$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163/4f6c3416-decd-32d9-be35-8ba919c6b956.roa File: 4f6c3416-decd-32d9-be35-8ba919c6b956.roa (raw, json) Hash identifier: J+MKdQ89nZ+3/euqLfRk7sCDYYiwB72zK3fJqPo2XQs= Subject key identifier: 33:04:5F:30:CF:02:C1:85:11:08:D1:C6:1F:05:E5:76:C3:68:EE:23 Certificate issuer: /CN=486c86fe-953b-43e7-8b81-bd76e3514163 Certificate serial: 010D0C9F4328584D983122B60F4BAB806F3F8B00 Authority key identifier: 7B:74:D0:55:7B:E5:7A:CF:AA:9C:9F:E3:80:0E:15:0E:79:1D:99:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163/4f6c3416-decd-32d9-be35-8ba919c6b956.roa Signing time: Wed 22 Apr 2026 20:23:27 +0000 ROA not before: Wed 22 Apr 2026 20:23:27 +0000 ROA not after: Tue 21 Jul 2026 20:23:27 +0000 asID: 19669 IP address blocks: 23.135.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163/486c86fe-953b-43e7-8b81-bd76e3514163.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163/486c86fe-953b-43e7-8b81-bd76e3514163.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:31:22:b6:0f:4b:ab:80:6f:3f:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=486c86fe-953b-43e7-8b81-bd76e3514163 Validity Not Before: Apr 22 20:23:27 2026 GMT Not After : Jul 21 20:23:27 2026 GMT Subject: CN=9584a437-919e-4c46-84bf-edb446d965ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:31:6b:a8:af:93:e0:2b:ce:4e:61:32:eb:b0: ad:a7:ed:a2:47:2c:49:84:8b:40:fe:f9:83:41:20: 8f:61:b4:f4:c3:2b:10:82:ac:5f:7e:07:74:ee:d3: 8a:3e:c0:f5:32:c9:c0:bd:16:e1:0f:85:9c:eb:6c: 72:5a:49:3d:65:55:d2:c2:cc:3e:37:55:98:15:34: bd:cc:07:85:f4:58:36:63:1d:56:38:de:cf:ee:6f: 4c:e0:f3:a2:48:55:ef:d0:dd:45:8a:ec:8d:fe:66: 4a:47:c7:a0:d7:2b:5a:14:2e:96:d2:a2:67:91:96: 90:f6:7f:78:3b:b0:06:a3:f9:e5:ff:ee:c7:82:61: 00:3a:fc:53:2f:0a:f1:95:04:61:0d:3d:4b:1f:bc: fe:1e:5c:a1:d3:ad:c7:15:39:f0:0b:de:ec:00:68: 57:8b:b7:c7:c7:8c:42:3d:c9:6c:cc:f7:af:24:ed: 90:42:4c:fa:da:90:cf:c2:35:37:54:e9:ad:09:4d: 29:d8:94:29:a0:c1:d0:9b:1b:50:a8:db:91:7a:46: ec:f7:42:ef:45:4b:81:75:f2:a4:85:56:ce:2e:60: a1:87:04:87:96:c4:1b:c9:f3:71:aa:df:53:f2:69: 38:0c:6c:46:b9:af:0e:07:00:f7:b4:c0:45:dc:c9: 90:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:04:5F:30:CF:02:C1:85:11:08:D1:C6:1F:05:E5:76:C3:68:EE:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163/4f6c3416-decd-32d9-be35-8ba919c6b956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163/486c86fe-953b-43e7-8b81-bd76e3514163.crl X509v3 Authority Key Identifier: keyid:7B:74:D0:55:7B:E5:7A:CF:AA:9C:9F:E3:80:0E:15:0E:79:1D:99:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163.cer sbgp-ipAddrBlock: critical IPv4: 23.135.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f0:45:1f:ca:ad:34:36:89:d5:fa:d7:79:4a:a1:cf:0b:1a: f0:d5:dc:77:fb:d6:6b:94:6e:a5:de:f4:df:b7:8d:3b:86:fa: d7:a5:73:16:3d:00:ee:f7:06:2e:c3:47:d1:f7:ef:68:e5:a0: 2a:5e:09:5c:4e:f1:ec:a0:27:cc:ed:b3:d2:5c:41:fc:9b:fd: 3a:db:ed:73:e0:72:7d:d5:9c:c5:53:a6:3f:3a:31:9a:01:b5: 7e:17:5c:38:68:26:75:1a:c9:55:8b:61:a8:0e:2c:fc:85:f4: 49:56:f2:c3:e9:5f:23:f3:9d:4a:5e:42:19:ee:ec:67:9a:f8: d6:5f:d8:8a:04:10:92:2b:47:ae:da:b4:9b:c1:4c:62:bb:86: fa:73:8f:ae:4f:12:6f:ce:9a:41:50:04:d7:99:54:83:c0:55: bf:fc:f9:d1:a1:69:f4:e0:2d:ca:48:ff:3e:b2:a4:cb:44:72: 18:1d:48:21:c6:0b:43:2c:08:ac:c3:25:67:f7:db:b6:cc:68: 6f:f7:04:32:5c:47:e3:fd:86:12:04:70:5d:6e:d8:4c:04:6f: d4:3c:78:46:17:f7:83:02:95:f8:03:1c:1f:7b:0e:b2:2a:d1: 83:cb:0a:59:9a:0f:a3:18:03:23:6e:1b:34:3f:28:f6:20:c4: f1:ed:bc:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YMSK2D0urgG8/iwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg2Yzg2ZmUtOTUzYi00M2U3LThiODEtYmQ3NmUzNTE0 MTYzMB4XDTI2MDQyMjIwMjMyN1oXDTI2MDcyMTIwMjMyN1owLzEtMCsGA1UEAxMk OTU4NGE0MzctOTE5ZS00YzQ2LTg0YmYtZWRiNDQ2ZDk2NWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTFrqK+T4CvOTmEy67Ctp+2iRyxJhItA/vmD QSCPYbT0wysQgqxffgd07tOKPsD1MsnAvRbhD4Wc62xyWkk9ZVXSwsw+N1WYFTS9 zAeF9Fg2Yx1WON7P7m9M4POiSFXv0N1FiuyN/mZKR8eg1ytaFC6W0qJnkZaQ9n94 O7AGo/nl/+7HgmEAOvxTLwrxlQRhDT1LH7z+Hlyh063HFTnwC97sAGhXi7fHx4xC PclszPevJO2QQkz62pDPwjU3VOmtCU0p2JQpoMHQmxtQqNuRekbs90LvRUuBdfKk hVbOLmChhwSHlsQbyfNxqt9T8mk4DGxGua8OBwD3tMBF3MmQpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMEXzDPAsGFEQjRxh8F5XbDaO4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80ODZj ODZmZS05NTNiLTQzZTctOGI4MS1iZDc2ZTM1MTQxNjMvNGY2YzM0MTYtZGVjZC0z MmQ5LWJlMzUtOGJhOTE5YzZiOTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDg2Yzg2ZmUtOTUzYi00M2U3LThi ODEtYmQ3NmUzNTE0MTYzLzQ4NmM4NmZlLTk1M2ItNDNlNy04YjgxLWJkNzZlMzUx NDE2My5jcmwwHwYDVR0jBBgwFoAUe3TQVXvles+qnJ/jgA4VDnkdmf8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80ODZjODZmZS05NTNiLTQzZTctOGI4MS1iZDc2 ZTM1MTQxNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4dsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTwRR/KrTQ2idX613lKoc8LGvDV3Hf71muUbqXe9N+3jTuG+telcxY9 AO73Bi7DR9H372jloCpeCVxO8eygJ8zts9JcQfyb/Trb7XPgcn3VnMVTpj86MZoB tX4XXDhoJnUayVWLYagOLPyF9ElW8sPpXyPznUpeQhnu7Gea+NZf2IoEEJIrR67a tJvBTGK7hvpzj65PEm/OmkFQBNeZVIPAVb/8+dGhafTgLcpI/z6ypMtEchgdSCHG C0MsCKzDJWf327bMaG/3BDJcR+P9hhIEcF1u2EwEb9Q8eEYX94MClfgDHB97DrIq 0YPLClmaD6MYAyNuGzQ/KPYgxPHtvLg= -----END CERTIFICATE-----Generated at Mon Apr 27 15:35:38 2026 by rpki-client