$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/a5a492a9-c5ce-362e-8e20-fddbd87be4a1.roa File: a5a492a9-c5ce-362e-8e20-fddbd87be4a1.roa (raw, json) Hash identifier: 93tY7Fw0VX2E1uE+x7xegiqEDCwP/sb6NImvLlHY67U= Subject key identifier: C1:6E:E0:1A:13:26:95:44:3E:36:13:B3:35:D8:91:7C:4A:8C:78:31 Certificate issuer: /CN=457522b0-cf44-4757-ac16-6215c2516e52 Certificate serial: 010D0C9F4328584D5B4F91AFA33D15632F323D40 Authority key identifier: 90:D3:82:56:32:E3:87:FD:7A:E2:9F:B6:CD:23:DB:D6:F6:3A:F8:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/a5a492a9-c5ce-362e-8e20-fddbd87be4a1.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 401890 IP address blocks: 23.143.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:91:af:a3:3d:15:63:2f:32:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457522b0-cf44-4757-ac16-6215c2516e52 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=395a279d-a596-4959-aa9a-27952b746036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:35:6e:90:d2:3e:c9:f6:58:6a:7e:90:b7:16: ad:33:68:37:7e:98:fa:ba:e3:f8:02:ea:f8:f7:a3: 4a:b0:c4:a6:84:de:a7:f2:12:98:5a:f7:56:ec:88: 12:44:ba:d2:69:f2:55:22:6c:09:01:a6:6c:fc:8a: 82:be:e5:c2:bb:d3:8a:72:42:a2:98:ad:8a:f7:5c: 2a:a3:b5:43:93:8e:bb:17:a6:32:a8:42:a2:3a:80: c6:26:cb:c8:68:9e:60:a0:49:ee:ca:ba:aa:9a:ba: 3f:fd:cc:ab:d9:70:9e:26:74:ec:cc:53:ac:e9:c5: 6d:eb:93:66:6d:d5:b5:2f:6e:ac:e8:b0:05:8a:fc: 83:b6:1f:2b:bc:88:b5:6d:92:97:0f:a7:0b:d7:37: b2:9a:30:bc:bf:e7:48:17:89:6b:99:b8:d9:80:f9: 6a:63:57:22:f0:2f:84:0a:76:16:29:d0:b3:f5:d2: d4:d5:5a:fd:2c:fe:35:81:8a:e7:b2:d0:6e:bf:8e: 07:cd:6b:93:90:1b:ab:dc:97:d8:16:2e:a9:c5:52: 07:5e:5e:30:4a:68:d4:8a:ae:a4:a5:b4:30:84:8e: a6:f4:b0:55:21:23:3e:27:8d:7d:fe:4e:ed:a2:d6: 4a:20:49:ce:a5:ba:72:37:13:18:e0:ba:37:c5:a9: d0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6E:E0:1A:13:26:95:44:3E:36:13:B3:35:D8:91:7C:4A:8C:78:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/a5a492a9-c5ce-362e-8e20-fddbd87be4a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.crl X509v3 Authority Key Identifier: keyid:90:D3:82:56:32:E3:87:FD:7A:E2:9F:B6:CD:23:DB:D6:F6:3A:F8:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer sbgp-ipAddrBlock: critical IPv4: 23.143.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:df:94:6f:56:2c:70:f5:65:97:32:6a:e9:ed:89:78:42:48: 71:28:52:9f:cc:61:81:ca:0e:43:bf:40:ac:c3:de:8b:95:2b: 08:e0:ad:6d:8b:f7:05:af:d7:59:2b:db:8c:eb:8f:04:d2:17: 0f:7f:bc:4e:cf:2c:83:d5:20:32:d8:2a:12:11:dc:7f:d9:92: 9d:53:e6:33:e8:a2:e9:18:85:d0:fd:98:be:b8:0b:8e:d2:4f: 06:fa:9f:59:4e:7e:4b:99:f9:e1:59:86:4a:6d:3e:22:8e:cc: d5:b9:df:c3:51:89:0d:47:33:b0:43:02:d1:9b:d2:34:01:4c: 0e:da:6d:4e:49:d2:c9:09:73:e0:15:41:a9:b8:ce:a2:d1:07: 81:90:9b:c6:47:99:80:9c:00:9f:73:5d:28:2c:f6:f5:dc:41: a3:d3:a6:f9:6f:de:cf:ad:86:8b:ba:a8:b2:e2:99:f8:4a:a2: b5:b2:e8:6a:9d:f4:a7:07:f7:bb:83:a3:d2:a6:55:9e:05:da: 59:40:6a:22:90:74:39:8b:10:fe:29:7c:be:02:42:5c:2b:0c: fc:93:84:fc:9d:b9:1c:88:a4:2b:8d:80:6f:55:18:a1:69:14: eb:a7:04:86:01:61:5b:76:63:6c:76:37:6a:b6:39:3e:27:79: 05:59:22:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5Gvoz0VYy8yPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU3NTIyYjAtY2Y0NC00NzU3LWFjMTYtNjIxNWMyNTE2 ZTUyMB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk Mzk1YTI3OWQtYTU5Ni00OTU5LWFhOWEtMjc5NTJiNzQ2MDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTVukNI+yfZYan6QtxatM2g3fpj6uuP4Aur4 96NKsMSmhN6n8hKYWvdW7IgSRLrSafJVImwJAaZs/IqCvuXCu9OKckKimK2K91wq o7VDk467F6YyqEKiOoDGJsvIaJ5goEnuyrqqmro//cyr2XCeJnTszFOs6cVt65Nm bdW1L26s6LAFivyDth8rvIi1bZKXD6cL1zeymjC8v+dIF4lrmbjZgPlqY1ci8C+E CnYWKdCz9dLU1Vr9LP41gYrnstBuv44HzWuTkBur3JfYFi6pxVIHXl4wSmjUiq6k pbQwhI6m9LBVISM+J419/k7totZKIEnOpbpyNxMY4Lo3xanQFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFu4BoTJpVEPjYTszXYkXxKjHgxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80NTc1 MjJiMC1jZjQ0LTQ3NTctYWMxNi02MjE1YzI1MTZlNTIvYTVhNDkyYTktYzVjZS0z NjJlLThlMjAtZmRkYmQ4N2JlNGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDU3NTIyYjAtY2Y0NC00NzU3LWFj MTYtNjIxNWMyNTE2ZTUyLzQ1NzUyMmIwLWNmNDQtNDc1Ny1hYzE2LTYyMTVjMjUx NmU1Mi5jcmwwHwYDVR0jBBgwFoAUkNOCVjLjh/164p+2zSPb1vY6+FkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80NTc1MjJiMC1jZjQ0LTQ3NTctYWMxNi02MjE1 YzI1MTZlNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF48cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnflG9WLHD1ZZcyauntiXhCSHEoUp/MYYHKDkO/QKzD3ouVKwjgrW2L 9wWv11kr24zrjwTSFw9/vE7PLIPVIDLYKhIR3H/Zkp1T5jPooukYhdD9mL64C47S Twb6n1lOfkuZ+eFZhkptPiKOzNW538NRiQ1HM7BDAtGb0jQBTA7abU5J0skJc+AV Qam4zqLRB4GQm8ZHmYCcAJ9zXSgs9vXcQaPTpvlv3s+thou6qLLimfhKorWy6Gqd 9KcH97uDo9KmVZ4F2llAaiKQdDmLEP4pfL4CQlwrDPyThPyduRyIpCuNgG9VGKFp FOunBIYBYVt2Y2x2N2q2OT4neQVZIoU= -----END CERTIFICATE-----Generated at Tue Apr 7 16:34:20 2026 by rpki-client