$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/d91df06c-d7be-3991-8ca5-81afbc593f6b.roa File: d91df06c-d7be-3991-8ca5-81afbc593f6b.roa (raw, json) Hash identifier: VzA5g42MGOvJZYpimppONuvcxjLfi4IuohCAOJ8s9hc= Subject key identifier: 5D:FE:43:63:FD:98:46:DE:C4:71:0E:DA:D6:7E:6D:9E:46:08:71:A7 Certificate issuer: /CN=a4f9c6b8-3944-422b-8c9c-2ce45c9d038d Certificate serial: 010D0C9F4328584D773A667B8C81C14F43168BC0 Authority key identifier: 09:46:8A:85:47:EE:D0:06:33:D6:40:02:E9:9A:69:1D:BA:11:51:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/d91df06c-d7be-3991-8ca5-81afbc593f6b.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 9304 IP address blocks: 23.148.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:66:7b:8c:81:c1:4f:43:16:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f9c6b8-3944-422b-8c9c-2ce45c9d038d Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=589b7558-6d2e-4ed7-b7c2-14846cf11fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b0:5b:77:b4:ac:76:1c:8f:92:1b:a0:ab:b9: 68:2b:3b:a8:4a:d9:44:fe:13:34:5a:a9:73:92:42: 99:9a:06:99:8e:66:af:80:1f:63:ed:50:5c:7d:92: 1f:89:21:99:a5:f2:8f:4c:f3:1e:0a:e3:4c:31:b2: d3:23:83:a2:e5:42:b9:78:2a:bf:11:80:42:ff:1a: 5d:70:5b:cb:af:9f:6f:5f:96:e1:13:d0:54:f8:98: 9b:74:f4:d7:66:da:e9:18:b1:59:6a:23:70:f8:e9: 3d:83:73:77:59:92:c4:0e:2a:c6:e1:a3:36:9b:20: dc:1a:78:58:00:b7:e9:d0:04:5b:96:4a:45:89:f9: 2b:1e:e6:8d:1d:b1:5f:f7:e4:67:ad:1f:5f:15:41: e3:4c:8f:41:af:7c:d7:b4:0e:e1:0a:a3:23:25:56: 6d:d0:09:e5:d0:34:cd:39:bd:19:9e:22:28:1b:22: 16:82:df:36:97:4c:29:b9:5a:da:d5:7c:3b:12:03: e5:65:cd:40:d3:94:69:e5:a3:eb:b5:9f:fc:c9:e7: 52:fa:4e:5d:fb:18:50:16:fb:03:20:c1:95:42:40: ff:6f:6f:b8:f1:8e:7b:f1:d2:4e:d3:49:84:fa:ad: e1:e5:fb:67:44:57:c8:e3:e9:31:f3:6c:d3:2c:53: c8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FE:43:63:FD:98:46:DE:C4:71:0E:DA:D6:7E:6D:9E:46:08:71:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/d91df06c-d7be-3991-8ca5-81afbc593f6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.crl X509v3 Authority Key Identifier: keyid:09:46:8A:85:47:EE:D0:06:33:D6:40:02:E9:9A:69:1D:BA:11:51:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer sbgp-ipAddrBlock: critical IPv4: 23.148.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d8:e8:82:95:e8:2e:78:e5:b8:d9:1e:df:06:6c:d7:88:34: c0:1b:7c:83:95:44:10:bc:86:c5:cc:37:82:ab:71:ec:54:44: f1:8e:05:82:c8:40:12:fe:4b:55:01:0e:4d:a8:b5:53:65:15: bb:b1:3e:f7:68:02:0a:9e:d3:99:f5:ef:a9:2c:a6:3b:2e:37: 22:2c:3d:5c:7a:28:31:97:47:32:06:f8:a2:f4:8c:42:aa:6e: 64:7c:3a:9f:b8:da:cb:94:d5:75:d3:6a:40:09:27:c6:48:bf: 95:45:33:13:64:e1:a4:51:fd:f8:6c:d5:cc:1c:af:b2:c1:14: 89:84:97:71:4f:ea:4a:32:e0:65:39:0a:ca:02:b5:7c:b7:7e: 30:e8:c1:bb:81:31:5f:b3:58:0b:4b:25:90:72:1a:05:ae:d5: 3a:74:95:18:01:f7:87:bd:00:9d:42:31:8b:46:20:ba:62:67: 74:c2:f0:55:ed:d3:c6:ad:f9:dd:07:63:b8:0a:a8:c6:79:98: f6:61:84:15:c5:9b:27:63:ee:d0:a7:65:ed:17:b3:ee:12:7c: b8:63:c5:12:5d:30:53:2a:8e:91:33:05:58:03:19:d2:6b:65: 71:57:8b:d4:35:54:ae:fd:ab:e4:a6:c7:a6:b1:a4:0a:26:43: c1:fb:6a:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OmZ7jIHBT0MWi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRmOWM2YjgtMzk0NC00MjJiLThjOWMtMmNlNDVjOWQw MzhkMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk NTg5Yjc1NTgtNmQyZS00ZWQ3LWI3YzItMTQ4NDZjZjExZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLBbd7SsdhyPkhugq7loKzuoStlE/hM0Wqlz kkKZmgaZjmavgB9j7VBcfZIfiSGZpfKPTPMeCuNMMbLTI4Oi5UK5eCq/EYBC/xpd cFvLr59vX5bhE9BU+JibdPTXZtrpGLFZaiNw+Ok9g3N3WZLEDirG4aM2myDcGnhY ALfp0ARblkpFifkrHuaNHbFf9+RnrR9fFUHjTI9Br3zXtA7hCqMjJVZt0Anl0DTN Ob0ZniIoGyIWgt82l0wpuVra1Xw7EgPlZc1A05Rp5aPrtZ/8yedS+k5d+xhQFvsD IMGVQkD/b2+48Y578dJO00mE+q3h5ftnRFfI4+kx82zTLFPIwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3+Q2P9mEbexHEO2tZ+bZ5GCHGnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGY5 YzZiOC0zOTQ0LTQyMmItOGM5Yy0yY2U0NWM5ZDAzOGQvZDkxZGYwNmMtZDdiZS0z OTkxLThjYTUtODFhZmJjNTkzZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTRmOWM2YjgtMzk0NC00MjJiLThj OWMtMmNlNDVjOWQwMzhkL2E0ZjljNmI4LTM5NDQtNDIyYi04YzljLTJjZTQ1Yzlk MDM4ZC5jcmwwHwYDVR0jBBgwFoAUCUaKhUfu0AYz1kAC6ZppHboRUS0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGY5YzZiOC0zOTQ0LTQyMmItOGM5Yy0yY2U0 NWM5ZDAzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5TsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLY6IKV6C545bjZHt8GbNeINMAbfIOVRBC8hsXMN4KrcexURPGOBYLI QBL+S1UBDk2otVNlFbuxPvdoAgqe05n176kspjsuNyIsPVx6KDGXRzIG+KL0jEKq bmR8Op+42suU1XXTakAJJ8ZIv5VFMxNk4aRR/fhs1cwcr7LBFImEl3FP6koy4GU5 CsoCtXy3fjDowbuBMV+zWAtLJZByGgWu1Tp0lRgB94e9AJ1CMYtGILpiZ3TC8FXt 08at+d0HY7gKqMZ5mPZhhBXFmydj7tCnZe0Xs+4SfLhjxRJdMFMqjpEzBVgDGdJr ZXFXi9Q1VK79q+Smx6axpAomQ8H7apY= -----END CERTIFICATE-----Generated at Mon Apr 13 12:09:21 2026 by rpki-client