c2:c6:6b: 1b:e8:95:b9:83:22:73:bb:c7:39:3f:84:d9:07:69:48:ce:f3: 3a:bb:e8:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BSYDO22t2zFf6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhZjFhZWQtODBkYS00NzRkLThlNzctMDAwMGNhMGQ2 MDI1MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk NTU5MGIzNDItOTc2ZC00MDZiLWI1ZWQtZDAwNDk0MDU2NjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1AjXGoI1m0dUT7MvIcQYl9hz4APYt6Ln0pa D6gFMqDCgDN8Zplb1Fk8YJL7UuEazokkI3tXO3s83/YDLBhrjgTosHghzDb78XK0 uy9epRAYx1QBAllm/Zn/O614+xt3//zREFVBzulLs1HL3hDTa0eIqdxpejQqqtLW U0BDEOTuUZa504P0eytMhsmDSYuG6ekWDFwazPsKhc63aELoVzixznEvd+PaJtYF F28bXcMD5KqZXL1v5LXEXFIhHhI4XnyUGEIDRp50Xl07OJDe08V/uFs31atiGuJ2 GrFUF05KEXaiaT98a1AWO/6IljP2uJSyllpU32bqv7dgcWCPYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH69J9CKtQm+HPAiHUvxP0keVhFzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Y2Fm MWFlZC04MGRhLTQ3NGQtOGU3Ny0wMDAwY2EwZDYwMjUvNGI4YWY2NmEtYWYxZC0z MjVhLWIwNWItY2E1ZjE0ZDA1ZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWNhZjFhZWQtODBkYS00NzRkLThl NzctMDAwMGNhMGQ2MDI1LzljYWYxYWVkLTgwZGEtNDc0ZC04ZTc3LTAwMDBjYTBk NjAyNS5jcmwwHwYDVR0jBBgwFoAUEOs5P4bIZlPGQR7UjZfrcZlM5iswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85Y2FmMWFlZC04MGRhLTQ3NGQtOGU3Ny0wMDAw Y2EwZDYwMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF490MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiI3Mr2rkpxd1N3LGbNPgBt/IjY4VBGM04ek1sDzjjd/hsoRTYfYZHq wzSBNbpDMsWoSCsPgyis38Zml965rqbKxpVoHm5LFynHM0FsXrh35atKO3svuMtK xNsNbzyFkFtbLDbggqhIXUs8L/fa38b8SEIJrI4he5LWH6BZD0qTKmOPZeYgvk/8 6N1YjCGkJLph+oo8NzoPd+g/xXLNN8cok+7I8grPo0le7YqIEYmTRxyUvyKrSYtl g24KGdpvk9L5CL3TUUMKcxyQ2Dz22NfUJffJSC+W2Gi/Mvuy2scYazIDHXs0osLG axvolbmDInO7xzk/hNkHaUjO8zq76Ng= -----END CERTIFICATE-----Generated at Fri Apr 17 21:24:09 2026 by rpki-client