$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e2175a98-8268-3e0e-89c4-e7ff0ad248d8.roa File: e2175a98-8268-3e0e-89c4-e7ff0ad248d8.roa (raw, json) Hash identifier: mOOWTqfOuOXwRafFav8Qf5IHrCwV7X/Kbm+dDV2Xnsk= Subject key identifier: EC:7E:C2:F4:16:DF:30:FC:BF:4A:1F:CF:C8:6B:44:7E:04:04:58:7F Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F4328584DA11AB5CEDEBC1946F66E3F00 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e2175a98-8268-3e0e-89c4-e7ff0ad248d8.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 3257 IP address blocks: 23.234.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:b5:ce:de:bc:19:46:f6:6e:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=845e0bb6-911e-4a57-b742-1f9bfae55219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4d:37:e8:f3:60:b4:e9:c7:7c:8d:0e:33:1a: 38:2c:63:77:48:1d:1d:57:0c:ee:45:ea:76:dc:59: bf:12:95:23:6d:b4:71:e7:73:fc:55:2f:12:e9:17: ef:9c:8c:66:fc:fd:19:0d:29:9a:0a:dd:54:6f:98: f2:20:fe:80:83:45:d0:a1:e1:71:36:46:23:22:c6: 90:96:f2:55:95:e0:97:9c:9d:d6:67:00:c2:b8:95: 97:0a:96:b5:40:30:45:af:01:aa:f8:13:8c:d5:f6: 4a:08:32:81:a2:20:b9:e0:80:c3:fa:1e:2d:3c:5c: 82:02:bd:d8:26:bd:1d:6b:8a:52:1e:52:c1:b4:09: 83:59:70:12:a0:91:ed:3b:07:3d:82:57:b3:fa:cf: e1:d8:63:c5:fb:2e:aa:8d:31:45:1e:b8:b8:a7:b8: 58:8e:7a:ba:a5:18:c5:20:78:f5:de:f1:cb:22:d8: 76:16:bb:20:e2:2a:87:7f:a4:e4:ee:98:a6:44:7a: 97:e3:bf:f1:a1:37:7d:10:09:c4:4c:18:02:90:12: 3a:e8:0c:85:11:8d:b4:07:c5:cf:be:01:ec:cd:f5: 06:52:e3:09:de:56:a6:b5:e6:13:fd:cf:84:2d:eb: d4:ff:e7:e1:01:e7:a2:5f:de:8e:b2:7c:ee:e6:1b: 30:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7E:C2:F4:16:DF:30:FC:BF:4A:1F:CF:C8:6B:44:7E:04:04:58:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e2175a98-8268-3e0e-89c4-e7ff0ad248d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.234.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:ba:74:58:61:8d:fa:f0:54:00:66:d8:5d:43:ee:b8:6e:22: af:94:f2:af:58:27:d0:a0:7c:5c:ec:7c:83:13:07:84:c3:c7: 70:4c:25:e8:49:85:8a:d2:d7:b7:a6:a2:cd:d5:ba:d3:2c:a1: 6f:97:41:24:ec:93:15:ed:2b:44:2f:d5:28:b5:ba:26:e4:7c: 12:fb:c1:40:a5:74:9a:fb:a2:60:1d:77:63:3a:18:cc:1a:f0: 9a:5b:c1:ad:36:85:93:74:bb:a2:fe:27:8d:30:c4:9e:35:50: 0e:9c:af:80:9e:eb:1a:5b:ed:9c:2f:87:d0:a6:4a:f7:40:aa: 12:ae:05:81:a8:31:92:3d:92:60:0a:56:73:29:e1:73:6f:c7: 80:0e:3a:d8:7a:a7:b9:6c:30:4d:73:1c:5d:57:75:a1:a5:de: 72:42:8c:01:31:ce:08:f7:2a:b8:4d:61:f9:51:32:34:1b:f1: 57:3a:d0:b6:df:9f:e8:16:c6:a0:4b:42:31:36:16:54:03:fa: 85:ad:75:2f:20:40:f9:e6:3a:a9:44:fb:95:4e:46:c8:30:d6: 32:d1:a4:f6:57:47:f2:a3:4b:6c:18:70:56:dd:15:4c:26:af: 50:99:da:29:a8:f3:35:b9:d0:32:92:19:d2:8a:93:c4:68:09: 39:f3:1a:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGrXO3rwZRvZuPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk ODQ1ZTBiYjYtOTExZS00YTU3LWI3NDItMWY5YmZhZTU1MjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20036PNgtOnHfI0OMxo4LGN3SB0dVwzuRep2 3Fm/EpUjbbRx53P8VS8S6RfvnIxm/P0ZDSmaCt1Ub5jyIP6Ag0XQoeFxNkYjIsaQ lvJVleCXnJ3WZwDCuJWXCpa1QDBFrwGq+BOM1fZKCDKBoiC54IDD+h4tPFyCAr3Y Jr0da4pSHlLBtAmDWXASoJHtOwc9glez+s/h2GPF+y6qjTFFHri4p7hYjnq6pRjF IHj13vHLIth2Frsg4iqHf6Tk7pimRHqX47/xoTd9EAnETBgCkBI66AyFEY20B8XP vgHszfUGUuMJ3lamteYT/c+ELevU/+fhAeeiX96Osnzu5hswNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOx+wvQW3zD8v0ofz8hrRH4EBFh/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvZTIxNzVhOTgtODI2OC0z ZTBlLTg5YzQtZTdmZjBhZDI0OGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+qAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+6dFhhjfrwVABm2F1D7rhuIq+U8q9YJ9CgfFzsfIMTB4TDx3BMJehJ hYrS17emos3VutMsoW+XQSTskxXtK0Qv1Si1uibkfBL7wUCldJr7omAdd2M6GMwa 8Jpbwa02hZN0u6L+J40wxJ41UA6cr4Ce6xpb7Zwvh9CmSvdAqhKuBYGoMZI9kmAK VnMp4XNvx4AOOth6p7lsME1zHF1XdaGl3nJCjAExzgj3KrhNYflRMjQb8Vc60Lbf n+gWxqBLQjE2FlQD+oWtdS8gQPnmOqlE+5VORsgw1jLRpPZXR/KjS2wYcFbdFUwm r1CZ2imo8zW50DKSGdKKk8RoCTnzGgQ= -----END CERTIFICATE-----Generated at Tue Apr 28 00:31:57 2026 by rpki-client