$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163/12cf13d1-30bb-3510-80fb-b15e1cec233f.roa File: 12cf13d1-30bb-3510-80fb-b15e1cec233f.roa (raw, json) Hash identifier: FRo9kOLH8leMI4DuguIeLhHaMLC9C+Y+X+gbSZLb9aQ= Subject key identifier: FA:F3:C3:5E:4E:E0:3C:8D:06:2A:CC:42:84:D8:A6:0B:0F:0F:E7:05 Certificate issuer: /CN=486c86fe-953b-43e7-8b81-bd76e3514163 Certificate serial: 010D0C9F4328584D98458D4CE57CC06C50F7B680 Authority key identifier: 7B:74:D0:55:7B:E5:7A:CF:AA:9C:9F:E3:80:0E:15:0E:79:1D:99:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163/12cf13d1-30bb-3510-80fb-b15e1cec233f.roa Signing time: Wed 22 Apr 2026 21:04:35 +0000 ROA not before: Wed 22 Apr 2026 21:04:35 +0000 ROA not after: Tue 21 Jul 2026 21:04:35 +0000 asID: 49915 IP address blocks: 23.135.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163/486c86fe-953b-43e7-8b81-bd76e3514163.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163/486c86fe-953b-43e7-8b81-bd76e3514163.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:45:8d:4c:e5:7c:c0:6c:50:f7:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=486c86fe-953b-43e7-8b81-bd76e3514163 Validity Not Before: Apr 22 21:04:35 2026 GMT Not After : Jul 21 21:04:35 2026 GMT Subject: CN=50ca54e8-d5a1-4c14-8046-2fab6fded183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:30:3c:00:6b:d1:94:0a:6f:9b:13:a2:52:9e: 85:2b:6f:bd:5e:59:1e:aa:71:ed:11:b9:de:0a:35: bb:53:2e:43:b2:11:ba:32:bb:de:d9:17:34:18:1c: 4e:94:b2:71:62:b4:eb:f2:bd:61:ff:6e:67:f3:d7: 1c:5b:bc:6c:c5:01:12:94:27:50:02:6a:85:e3:42: 8a:0c:72:f7:41:0f:19:29:74:ed:01:da:c3:21:0e: d1:89:b1:84:f7:a2:07:8e:4d:40:5e:f9:d0:fe:ee: 15:f6:88:3e:ef:cd:70:a2:62:c7:57:ae:57:49:2c: 56:59:c4:aa:f0:db:af:1e:c7:98:ef:4c:8a:d1:26: 41:cb:46:0c:32:5d:6f:29:ec:68:fa:a1:bb:b0:79: 8c:aa:f8:d2:2a:76:a4:a9:5e:4b:e2:15:03:e9:f6: 05:ac:ae:8d:15:b0:c8:23:df:ec:23:00:7b:67:f1: 7f:f8:a0:db:c3:03:b8:c4:98:be:30:31:d5:2e:0b: df:6c:3a:35:a1:1a:7f:45:b7:13:55:25:21:7f:cd: df:f4:a2:73:0d:f2:ad:26:8e:9e:4f:63:35:74:14: 09:24:af:35:32:c0:75:a8:b2:f2:47:25:c8:d6:28: e5:67:2e:7d:d1:ca:b4:fe:1b:1a:5d:30:c1:3f:0b: 61:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F3:C3:5E:4E:E0:3C:8D:06:2A:CC:42:84:D8:A6:0B:0F:0F:E7:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163/12cf13d1-30bb-3510-80fb-b15e1cec233f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163/486c86fe-953b-43e7-8b81-bd76e3514163.crl X509v3 Authority Key Identifier: keyid:7B:74:D0:55:7B:E5:7A:CF:AA:9C:9F:E3:80:0E:15:0E:79:1D:99:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163.cer sbgp-ipAddrBlock: critical IPv4: 23.135.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:b9:bf:4b:ae:77:80:c5:09:c3:c3:89:3b:df:81:af:29:f2: 64:63:ab:83:b0:68:0f:f2:0f:89:b7:ed:4e:1e:51:fa:59:0a: bc:2e:d0:0d:03:86:50:01:65:f6:2a:49:1c:0e:df:2d:33:4c: 35:16:cc:3a:61:0c:73:ce:31:c9:55:52:79:7e:90:3d:5d:4b: df:e0:4c:22:2c:f0:17:98:44:f0:fd:49:5b:87:c9:45:21:b8: 3d:87:38:4d:64:4f:88:45:42:58:eb:ab:d1:4e:c7:4f:0c:3b: 60:0b:c5:bf:59:3c:c7:41:95:23:d5:4d:9a:5d:a0:e5:db:db: 07:63:52:37:91:9b:f2:d2:e9:dc:32:48:08:36:8c:10:f1:e0: 8d:13:e0:08:32:25:7e:92:55:9b:02:3e:7b:0a:bf:a7:b1:40: f6:41:61:80:3e:b9:01:01:dd:91:09:9c:3b:4b:41:e7:e2:04: 44:cd:0d:25:f5:45:46:e4:45:b9:04:c4:74:40:36:c5:98:27: 5d:9f:f0:db:26:35:40:24:aa:b5:06:c9:7e:e9:0f:a7:5a:6f: 04:6b:0b:71:24:5e:29:29:a6:bc:83:30:b4:c7:62:d1:a9:cc: 0c:c8:93:d0:9e:e2:e5:8a:f9:a1:51:29:53:ae:e4:d4:ca:57: f9:2d:23:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YRY1M5XzAbFD3toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg2Yzg2ZmUtOTUzYi00M2U3LThiODEtYmQ3NmUzNTE0 MTYzMB4XDTI2MDQyMjIxMDQzNVoXDTI2MDcyMTIxMDQzNVowLzEtMCsGA1UEAxMk NTBjYTU0ZTgtZDVhMS00YzE0LTgwNDYtMmZhYjZmZGVkMTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDA8AGvRlApvmxOiUp6FK2+9XlkeqnHtEbne CjW7Uy5DshG6Mrve2Rc0GBxOlLJxYrTr8r1h/25n89ccW7xsxQESlCdQAmqF40KK DHL3QQ8ZKXTtAdrDIQ7RibGE96IHjk1AXvnQ/u4V9og+781womLHV65XSSxWWcSq 8NuvHseY70yK0SZBy0YMMl1vKexo+qG7sHmMqvjSKnakqV5L4hUD6fYFrK6NFbDI I9/sIwB7Z/F/+KDbwwO4xJi+MDHVLgvfbDo1oRp/RbcTVSUhf83f9KJzDfKtJo6e T2M1dBQJJK81MsB1qLLyRyXI1ijlZy590cq0/hsaXTDBPwthIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrzw15O4DyNBirMQoTYpgsPD+cFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80ODZj ODZmZS05NTNiLTQzZTctOGI4MS1iZDc2ZTM1MTQxNjMvMTJjZjEzZDEtMzBiYi0z NTEwLTgwZmItYjE1ZTFjZWMyMzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDg2Yzg2ZmUtOTUzYi00M2U3LThi ODEtYmQ3NmUzNTE0MTYzLzQ4NmM4NmZlLTk1M2ItNDNlNy04YjgxLWJkNzZlMzUx NDE2My5jcmwwHwYDVR0jBBgwFoAUe3TQVXvles+qnJ/jgA4VDnkdmf8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80ODZjODZmZS05NTNiLTQzZTctOGI4MS1iZDc2 ZTM1MTQxNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4dsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEe5v0uud4DFCcPDiTvfga8p8mRjq4OwaA/yD4m37U4eUfpZCrwu0A0D hlABZfYqSRwO3y0zTDUWzDphDHPOMclVUnl+kD1dS9/gTCIs8BeYRPD9SVuHyUUh uD2HOE1kT4hFQljrq9FOx08MO2ALxb9ZPMdBlSPVTZpdoOXb2wdjUjeRm/LS6dwy SAg2jBDx4I0T4AgyJX6SVZsCPnsKv6exQPZBYYA+uQEB3ZEJnDtLQefiBETNDSX1 RUbkRbkExHRANsWYJ12f8NsmNUAkqrUGyX7pD6dabwRrC3EkXikppryDMLTHYtGp zAzIk9Ce4uWK+aFRKVOu5NTKV/ktI34= -----END CERTIFICATE-----Generated at Mon Apr 27 13:01:13 2026 by rpki-client