$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46773a05-ae39-36bd-a950-0d64b5b7e334.roa File: 46773a05-ae39-36bd-a950-0d64b5b7e334.roa (raw, json) Hash identifier: npY4gcY9r8kUrhUNLIDebQWRkm1qLRLORtLEldBwhhc= Subject key identifier: C3:26:07:B5:F1:FC:31:17:C0:AE:70:25:69:A2:CE:E4:AB:87:8B:8A Certificate issuer: /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Certificate serial: 010D0C9F4328584D8EF55B7380104F5403842DB0 Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46773a05-ae39-36bd-a950-0d64b5b7e334.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 17017 IP address blocks: 23.247.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:5b:73:80:10:4f:54:03:84:2d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=f6767fc7-ce48-444c-bd7b-b8308e824380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:01:2d:b5:95:28:42:c9:e8:9c:f6:17:92:4a: 6b:bd:fa:5d:47:3e:d2:85:9c:fd:e6:88:a1:3f:57: 13:b0:3b:40:18:6f:79:77:8f:e0:b0:ac:88:6c:7e: f5:ea:3e:3e:f1:e7:cd:7f:0f:0f:ef:e4:95:e0:0d: 6a:d6:49:f8:2f:9f:97:b4:78:39:fb:57:55:10:92: 1e:63:f0:3d:c9:3d:0b:7b:fc:ab:26:ae:5b:10:33: 61:b6:6e:cb:e9:b3:3c:58:dd:5d:43:e3:bd:2c:8a: 32:e9:0d:86:2a:77:99:3c:bf:a9:47:d3:b8:70:d4: 22:17:ce:71:44:49:58:b7:a9:66:2a:21:f4:3b:3e: 55:6f:09:ba:b6:20:70:c4:0c:c0:51:c5:13:cf:9b: 02:89:52:06:04:1f:17:40:19:2a:85:4e:83:0c:c7: 49:61:38:e6:8f:bf:8f:8c:2c:5b:fe:45:22:98:26: 7c:bf:43:69:b9:a6:4a:f8:a7:de:37:11:4a:cb:f7: 77:ef:24:af:7c:a4:b8:11:ef:64:af:3b:4c:b8:33: 2b:b4:46:7c:9f:d4:f5:f5:f0:68:53:50:69:56:c6: 18:cd:29:f1:e3:fd:e1:1d:3f:07:f5:ea:01:ab:35: 3f:02:e9:41:aa:14:e6:8f:ad:d7:1f:58:da:bc:97: 0c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:26:07:B5:F1:FC:31:17:C0:AE:70:25:69:A2:CE:E4:AB:87:8B:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46773a05-ae39-36bd-a950-0d64b5b7e334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl X509v3 Authority Key Identifier: keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer sbgp-ipAddrBlock: critical IPv4: 23.247.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a0:0a:0e:41:b9:52:ac:1f:55:cf:ce:9b:bf:be:8d:ab:c7: e4:5e:d8:b2:df:04:50:d8:e7:18:ef:d9:b4:95:5d:8e:c4:15: 57:1d:59:77:e7:7a:f8:74:cd:8b:c0:17:e6:32:f4:0a:52:92: 74:98:5e:b6:2e:13:98:8f:e2:ba:3f:d3:91:cf:da:06:27:1c: d9:f6:26:64:4e:2e:1e:4e:39:62:3f:2b:f8:a1:b6:c2:ff:77: 35:e5:75:dd:4c:10:2f:22:e0:1c:ac:82:a4:c5:3b:7f:75:1c: 1f:02:d2:ee:05:39:b0:a6:68:61:64:48:23:eb:0a:6e:c8:75: a7:1d:ef:c6:42:d3:45:7c:94:e9:78:49:cf:25:a4:2b:36:b4: d6:83:60:6a:2d:c0:7b:f3:03:1b:e9:3b:7c:e6:53:e6:92:d6: e4:55:65:25:b7:db:b7:0d:50:74:1a:72:32:a3:69:57:cf:8e: 60:29:4f:18:eb:32:e4:44:1a:84:74:b8:67:db:92:30:24:77: d6:23:79:6f:82:71:2e:2b:ad:4e:e4:c5:e2:e4:37:d8:08:2e: 98:dc:e9:f9:0d:e5:b0:c0:b1:e4:57:d0:d7:00:2a:60:57:53: 9d:52:9c:fc:cb:f2:83:10:ce:8f:19:7b:37:96:a1:ef:38:dd: 4f:19:56:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9VtzgBBPVAOELbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0M2FkZmQtZjZlNC00NTA0LTg2ZjAtMmVmYWRmOWQ0 ZDIxMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZjY3NjdmYzctY2U0OC00NDRjLWJkN2ItYjgzMDhlODI0MzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gEttZUoQsnonPYXkkprvfpdRz7ShZz95oih P1cTsDtAGG95d4/gsKyIbH716j4+8efNfw8P7+SV4A1q1kn4L5+XtHg5+1dVEJIe Y/A9yT0Le/yrJq5bEDNhtm7L6bM8WN1dQ+O9LIoy6Q2GKneZPL+pR9O4cNQiF85x RElYt6lmKiH0Oz5Vbwm6tiBwxAzAUcUTz5sCiVIGBB8XQBkqhU6DDMdJYTjmj7+P jCxb/kUimCZ8v0NpuaZK+KfeNxFKy/d37ySvfKS4Ee9krztMuDMrtEZ8n9T19fBo U1BpVsYYzSnx4/3hHT8H9eoBqzU/AulBqhTmj63XH1javJcMUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMmB7Xx/DEXwK5wJWmizuSrh4uKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQz YWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZhZGY5ZDRkMjEvNDY3NzNhMDUtYWUzOS0z NmJkLWE5NTAtMGQ2NGI1YjdlMzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGQ0M2FkZmQtZjZlNC00NTA0LTg2 ZjAtMmVmYWRmOWQ0ZDIxLzRkNDNhZGZkLWY2ZTQtNDUwNC04NmYwLTJlZmFkZjlk NGQyMS5jcmwwHwYDVR0jBBgwFoAUHLPKVHX2AJyrqb/kFUAJQKHvOZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQzYWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZh ZGY5ZDRkMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/fsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGgCg5BuVKsH1XPzpu/vo2rx+Re2LLfBFDY5xjv2bSVXY7EFVcdWXfn evh0zYvAF+Yy9ApSknSYXrYuE5iP4ro/05HP2gYnHNn2JmROLh5OOWI/K/ihtsL/ dzXldd1MEC8i4BysgqTFO391HB8C0u4FObCmaGFkSCPrCm7Idacd78ZC00V8lOl4 Sc8lpCs2tNaDYGotwHvzAxvpO3zmU+aS1uRVZSW327cNUHQacjKjaVfPjmApTxjr MuREGoR0uGfbkjAkd9YjeW+CcS4rrU7kxeLkN9gILpjc6fkN5bDAseRX0NcAKmBX U51SnPzL8oMQzo8ZezeWoe843U8ZVqI= -----END CERTIFICATE-----Generated at Mon Apr 27 16:28:23 2026 by rpki-client