$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80/fb91d66f-507d-321e-86a3-1bb182e9b39e.roa File: fb91d66f-507d-321e-86a3-1bb182e9b39e.roa (raw, json) Hash identifier: XSMTc5S8kd61pqC3sN/miqBSHiac8uCJpitx7B+otFM= Subject key identifier: 39:60:FC:17:C7:3C:78:80:CA:85:81:F7:BE:58:0E:5E:5A:B7:63:F6 Certificate issuer: /CN=8f5572eb-07c1-491f-b1e4-6f63872a6e80 Certificate serial: 010D0C9F4328584D910F2C0C893D4F3917B9B9C0 Authority key identifier: 59:A1:D7:DE:D7:5D:6B:41:B5:4C:94:B5:DA:AD:5C:83:C0:4D:62:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80/fb91d66f-507d-321e-86a3-1bb182e9b39e.roa Signing time: Mon 20 Apr 2026 07:04:21 +0000 ROA not before: Mon 20 Apr 2026 07:04:21 +0000 ROA not after: Sun 19 Jul 2026 07:04:21 +0000 asID: 152179 IP address blocks: 23.186.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80/8f5572eb-07c1-491f-b1e4-6f63872a6e80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80/8f5572eb-07c1-491f-b1e4-6f63872a6e80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:0f:2c:0c:89:3d:4f:39:17:b9:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f5572eb-07c1-491f-b1e4-6f63872a6e80 Validity Not Before: Apr 20 07:04:21 2026 GMT Not After : Jul 19 07:04:21 2026 GMT Subject: CN=ad8b93fb-f9b3-4fd4-8917-9e73535a20b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ae:ef:e3:a6:ea:78:10:de:d0:c0:0a:20:64: 35:e1:00:fa:c8:4e:e5:fe:85:82:25:56:35:33:9b: 90:43:1c:4d:44:42:47:1e:57:ca:33:6c:e8:71:32: 75:59:14:40:52:1d:69:b0:01:e0:fe:ce:1d:d0:ac: 7e:34:a0:a6:aa:69:a0:c0:a5:2a:31:55:d6:9f:cb: 94:5c:78:76:4c:8c:7b:4d:ca:47:e2:1e:c1:3b:bf: 37:9c:15:a1:7c:a0:b4:ff:3e:d8:5a:02:f7:8e:3d: 5c:7d:9b:0d:b7:a7:ad:fa:ea:e9:da:dc:2e:43:ea: 03:48:a2:fa:7a:3d:65:b4:a0:ea:2d:0e:d7:3e:2e: 91:2a:02:ff:84:c2:e9:35:f0:f8:3e:82:1c:99:d7: f5:e7:d6:0b:0f:27:37:bb:b5:0b:6c:4b:85:24:7f: 8f:c1:66:f5:8d:1a:f6:5a:f7:15:41:ee:57:39:93: f9:be:52:39:bf:62:fc:d3:02:01:b7:07:66:d9:e7: 97:ca:91:26:2d:4a:6c:55:53:9f:29:d6:73:f2:41: a1:52:7e:83:11:75:63:91:0a:5d:5c:e9:3e:65:c1: 3b:a3:0d:20:90:23:70:d4:11:b0:5f:b2:85:50:a6: 6b:ca:22:d0:48:aa:ab:05:da:2f:15:a6:24:02:ad: d0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:60:FC:17:C7:3C:78:80:CA:85:81:F7:BE:58:0E:5E:5A:B7:63:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80/fb91d66f-507d-321e-86a3-1bb182e9b39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80/8f5572eb-07c1-491f-b1e4-6f63872a6e80.crl X509v3 Authority Key Identifier: keyid:59:A1:D7:DE:D7:5D:6B:41:B5:4C:94:B5:DA:AD:5C:83:C0:4D:62:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80.cer sbgp-ipAddrBlock: critical IPv4: 23.186.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:20:4f:f7:9a:b0:1c:ce:7d:a0:d4:02:45:2f:96:c2:9c:d2: 3f:48:8e:e9:da:3c:60:62:9a:0b:63:e3:4b:5b:db:a3:5e:f8: d0:43:62:7f:df:12:b2:c8:ae:20:18:cb:59:8f:eb:73:47:bf: a9:06:2d:0d:7d:77:cd:b4:8b:82:f5:58:f8:51:04:ec:0e:2b: 0f:04:0e:18:3a:62:3b:98:1f:b0:77:1d:31:4d:fb:1e:42:51: 97:e0:93:27:cf:6b:90:19:63:ac:34:d4:77:30:f1:8e:45:36: 52:92:da:e0:80:2a:e7:cf:50:49:08:bb:92:b5:78:00:da:1a: 52:92:d6:d7:ce:4c:3d:3c:6c:19:5b:3e:64:28:2e:0a:5d:c5: e9:60:bc:11:49:82:ac:5d:71:fa:94:97:2c:20:73:a0:6f:60: 34:44:cd:66:8a:e8:a3:8c:e1:85:0b:55:0d:2c:78:2e:01:52: 48:7d:60:2f:fe:0b:74:9d:79:ec:71:01:76:b7:53:46:19:c9: 9c:46:16:44:d2:6d:b1:a6:79:5f:e4:36:bc:89:71:c4:79:6e: 2b:3f:81:b2:df:ac:a2:65:16:3c:23:35:f6:ed:b1:88:54:ed: 09:78:a9:54:93:07:b4:79:ef:b6:ce:4b:ad:e4:55:8f:62:52: e5:79:ae:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RDywMiT1PORe5ucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1NTcyZWItMDdjMS00OTFmLWIxZTQtNmY2Mzg3MmE2 ZTgwMB4XDTI2MDQyMDA3MDQyMVoXDTI2MDcxOTA3MDQyMVowLzEtMCsGA1UEAxMk YWQ4YjkzZmItZjliMy00ZmQ0LTg5MTctOWU3MzUzNWEyMGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq7v46bqeBDe0MAKIGQ14QD6yE7l/oWCJVY1 M5uQQxxNREJHHlfKM2zocTJ1WRRAUh1psAHg/s4d0Kx+NKCmqmmgwKUqMVXWn8uU XHh2TIx7TcpH4h7BO783nBWhfKC0/z7YWgL3jj1cfZsNt6et+urp2twuQ+oDSKL6 ej1ltKDqLQ7XPi6RKgL/hMLpNfD4PoIcmdf159YLDyc3u7ULbEuFJH+PwWb1jRr2 WvcVQe5XOZP5vlI5v2L80wIBtwdm2eeXypEmLUpsVVOfKdZz8kGhUn6DEXVjkQpd XOk+ZcE7ow0gkCNw1BGwX7KFUKZryiLQSKqrBdovFaYkAq3QJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlg/BfHPHiAyoWB975YDl5at2P2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84ZjU1 NzJlYi0wN2MxLTQ5MWYtYjFlNC02ZjYzODcyYTZlODAvZmI5MWQ2NmYtNTA3ZC0z MjFlLTg2YTMtMWJiMTgyZTliMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY1NTcyZWItMDdjMS00OTFmLWIx ZTQtNmY2Mzg3MmE2ZTgwLzhmNTU3MmViLTA3YzEtNDkxZi1iMWU0LTZmNjM4NzJh NmU4MC5jcmwwHwYDVR0jBBgwFoAUWaHX3tdda0G1TJS12q1cg8BNYikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84ZjU1NzJlYi0wN2MxLTQ5MWYtYjFlNC02ZjYz ODcyYTZlODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7pgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAgT/easBzOfaDUAkUvlsKc0j9IjunaPGBimgtj40tb26Ne+NBDYn/f ErLIriAYy1mP63NHv6kGLQ19d820i4L1WPhRBOwOKw8EDhg6YjuYH7B3HTFN+x5C UZfgkyfPa5AZY6w01Hcw8Y5FNlKS2uCAKufPUEkIu5K1eADaGlKS1tfOTD08bBlb PmQoLgpdxelgvBFJgqxdcfqUlywgc6BvYDREzWaK6KOM4YULVQ0seC4BUkh9YC/+ C3SdeexxAXa3U0YZyZxGFkTSbbGmeV/kNryJccR5bis/gbLfrKJlFjwjNfbtsYhU 7Ql4qVSTB7R577bOS63kVY9iUuV5ruo= -----END CERTIFICATE-----Generated at Wed Apr 22 06:26:58 2026 by rpki-client