$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/c06ce70a-ebe7-3f48-a347-72b39082bba8.roa File: c06ce70a-ebe7-3f48-a347-72b39082bba8.roa (raw, json) Hash identifier: rPq3ewrBJi6A6cj5qbPzxzqtO7lMTCZionJ7o7xzwhs= Subject key identifier: 78:40:07:DF:65:D0:26:CE:F6:24:40:AF:16:37:A0:27:95:7B:A8:E9 Certificate issuer: /CN=ce4bae22-282c-4c42-a04f-dc6b4250fa84 Certificate serial: 010D0C9F4328584D6AAA640BE750B0F78E3B8340 Authority key identifier: 9A:FA:30:EF:DB:56:29:65:F4:E7:84:99:AE:B1:D5:D5:A7:89:5C:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/c06ce70a-ebe7-3f48-a347-72b39082bba8.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 46687 IP address blocks: 23.226.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:64:0b:e7:50:b0:f7:8e:3b:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4bae22-282c-4c42-a04f-dc6b4250fa84 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=b0b6c476-1551-474b-97c6-f79ea0a4249c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0b:59:fc:7f:6a:bf:7e:7d:e4:33:8c:90:46: ca:f3:2f:e9:d1:5a:50:5f:43:dd:05:cc:94:7b:20: 23:0c:95:71:84:44:3b:5a:a9:6b:dd:bc:48:89:10: 87:d8:a5:66:46:43:82:25:56:a6:65:04:dc:79:0c: 23:ef:6a:88:c8:b5:bb:1b:dd:93:3e:d8:a1:26:0b: 67:11:4e:92:fc:b4:eb:53:d9:9c:0c:ba:30:cd:25: 6e:63:49:52:6a:f7:6e:a0:9f:7d:33:58:5b:02:a2: 9c:b6:e0:13:d0:92:9e:f9:9a:a4:0f:ea:da:40:e9: f9:f7:d6:34:10:f7:07:f2:d8:df:27:aa:74:4a:78: 2c:38:da:58:63:bb:89:3e:35:e9:d4:15:c3:9b:d0: 4e:92:cb:ea:b7:6c:60:69:a7:a2:10:9e:c7:67:cb: 16:12:90:d7:84:55:0e:9d:32:93:a6:44:ef:08:85: 17:02:7c:77:fb:3b:0f:ca:29:5d:24:e9:df:65:da: c5:6d:0d:49:75:0b:bb:e3:f4:d7:94:bb:8d:81:ca: 4f:88:a0:15:99:88:b2:cc:2c:97:a7:9d:a0:5b:f9: 52:b0:49:b9:8c:82:fb:04:e0:01:b9:70:bd:20:b1: b9:5d:8c:73:bc:eb:56:37:45:b5:99:16:09:9f:c3: 97:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:40:07:DF:65:D0:26:CE:F6:24:40:AF:16:37:A0:27:95:7B:A8:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/c06ce70a-ebe7-3f48-a347-72b39082bba8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.crl X509v3 Authority Key Identifier: keyid:9A:FA:30:EF:DB:56:29:65:F4:E7:84:99:AE:B1:D5:D5:A7:89:5C:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer sbgp-ipAddrBlock: critical IPv4: 23.226.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:90:33:67:79:26:07:ba:86:36:0d:58:32:53:a5:4f:72:ae: ae:31:ae:61:ae:60:c8:cc:83:d8:a6:29:46:41:f2:fa:c9:57: e2:92:ae:09:39:71:81:01:e5:3a:eb:35:88:5d:a9:92:94:b6: 90:ff:fa:0c:4e:e2:65:e3:e7:db:ff:8b:b0:4c:bf:5f:e2:46: 42:30:63:b3:66:6f:61:07:0c:3e:b5:6e:1d:ca:bb:25:99:ca: c6:65:be:08:7b:6a:68:98:d5:92:9e:38:9f:bc:cf:c8:bb:35: 91:5b:56:96:fa:33:d2:93:2e:14:47:6f:48:0f:70:d7:0d:6a: b3:13:8a:f1:9e:ae:c9:89:36:c9:85:63:5a:ee:ab:a7:5e:5d: 7f:f1:f3:af:32:5c:4a:8b:a1:62:98:5e:c1:82:6c:47:c3:89: f0:2b:b5:5c:70:0c:36:e9:0d:ad:9b:6d:c3:92:e7:f1:c8:42: 9a:1b:03:d1:cf:3d:16:64:0b:67:91:9c:7b:2f:f4:db:b5:5b: cd:da:7b:6d:76:96:4f:17:ad:2e:3a:59:7a:e7:c3:d9:f1:a9: 79:7d:dc:ac:ad:94:db:eb:e2:80:ec:ce:bd:ee:cc:33:56:42: 9c:b4:fb:38:d3:4d:30:66:0d:c8:83:92:4f:df:b2:a3:05:30: 48:38:01:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqmQL51Cw9447g0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U0YmFlMjItMjgyYy00YzQyLWEwNGYtZGM2YjQyNTBm YTg0MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YjBiNmM0NzYtMTU1MS00NzRiLTk3YzYtZjc5ZWEwYTQyNDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwtZ/H9qv3595DOMkEbK8y/p0VpQX0PdBcyU eyAjDJVxhEQ7Wqlr3bxIiRCH2KVmRkOCJVamZQTceQwj72qIyLW7G92TPtihJgtn EU6S/LTrU9mcDLowzSVuY0lSavduoJ99M1hbAqKctuAT0JKe+ZqkD+raQOn599Y0 EPcH8tjfJ6p0SngsONpYY7uJPjXp1BXDm9BOksvqt2xgaaeiEJ7HZ8sWEpDXhFUO nTKTpkTvCIUXAnx3+zsPyildJOnfZdrFbQ1JdQu74/TXlLuNgcpPiKAVmYiyzCyX p52gW/lSsEm5jIL7BOABuXC9ILG5XYxzvOtWN0W1mRYJn8OXpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhAB99l0CbO9iRArxY3oCeVe6jpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZTRi YWUyMi0yODJjLTRjNDItYTA0Zi1kYzZiNDI1MGZhODQvYzA2Y2U3MGEtZWJlNy0z ZjQ4LWEzNDctNzJiMzkwODJiYmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2U0YmFlMjItMjgyYy00YzQyLWEw NGYtZGM2YjQyNTBmYTg0L2NlNGJhZTIyLTI4MmMtNGM0Mi1hMDRmLWRjNmI0MjUw ZmE4NC5jcmwwHwYDVR0jBBgwFoAUmvow79tWKWX054SZrrHV1aeJXNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZTRiYWUyMi0yODJjLTRjNDItYTA0Zi1kYzZi NDI1MGZhODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+JsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKQM2d5Jge6hjYNWDJTpU9yrq4xrmGuYMjMg9imKUZB8vrJV+KSrgk5 cYEB5TrrNYhdqZKUtpD/+gxO4mXj59v/i7BMv1/iRkIwY7Nmb2EHDD61bh3KuyWZ ysZlvgh7amiY1ZKeOJ+8z8i7NZFbVpb6M9KTLhRHb0gPcNcNarMTivGersmJNsmF Y1ruq6deXX/x868yXEqLoWKYXsGCbEfDifArtVxwDDbpDa2bbcOS5/HIQpobA9HP PRZkC2eRnHsv9Nu1W83ae212lk8XrS46WXrnw9nxqXl93KytlNvr4oDszr3uzDNW Qpy0+zjTTTBmDciDkk/fsqMFMEg4AfA= -----END CERTIFICATE-----Generated at Mon Apr 13 12:08:00 2026 by rpki-client