$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/9b49f9b3-0c0b-34ea-ac81-80e02886a097.roa File: 9b49f9b3-0c0b-34ea-ac81-80e02886a097.roa (raw, json) Hash identifier: IN2vFnNV9FmRr+CGFNfJ0lyQ/xKdA7RNHsiEuRRTH4o= Subject key identifier: 6E:09:3B:60:8E:B4:CD:31:34:B8:16:9C:46:9C:E4:A4:4E:D2:6C:2A Certificate issuer: /CN=1a78e5bb-4a68-4b2f-870c-a943f9a02622 Certificate serial: 010D0C9F4328584D9847502BF8565866CABB6A60 Authority key identifier: 84:C9:F5:69:EE:B4:88:58:5A:E2:B8:AB:BE:00:30:E2:8B:2E:C7:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/9b49f9b3-0c0b-34ea-ac81-80e02886a097.roa Signing time: Wed 22 Apr 2026 21:08:08 +0000 ROA not before: Wed 22 Apr 2026 21:08:08 +0000 ROA not after: Tue 21 Jul 2026 21:08:08 +0000 asID: 40169 IP address blocks: 23.153.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/1a78e5bb-4a68-4b2f-870c-a943f9a02622.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/1a78e5bb-4a68-4b2f-870c-a943f9a02622.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:47:50:2b:f8:56:58:66:ca:bb:6a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a78e5bb-4a68-4b2f-870c-a943f9a02622 Validity Not Before: Apr 22 21:08:08 2026 GMT Not After : Jul 21 21:08:08 2026 GMT Subject: CN=c9940ad0-ba32-42b7-bf8f-a7ed7089d6bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:d2:ad:d0:94:9b:4b:3b:0b:7b:02:26:4d: 65:8c:3b:a4:85:a0:b3:cb:70:c2:ae:4f:2a:1e:2c: 07:55:61:08:54:5b:f2:a4:18:fc:14:1d:dd:9e:59: 16:f3:16:bc:d2:1e:25:7f:d7:4b:ff:c1:6f:53:75: b2:3e:34:00:27:12:73:74:4d:ab:36:68:12:4d:30: 48:06:58:cd:42:cc:0d:cd:1b:6c:c2:fb:ae:b0:73: 05:7f:c3:df:50:9a:be:72:16:a5:69:68:bb:91:ec: ca:73:25:ba:00:a7:2a:83:3f:70:91:ca:30:05:2c: af:44:fe:a9:39:ff:9e:ea:68:c3:9a:6d:1c:8f:1f: 10:1f:ec:7c:5f:d6:9f:13:1b:a3:a6:f5:4a:66:c4: dc:9c:d1:76:55:32:03:c5:f4:58:dd:bc:84:cf:e8: a6:3e:5b:d7:0e:ff:c0:e1:2d:3b:18:44:4b:91:55: 2a:e0:09:3e:f7:00:73:4f:f3:13:db:30:3b:98:e0: 5c:0a:1c:c1:96:f1:07:6f:12:dd:0d:19:0b:52:d5: 81:5f:5e:3b:a7:27:aa:97:ca:c8:c6:e5:16:d7:50: bf:0a:ca:8a:fa:cb:ea:0f:b1:87:5f:d7:26:a3:48: 00:ac:73:82:23:08:b7:38:f0:58:47:b6:14:73:72: 45:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:09:3B:60:8E:B4:CD:31:34:B8:16:9C:46:9C:E4:A4:4E:D2:6C:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/9b49f9b3-0c0b-34ea-ac81-80e02886a097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/1a78e5bb-4a68-4b2f-870c-a943f9a02622.crl X509v3 Authority Key Identifier: keyid:84:C9:F5:69:EE:B4:88:58:5A:E2:B8:AB:BE:00:30:E2:8B:2E:C7:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622.cer sbgp-ipAddrBlock: critical IPv4: 23.153.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:4d:ea:06:80:ad:78:08:62:69:48:7f:c5:e5:9b:1f:ee:04: 7a:fc:b7:d7:eb:1b:9b:f2:77:55:89:d7:69:b3:45:c4:e8:b9: 96:f4:38:a3:12:b2:ae:59:1e:fb:80:97:72:e8:5a:7f:43:04: f4:41:da:72:89:2b:d9:51:27:fa:f9:4c:ad:8d:67:dc:a4:42: d8:67:33:8f:d0:8a:49:22:ba:85:e6:74:f2:ba:47:5e:be:93: 01:f9:89:43:69:ac:f4:4f:3b:31:95:fb:63:67:72:d1:c3:03: 39:ab:8b:ad:6d:c6:d1:35:08:a0:d0:80:79:fb:a7:ff:d4:6a: 9f:f4:c0:ed:b8:0e:dd:94:60:c3:62:de:be:f6:80:df:34:06: cc:4b:93:53:c5:d5:19:ae:da:03:ab:e3:11:02:5f:24:4f:cd: 10:72:6d:af:63:b1:00:70:09:b9:19:2b:a2:94:84:9f:d1:9e: 17:3a:e6:11:73:ad:9c:00:15:88:88:e1:5d:eb:aa:85:8d:96: a3:0c:7f:cd:01:16:ee:f3:c4:b8:95:76:72:6b:3d:25:6a:6b: 48:18:3e:f8:4f:59:76:3f:d7:38:69:cc:af:ea:e4:24:3a:9f: 40:0a:dd:8c:11:da:6f:e1:7f:68:3c:1a:6b:8a:0d:0b:4b:5d: aa:a6:64:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YR1Ar+FZYZsq7amAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3OGU1YmItNGE2OC00YjJmLTg3MGMtYTk0M2Y5YTAy NjIyMB4XDTI2MDQyMjIxMDgwOFoXDTI2MDcyMTIxMDgwOFowLzEtMCsGA1UEAxMk Yzk5NDBhZDAtYmEzMi00MmI3LWJmOGYtYTdlZDcwODlkNmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw7SrdCUm0s7C3sCJk1ljDukhaCzy3DCrk8q HiwHVWEIVFvypBj8FB3dnlkW8xa80h4lf9dL/8FvU3WyPjQAJxJzdE2rNmgSTTBI BljNQswNzRtswvuusHMFf8PfUJq+chalaWi7kezKcyW6AKcqgz9wkcowBSyvRP6p Of+e6mjDmm0cjx8QH+x8X9afExujpvVKZsTcnNF2VTIDxfRY3byEz+imPlvXDv/A 4S07GERLkVUq4Ak+9wBzT/MT2zA7mOBcChzBlvEHbxLdDRkLUtWBX147pyeql8rI xuUW11C/CsqK+svqD7GHX9cmo0gArHOCIwi3OPBYR7YUc3JF4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4JO2COtM0xNLgWnEac5KRO0mwqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8xYTc4 ZTViYi00YTY4LTRiMmYtODcwYy1hOTQzZjlhMDI2MjIvOWI0OWY5YjMtMGMwYi0z NGVhLWFjODEtODBlMDI4ODZhMDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMWE3OGU1YmItNGE2OC00YjJmLTg3 MGMtYTk0M2Y5YTAyNjIyLzFhNzhlNWJiLTRhNjgtNGIyZi04NzBjLWE5NDNmOWEw MjYyMi5jcmwwHwYDVR0jBBgwFoAUhMn1ae60iFha4rirvgAw4osux84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8xYTc4ZTViYi00YTY4LTRiMmYtODcwYy1hOTQz ZjlhMDI2MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5koMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhN6gaArXgIYmlIf8Xlmx/uBHr8t9frG5vyd1WJ12mzRcTouZb0OKMS sq5ZHvuAl3LoWn9DBPRB2nKJK9lRJ/r5TK2NZ9ykQthnM4/QikkiuoXmdPK6R16+ kwH5iUNprPRPOzGV+2NnctHDAzmri61txtE1CKDQgHn7p//Uap/0wO24Dt2UYMNi 3r72gN80BsxLk1PF1Rmu2gOr4xECXyRPzRByba9jsQBwCbkZK6KUhJ/Rnhc65hFz rZwAFYiI4V3rqoWNlqMMf80BFu7zxLiVdnJrPSVqa0gYPvhPWXY/1zhpzK/q5CQ6 n0AK3YwR2m/hf2g8GmuKDQtLXaqmZE8= -----END CERTIFICATE-----Generated at Mon Apr 27 15:29:47 2026 by rpki-client