$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/11a90d2f-7576-3fc4-8afd-e02ba8dda10b.roa File: 11a90d2f-7576-3fc4-8afd-e02ba8dda10b.roa (raw, json) Hash identifier: uZJNGereiOA5dRd1IxTFHoHHKA/Xk5Xqzq0RPl7cs5g= Subject key identifier: BF:49:12:4D:82:B8:94:A9:FE:9A:FE:45:93:4C:04:D5:B7:62:FF:B7 Certificate issuer: /CN=1ce9c50c-e327-4243-8c1e-067bd3d4ebea Certificate serial: 010D0C9F4328584D4BF4EF0E5DA5D490007EED80 Authority key identifier: 06:4A:64:E9:DF:94:C9:D6:40:7A:6E:12:55:D1:0C:5D:B1:35:A8:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/11a90d2f-7576-3fc4-8afd-e02ba8dda10b.roa Signing time: Thu 26 Mar 2026 13:00:41 +0000 ROA not before: Thu 26 Mar 2026 13:00:41 +0000 ROA not after: Wed 24 Jun 2026 13:00:41 +0000 asID: 62468 IP address blocks: 23.148.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:f4:ef:0e:5d:a5:d4:90:00:7e:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ce9c50c-e327-4243-8c1e-067bd3d4ebea Validity Not Before: Mar 26 13:00:41 2026 GMT Not After : Jun 24 13:00:41 2026 GMT Subject: CN=595d30b5-5581-40a8-a9c9-a5da004932a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f6:62:ff:7a:3b:78:77:7f:d0:01:74:54:73: 6b:88:f7:92:bb:15:34:e7:f3:a9:b7:bd:a6:1e:f3: 9f:9e:22:69:dd:88:7a:5d:ae:0d:92:fb:73:90:ff: 47:3c:39:33:7b:de:8a:7b:d3:ef:25:fe:49:98:c9: 96:11:56:81:b6:3d:da:34:7a:f7:a9:bb:04:b8:be: 6b:80:66:da:e0:1e:6a:4e:ae:8c:11:c1:e7:7c:85: d1:05:4a:04:cb:10:44:7f:ab:9f:26:4a:b7:06:5c: 8c:ad:68:59:9a:0d:80:f6:fb:ca:df:6e:a0:9d:29: 3e:94:99:00:c7:58:ab:67:b2:d8:39:93:a3:30:81: 4f:20:ad:43:7e:be:9c:e0:57:a7:d6:05:f0:79:81: f7:94:37:b7:03:e2:47:f5:35:75:c4:02:06:a6:0d: d9:75:41:28:bb:b3:0f:45:88:46:22:ab:00:39:b6: 16:32:d1:6f:1d:73:43:65:c3:59:ae:8e:ac:79:73: b4:3f:81:37:b2:1b:7d:37:bf:f3:a5:70:2a:8d:66: 72:77:40:1e:93:e2:ef:4b:9b:2f:b2:b7:f7:db:e4: 7c:4a:c0:bb:cf:fa:40:8d:18:6c:c0:27:d4:24:43: 8c:84:cf:f9:43:77:6a:bd:56:12:90:95:31:89:8b: d8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:49:12:4D:82:B8:94:A9:FE:9A:FE:45:93:4C:04:D5:B7:62:FF:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/11a90d2f-7576-3fc4-8afd-e02ba8dda10b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.crl X509v3 Authority Key Identifier: keyid:06:4A:64:E9:DF:94:C9:D6:40:7A:6E:12:55:D1:0C:5D:B1:35:A8:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer sbgp-ipAddrBlock: critical IPv4: 23.148.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:21:e9:d6:40:70:f6:96:00:14:0d:0c:f6:1e:92:e2:aa:f7: 4a:08:04:d9:09:d5:a1:60:d9:17:0b:84:60:0f:66:84:62:88: 03:c1:a6:6e:92:ac:0e:e0:96:61:19:dd:5d:e1:4e:08:83:e4: 8e:7b:1e:da:e8:ed:59:df:1e:91:28:63:e2:b9:ad:c6:ce:c9: 40:fe:95:d6:e3:29:08:d3:9b:10:34:69:4b:4b:bc:36:f3:41: 5f:8d:3a:05:7e:ba:8c:ef:a2:25:4b:e4:04:a6:6c:48:3d:54: 4a:c4:ec:9e:14:b5:21:ba:31:81:71:4f:70:18:4d:dc:f8:d5: b2:f4:d6:58:54:a0:62:8c:43:d8:92:a4:e3:5c:81:11:d8:8c: 75:ce:c7:f4:f4:18:b5:5f:e5:cb:f4:af:54:f5:59:b2:0b:ef: f1:a7:15:c6:47:02:c4:16:b8:aa:36:76:a3:55:17:32:8a:a0: 0f:88:7c:a0:07:73:ad:e3:6b:97:16:80:9a:15:ee:01:e6:a2: bc:cc:d9:c2:d1:8d:e3:5d:93:22:41:4a:11:c3:d5:83:41:3c: 11:1b:b6:0e:d7:68:21:81:5b:7f:f6:3f:9a:0a:29:6e:5e:71: 14:c5:a7:d0:4b:25:6a:16:55:71:fd:1d:8c:94:63:79:07:ee: 79:6e:af:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1L9O8OXaXUkAB+7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNlOWM1MGMtZTMyNy00MjQzLThjMWUtMDY3YmQzZDRl YmVhMB4XDTI2MDMyNjEzMDA0MVoXDTI2MDYyNDEzMDA0MVowLzEtMCsGA1UEAxMk NTk1ZDMwYjUtNTU4MS00MGE4LWE5YzktYTVkYTAwNDkzMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fZi/3o7eHd/0AF0VHNriPeSuxU05/Opt72m HvOfniJp3Yh6Xa4NkvtzkP9HPDkze96Ke9PvJf5JmMmWEVaBtj3aNHr3qbsEuL5r gGba4B5qTq6MEcHnfIXRBUoEyxBEf6ufJkq3BlyMrWhZmg2A9vvK326gnSk+lJkA x1irZ7LYOZOjMIFPIK1Dfr6c4Fen1gXweYH3lDe3A+JH9TV1xAIGpg3ZdUEou7MP RYhGIqsAObYWMtFvHXNDZcNZro6seXO0P4E3sht9N7/zpXAqjWZyd0Aek+LvS5sv srf32+R8SsC7z/pAjRhswCfUJEOMhM/5Q3dqvVYSkJUxiYvYZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9JEk2CuJSp/pr+RZNMBNW3Yv+3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2U5 YzUwYy1lMzI3LTQyNDMtOGMxZS0wNjdiZDNkNGViZWEvMTFhOTBkMmYtNzU3Ni0z ZmM0LThhZmQtZTAyYmE4ZGRhMTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWNlOWM1MGMtZTMyNy00MjQzLThj MWUtMDY3YmQzZDRlYmVhLzFjZTljNTBjLWUzMjctNDI0My04YzFlLTA2N2JkM2Q0 ZWJlYS5jcmwwHwYDVR0jBBgwFoAUBkpk6d+UydZAem4SVdEMXbE1qCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2U5YzUwYy1lMzI3LTQyNDMtOGMxZS0wNjdi ZDNkNGViZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5TUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUh6dZAcPaWABQNDPYekuKq90oIBNkJ1aFg2RcLhGAPZoRiiAPBpm6S rA7glmEZ3V3hTgiD5I57Htro7VnfHpEoY+K5rcbOyUD+ldbjKQjTmxA0aUtLvDbz QV+NOgV+uozvoiVL5ASmbEg9VErE7J4UtSG6MYFxT3AYTdz41bL01lhUoGKMQ9iS pONcgRHYjHXOx/T0GLVf5cv0r1T1WbIL7/GnFcZHAsQWuKo2dqNVFzKKoA+IfKAH c63ja5cWgJoV7gHmorzM2cLRjeNdkyJBShHD1YNBPBEbtg7XaCGBW3/2P5oKKW5e cRTFp9BLJWoWVXH9HYyUY3kH7nlurxQ= -----END CERTIFICATE-----Generated at Mon Apr 13 11:56:10 2026 by rpki-client