$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f024790-b55d-4e1d-a912-a48862656284/fd59d408-b434-36e3-98fa-713677d3b3db.roa File: fd59d408-b434-36e3-98fa-713677d3b3db.roa (raw, json) Hash identifier: c+9oJdf/nQWhjdx0sGMwEFvcpYZ0CyskFOB5wrcVUYQ= Subject key identifier: 57:4D:48:79:66:5F:17:04:BC:B7:D7:9A:0E:A4:EF:AB:3C:D0:4A:35 Certificate issuer: /CN=1f024790-b55d-4e1d-a912-a48862656284 Certificate serial: 010D0C9F4328584D7B6A8266A99F147C11DA6940 Authority key identifier: F4:04:60:35:3D:D9:1F:6B:C7:F6:5A:21:B1:10:13:78:00:5B:09:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f024790-b55d-4e1d-a912-a48862656284.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f024790-b55d-4e1d-a912-a48862656284/fd59d408-b434-36e3-98fa-713677d3b3db.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 174 IP address blocks: 23.148.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f024790-b55d-4e1d-a912-a48862656284/1f024790-b55d-4e1d-a912-a48862656284.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f024790-b55d-4e1d-a912-a48862656284/1f024790-b55d-4e1d-a912-a48862656284.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f024790-b55d-4e1d-a912-a48862656284.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:82:66:a9:9f:14:7c:11:da:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f024790-b55d-4e1d-a912-a48862656284 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=96edf11a-2e25-4974-b544-02310d7e121c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:45:d9:00:75:67:8e:9f:72:c3:5c:0c:32: 2b:9a:70:42:ed:93:43:70:17:a6:a1:cd:51:05:23: 4f:f6:fb:a3:76:90:91:69:36:dc:04:35:c9:01:5b: d5:e7:b8:5c:35:57:7f:b0:e6:cb:80:a4:b6:ae:08: 3a:d0:f5:88:c0:75:dc:a9:da:79:a3:3c:39:77:d8: 43:ff:b5:22:e4:f6:42:c7:c3:f9:27:66:1c:2a:f6: 05:02:28:ac:6e:8d:40:6f:88:14:65:cb:2d:0e:a7: 8a:11:b2:76:f8:96:aa:67:b5:22:11:8d:1e:81:07: 20:97:b4:b5:4e:af:33:b5:20:35:7b:44:ae:bc:f8: 5f:13:f0:78:03:ec:66:87:6a:ae:b7:76:cc:bf:5d: 20:60:6a:60:65:21:79:5e:be:ee:27:a8:d8:29:4d: bd:ac:6b:1a:83:f9:9c:58:bd:c7:be:4c:94:a1:6e: 7c:37:ea:8a:1d:af:1b:6d:78:a9:a6:ab:d4:f6:66: fe:2d:12:21:cf:ea:39:c7:04:0d:50:27:9f:d7:c8: 61:15:16:29:8f:5d:15:0c:3f:86:65:fb:1d:9f:53: 29:34:52:9e:2b:55:8f:06:96:b2:ad:ea:f5:6c:de: 09:ed:7b:fe:0f:8e:87:51:ce:68:4e:14:42:33:91: 37:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4D:48:79:66:5F:17:04:BC:B7:D7:9A:0E:A4:EF:AB:3C:D0:4A:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f024790-b55d-4e1d-a912-a48862656284/fd59d408-b434-36e3-98fa-713677d3b3db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f024790-b55d-4e1d-a912-a48862656284/1f024790-b55d-4e1d-a912-a48862656284.crl X509v3 Authority Key Identifier: keyid:F4:04:60:35:3D:D9:1F:6B:C7:F6:5A:21:B1:10:13:78:00:5B:09:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f024790-b55d-4e1d-a912-a48862656284.cer sbgp-ipAddrBlock: critical IPv4: 23.148.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:8e:ff:d7:ff:52:eb:aa:f3:89:e7:9e:ac:79:35:a7:b7:c9: 88:db:d0:b4:27:58:57:f3:50:95:e0:de:5d:4f:5a:1a:e8:0a: ad:7f:ed:03:15:0f:de:59:d1:15:bf:a3:cc:2e:2b:69:08:38: 95:a1:c3:97:81:c0:a1:cf:bd:9a:58:d8:2a:e9:30:5e:1d:33: 03:20:ca:5f:65:7e:b1:ac:e2:a2:3c:fe:32:5b:98:ff:f1:9c: 0b:6f:89:97:54:78:6f:93:b2:34:4b:1f:cb:27:bf:73:43:f0: 1c:11:ae:1d:95:f8:64:5c:01:da:f9:50:6e:a8:d0:5e:09:bb: 7f:f2:dc:01:c7:f4:24:29:97:ad:f4:ec:fd:17:a5:f3:c7:de: 77:84:e8:21:1d:4f:33:8a:ea:a3:24:32:7b:6f:43:66:18:ff: c3:db:52:03:f1:aa:3a:5c:a2:1c:03:54:8a:e9:e7:43:38:c6: ce:e9:91:14:0e:d2:48:70:51:18:39:ee:21:df:dd:14:3d:2c: 50:09:0b:ad:18:1f:77:14:be:32:5a:b5:9b:d7:38:ef:97:9f: 63:c3:91:46:9f:52:38:74:8b:29:0f:4f:ed:8b:54:92:9c:88: f4:66:df:a8:4f:c5:34:17:b4:bf:d3:bb:da:ef:47:9c:1c:66: 20:4c:9e:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17aoJmqZ8UfBHaaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYwMjQ3OTAtYjU1ZC00ZTFkLWE5MTItYTQ4ODYyNjU2 Mjg0MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk OTZlZGYxMWEtMmUyNS00OTc0LWI1NDQtMDIzMTBkN2UxMjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRpF2QB1Z46fcsNcDDIrmnBC7ZNDcBemoc1R BSNP9vujdpCRaTbcBDXJAVvV57hcNVd/sObLgKS2rgg60PWIwHXcqdp5ozw5d9hD /7Ui5PZCx8P5J2YcKvYFAiisbo1Ab4gUZcstDqeKEbJ2+JaqZ7UiEY0egQcgl7S1 Tq8ztSA1e0SuvPhfE/B4A+xmh2qut3bMv10gYGpgZSF5Xr7uJ6jYKU29rGsag/mc WL3HvkyUoW58N+qKHa8bbXippqvU9mb+LRIhz+o5xwQNUCef18hhFRYpj10VDD+G Zfsdn1MpNFKeK1WPBpayrer1bN4J7Xv+D46HUc5oThRCM5E3pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdNSHlmXxcEvLfXmg6k76s80Eo1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZjAy NDc5MC1iNTVkLTRlMWQtYTkxMi1hNDg4NjI2NTYyODQvZmQ1OWQ0MDgtYjQzNC0z NmUzLTk4ZmEtNzEzNjc3ZDNiM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWYwMjQ3OTAtYjU1ZC00ZTFkLWE5 MTItYTQ4ODYyNjU2Mjg0LzFmMDI0NzkwLWI1NWQtNGUxZC1hOTEyLWE0ODg2MjY1 NjI4NC5jcmwwHwYDVR0jBBgwFoAU9ARgNT3ZH2vH9lohsRATeABbCaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZjAyNDc5MC1iNTVkLTRlMWQtYTkxMi1hNDg4 NjI2NTYyODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5R8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiO/9f/Uuuq84nnnqx5Nae3yYjb0LQnWFfzUJXg3l1PWhroCq1/7QMV D95Z0RW/o8wuK2kIOJWhw5eBwKHPvZpY2CrpMF4dMwMgyl9lfrGs4qI8/jJbmP/x nAtviZdUeG+TsjRLH8snv3ND8BwRrh2V+GRcAdr5UG6o0F4Ju3/y3AHH9CQpl630 7P0XpfPH3neE6CEdTzOK6qMkMntvQ2YY/8PbUgPxqjpcohwDVIrp50M4xs7pkRQO 0khwURg57iHf3RQ9LFAJC60YH3cUvjJatZvXOO+Xn2PDkUafUjh0iykPT+2LVJKc iPRm36hPxTQXtL/Tu9rvR5wcZiBMnkY= -----END CERTIFICATE-----Generated at Mon Apr 13 06:49:18 2026 by rpki-client