$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/990b7dd1-611c-3ea1-aafc-3d83c74060da.roa File: 990b7dd1-611c-3ea1-aafc-3d83c74060da.roa (raw, json) Hash identifier: N+8DyXFhYpN7gNyfzECXWIIbwST4UsJCc7QngaJUxW0= Subject key identifier: 45:C7:22:6E:AD:F9:00:08:A8:FE:9F:E3:1B:35:05:55:5C:0C:E1:49 Certificate issuer: /CN=958d43d9-c341-46e7-b131-b154f01666e6 Certificate serial: 010D0C9F4328584D9A20144A54F7E46245487B80 Authority key identifier: E4:8F:F3:FC:95:1C:FA:80:6D:03:75:DF:E9:AB:35:C0:8E:5A:28:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/990b7dd1-611c-3ea1-aafc-3d83c74060da.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 399687 IP address blocks: 23.189.240.0/24 maxlen: 24 146.19.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:14:4a:54:f7:e4:62:45:48:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=958d43d9-c341-46e7-b131-b154f01666e6 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=021422b7-c8ce-40d1-a420-fc283d5856fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fe:f2:7d:5a:3e:a6:93:1f:84:46:24:cb:31: 76:5c:90:6a:a1:f0:5b:22:e8:b2:69:fa:14:ec:28: 75:dd:55:b1:71:7b:7c:01:03:6f:c2:2c:2e:3e:09: 67:fa:b3:ff:76:99:49:bf:3d:c4:c6:61:35:9f:6d: 9d:78:a4:88:a6:3f:07:ad:1c:a8:0e:cb:68:1e:28: 3f:c6:d4:bd:cf:c7:43:c5:d5:93:eb:12:c2:7f:b1: cf:39:ba:9a:d3:3e:a6:dd:6a:3e:29:46:bb:91:ae: fa:09:4f:41:c7:90:98:85:7f:48:38:0e:96:6b:5b: 7f:d8:41:4c:7b:b0:fa:5a:d0:53:81:55:dd:4a:3f: 44:88:47:cc:c0:c5:c1:6c:c2:4a:42:7e:5c:6a:1f: f6:eb:7d:10:2d:cf:17:f9:ab:e4:69:c7:d9:cc:b8: 8d:76:09:d5:83:58:0e:82:a5:4d:68:e2:69:9e:9a: f8:18:76:52:ec:56:fe:67:f8:6e:e0:a6:8a:f9:e2: 71:64:f5:cb:37:06:77:6d:3f:47:3e:d8:0c:bf:9b: 93:4c:80:f5:1d:60:3f:1a:8d:98:60:23:e1:4b:d2: 96:98:c5:59:65:08:13:e7:de:28:dc:3d:20:28:5b: ed:3d:29:8c:b8:13:7d:86:8b:84:11:11:b7:54:15: 06:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C7:22:6E:AD:F9:00:08:A8:FE:9F:E3:1B:35:05:55:5C:0C:E1:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/990b7dd1-611c-3ea1-aafc-3d83c74060da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.crl X509v3 Authority Key Identifier: keyid:E4:8F:F3:FC:95:1C:FA:80:6D:03:75:DF:E9:AB:35:C0:8E:5A:28:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer sbgp-ipAddrBlock: critical IPv4: 23.189.240.0/24 146.19.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ad:f4:d6:29:4a:a3:98:f4:3e:2d:03:97:54:31:dc:e8:b3: cf:d9:18:d2:76:d8:17:d1:12:7a:3b:c3:a8:d8:87:ff:73:f3: 75:41:ca:80:b9:cd:73:d8:90:12:84:26:86:96:9d:c2:c7:63: e0:00:11:24:ce:a1:36:d8:b0:93:64:54:53:ce:3c:70:5d:d6: 1d:a8:65:bd:d0:a3:d6:a8:4a:a0:97:44:38:c0:6f:d6:40:b3: 87:c6:52:ea:46:e2:19:73:55:e8:2d:41:83:b0:e7:74:6a:05: a8:ac:7f:ee:ba:97:00:3a:63:a9:e2:91:2b:88:fe:d8:2d:e1: 3c:fa:00:bb:3f:52:0e:f0:25:e5:31:a7:43:ed:3d:6c:61:a5: 4d:31:dc:ec:af:b6:e5:6f:6b:9b:e5:65:2b:19:2a:a0:64:e1: 19:45:b8:b5:b6:c0:49:40:51:15:2f:f6:9c:22:d2:30:cc:f6: 74:9e:bb:ed:9e:32:21:f9:3e:11:e5:21:89:41:8c:67:a7:b5: 0d:03:9f:81:df:3a:a5:1d:27:0a:59:2a:b1:91:88:32:52:41: 9f:d0:bd:77:3d:cc:a2:5f:94:db:71:d1:d3:d4:1b:22:6a:d2: e9:40:cc:20:1b:74:93:bd:4d:bb:15:09:a3:6c:37:93:e7:0a: 7a:59:c5:7d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2aIBRKVPfkYkVIe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU4ZDQzZDktYzM0MS00NmU3LWIxMzEtYjE1NGYwMTY2 NmU2MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk MDIxNDIyYjctYzhjZS00MGQxLWE0MjAtZmMyODNkNTg1NmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P7yfVo+ppMfhEYkyzF2XJBqofBbIuiyafoU 7Ch13VWxcXt8AQNvwiwuPgln+rP/dplJvz3ExmE1n22deKSIpj8HrRyoDstoHig/ xtS9z8dDxdWT6xLCf7HPObqa0z6m3Wo+KUa7ka76CU9Bx5CYhX9IOA6Wa1t/2EFM e7D6WtBTgVXdSj9EiEfMwMXBbMJKQn5cah/2630QLc8X+avkacfZzLiNdgnVg1gO gqVNaOJpnpr4GHZS7Fb+Z/hu4KaK+eJxZPXLNwZ3bT9HPtgMv5uTTID1HWA/Go2Y YCPhS9KWmMVZZQgT594o3D0gKFvtPSmMuBN9houEERG3VBUGowIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEXHIm6t+QAIqP6f4xs1BVVcDOFJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85NThk NDNkOS1jMzQxLTQ2ZTctYjEzMS1iMTU0ZjAxNjY2ZTYvOTkwYjdkZDEtNjExYy0z ZWExLWFhZmMtM2Q4M2M3NDA2MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTU4ZDQzZDktYzM0MS00NmU3LWIx MzEtYjE1NGYwMTY2NmU2Lzk1OGQ0M2Q5LWMzNDEtNDZlNy1iMTMxLWIxNTRmMDE2 NjZlNi5jcmwwHwYDVR0jBBgwFoAU5I/z/JUc+oBtA3Xf6as1wI5aKBUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85NThkNDNkOS1jMzQxLTQ2ZTctYjEzMS1iMTU0 ZjAxNjY2ZTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF73wAwQA khMCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACCt9NYpSqOY9D4tA5dUMdzos8/ZGNJ22BfREno7w6jYh/9z 83VByoC5zXPYkBKEJoaWncLHY+AAESTOoTbYsJNkVFPOPHBd1h2oZb3Qo9aoSqCX RDjAb9ZAs4fGUupG4hlzVegtQYOw53RqBaisf+66lwA6Y6nikSuI/tgt4Tz6ALs/ Ug7wJeUxp0PtPWxhpU0x3OyvtuVva5vlZSsZKqBk4RlFuLW2wElAURUv9pwi0jDM 9nSeu+2eMiH5PhHlIYlBjGentQ0Dn4HfOqUdJwpZKrGRiDJSQZ/QvXc9zKJflNtx 0dPUGyJq0ulAzCAbdJO9TbsVCaNsN5PnCnpZxX0= -----END CERTIFICATE-----Generated at Thu Apr 30 22:35:07 2026 by rpki-client