$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91000ef3-10d1-4abb-a94c-cee7cd803bca/8725049a-225c-3ba1-bdd9-2ed3685d3ce7.roa File: 8725049a-225c-3ba1-bdd9-2ed3685d3ce7.roa (raw, json) Hash identifier: rjY+YQEh9R6WzIa20Mu0XcUOn9SjuQvjn8JgLrf8qf0= Subject key identifier: CD:8B:D5:B1:97:05:80:9D:B1:A3:67:DA:65:FD:E5:01:97:FF:D1:72 Certificate issuer: /CN=91000ef3-10d1-4abb-a94c-cee7cd803bca Certificate serial: 010D0C9F4328584D7CCFE0C2473D10CD80618860 Authority key identifier: AF:83:74:5B:EC:C2:EE:55:29:AD:79:A1:87:36:A4:AF:9C:E3:5A:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91000ef3-10d1-4abb-a94c-cee7cd803bca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91000ef3-10d1-4abb-a94c-cee7cd803bca/8725049a-225c-3ba1-bdd9-2ed3685d3ce7.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 402044 IP address blocks: 23.146.164.0/24 maxlen: 24 2602:f536::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91000ef3-10d1-4abb-a94c-cee7cd803bca/91000ef3-10d1-4abb-a94c-cee7cd803bca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91000ef3-10d1-4abb-a94c-cee7cd803bca/91000ef3-10d1-4abb-a94c-cee7cd803bca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91000ef3-10d1-4abb-a94c-cee7cd803bca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:e0:c2:47:3d:10:cd:80:61:88:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91000ef3-10d1-4abb-a94c-cee7cd803bca Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=4d40dc95-b9a6-4406-86a1-dfb91b3585a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9b:34:c8:9b:8c:76:fb:0e:53:0d:7d:f1:9e: f2:f5:bb:26:28:34:5b:11:18:fe:55:7c:69:0c:a2: 45:77:f6:9a:02:1a:51:36:ab:22:8a:f2:d7:73:8c: 51:2b:f9:5e:5d:09:87:14:ae:31:ff:be:1c:fa:ab: 47:42:df:94:e2:3f:62:9c:1f:62:c3:24:b6:e5:23: 5e:cf:a3:e2:b2:cf:a0:aa:3a:97:e7:07:03:cd:82: 09:fa:0f:1a:d9:4d:00:8c:85:35:b5:0f:c1:68:1a: 67:80:0f:9a:6e:b7:09:13:64:0d:43:01:e2:3d:f0: ba:75:bb:a1:8f:84:69:79:9f:6f:90:41:cb:85:6f: 8d:46:dc:a0:29:db:2b:68:d4:4b:85:27:a7:31:8b: 1e:3f:c6:3e:06:e3:0d:ec:04:9b:96:bd:6e:b7:2a: 31:0d:20:8a:e3:86:83:85:b9:39:3b:c1:dd:ab:ef: 3f:68:fe:c9:ef:90:19:95:ef:84:b8:f3:d8:a6:13: 23:7c:b7:a1:4c:b9:53:0d:50:e2:b2:12:9e:c7:f6: 69:7a:cb:b5:e9:09:d3:0e:b1:b3:f4:98:1a:29:12: 01:21:03:45:2c:4e:f4:5e:ab:3c:a2:65:11:5a:1e: 6b:96:47:25:3a:cd:a4:47:4f:8a:9d:e0:91:fb:58: 61:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8B:D5:B1:97:05:80:9D:B1:A3:67:DA:65:FD:E5:01:97:FF:D1:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91000ef3-10d1-4abb-a94c-cee7cd803bca/8725049a-225c-3ba1-bdd9-2ed3685d3ce7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91000ef3-10d1-4abb-a94c-cee7cd803bca/91000ef3-10d1-4abb-a94c-cee7cd803bca.crl X509v3 Authority Key Identifier: keyid:AF:83:74:5B:EC:C2:EE:55:29:AD:79:A1:87:36:A4:AF:9C:E3:5A:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91000ef3-10d1-4abb-a94c-cee7cd803bca.cer sbgp-ipAddrBlock: critical IPv4: 23.146.164.0/24 IPv6: 2602:f536::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:55:86:84:22:75:ee:46:49:ac:d0:cc:00:fb:04:f8:76:1d: 58:60:23:96:88:d1:d6:3c:a2:74:c2:1e:fc:88:94:1b:78:0f: f2:98:7c:75:c0:06:3b:9a:9b:d5:77:c3:a8:b8:89:0d:2e:64: b2:4b:a5:cd:aa:d7:a2:58:e6:20:27:b5:cc:e0:e6:9d:81:65: 0c:2d:e0:6d:7f:e7:75:72:93:6e:9f:3d:3c:31:47:f2:19:b8: 7b:7a:98:9e:8b:0c:35:82:66:27:79:46:72:16:4a:d1:64:2b: ee:45:3c:a4:67:26:32:70:ad:9a:79:1e:8d:da:1b:6a:37:53: 12:a0:21:f2:02:1d:83:0e:b4:af:ed:51:65:4f:51:38:06:37: 53:85:79:bf:30:ef:f7:04:59:58:ca:4f:bb:0a:66:bd:05:0e: 3f:78:61:df:57:f4:a1:28:c6:bd:0c:4a:f9:7f:0b:96:bd:96: 26:d8:1a:4f:9c:3d:e4:c5:9b:c3:c9:d9:4c:63:61:4c:d6:6c: e1:a6:9b:2a:19:04:f9:97:a5:97:c3:c8:03:bd:0b:58:fa:06: d3:0f:87:26:01:3c:53:75:c8:1a:c1:f8:74:cc:58:79:07:a9: 8b:20:90:ae:4c:33:48:97:e8:97:3f:69:ee:00:c6:22:59:8b: 5f:86:5d:61 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE18z+DCRz0QzYBhiGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEwMDBlZjMtMTBkMS00YWJiLWE5NGMtY2VlN2NkODAz YmNhMB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk NGQ0MGRjOTUtYjlhNi00NDA2LTg2YTEtZGZiOTFiMzU4NWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJs0yJuMdvsOUw198Z7y9bsmKDRbERj+VXxp DKJFd/aaAhpRNqsiivLXc4xRK/leXQmHFK4x/74c+qtHQt+U4j9inB9iwyS25SNe z6Piss+gqjqX5wcDzYIJ+g8a2U0AjIU1tQ/BaBpngA+abrcJE2QNQwHiPfC6dbuh j4RpeZ9vkEHLhW+NRtygKdsraNRLhSenMYseP8Y+BuMN7ASblr1utyoxDSCK44aD hbk5O8Hdq+8/aP7J75AZle+EuPPYphMjfLehTLlTDVDishKex/Zpesu16QnTDrGz 9JgaKRIBIQNFLE70Xqs8omURWh5rlkclOs2kR0+KneCR+1hhfwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFM2L1bGXBYCdsaNn2mX95QGX/9FyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85MTAw MGVmMy0xMGQxLTRhYmItYTk0Yy1jZWU3Y2Q4MDNiY2EvODcyNTA0OWEtMjI1Yy0z YmExLWJkZDktMmVkMzY4NWQzY2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTEwMDBlZjMtMTBkMS00YWJiLWE5 NGMtY2VlN2NkODAzYmNhLzkxMDAwZWYzLTEwZDEtNGFiYi1hOTRjLWNlZTdjZDgw M2JjYS5jcmwwHwYDVR0jBBgwFoAUr4N0W+zC7lUprXmhhzakr5zjWkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85MTAwMGVmMy0xMGQxLTRhYmItYTk0Yy1jZWU3 Y2Q4MDNiY2EuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5KkMA4E AgACMAgDBgAmAvU2ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFVYaEInXuRkms0MwA+wT4dh1YYCOWiNHW PKJ0wh78iJQbeA/ymHx1wAY7mpvVd8OouIkNLmSyS6XNqteiWOYgJ7XM4OadgWUM LeBtf+d1cpNunz08MUfyGbh7epieiww1gmYneUZyFkrRZCvuRTykZyYycK2aeR6N 2htqN1MSoCHyAh2DDrSv7VFlT1E4BjdThXm/MO/3BFlYyk+7Cma9BQ4/eGHfV/Sh KMa9DEr5fwuWvZYm2BpPnD3kxZvDydlMY2FM1mzhppsqGQT5l6WXw8gDvQtY+gbT D4cmATxTdcgawfh0zFh5B6mLIJCuTDNIl+iXP2nuAMYiWYtfhl1h -----END CERTIFICATE-----Generated at Mon Apr 13 12:00:39 2026 by rpki-client