$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/d979104e-8a4c-3a7f-aca8-ea9d9c867f80.roa File: d979104e-8a4c-3a7f-aca8-ea9d9c867f80.roa (raw, json) Hash identifier: 8R1HoNbh5dix2jjnbX4TSIGtSWSaqTDMj/JPsIjfVeo= Subject key identifier: 9A:69:98:DD:83:A5:D6:48:E8:91:DB:14:E8:D8:3C:EF:46:92:01:C4 Certificate issuer: /CN=4dcdf1f4-5e60-438d-8934-0ca21d0b45af Certificate serial: 010D0C9F4328584CA75C5D3937C547168B0ACB00 Authority key identifier: 2A:D7:2B:37:A6:0A:F1:0A:F9:08:FD:66:B5:F8:38:C0:C4:B1:61:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/d979104e-8a4c-3a7f-aca8-ea9d9c867f80.roa Signing time: Mon 26 Jan 2026 14:00:41 +0000 ROA not before: Mon 26 Jan 2026 14:00:41 +0000 ROA not after: Sun 26 Apr 2026 13:00:41 +0000 asID: 8143 IP address blocks: 23.146.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:5c:5d:39:37:c5:47:16:8b:0a:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dcdf1f4-5e60-438d-8934-0ca21d0b45af Validity Not Before: Jan 26 14:00:41 2026 GMT Not After : Apr 26 13:00:41 2026 GMT Subject: CN=b37dd563-e71b-4267-8b8f-2bbb4132bb13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0a:b6:4d:03:80:9e:95:05:e0:cf:79:16:1a: 62:22:11:62:b9:96:b6:a8:fa:48:4a:51:7f:58:69: 32:2d:9b:1a:85:20:3b:38:24:38:a5:f8:67:81:3f: c4:24:3b:48:48:83:47:a4:b9:9f:8c:d5:85:ec:ea: f2:b0:a1:e1:43:a7:4e:2d:03:46:67:9d:fc:0c:9d: ed:3c:c8:8c:f3:fa:88:b9:fb:7a:e0:80:a8:e3:f0: 75:b4:d5:b5:1e:8c:3a:76:0b:a2:20:8a:25:87:89: d6:5c:5a:82:bf:ec:7e:99:58:45:12:48:f6:55:d0: 6c:79:09:16:45:b9:1c:7f:6f:73:b2:b8:d5:9c:34: 56:e0:d3:8b:30:b3:b4:94:59:63:42:41:a8:c9:3f: 5d:1d:9c:9a:30:82:8f:01:ea:51:5a:08:d7:0c:00: ce:3f:91:d0:5a:1f:87:bd:1c:fd:d5:bd:e8:7a:f5: ee:7e:ff:7c:b1:b9:1a:d4:de:cf:6f:22:98:b1:0d: fa:cf:2f:19:75:37:a6:17:20:3b:e1:ab:e9:77:1c: 91:9e:f3:9e:ae:7e:23:10:22:1b:26:ae:72:1b:67: 8d:6c:92:7d:69:04:0b:b5:f1:20:ac:5d:86:49:c2: 37:08:ac:19:d8:e9:e0:e4:76:76:b9:2b:b0:84:60: 3d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:69:98:DD:83:A5:D6:48:E8:91:DB:14:E8:D8:3C:EF:46:92:01:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/d979104e-8a4c-3a7f-aca8-ea9d9c867f80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl X509v3 Authority Key Identifier: keyid:2A:D7:2B:37:A6:0A:F1:0A:F9:08:FD:66:B5:F8:38:C0:C4:B1:61:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer sbgp-ipAddrBlock: critical IPv4: 23.146.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:64:d5:c3:3f:6e:28:81:e2:12:c7:c5:72:6c:dd:1d:24:92: ee:79:34:70:0c:04:f7:e0:a5:13:c8:52:71:c4:c8:21:9b:b7: 24:02:7f:eb:11:f3:31:50:82:76:1b:8b:66:4a:23:64:65:60: 77:d2:84:e8:7e:3d:bc:eb:77:75:56:f6:4d:3b:c4:77:7b:76: a5:1a:6f:9f:ee:57:c0:7e:3f:ce:c5:e7:36:75:6b:4e:28:d7: cd:c0:4b:bb:b8:4b:9b:55:78:5f:42:59:ab:9d:8f:bc:4b:78: 7b:b8:e3:77:a1:18:c9:93:15:d4:87:59:9e:9d:9e:8a:61:11: 29:a9:b3:3e:35:8b:13:1d:c7:8f:c4:87:c8:f6:76:d0:70:00: e0:76:ac:4b:93:d8:f7:3f:7e:08:9f:49:e9:e7:2d:bd:42:34: 20:41:91:7a:f4:4d:30:a1:0d:9b:cc:e2:bc:fb:61:21:d7:87: 5a:c1:b2:70:19:ad:9c:2c:6c:04:6e:eb:a3:2e:21:81:23:27: c5:60:b9:e9:3c:4f:ed:ea:56:7b:71:fd:d7:6f:03:72:93:c8: 97:2c:63:20:7f:30:53:01:d1:0b:e5:36:52:43:30:4d:e2:24: d5:bd:4b:de:20:ed:96:b4:9d:4e:38:75:da:34:5d:d6:37:de: e0:c4:a5:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEynXF05N8VHFosKywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRjZGYxZjQtNWU2MC00MzhkLTg5MzQtMGNhMjFkMGI0 NWFmMB4XDTI2MDEyNjE0MDA0MVoXDTI2MDQyNjEzMDA0MVowLzEtMCsGA1UEAxMk YjM3ZGQ1NjMtZTcxYi00MjY3LThiOGYtMmJiYjQxMzJiYjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggq2TQOAnpUF4M95FhpiIhFiuZa2qPpISlF/ WGkyLZsahSA7OCQ4pfhngT/EJDtISINHpLmfjNWF7OrysKHhQ6dOLQNGZ538DJ3t PMiM8/qIuft64ICo4/B1tNW1How6dguiIIolh4nWXFqCv+x+mVhFEkj2VdBseQkW Rbkcf29zsrjVnDRW4NOLMLO0lFljQkGoyT9dHZyaMIKPAepRWgjXDADOP5HQWh+H vRz91b3oevXufv98sbka1N7PbyKYsQ36zy8ZdTemFyA74avpdxyRnvOern4jECIb Jq5yG2eNbJJ9aQQLtfEgrF2GScI3CKwZ2Ong5HZ2uSuwhGA9pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJppmN2DpdZI6JHbFOjYPO9GkgHEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZGNk ZjFmNC01ZTYwLTQzOGQtODkzNC0wY2EyMWQwYjQ1YWYvZDk3OTEwNGUtOGE0Yy0z YTdmLWFjYTgtZWE5ZDljODY3ZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGRjZGYxZjQtNWU2MC00MzhkLTg5 MzQtMGNhMjFkMGI0NWFmLzRkY2RmMWY0LTVlNjAtNDM4ZC04OTM0LTBjYTIxZDBi NDVhZi5jcmwwHwYDVR0jBBgwFoAUKtcrN6YK8Qr5CP1mtfg4wMSxYWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZGNkZjFmNC01ZTYwLTQzOGQtODkzNC0wY2Ey MWQwYjQ1YWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5IEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxk1cM/biiB4hLHxXJs3R0kku55NHAMBPfgpRPIUnHEyCGbtyQCf+sR 8zFQgnYbi2ZKI2RlYHfShOh+Pbzrd3VW9k07xHd7dqUab5/uV8B+P87F5zZ1a04o 183AS7u4S5tVeF9CWaudj7xLeHu443ehGMmTFdSHWZ6dnophESmpsz41ixMdx4/E h8j2dtBwAOB2rEuT2Pc/fgifSennLb1CNCBBkXr0TTChDZvM4rz7YSHXh1rBsnAZ rZwsbARu66MuIYEjJ8Vguek8T+3qVntx/ddvA3KTyJcsYyB/MFMB0QvlNlJDME3i JNW9S94g7Za0nU44ddo0XdY33uDEpU4= -----END CERTIFICATE-----Generated at Thu Feb 26 22:50:57 2026 by rpki-client