$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa File: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (raw, json) Hash identifier: 6MRFiqSeLwMNnLoVSxXvrnDIqINkLXL25fSgvxL+CxE= Subject key identifier: B0:B5:76:71:FC:04:E2:0F:1A:B4:B3:76:4C:ED:21:6B:11:80:FE:52 Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F4328584D8EF5683043B25D32C7004F80 Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 397646 IP address blocks: 23.137.208.0/24 maxlen: 24 2602:fdcb::/36 maxlen: 37 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:68:30:43:b2:5d:32:c7:00:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=5aa54c1a-dc48-4e8f-b8db-29c0745dab54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5a:13:11:46:10:4d:71:cc:ca:b5:a1:90:a0: 3a:0a:04:84:14:b0:6f:bf:78:39:03:a8:5c:ed:a5: cd:6b:a8:ae:6f:89:54:61:52:b6:ab:a1:6e:c1:84: e6:ac:35:07:4e:0a:de:4c:b5:84:02:48:91:ce:83: e7:af:6f:31:a3:b1:f8:4b:ac:d2:e5:d2:d4:98:97: 1a:6e:fb:36:86:1a:43:c4:f9:a9:1f:e3:1b:ec:11: cd:a4:17:63:e7:8c:80:60:49:a2:d5:e1:70:4b:5a: 8c:6f:fc:a8:1c:9b:d2:88:d1:ca:b2:15:4f:06:0a: 39:99:98:b9:42:09:59:3b:d0:9a:fd:97:c9:f3:46: 74:5d:6b:f7:ca:06:d1:a6:07:88:6d:7b:c6:6a:2c: e6:ce:9b:b3:4a:b3:99:51:fe:e2:db:1d:cb:3d:fc: 26:2f:81:45:ac:be:5f:24:e7:34:24:4f:ae:ab:b2: 7b:e5:95:b1:e1:bc:b6:7e:4c:27:1a:87:28:9f:8b: 2e:d0:39:18:c1:0c:da:e5:10:af:45:01:c8:07:61: 24:9c:f7:54:27:f8:9d:c3:95:bf:ab:72:f1:99:60: b8:ec:2a:6c:2c:98:9b:65:b7:5d:94:8f:fb:5b:ba: f9:5b:7c:77:2f:ef:3c:b2:a6:d5:8e:25:3b:d7:95: 1d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B5:76:71:FC:04:E2:0F:1A:B4:B3:76:4C:ED:21:6B:11:80:FE:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: 23.137.208.0/24 IPv6: 2602:fdcb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:01:18:2a:9a:ab:92:11:45:86:5c:f5:f8:c3:ec:a9:44:ee: 8d:39:c8:c9:c8:c4:7d:dc:53:fa:10:20:14:f6:2e:f4:f5:b5: aa:76:c5:2f:70:a5:d0:db:a2:71:31:de:c5:f5:0d:90:ba:86: 5d:93:4f:1b:3a:d6:7c:ce:c7:67:1b:52:d3:ec:41:75:7c:d7: 5f:3e:42:17:b3:f5:40:cd:b6:60:7d:db:30:a6:12:ae:b0:3f: a0:63:4d:cd:80:4c:1a:74:d9:8a:14:a7:89:e3:4a:07:ea:7b: 51:f7:ef:da:82:92:ba:66:4f:66:0b:cf:6e:d9:bf:de:85:c9: 23:0c:67:50:40:e6:c7:b8:11:94:d3:af:ba:4f:e0:39:3f:f8: 11:a7:85:81:ba:7c:06:ce:9b:7c:1c:3c:0d:99:ca:18:84:8d: 1d:97:56:f0:29:dd:6e:25:c1:ae:0d:d8:7e:14:c4:bb:82:11: 6d:2b:40:81:48:d2:8d:d7:a3:1b:08:15:93:cb:3e:3f:ac:a6: c7:45:63:c8:08:c6:85:40:43:ea:6a:80:fd:c0:53:c3:4c:52: e0:e5:50:50:63:7a:81:f4:b8:ac:28:d7:05:81:4f:db:a8:d0: 8c:fb:82:80:55:12:ac:99:b7:bc:fc:4f:ba:36:d3:04:14:7a: c0:42:f3:9f -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2O9WgwQ7JdMscAT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NWFhNTRjMWEtZGM0OC00ZThmLWI4ZGItMjljMDc0NWRhYjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFoTEUYQTXHMyrWhkKA6CgSEFLBvv3g5A6hc 7aXNa6iub4lUYVK2q6FuwYTmrDUHTgreTLWEAkiRzoPnr28xo7H4S6zS5dLUmJca bvs2hhpDxPmpH+Mb7BHNpBdj54yAYEmi1eFwS1qMb/yoHJvSiNHKshVPBgo5mZi5 QglZO9Ca/ZfJ80Z0XWv3ygbRpgeIbXvGaizmzpuzSrOZUf7i2x3LPfwmL4FFrL5f JOc0JE+uq7J75ZWx4by2fkwnGocon4su0DkYwQza5RCvRQHIB2EknPdUJ/idw5W/ q3LxmWC47CpsLJibZbddlI/7W7r5W3x3L+88sqbVjiU715Ud1wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLC1dnH8BOIPGrSzdkztIWsRgP5SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvZmM4OWE2NDItNTgwMy0z N2RlLTg4ZDItZmJlODY0OGJkZGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4nQMA4E AgACMAgDBgQmAv3LADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyARgqmquSEUWGXPX4w+ypRO6NOcjJyMR9 3FP6ECAU9i709bWqdsUvcKXQ26JxMd7F9Q2QuoZdk08bOtZ8zsdnG1LT7EF1fNdf PkIXs/VAzbZgfdswphKusD+gY03NgEwadNmKFKeJ40oH6ntR9+/agpK6Zk9mC89u 2b/ehckjDGdQQObHuBGU06+6T+A5P/gRp4WBunwGzpt8HDwNmcoYhI0dl1bwKd1u JcGuDdh+FMS7ghFtK0CBSNKN16MbCBWTyz4/rKbHRWPICMaFQEPqaoD9wFPDTFLg 5VBQY3qB9LisKNcFgU/bqNCM+4KAVRKsmbe8/E+6NtMEFHrAQvOf -----END CERTIFICATE-----Generated at Mon Apr 27 11:21:11 2026 by rpki-client