$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/a4fced69-675a-3abb-8afe-bf1ecb044604.roa File: a4fced69-675a-3abb-8afe-bf1ecb044604.roa (raw, json) Hash identifier: bO0UOh6Gn4bgAZ2ZPKHJ5HMTE/RLJp9jEiaQ5FfW1q8= Subject key identifier: F4:D4:16:CE:2E:BB:67:46:38:7C:9B:1B:FA:D8:F8:42:59:0A:24:42 Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F4328584DA11AB1C2EACC73B041D8BF80 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/a4fced69-675a-3abb-8afe-bf1ecb044604.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 3257 IP address blocks: 23.234.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:b1:c2:ea:cc:73:b0:41:d8:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=8745ca5c-51ec-4aea-8c40-c7f7056ea4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:04:ff:d4:01:2a:68:d1:b4:b2:4d:47:ca:7b: 73:d7:5e:53:a6:c4:d0:28:29:61:36:47:50:f5:97: 82:61:6a:9f:ed:48:45:90:fc:ed:ae:83:bd:95:8e: 11:8c:9d:f2:96:25:fc:cb:ba:28:99:d5:f9:56:e7: 1e:91:ea:3a:8c:88:13:83:c1:79:6b:d8:9a:86:b5: 2f:4a:c2:c9:7b:de:7b:b7:ed:0b:20:cf:3e:33:2c: 08:a1:e2:2c:4d:0c:74:2c:42:bc:d2:70:98:2c:d9: 0c:ab:0d:f5:a7:fc:20:42:7d:6c:83:c3:df:d7:7e: 74:e5:16:85:7e:ed:fa:95:9e:a9:47:a7:22:f4:7c: b0:d1:11:07:04:f2:57:09:56:9a:b2:3b:a4:2f:d9: 5f:7b:72:45:12:4a:c4:ec:11:84:83:51:b5:9f:35: f3:d4:70:5e:ce:51:20:fa:89:51:04:21:18:80:a4: dc:ca:12:54:8c:f7:89:76:f1:58:a3:01:2f:8b:07: 36:37:82:0b:f6:3a:9c:0e:92:1a:88:96:ef:96:15: 24:68:66:a0:db:aa:e8:49:be:82:eb:0e:85:81:65: b3:b2:d6:6f:e7:0a:21:16:a6:27:9c:41:a1:20:35: 10:40:4e:d4:3e:39:8a:52:80:fe:97:0f:1d:25:6c: 6f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D4:16:CE:2E:BB:67:46:38:7C:9B:1B:FA:D8:F8:42:59:0A:24:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/a4fced69-675a-3abb-8afe-bf1ecb044604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.234.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:dc:4f:89:1d:78:04:3a:55:1f:c4:1f:14:06:f6:6e:63:a8: 55:d0:0b:6c:3b:52:05:27:1f:31:1f:8b:30:85:d5:98:83:1b: 35:c8:a7:35:14:93:35:38:93:be:96:0e:30:ca:1b:71:df:f7: de:c9:2a:a5:b9:0a:b6:63:81:26:97:e4:4d:d9:1a:ec:21:5c: 37:1a:d6:d3:66:71:dd:98:30:62:29:95:48:16:85:84:3a:02: 6b:60:55:06:1f:e9:cf:16:11:38:2f:53:92:18:a2:15:40:ee: 99:5c:35:5b:f4:d6:ea:c8:9a:a4:42:02:f2:38:50:a5:a8:17: ba:5e:ed:c6:f1:84:6c:ee:95:70:23:ad:e1:67:0d:0a:4a:5d: bb:8c:07:94:71:96:d4:7f:38:01:2e:f3:9d:b1:8e:da:ae:ad: f4:f5:21:18:db:7a:30:a9:f9:50:83:34:7c:e7:b8:70:20:fe: ec:6c:51:88:b7:92:53:fb:2f:fe:b1:aa:28:bd:48:a9:67:c9: 97:fb:c3:9b:99:5b:9a:a1:0a:30:fd:ba:e7:4d:28:6d:fc:40: c2:ec:80:8e:d6:eb:c7:44:1d:6a:55:ed:b3:04:ca:89:39:77: 17:df:17:c9:58:8d:18:14:d5:c0:c4:74:5d:51:08:b1:f5:67: 9c:58:b8:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGrHC6sxzsEHYv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk ODc0NWNhNWMtNTFlYy00YWVhLThjNDAtYzdmNzA1NmVhNGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQT/1AEqaNG0sk1Hyntz115TpsTQKClhNkdQ 9ZeCYWqf7UhFkPztroO9lY4RjJ3yliX8y7oomdX5Vucekeo6jIgTg8F5a9iahrUv SsLJe957t+0LIM8+MywIoeIsTQx0LEK80nCYLNkMqw31p/wgQn1sg8Pf13505RaF fu36lZ6pR6ci9Hyw0REHBPJXCVaasjukL9lfe3JFEkrE7BGEg1G1nzXz1HBezlEg +olRBCEYgKTcyhJUjPeJdvFYowEviwc2N4IL9jqcDpIaiJbvlhUkaGag26roSb6C 6w6FgWWzstZv5wohFqYnnEGhIDUQQE7UPjmKUoD+lw8dJWxvCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTUFs4uu2dGOHybG/rY+EJZCiRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvYTRmY2VkNjktNjc1YS0z YWJiLThhZmUtYmYxZWNiMDQ0NjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+qIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjcT4kdeAQ6VR/EHxQG9m5jqFXQC2w7UgUnHzEfizCF1ZiDGzXIpzUU kzU4k76WDjDKG3Hf997JKqW5CrZjgSaX5E3ZGuwhXDca1tNmcd2YMGIplUgWhYQ6 AmtgVQYf6c8WETgvU5IYohVA7plcNVv01urImqRCAvI4UKWoF7pe7cbxhGzulXAj reFnDQpKXbuMB5RxltR/OAEu852xjtqurfT1IRjbejCp+VCDNHznuHAg/uxsUYi3 klP7L/6xqii9SKlnyZf7w5uZW5qhCjD9uudNKG38QMLsgI7W68dEHWpV7bMEyok5 dxffF8lYjRgU1cDEdF1RCLH1Z5xYuF0= -----END CERTIFICATE-----Generated at Tue Apr 28 00:31:54 2026 by rpki-client