$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/559b8483-a864-360b-8d3a-85cc23015183.roa File: 559b8483-a864-360b-8d3a-85cc23015183.roa (raw, json) Hash identifier: Ge6f6K7AXPUQjs6/+2F5dBCZ9pqafkv5wt18d7VbdxI= Subject key identifier: CD:91:6D:4A:13:AF:6C:F3:12:CE:D3:BB:F5:E0:D7:B5:A2:E2:03:3D Certificate issuer: /CN=d549bcbf-712f-4ddd-b680-cd2230986019 Certificate serial: 010D0C9F4328584D7A05178CAD3C8095A6D05540 Authority key identifier: 92:F2:79:24:17:5C:3D:40:9D:CA:0F:7E:A7:97:AD:46:13:6E:73:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/559b8483-a864-360b-8d3a-85cc23015183.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 399870 IP address blocks: 23.141.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/d549bcbf-712f-4ddd-b680-cd2230986019.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/d549bcbf-712f-4ddd-b680-cd2230986019.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:17:8c:ad:3c:80:95:a6:d0:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d549bcbf-712f-4ddd-b680-cd2230986019 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=852c26f7-90a9-47d9-98bc-89f2871463eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a2:90:bc:c8:a4:e6:aa:a7:87:23:31:47:54: 9d:38:ff:bb:b2:23:8c:c3:1a:0c:ca:5b:49:88:54: f8:2d:20:bf:6e:8f:4c:2e:cd:d4:84:56:a4:eb:0e: e0:c2:45:ff:de:64:54:17:06:97:1f:08:a5:c6:f1: 37:86:5d:cf:69:f9:d8:96:37:e3:56:6c:22:43:23: 4f:a5:e3:09:58:76:03:76:ce:54:33:58:17:bb:72: 96:39:25:d3:93:b0:01:c2:fb:a8:c3:22:1e:a3:43: 17:9e:2f:7e:cc:ff:33:5a:8a:a7:19:e1:ef:1a:10: 23:c7:a3:ed:b4:71:a5:43:05:30:9d:61:39:1d:45: 7e:e9:7b:a0:be:25:d0:38:27:91:7f:bf:88:4e:a8: 9e:64:10:f8:77:74:95:a2:1b:fb:04:2d:2f:44:00: ec:27:1c:8e:f9:7a:8b:d2:d9:a3:6a:22:3c:ab:14: ce:12:c9:cf:52:eb:c6:b6:0f:ed:e1:27:57:e9:1c: 2d:f9:bc:24:99:cd:8b:cd:4d:be:01:57:7f:0b:04: 91:c3:05:36:5a:fd:0f:13:5e:91:d7:dc:a9:67:44: a3:70:ee:3e:9c:e2:1f:6a:29:86:6a:27:67:09:d5: f7:33:b0:75:45:20:e1:1f:e1:9f:74:81:47:a7:65: ac:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:91:6D:4A:13:AF:6C:F3:12:CE:D3:BB:F5:E0:D7:B5:A2:E2:03:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/559b8483-a864-360b-8d3a-85cc23015183.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/d549bcbf-712f-4ddd-b680-cd2230986019.crl X509v3 Authority Key Identifier: keyid:92:F2:79:24:17:5C:3D:40:9D:CA:0F:7E:A7:97:AD:46:13:6E:73:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019.cer sbgp-ipAddrBlock: critical IPv4: 23.141.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c8:44:b7:85:57:a9:fe:46:a8:e4:81:79:84:1d:af:57:57: 87:8f:3c:45:9f:58:7c:dd:e9:3b:a9:5a:26:6c:54:33:b8:98: ad:d5:dc:3d:f1:48:b4:5d:d7:66:1e:2e:ad:c8:26:ad:90:9b: 7e:0d:44:09:db:c8:e1:0d:c4:55:5c:40:81:1d:0d:6b:5c:43: 4d:8e:2d:52:41:13:4e:ad:69:76:93:94:96:ac:0a:63:e6:a5: e0:78:50:84:a2:58:54:f5:9b:6b:b0:42:0a:ac:8f:b3:5e:33: ae:d9:29:23:4a:af:45:8a:1b:9d:61:15:56:d5:c2:cb:69:52: 3b:f9:f5:ab:12:1f:65:f3:6f:2c:5f:d8:43:54:45:13:8f:57: 94:74:84:a9:57:d7:16:c8:a0:46:65:53:d5:78:a9:08:c3:3e: ac:ca:11:6c:5d:2a:1c:f0:5e:7f:78:f0:7f:15:27:52:d6:b4: b5:f8:1d:e8:70:0d:c4:63:9f:56:a1:5b:1c:26:52:80:0d:b3: e1:e0:4e:ac:e3:b9:79:d1:10:f9:3a:16:99:8e:23:1d:f7:f5: 38:b0:28:d8:a0:f0:8f:a4:ca:f9:ba:83:1f:73:53:24:69:82: 49:67:fe:8d:6a:96:50:d3:e4:e6:00:39:05:ea:d7:a9:0a:7f: d9:9b:e2:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BReMrTyAlabQVUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU0OWJjYmYtNzEyZi00ZGRkLWI2ODAtY2QyMjMwOTg2 MDE5MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk ODUyYzI2ZjctOTBhOS00N2Q5LTk4YmMtODlmMjg3MTQ2M2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqKQvMik5qqnhyMxR1SdOP+7siOMwxoMyltJ iFT4LSC/bo9MLs3UhFak6w7gwkX/3mRUFwaXHwilxvE3hl3PafnYljfjVmwiQyNP peMJWHYDds5UM1gXu3KWOSXTk7ABwvuowyIeo0MXni9+zP8zWoqnGeHvGhAjx6Pt tHGlQwUwnWE5HUV+6XugviXQOCeRf7+ITqieZBD4d3SVohv7BC0vRADsJxyO+XqL 0tmjaiI8qxTOEsnPUuvGtg/t4SdX6Rwt+bwkmc2LzU2+AVd/CwSRwwU2Wv0PE16R 19ypZ0SjcO4+nOIfaimGaidnCdX3M7B1RSDhH+GfdIFHp2WstwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2RbUoTr2zzEs7Tu/Xg17Wi4gM9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNTQ5 YmNiZi03MTJmLTRkZGQtYjY4MC1jZDIyMzA5ODYwMTkvNTU5Yjg0ODMtYTg2NC0z NjBiLThkM2EtODVjYzIzMDE1MTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDU0OWJjYmYtNzEyZi00ZGRkLWI2 ODAtY2QyMjMwOTg2MDE5L2Q1NDliY2JmLTcxMmYtNGRkZC1iNjgwLWNkMjIzMDk4 NjAxOS5jcmwwHwYDVR0jBBgwFoAUkvJ5JBdcPUCdyg9+p5etRhNuc0owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNTQ5YmNiZi03MTJmLTRkZGQtYjY4MC1jZDIy MzA5ODYwMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF40EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXIRLeFV6n+RqjkgXmEHa9XV4ePPEWfWHzd6TupWiZsVDO4mK3V3D3x SLRd12YeLq3IJq2Qm34NRAnbyOENxFVcQIEdDWtcQ02OLVJBE06taXaTlJasCmPm peB4UISiWFT1m2uwQgqsj7NeM67ZKSNKr0WKG51hFVbVwstpUjv59asSH2Xzbyxf 2ENURROPV5R0hKlX1xbIoEZlU9V4qQjDPqzKEWxdKhzwXn948H8VJ1LWtLX4Hehw DcRjn1ahWxwmUoANs+HgTqzjuXnREPk6FpmOIx339TiwKNig8I+kyvm6gx9zUyRp gkln/o1qllDT5OYAOQXq16kKf9mb4n0= -----END CERTIFICATE-----Generated at Mon Apr 13 19:36:39 2026 by rpki-client