$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/05d47cfd-4713-309f-8102-5448fcbb06e0.roa File: 05d47cfd-4713-309f-8102-5448fcbb06e0.roa (raw, json) Hash identifier: GD2HUFHyg6zZUdQRzeo0DoGX769BN6DzqqWNlnM12fE= Subject key identifier: 4F:7B:13:FA:0E:48:63:22:0F:A7:20:BC:52:85:A2:A9:C3:5D:9C:65 Certificate issuer: /CN=1ce9c50c-e327-4243-8c1e-067bd3d4ebea Certificate serial: 010D0C9F4328584D55BCBBA7CEC1894D0274E580 Authority key identifier: 06:4A:64:E9:DF:94:C9:D6:40:7A:6E:12:55:D1:0C:5D:B1:35:A8:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/05d47cfd-4713-309f-8102-5448fcbb06e0.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 36678 IP address blocks: 23.148.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:bb:a7:ce:c1:89:4d:02:74:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ce9c50c-e327-4243-8c1e-067bd3d4ebea Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=ad66abc6-92d0-48bd-bf09-fb79a12fa736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bd:ad:d1:70:fd:87:4c:16:8c:3d:d6:c9:07: 13:f0:3a:6d:d4:7b:08:15:47:37:6a:7c:39:da:54: 21:28:33:2a:5b:8d:75:32:49:9d:8c:2f:42:f2:49: 0a:71:7b:a5:0c:5f:3f:39:11:2a:9a:ce:82:70:c4: 31:0a:42:7a:ce:ad:ab:49:39:8f:9b:d1:d2:1f:aa: 86:73:d2:03:f8:38:0b:c2:b9:21:84:8e:4f:f7:69: 48:90:1d:fc:0e:87:14:e9:9f:71:cd:82:7b:2f:47: 0e:51:79:ca:8c:53:d4:cd:02:56:ef:e5:0c:64:37: 75:f3:03:05:23:e1:76:0e:ee:f2:1d:15:2f:62:9f: 19:ba:9f:bf:29:57:2f:1c:d0:50:dc:ed:6d:74:28: ce:6b:20:b0:f1:4e:6b:e1:d2:12:21:a5:c7:14:d0: 13:6c:58:fa:bd:48:40:4f:53:38:e7:01:e2:2e:68: 6d:35:2a:83:ae:e2:31:03:6b:9e:fd:b6:a2:4f:b1: 2c:6e:2f:bb:72:c8:30:c7:4e:df:fb:e5:ea:a0:4c: ef:65:94:08:7f:66:80:42:ca:9a:cf:4f:f5:42:44: 13:32:a1:4a:08:34:0e:81:46:06:1a:ef:40:67:ad: 1d:cc:8f:6a:a4:cb:fa:36:f6:c2:36:36:8c:54:98: 15:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7B:13:FA:0E:48:63:22:0F:A7:20:BC:52:85:A2:A9:C3:5D:9C:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/05d47cfd-4713-309f-8102-5448fcbb06e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.crl X509v3 Authority Key Identifier: keyid:06:4A:64:E9:DF:94:C9:D6:40:7A:6E:12:55:D1:0C:5D:B1:35:A8:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer sbgp-ipAddrBlock: critical IPv4: 23.148.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:8c:25:5c:f3:d5:e1:a7:ff:7f:f3:9b:cf:d9:ce:ca:19:51: aa:be:38:37:e5:77:8e:63:c7:e5:69:67:84:bf:d2:3d:b9:f3: 87:24:f8:de:cb:8f:3e:78:b7:9a:62:98:7f:d3:f9:5f:27:5e: 85:46:8f:68:73:d4:87:3f:c4:4d:f2:d5:1d:2b:05:63:b0:7f: fd:1f:6a:97:36:d3:f6:08:e2:29:4f:3c:b3:5c:f5:98:db:69: 49:3e:c5:e2:aa:01:b1:79:cb:66:92:4e:8d:74:ec:8f:93:a4: 65:5d:9c:68:0f:a7:31:4f:c1:c8:1b:9e:50:04:7e:d7:51:51: e0:2c:1a:74:54:a4:cf:d9:2b:c7:58:f6:35:df:37:2b:c5:7b: 1a:63:47:35:96:55:c6:c4:4f:3e:d2:a2:88:7b:dc:78:73:4c: 76:80:c0:db:5f:a2:25:b3:46:35:6a:2c:56:fd:05:6e:2c:3d: d3:86:29:ab:fe:6d:a8:ea:18:23:32:54:e1:7b:6e:51:5f:aa: 5b:65:46:ce:50:d1:69:b6:67:82:a2:bd:4d:a5:3f:00:82:38: fb:9f:e0:db:5b:84:3f:70:2f:ba:73:6e:7f:69:a3:f6:b7:3f: 61:8d:7a:92:bd:14:67:17:a3:4c:a5:61:a9:22:d9:51:8b:15: 05:72:03:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLunzsGJTQJ05YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNlOWM1MGMtZTMyNy00MjQzLThjMWUtMDY3YmQzZDRl YmVhMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YWQ2NmFiYzYtOTJkMC00OGJkLWJmMDktZmI3OWExMmZhNzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL2t0XD9h0wWjD3WyQcT8Dpt1HsIFUc3anw5 2lQhKDMqW411MkmdjC9C8kkKcXulDF8/OREqms6CcMQxCkJ6zq2rSTmPm9HSH6qG c9ID+DgLwrkhhI5P92lIkB38DocU6Z9xzYJ7L0cOUXnKjFPUzQJW7+UMZDd18wMF I+F2Du7yHRUvYp8Zup+/KVcvHNBQ3O1tdCjOayCw8U5r4dISIaXHFNATbFj6vUhA T1M45wHiLmhtNSqDruIxA2ue/baiT7Esbi+7csgwx07f++XqoEzvZZQIf2aAQsqa z0/1QkQTMqFKCDQOgUYGGu9AZ60dzI9qpMv6NvbCNjaMVJgVkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE97E/oOSGMiD6cgvFKFoqnDXZxlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2U5 YzUwYy1lMzI3LTQyNDMtOGMxZS0wNjdiZDNkNGViZWEvMDVkNDdjZmQtNDcxMy0z MDlmLTgxMDItNTQ0OGZjYmIwNmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWNlOWM1MGMtZTMyNy00MjQzLThj MWUtMDY3YmQzZDRlYmVhLzFjZTljNTBjLWUzMjctNDI0My04YzFlLTA2N2JkM2Q0 ZWJlYS5jcmwwHwYDVR0jBBgwFoAUBkpk6d+UydZAem4SVdEMXbE1qCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2U5YzUwYy1lMzI3LTQyNDMtOGMxZS0wNjdi ZDNkNGViZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5TUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKMJVzz1eGn/3/zm8/ZzsoZUaq+ODfld45jx+VpZ4S/0j2584ck+N7L jz54t5pimH/T+V8nXoVGj2hz1Ic/xE3y1R0rBWOwf/0fapc20/YI4ilPPLNc9Zjb aUk+xeKqAbF5y2aSTo107I+TpGVdnGgPpzFPwcgbnlAEftdRUeAsGnRUpM/ZK8dY 9jXfNyvFexpjRzWWVcbETz7Sooh73HhzTHaAwNtfoiWzRjVqLFb9BW4sPdOGKav+ bajqGCMyVOF7blFfqltlRs5Q0Wm2Z4KivU2lPwCCOPuf4NtbhD9wL7pzbn9po/a3 P2GNepK9FGcXo0ylYaki2VGLFQVyA8w= -----END CERTIFICATE-----Generated at Mon Apr 13 11:58:28 2026 by rpki-client