$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/9d7c116e-cc80-3f67-8154-24b5648ba633.roa File: 9d7c116e-cc80-3f67-8154-24b5648ba633.roa (raw, json) Hash identifier: AhynvFgVlcQPh6U/ECianjSFc0Lco3lz750g5fc1TcA= Subject key identifier: 02:3B:DD:40:08:42:28:53:22:FA:D6:D3:00:B4:00:77:BF:54:CE:D0 Certificate issuer: /CN=1a78e5bb-4a68-4b2f-870c-a943f9a02622 Certificate serial: 010D0C9F4328584D984773B69A188D94A2EABB80 Authority key identifier: 84:C9:F5:69:EE:B4:88:58:5A:E2:B8:AB:BE:00:30:E2:8B:2E:C7:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/9d7c116e-cc80-3f67-8154-24b5648ba633.roa Signing time: Wed 22 Apr 2026 21:08:25 +0000 ROA not before: Wed 22 Apr 2026 21:08:25 +0000 ROA not after: Tue 21 Jul 2026 21:08:25 +0000 asID: 49915 IP address blocks: 23.153.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/1a78e5bb-4a68-4b2f-870c-a943f9a02622.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/1a78e5bb-4a68-4b2f-870c-a943f9a02622.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:47:73:b6:9a:18:8d:94:a2:ea:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a78e5bb-4a68-4b2f-870c-a943f9a02622 Validity Not Before: Apr 22 21:08:25 2026 GMT Not After : Jul 21 21:08:25 2026 GMT Subject: CN=48daa609-a150-4590-97f8-c23a637a6743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:97:69:ca:29:b3:1f:4f:9b:91:ca:39:64:de: 7b:11:a7:01:89:da:f0:83:cb:28:1c:76:1c:36:7a: aa:a0:c5:8b:50:7c:b2:94:48:33:b8:0d:f1:4b:b2: 8e:33:bd:91:a8:f0:59:e8:82:74:d4:8d:04:b7:4a: 24:1f:c0:c2:91:46:5d:f2:7e:34:3b:35:0c:64:5e: 57:15:1c:e5:7f:ad:8c:00:dc:27:0b:d5:c6:8e:10: 13:c6:91:9f:42:6b:3a:28:f5:50:12:a3:6a:62:99: 25:92:fc:a3:d8:c0:6c:44:c9:bc:b1:24:8f:98:87: a6:90:2d:82:5f:e7:4c:02:c0:d8:10:b3:1f:05:41: 53:95:05:f4:d1:7b:bd:54:92:e5:7b:c2:e7:2f:1e: 68:2e:33:da:57:48:f5:d7:b7:20:9c:b9:e1:8f:b7: e7:5a:7c:42:50:d3:f5:bd:48:d3:ad:df:7d:c0:2d: c1:e2:55:83:f4:be:09:05:12:61:2b:d1:34:7a:0a: 68:60:ff:48:9f:5a:84:11:a5:e8:8e:df:74:ed:5e: 59:6e:70:0f:09:fd:89:7b:2d:16:48:7e:bc:f8:e7: 76:ca:ae:82:98:e7:58:b7:3b:e4:3c:d0:61:bf:21: c6:af:a0:45:fc:66:0e:03:da:9f:ae:6c:2a:aa:8d: 91:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3B:DD:40:08:42:28:53:22:FA:D6:D3:00:B4:00:77:BF:54:CE:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/9d7c116e-cc80-3f67-8154-24b5648ba633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/1a78e5bb-4a68-4b2f-870c-a943f9a02622.crl X509v3 Authority Key Identifier: keyid:84:C9:F5:69:EE:B4:88:58:5A:E2:B8:AB:BE:00:30:E2:8B:2E:C7:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622.cer sbgp-ipAddrBlock: critical IPv4: 23.153.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:cf:24:5d:2f:e6:4d:c5:9b:4e:32:69:cf:c4:95:dc:54:72: 64:dc:b6:0f:e8:a7:9d:a2:84:05:a1:74:cb:f2:94:dd:b0:45: c6:33:e9:93:3b:8d:45:6a:69:07:89:25:05:43:48:d0:0d:ec: 87:51:1b:c1:7b:37:76:f5:e7:92:34:4b:52:e0:e2:fe:32:6c: a6:56:11:cd:1d:51:5b:26:d1:03:32:86:dc:75:a2:ae:76:61: ec:6e:e3:b2:25:df:ab:6b:b3:f0:f7:c2:1d:4f:85:3f:7b:2d: 19:b9:a9:a2:42:f7:6b:bf:fe:d1:73:97:13:7d:25:d4:f8:e8: 12:b2:ef:d8:24:7a:c9:6c:67:c2:c8:7e:e2:b3:c1:b4:8f:7e: 70:42:29:79:72:2f:b1:25:fe:88:53:89:5c:ca:aa:1a:e0:d0: 6b:e4:61:a6:80:d2:90:44:c5:10:30:a8:ba:e0:37:bd:c6:85: a2:2d:cf:6a:72:bb:07:2c:0e:e2:96:a5:11:24:0d:35:60:4e: 08:8a:46:e3:35:da:d9:c6:c5:d9:7f:fb:5c:c4:c2:3e:fa:50: 0e:4b:b1:6d:52:2e:1c:77:87:bf:50:3b:15:06:1b:42:43:91: 4b:0d:5d:9b:fe:9e:6d:7c:75:ab:5a:5a:b3:7a:59:9a:6c:59: ee:f2:52:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YR3O2mhiNlKLqu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3OGU1YmItNGE2OC00YjJmLTg3MGMtYTk0M2Y5YTAy NjIyMB4XDTI2MDQyMjIxMDgyNVoXDTI2MDcyMTIxMDgyNVowLzEtMCsGA1UEAxMk NDhkYWE2MDktYTE1MC00NTkwLTk3ZjgtYzIzYTYzN2E2NzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJdpyimzH0+bkco5ZN57EacBidrwg8soHHYc NnqqoMWLUHyylEgzuA3xS7KOM72RqPBZ6IJ01I0Et0okH8DCkUZd8n40OzUMZF5X FRzlf62MANwnC9XGjhATxpGfQms6KPVQEqNqYpklkvyj2MBsRMm8sSSPmIemkC2C X+dMAsDYELMfBUFTlQX00Xu9VJLle8LnLx5oLjPaV0j117cgnLnhj7fnWnxCUNP1 vUjTrd99wC3B4lWD9L4JBRJhK9E0egpoYP9In1qEEaXojt907V5ZbnAPCf2Jey0W SH68+Od2yq6CmOdYtzvkPNBhvyHGr6BF/GYOA9qfrmwqqo2RuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAI73UAIQihTIvrW0wC0AHe/VM7QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8xYTc4 ZTViYi00YTY4LTRiMmYtODcwYy1hOTQzZjlhMDI2MjIvOWQ3YzExNmUtY2M4MC0z ZjY3LTgxNTQtMjRiNTY0OGJhNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMWE3OGU1YmItNGE2OC00YjJmLTg3 MGMtYTk0M2Y5YTAyNjIyLzFhNzhlNWJiLTRhNjgtNGIyZi04NzBjLWE5NDNmOWEw MjYyMi5jcmwwHwYDVR0jBBgwFoAUhMn1ae60iFha4rirvgAw4osux84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8xYTc4ZTViYi00YTY4LTRiMmYtODcwYy1hOTQz ZjlhMDI2MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5koMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPPJF0v5k3Fm04yac/EldxUcmTctg/op52ihAWhdMvylN2wRcYz6ZM7 jUVqaQeJJQVDSNAN7IdRG8F7N3b155I0S1Lg4v4ybKZWEc0dUVsm0QMyhtx1oq52 Yexu47Il36trs/D3wh1PhT97LRm5qaJC92u//tFzlxN9JdT46BKy79gkeslsZ8LI fuKzwbSPfnBCKXlyL7El/ohTiVzKqhrg0GvkYaaA0pBExRAwqLrgN73GhaItz2py uwcsDuKWpREkDTVgTgiKRuM12tnGxdl/+1zEwj76UA5LsW1SLhx3h79QOxUGG0JD kUsNXZv+nm18dataWrN6WZpsWe7yUq0= -----END CERTIFICATE-----Generated at Mon Apr 27 13:01:34 2026 by rpki-client