$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/120a0553-11b7-3628-859b-c4708b5e1664.roa File: 120a0553-11b7-3628-859b-c4708b5e1664.roa (raw, json) Hash identifier: nwvDB0doJklx3h/2EFFo8y6/tFGn2gBIl6RxmGFxzM4= Subject key identifier: D7:14:44:94:28:22:6B:25:CA:C1:AE:D3:CA:55:39:0B:29:AF:20:88 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D8100A8D0D0702012825B9D40 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/120a0553-11b7-3628-859b-c4708b5e1664.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 19157 IP address blocks: 23.85.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:00:a8:d0:d0:70:20:12:82:5b:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=d3d3e261-e016-4d17-a435-e7023fbf88a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e8:fb:2e:47:c1:5e:a7:9d:94:ef:3c:76:fc: ae:5f:0f:8c:27:ed:f3:d4:07:b6:48:0e:25:5e:fd: 45:05:f3:c8:da:1e:8b:69:12:7e:a0:59:39:fb:a1: 27:20:f8:c3:98:5c:57:19:0d:10:cc:ef:9f:87:d8: ab:7d:61:b5:66:94:6c:f8:9b:17:42:d4:49:db:43: 1e:3d:cd:60:74:2a:b8:2b:b7:94:98:5a:f2:b6:cf: 9d:15:7a:b8:b7:a5:32:58:82:cd:30:55:dd:5d:d8: e3:62:70:2e:d9:97:cc:bd:bd:58:8b:cc:ea:62:b5: 7c:17:47:db:e8:75:57:d8:c2:41:74:25:ad:d6:10: 08:39:db:f4:09:e1:f6:ab:c7:68:57:7e:86:9e:9f: 69:e8:4e:ec:9f:30:80:a0:54:a5:f0:32:61:b8:e1: de:ad:36:10:31:77:ba:f3:d1:1b:23:28:ce:6e:2a: a1:a5:17:3a:09:2b:d3:b3:de:72:08:f7:51:95:59: c4:dd:7f:38:47:98:09:a5:b2:3f:cc:85:eb:15:de: a2:52:e8:15:45:52:f7:30:36:cf:25:8a:21:56:91: 37:7b:2d:2e:bf:38:70:69:8d:f3:19:b9:d9:84:ec: 72:20:55:c3:63:ff:ef:54:3f:8b:aa:80:b8:80:f3: d7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:14:44:94:28:22:6B:25:CA:C1:AE:D3:CA:55:39:0B:29:AF:20:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/120a0553-11b7-3628-859b-c4708b5e1664.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 23.85.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:a5:dd:da:83:db:f4:14:4b:a1:f0:e6:d2:f9:0b:27:8f:2a: 26:20:e3:3f:65:f6:a6:9e:58:f8:72:f3:61:e1:c9:81:ed:57: 72:f5:45:12:d8:94:d9:ba:61:64:6e:78:78:d8:cc:bd:44:79: bf:22:b3:1c:f0:60:c8:00:27:25:f3:61:63:d8:be:96:54:80: 15:ce:ba:9a:6a:31:0b:ff:d2:e8:7e:3a:72:a1:50:96:4c:16: ce:d2:d0:7f:5d:08:03:0e:4b:f3:f1:88:5d:4b:28:62:de:31: 4c:eb:78:45:79:92:9b:9d:1b:c6:4d:14:05:0c:47:9d:d7:18: 85:af:56:eb:22:b2:54:1a:9c:5d:c0:cf:ba:2d:bb:6f:00:0e: 9c:1a:f1:23:81:bb:f3:ab:0d:c2:c7:5d:d9:f1:09:65:61:04: ae:fe:84:7a:2f:d5:54:47:4f:83:f7:44:7c:61:8f:70:bf:1d: a9:4d:80:2d:a5:b8:a7:0c:12:88:c1:18:00:2a:c1:9f:f9:9a: d4:68:d1:ed:c7:50:2e:f4:ed:3f:24:28:51:db:31:83:6a:26: 92:1a:5e:5e:e1:24:5f:66:55:c6:d3:47:69:43:00:d8:60:b9: 71:cb:51:73:0c:3d:ac:0e:00:d7:cc:2d:12:1e:4f:ee:9d:6d: 38:ac:9b:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BAKjQ0HAgEoJbnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk ZDNkM2UyNjEtZTAxNi00ZDE3LWE0MzUtZTcwMjNmYmY4OGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuj7LkfBXqedlO88dvyuXw+MJ+3z1Ae2SA4l Xv1FBfPI2h6LaRJ+oFk5+6EnIPjDmFxXGQ0QzO+fh9irfWG1ZpRs+JsXQtRJ20Me Pc1gdCq4K7eUmFryts+dFXq4t6UyWILNMFXdXdjjYnAu2ZfMvb1Yi8zqYrV8F0fb 6HVX2MJBdCWt1hAIOdv0CeH2q8doV36Gnp9p6E7snzCAoFSl8DJhuOHerTYQMXe6 89EbIyjObiqhpRc6CSvTs95yCPdRlVnE3X84R5gJpbI/zIXrFd6iUugVRVL3MDbP JYohVpE3ey0uvzhwaY3zGbnZhOxyIFXDY//vVD+LqoC4gPPXPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcURJQoImslysGu08pVOQspryCIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMTIwYTA1NTMtMTFiNy0z NjI4LTg1OWItYzQ3MDhiNWUxNjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1WgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGql3dqD2/QUS6Hw5tL5CyePKiYg4z9l9qaeWPhy82HhyYHtV3L1RRLY lNm6YWRueHjYzL1Eeb8isxzwYMgAJyXzYWPYvpZUgBXOuppqMQv/0uh+OnKhUJZM Fs7S0H9dCAMOS/PxiF1LKGLeMUzreEV5kpudG8ZNFAUMR53XGIWvVusislQanF3A z7otu28ADpwa8SOBu/OrDcLHXdnxCWVhBK7+hHov1VRHT4P3RHxhj3C/HalNgC2l uKcMEojBGAAqwZ/5mtRo0e3HUC707T8kKFHbMYNqJpIaXl7hJF9mVcbTR2lDANhg uXHLUXMMPawOANfMLRIeT+6dbTism6g= -----END CERTIFICATE-----Generated at Tue Apr 21 14:22:55 2026 by rpki-client