$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/294a538e-f862-3b25-966e-78f7297f94e8.roa File: 294a538e-f862-3b25-966e-78f7297f94e8.roa (raw, json) Hash identifier: H46f34A2zjzaQodyjAZqbJsXPG+hBGtqr0xo8kVJ5LE= Subject key identifier: 48:FA:5A:42:3B:95:81:39:25:11:C9:AB:BD:5A:9B:5F:85:09:11:BD Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D6EDA5F5C49EBDBAD0522F4A2 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/294a538e-f862-3b25-966e-78f7297f94e8.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 32696 IP address blocks: 63.212.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:5f:5c:49:eb:db:ad:05:22:f4:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=e070965a-dd4f-4d2e-b75f-3c1e1bbb44f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1d:64:8f:1e:31:47:66:f0:1a:e7:c9:c4:28: 56:5f:5a:fe:ab:3c:25:aa:a7:13:0a:ca:7e:29:3b: cb:6f:58:a5:44:55:2d:aa:38:41:40:5b:3f:61:7d: 53:ec:f5:76:5f:22:d9:c8:c2:f7:e9:8a:d6:29:2c: 23:11:f4:1b:5b:11:c7:af:21:c5:e9:2d:30:74:84: d3:c4:36:ea:f0:bb:02:1a:3f:ab:15:f1:00:86:92: 3b:37:23:8d:c9:04:50:32:4f:a2:40:9f:87:a4:e0: d5:6f:8f:76:87:80:14:3c:d8:40:08:52:3a:68:5f: 51:32:47:5e:dc:df:b2:9b:f2:b7:d9:1b:7b:5a:6c: 32:46:a4:31:32:98:54:de:88:d7:d6:fb:69:95:4a: ae:7d:aa:5e:d4:6b:d9:3c:af:96:4f:91:54:d8:b2: 4f:43:74:bf:09:81:30:4a:86:f3:39:3f:80:2c:22: f8:6e:14:82:f0:05:ce:63:09:7c:4f:94:96:05:76: 12:67:92:8a:b8:f8:d6:1f:2f:ff:17:87:0a:d2:8a: 23:2b:b4:98:d5:03:8c:82:17:c1:3a:fa:cd:1e:19: 6c:2c:9d:5c:ca:98:44:15:6a:d2:9f:eb:e9:0c:13: 66:0b:25:e8:96:52:33:df:f7:57:2f:13:eb:4b:7e: 96:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FA:5A:42:3B:95:81:39:25:11:C9:AB:BD:5A:9B:5F:85:09:11:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/294a538e-f862-3b25-966e-78f7297f94e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 63.212.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:42:f5:3b:6f:1a:80:5f:f2:88:92:d8:df:3b:d6:9e:7d:2f: 07:25:90:46:25:af:18:2c:ca:c9:31:99:0b:1c:2f:54:23:0c: a2:f5:c1:58:cb:71:b9:d8:61:e7:ce:d7:c2:f3:73:4d:3f:9a: cc:f9:0f:71:d9:c1:53:39:58:8e:50:a0:95:06:46:0c:38:64: 9d:99:05:25:74:c4:8f:1c:9f:21:55:37:59:c8:cf:0e:be:53: a7:c8:c8:6f:59:5b:c7:89:05:05:11:0a:6c:d5:46:7e:35:37: de:f9:fd:89:4a:46:af:ed:f8:56:e4:ef:00:4f:25:b9:2d:52: 96:3a:bc:fb:f6:88:ff:d2:77:cf:b4:02:f2:2d:cb:b3:16:0f: 38:41:52:51:bf:6a:15:d7:ea:b9:a4:33:58:4b:00:76:ed:de: b8:53:1b:9b:df:84:63:ad:bc:4f:66:3a:5c:22:59:8a:a0:8c: f2:5e:c6:33:e5:0e:aa:ff:72:c4:4e:ed:28:e7:48:0a:30:86: c4:20:97:22:20:ae:1a:0f:6f:43:9c:97:e7:b2:13:73:10:b5: b0:95:70:24:bc:84:00:d6:f8:18:c8:30:ee:07:23:34:90:a6: e1:ee:a4:4b:93:31:ad:55:98:3d:a6:03:5d:65:8d:74:b8:3a: e8:82:5f:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2l9cSevbrQUi9KIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk ZTA3MDk2NWEtZGQ0Zi00ZDJlLWI3NWYtM2MxZTFiYmI0NGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh1kjx4xR2bwGufJxChWX1r+qzwlqqcTCsp+ KTvLb1ilRFUtqjhBQFs/YX1T7PV2XyLZyML36YrWKSwjEfQbWxHHryHF6S0wdITT xDbq8LsCGj+rFfEAhpI7NyONyQRQMk+iQJ+HpODVb492h4AUPNhACFI6aF9RMkde 3N+ym/K32Rt7WmwyRqQxMphU3ojX1vtplUqufape1GvZPK+WT5FU2LJPQ3S/CYEw SobzOT+ALCL4bhSC8AXOYwl8T5SWBXYSZ5KKuPjWHy//F4cK0oojK7SY1QOMghfB OvrNHhlsLJ1cyphEFWrSn+vpDBNmCyXollIz3/dXLxPrS36WOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEj6WkI7lYE5JRHJq71am1+FCRG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMjk0YTUzOGUtZjg2Mi0z YjI1LTk2NmUtNzhmNzI5N2Y5NGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP9SHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpC9TtvGoBf8oiS2N871p59LwclkEYlrxgsyskxmQscL1QjDKL1wVjL cbnYYefO18Lzc00/msz5D3HZwVM5WI5QoJUGRgw4ZJ2ZBSV0xI8cnyFVN1nIzw6+ U6fIyG9ZW8eJBQURCmzVRn41N975/YlKRq/t+Fbk7wBPJbktUpY6vPv2iP/Sd8+0 AvIty7MWDzhBUlG/ahXX6rmkM1hLAHbt3rhTG5vfhGOtvE9mOlwiWYqgjPJexjPl Dqr/csRO7SjnSAowhsQglyIgrhoPb0Ocl+eyE3MQtbCVcCS8hADW+BjIMO4HIzSQ puHupEuTMa1VmD2mA11ljXS4OuiCX4w= -----END CERTIFICATE-----Generated at Mon Apr 13 19:38:42 2026 by rpki-client