$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/8c96b8b5-6d96-394f-8062-cb55430e1548.roa File: 8c96b8b5-6d96-394f-8062-cb55430e1548.roa (raw, json) Hash identifier: MG/JVAMOQd/yM8+WoGtM3QGv8GefRFBeMWlHJCPevV4= Subject key identifier: 1E:28:EE:BA:E1:19:C2:74:F6:E9:26:3E:00:3B:51:59:7C:38:F2:67 Certificate issuer: /CN=265875fa-2cd8-4782-9b63-97850fa49dfa Certificate serial: 010D0C9F4328584D4EBFB28AAD6695A6D9286480 Authority key identifier: 2C:5D:06:09:CF:16:D0:66:81:D1:58:51:A3:F8:E8:5D:50:A9:9F:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/8c96b8b5-6d96-394f-8062-cb55430e1548.roa Signing time: Fri 27 Mar 2026 13:00:40 +0000 ROA not before: Fri 27 Mar 2026 13:00:40 +0000 ROA not after: Thu 25 Jun 2026 13:00:40 +0000 asID: 402075 IP address blocks: 23.147.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/265875fa-2cd8-4782-9b63-97850fa49dfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/265875fa-2cd8-4782-9b63-97850fa49dfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:bf:b2:8a:ad:66:95:a6:d9:28:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=265875fa-2cd8-4782-9b63-97850fa49dfa Validity Not Before: Mar 27 13:00:40 2026 GMT Not After : Jun 25 13:00:40 2026 GMT Subject: CN=d82511e1-5c5c-4804-9346-7511f61bd656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c2:01:b8:c1:4c:03:38:9d:42:78:ff:39:c7: ab:54:a1:02:ed:f8:b9:65:d5:86:08:d9:b3:4e:fb: ed:2a:41:86:fa:ab:b9:4c:e6:e1:35:9b:8c:3f:f4: 71:f8:6d:72:ed:23:da:ff:d0:1e:52:43:5d:a5:6f: 4a:57:fe:04:50:f4:a2:4d:56:6f:d0:db:cd:55:1c: a9:e0:77:56:24:43:6e:c7:f2:5c:b6:35:62:01:b3: c5:8f:98:f8:cf:8e:99:64:22:3d:9d:9a:0d:6c:fe: 58:a1:b5:39:4c:0d:5d:dc:ba:ef:54:36:44:e2:0b: 8f:9e:23:1b:98:7f:f1:25:eb:01:fe:e6:8e:0a:c9: 4c:92:2e:19:b2:85:b3:c7:f2:3a:92:37:c8:e3:fc: a5:ed:19:a8:e5:b1:fa:48:06:cd:8a:a1:84:4c:d8: 82:f2:e5:08:bb:00:47:0a:77:fa:c8:3f:5d:d7:f6: 6c:8f:f4:3f:38:0f:4b:19:57:7d:6b:48:fc:21:24: e0:90:41:52:8d:6e:00:31:d1:06:6d:59:44:c2:4d: 5f:f1:c3:ce:87:df:af:4a:92:3d:6c:2a:35:ae:b2: bf:68:bb:ef:19:9a:6e:66:bf:4a:4e:b4:95:22:8f: c7:b6:e7:27:d6:f5:d3:2a:b4:d7:ff:30:48:3f:a4: e8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:28:EE:BA:E1:19:C2:74:F6:E9:26:3E:00:3B:51:59:7C:38:F2:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/8c96b8b5-6d96-394f-8062-cb55430e1548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/265875fa-2cd8-4782-9b63-97850fa49dfa.crl X509v3 Authority Key Identifier: keyid:2C:5D:06:09:CF:16:D0:66:81:D1:58:51:A3:F8:E8:5D:50:A9:9F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa.cer sbgp-ipAddrBlock: critical IPv4: 23.147.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:81:54:2b:2b:72:cf:86:60:46:c1:7b:ad:d6:fd:81:1e:65: 71:48:7a:ac:f7:d6:6b:61:4b:7c:03:f6:9b:62:cd:af:aa:f9: da:dd:bb:f1:0a:aa:6c:4b:e3:f2:44:34:5d:da:5a:d1:40:80: 23:31:33:9b:4f:5f:89:b9:39:5f:7e:99:45:b8:68:ce:02:9d: cf:a4:51:d0:d6:c6:0e:ae:a7:8c:8c:d9:68:b6:0e:1b:87:1f: df:06:f1:e2:fc:dd:e7:c0:bb:97:df:66:21:7b:a7:86:28:d0: 18:82:24:1a:8e:18:08:df:8b:58:75:f6:a9:10:97:9e:46:93: 66:05:7b:6b:84:9f:aa:96:7d:a8:a3:3e:8a:2d:35:82:16:3e: d8:88:37:4f:68:82:a8:c8:75:02:db:c1:e4:45:69:0b:1b:3d: e6:c6:9e:5d:9b:b2:17:76:6d:47:be:c9:d5:4d:68:11:88:af: 6a:64:e8:83:a4:bb:fc:09:87:ed:9a:f1:a9:eb:d9:c9:13:c1: 6a:e0:82:8a:a4:5e:33:b0:fc:ec:2a:7e:56:17:20:fa:92:46: f8:d9:2d:59:96:72:1c:2c:26:f3:1d:2f:74:d9:c7:eb:5e:7c: e4:58:e8:c6:55:70:ab:64:00:6b:84:b9:5e:e5:14:ba:12:56: df:63:fd:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ov7KKrWaVptkoZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjY1ODc1ZmEtMmNkOC00NzgyLTliNjMtOTc4NTBmYTQ5 ZGZhMB4XDTI2MDMyNzEzMDA0MFoXDTI2MDYyNTEzMDA0MFowLzEtMCsGA1UEAxMk ZDgyNTExZTEtNWM1Yy00ODA0LTkzNDYtNzUxMWY2MWJkNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcIBuMFMAzidQnj/OcerVKEC7fi5ZdWGCNmz TvvtKkGG+qu5TObhNZuMP/Rx+G1y7SPa/9AeUkNdpW9KV/4EUPSiTVZv0NvNVRyp 4HdWJENux/JctjViAbPFj5j4z46ZZCI9nZoNbP5YobU5TA1d3LrvVDZE4guPniMb mH/xJesB/uaOCslMki4ZsoWzx/I6kjfI4/yl7Rmo5bH6SAbNiqGETNiC8uUIuwBH Cnf6yD9d1/Zsj/Q/OA9LGVd9a0j8ISTgkEFSjW4AMdEGbVlEwk1f8cPOh9+vSpI9 bCo1rrK/aLvvGZpuZr9KTrSVIo/Htucn1vXTKrTX/zBIP6ToFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4o7rrhGcJ09ukmPgA7UVl8OPJnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNjU4 NzVmYS0yY2Q4LTQ3ODItOWI2My05Nzg1MGZhNDlkZmEvOGM5NmI4YjUtNmQ5Ni0z OTRmLTgwNjItY2I1NTQzMGUxNTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjY1ODc1ZmEtMmNkOC00NzgyLTli NjMtOTc4NTBmYTQ5ZGZhLzI2NTg3NWZhLTJjZDgtNDc4Mi05YjYzLTk3ODUwZmE0 OWRmYS5jcmwwHwYDVR0jBBgwFoAULF0GCc8W0GaB0VhRo/joXVCpn9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNjU4NzVmYS0yY2Q4LTQ3ODItOWI2My05Nzg1 MGZhNDlkZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5OcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCBVCsrcs+GYEbBe63W/YEeZXFIeqz31mthS3wD9ptiza+q+drdu/EK qmxL4/JENF3aWtFAgCMxM5tPX4m5OV9+mUW4aM4Cnc+kUdDWxg6up4yM2Wi2DhuH H98G8eL83efAu5ffZiF7p4Yo0BiCJBqOGAjfi1h19qkQl55Gk2YFe2uEn6qWfaij PootNYIWPtiIN09ogqjIdQLbweRFaQsbPebGnl2bshd2bUe+ydVNaBGIr2pk6IOk u/wJh+2a8anr2ckTwWrggoqkXjOw/OwqflYXIPqSRvjZLVmWchwsJvMdL3TZx+te fORY6MZVcKtkAGuEuV7lFLoSVt9j/fw= -----END CERTIFICATE-----Generated at Mon Apr 13 12:00:39 2026 by rpki-client