$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f/f7e15033-0f46-3fad-a127-2036255bb1f1.roa File: f7e15033-0f46-3fad-a127-2036255bb1f1.roa (raw, json) Hash identifier: ueMJK5X870fq4/p9A0Y3B84SukeHYmctIqeuO6gLBdc= Subject key identifier: 2D:44:4A:C3:2B:8E:D0:21:FC:B3:3E:56:BC:A0:87:64:00:DF:AA:51 Certificate issuer: /CN=1c893490-b8e0-4924-81b3-82310cb7253f Certificate serial: 010D0C9F4328584D9FC2940EF1CC1BD2E776B460 Authority key identifier: 19:2E:47:7E:BB:1E:DC:5D:20:18:26:79:BF:A6:8C:24:35:1F:0F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f/f7e15033-0f46-3fad-a127-2036255bb1f1.roa Signing time: Sat 25 Apr 2026 13:27:09 +0000 ROA not before: Sat 25 Apr 2026 13:27:09 +0000 ROA not after: Fri 24 Jul 2026 13:27:09 +0000 asID: 401077 IP address blocks: 23.186.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f/1c893490-b8e0-4924-81b3-82310cb7253f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f/1c893490-b8e0-4924-81b3-82310cb7253f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:c2:94:0e:f1:cc:1b:d2:e7:76:b4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c893490-b8e0-4924-81b3-82310cb7253f Validity Not Before: Apr 25 13:27:09 2026 GMT Not After : Jul 24 13:27:09 2026 GMT Subject: CN=510a1630-89ae-4fd1-ba42-0c33972f6bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7a:15:74:85:20:af:e5:64:4e:ac:6e:c3:5b: 93:90:d3:80:f4:76:d6:dd:7c:93:94:6f:b2:bf:fe: 1b:18:6a:27:39:6b:ae:f0:ac:95:0f:a2:77:ab:fa: 72:c5:12:ae:d2:6c:33:8c:93:49:48:ae:43:a0:6d: b7:89:60:87:82:35:65:41:3e:c3:fc:82:b2:ab:4f: 13:48:67:0e:f4:06:3a:88:11:e4:64:19:9c:12:46: 6c:31:80:10:e0:4e:e3:83:1c:07:c5:1c:0e:f0:0b: 33:88:cf:de:70:a0:c3:cd:f1:83:ba:97:ed:d4:d6: 9f:4c:d2:8a:4f:80:08:1d:b9:54:05:90:39:84:1a: 87:31:15:6f:8b:f3:f1:56:03:c5:ba:de:a3:43:bc: e2:59:d1:7f:fe:1a:69:e8:58:48:f9:f0:56:90:aa: 40:98:bf:b9:c9:53:63:1c:0d:39:59:19:5b:6a:94: 5f:92:1f:32:8f:a9:6b:a9:e7:cc:aa:33:49:f3:c2: 71:96:3b:98:4e:41:fd:5f:35:4c:ac:cd:cf:bf:69: a1:fe:2d:67:1f:0b:b0:67:b2:7a:73:bd:46:d3:62: 4d:b2:cd:9a:03:a1:e7:a6:6b:a7:ba:00:86:64:7a: 11:a0:c0:e8:fa:fc:27:b2:b7:60:cb:6c:68:7c:e3: 44:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:44:4A:C3:2B:8E:D0:21:FC:B3:3E:56:BC:A0:87:64:00:DF:AA:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f/f7e15033-0f46-3fad-a127-2036255bb1f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f/1c893490-b8e0-4924-81b3-82310cb7253f.crl X509v3 Authority Key Identifier: keyid:19:2E:47:7E:BB:1E:DC:5D:20:18:26:79:BF:A6:8C:24:35:1F:0F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f.cer sbgp-ipAddrBlock: critical IPv4: 23.186.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:3f:1d:d2:b8:3d:14:01:85:fb:d6:6a:80:80:12:d8:7c:14: d9:de:73:a9:86:7a:b9:4b:bc:9b:2d:13:b0:18:f9:94:55:38: 01:40:66:30:f1:60:73:fb:3c:ce:77:71:08:be:c8:ce:0b:58: b9:6f:fc:bf:ef:a3:7a:25:88:64:b2:71:86:08:b5:07:88:85: a1:47:0a:78:21:88:13:c3:02:d4:59:e1:d8:98:1e:b2:9c:1d: e2:11:6b:d9:b0:15:7d:86:4e:76:cc:b7:98:4e:cd:da:10:c2: 65:8f:89:ce:4e:b5:ec:c6:f0:dc:44:c0:54:12:d1:79:e1:2b: 3d:1f:ae:f3:f4:46:d4:75:9f:68:23:f9:88:a4:eb:81:ed:6a: 15:b5:2c:31:7b:50:2f:ab:ce:27:77:b6:ea:21:21:b5:43:cb: b5:a3:06:62:4e:f5:ca:11:25:5d:9a:c8:9b:c5:fe:c5:8a:1e: 53:0a:96:e1:65:5d:ab:4a:c1:e8:04:34:37:6d:dc:c7:06:bf: ff:76:05:b4:56:30:2a:5b:a1:15:6a:1c:d1:0d:1b:03:9b:ec: 6d:f1:f8:d1:72:86:32:d7:cb:3a:36:65:20:09:d9:07:3c:a7: fe:a6:2a:dc:59:d6:75:58:00:45:94:7b:56:17:bf:cf:b0:2b: 10:1c:c0:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2fwpQO8cwb0ud2tGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM4OTM0OTAtYjhlMC00OTI0LTgxYjMtODIzMTBjYjcy NTNmMB4XDTI2MDQyNTEzMjcwOVoXDTI2MDcyNDEzMjcwOVowLzEtMCsGA1UEAxMk NTEwYTE2MzAtODlhZS00ZmQxLWJhNDItMGMzMzk3MmY2YmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHoVdIUgr+VkTqxuw1uTkNOA9HbW3XyTlG+y v/4bGGonOWuu8KyVD6J3q/pyxRKu0mwzjJNJSK5DoG23iWCHgjVlQT7D/IKyq08T SGcO9AY6iBHkZBmcEkZsMYAQ4E7jgxwHxRwO8AsziM/ecKDDzfGDupft1NafTNKK T4AIHblUBZA5hBqHMRVvi/PxVgPFut6jQ7ziWdF//hpp6FhI+fBWkKpAmL+5yVNj HA05WRlbapRfkh8yj6lrqefMqjNJ88JxljuYTkH9XzVMrM3Pv2mh/i1nHwuwZ7J6 c71G02JNss2aA6HnpmunugCGZHoRoMDo+vwnsrdgy2xofONEDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1ESsMrjtAh/LM+Vrygh2QA36pRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8xYzg5 MzQ5MC1iOGUwLTQ5MjQtODFiMy04MjMxMGNiNzI1M2YvZjdlMTUwMzMtMGY0Ni0z ZmFkLWExMjctMjAzNjI1NWJiMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMWM4OTM0OTAtYjhlMC00OTI0LTgx YjMtODIzMTBjYjcyNTNmLzFjODkzNDkwLWI4ZTAtNDkyNC04MWIzLTgyMzEwY2I3 MjUzZi5jcmwwHwYDVR0jBBgwFoAUGS5Hfrse3F0gGCZ5v6aMJDUfD7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8xYzg5MzQ5MC1iOGUwLTQ5MjQtODFiMy04MjMx MGNiNzI1M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7ooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4/HdK4PRQBhfvWaoCAEth8FNnec6mGerlLvJstE7AY+ZRVOAFAZjDx YHP7PM53cQi+yM4LWLlv/L/vo3oliGSycYYItQeIhaFHCnghiBPDAtRZ4diYHrKc HeIRa9mwFX2GTnbMt5hOzdoQwmWPic5OtezG8NxEwFQS0XnhKz0frvP0RtR1n2gj +Yik64HtahW1LDF7UC+rzid3tuohIbVDy7WjBmJO9coRJV2ayJvF/sWKHlMKluFl XatKwegENDdt3McGv/92BbRWMCpboRVqHNENGwOb7G3x+NFyhjLXyzo2ZSAJ2Qc8 p/6mKtxZ1nVYAEWUe1YXv8+wKxAcwGc= -----END CERTIFICATE-----Generated at Thu Apr 30 13:44:30 2026 by rpki-client