$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/67cd331c-0eea-3d40-96d5-7acc007b8867.roa File: 67cd331c-0eea-3d40-96d5-7acc007b8867.roa (raw, json) Hash identifier: DAe1Qp4wg8vqmfHTzyiH+sZX5oY43RsbnmxUba8S5Jo= Subject key identifier: 1E:79:2A:42:0B:6E:EE:E2:6C:68:7C:0E:6A:63:E5:83:6B:DE:B5:E8 Certificate issuer: /CN=822f9974-af88-4d0b-a65f-065fdd26c645 Certificate serial: 010D0C9F4328584D8EF57F9E1702A66C17CB5580 Authority key identifier: 3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/67cd331c-0eea-3d40-96d5-7acc007b8867.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 58061 IP address blocks: 23.247.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:7f:9e:17:02:a6:6c:17:cb:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822f9974-af88-4d0b-a65f-065fdd26c645 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=ee1cb83f-b8a7-429d-a928-c2010ddb5d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:5d:d7:9b:6d:ee:05:6d:f2:2e:d6:a2:9a: 6b:19:0d:74:0b:b1:76:c9:c6:a7:e0:82:17:18:44: 4c:12:4c:67:1b:0c:0d:57:cb:70:5b:5e:46:70:f7: a6:29:9b:9e:32:f0:2e:b3:22:72:bf:32:fc:e5:24: a6:b3:63:db:47:1c:66:02:01:36:7c:87:f2:90:0b: 66:8e:5f:4b:28:fd:1f:3a:fc:f3:58:83:ab:3b:39: 7b:c9:5b:29:15:31:73:a8:22:33:f0:73:bc:8b:81: 1a:e1:cd:9c:b2:5c:c0:66:55:d1:77:9e:56:99:5c: 3a:dd:f5:9a:cf:03:9c:27:f2:67:69:9e:f2:76:31: c9:7e:10:d7:de:82:36:2f:be:09:d5:93:60:9b:e6: 4e:cf:f8:d5:f3:e9:4f:9d:58:6a:c0:65:8c:2b:db: b4:17:ad:a7:21:b5:d3:a4:43:1d:90:5d:be:e7:01: 0d:79:bd:fc:1d:b7:a4:99:7a:f7:ad:44:d9:b5:bc: 15:79:33:29:0b:19:ed:e2:38:e1:9a:ac:09:ed:d1: 99:2d:69:4c:9d:f1:ed:48:4c:8a:1b:77:87:ea:1e: cd:b4:c9:22:52:fd:d4:af:14:fa:72:dc:57:01:bf: 64:16:16:c5:55:5c:cf:41:e9:04:b2:a2:5d:17:a5: 56:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:79:2A:42:0B:6E:EE:E2:6C:68:7C:0E:6A:63:E5:83:6B:DE:B5:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/67cd331c-0eea-3d40-96d5-7acc007b8867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.crl X509v3 Authority Key Identifier: keyid:3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer sbgp-ipAddrBlock: critical IPv4: 23.247.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c9:ab:9c:78:84:a5:20:57:92:f4:c2:0d:98:bc:e1:74:f0: 11:d3:76:06:67:21:2a:41:67:8d:51:d8:8e:75:11:60:55:42: 50:e4:00:10:55:1c:69:64:96:22:07:d9:c1:06:7b:94:30:58: 87:57:1e:26:a6:02:5f:11:9f:ac:94:76:7f:ed:99:e4:24:74: a3:20:fd:26:ef:cf:48:6f:27:ba:87:ce:95:d2:0a:be:2e:58: 75:f1:5f:90:41:da:9e:76:c4:e7:33:6b:9c:70:32:cd:96:ff: 12:6f:66:da:10:de:be:1f:6c:2e:a8:d3:70:5a:ab:b0:55:a4: 42:15:8b:8d:48:e1:1e:e9:13:a0:b7:b7:a6:5c:d9:af:2f:a2: 80:d5:98:1f:b6:04:c2:0e:31:45:ae:31:90:98:d5:4c:79:13: e7:2e:8f:e0:f7:26:fe:d9:65:98:e7:e6:5b:90:72:68:7f:25: 3c:ce:f0:7a:4f:4b:8c:6f:88:d6:4a:ca:d3:ae:86:40:9f:f3: 75:c5:28:8b:03:e0:28:50:28:e6:c3:dd:e5:20:0f:ea:dc:ef: 8f:89:ac:4b:d3:70:56:99:8a:dd:58:ba:68:43:c1:f8:30:8e: 84:20:16:1b:d8:35:bd:3f:71:e4:3e:63:c8:ba:76:ac:57:d2: d4:ab:4f:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9X+eFwKmbBfLVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIyZjk5NzQtYWY4OC00ZDBiLWE2NWYtMDY1ZmRkMjZj NjQ1MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZWUxY2I4M2YtYjhhNy00MjlkLWE5MjgtYzIwMTBkZGI1ZDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlld15tt7gVt8i7WopprGQ10C7F2ycan4IIX GERMEkxnGwwNV8twW15GcPemKZueMvAusyJyvzL85SSms2PbRxxmAgE2fIfykAtm jl9LKP0fOvzzWIOrOzl7yVspFTFzqCIz8HO8i4Ea4c2cslzAZlXRd55WmVw63fWa zwOcJ/JnaZ7ydjHJfhDX3oI2L74J1ZNgm+ZOz/jV8+lPnVhqwGWMK9u0F62nIbXT pEMdkF2+5wENeb38HbekmXr3rUTZtbwVeTMpCxnt4jjhmqwJ7dGZLWlMnfHtSEyK G3eH6h7NtMkiUv3UrxT6ctxXAb9kFhbFVVzPQekEsqJdF6VWdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB55KkILbu7ibGh8Dmpj5YNr3rXoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjJm OTk3NC1hZjg4LTRkMGItYTY1Zi0wNjVmZGQyNmM2NDUvNjdjZDMzMWMtMGVlYS0z ZDQwLTk2ZDUtN2FjYzAwN2I4ODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIyZjk5NzQtYWY4OC00ZDBiLWE2 NWYtMDY1ZmRkMjZjNjQ1LzgyMmY5OTc0LWFmODgtNGQwYi1hNjVmLTA2NWZkZDI2 YzY0NS5jcmwwHwYDVR0jBBgwFoAUPP2qApAF0XOlEjvmLCugyVHJJjUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjJmOTk3NC1hZjg4LTRkMGItYTY1Zi0wNjVm ZGQyNmM2NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/f0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/Jq5x4hKUgV5L0wg2YvOF08BHTdgZnISpBZ41R2I51EWBVQlDkABBV HGlkliIH2cEGe5QwWIdXHiamAl8Rn6yUdn/tmeQkdKMg/Sbvz0hvJ7qHzpXSCr4u WHXxX5BB2p52xOcza5xwMs2W/xJvZtoQ3r4fbC6o03Baq7BVpEIVi41I4R7pE6C3 t6Zc2a8vooDVmB+2BMIOMUWuMZCY1Ux5E+cuj+D3Jv7ZZZjn5luQcmh/JTzO8HpP S4xviNZKytOuhkCf83XFKIsD4ChQKObD3eUgD+rc74+JrEvTcFaZit1YumhDwfgw joQgFhvYNb0/ceQ+Y8i6dqxX0tSrTyk= -----END CERTIFICATE-----Generated at Thu Apr 23 03:29:21 2026 by rpki-client