$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7/289bd71b-2aa4-38c0-9cbb-96cb01650911.roa File: 289bd71b-2aa4-38c0-9cbb-96cb01650911.roa (raw, json) Hash identifier: KSeajojVbkM4vOGQObvXINQr7JkcvQ4y5iSbG/TYfYk= Subject key identifier: 66:1C:D1:42:0A:06:4D:93:61:C0:4C:C0:09:85:A9:CC:04:46:E1:0B Certificate issuer: /CN=e3f7ffc2-37e7-4f6b-8e00-f62d62821de7 Certificate serial: 010D0C9F4328584D4EBFA9B59296A225484E9E80 Authority key identifier: B8:E7:12:EE:2F:6D:1F:A1:7B:D3:84:C1:89:3C:1D:CC:2F:DD:26:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7/289bd71b-2aa4-38c0-9cbb-96cb01650911.roa Signing time: Fri 27 Mar 2026 13:00:40 +0000 ROA not before: Fri 27 Mar 2026 13:00:40 +0000 ROA not after: Thu 25 Jun 2026 13:00:40 +0000 asID: 401990 IP address blocks: 23.147.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:bf:a9:b5:92:96:a2:25:48:4e:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f7ffc2-37e7-4f6b-8e00-f62d62821de7 Validity Not Before: Mar 27 13:00:40 2026 GMT Not After : Jun 25 13:00:40 2026 GMT Subject: CN=fa166568-35c3-4d69-a0dd-8e4d6ec30b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:63:e9:69:31:2e:db:da:b4:85:6c:40:aa:42: cf:fd:87:81:ea:f0:70:70:16:bf:d0:dd:cf:54:64: cc:79:04:3b:fe:8c:c9:87:c0:bd:07:a0:f8:16:72: 13:28:f4:4b:82:14:ac:58:8f:e2:59:b2:53:aa:98: 70:c7:59:60:a4:33:c4:a6:6b:43:73:0c:7b:b0:57: 6d:5a:38:0f:91:07:b7:a1:c7:4d:f1:c5:a4:51:9b: 4e:92:96:fe:54:3e:e2:1b:1c:0e:7f:35:ff:2e:bf: a4:23:bd:15:65:1a:ae:3a:bc:07:ea:a3:57:89:6f: aa:8e:db:f6:3b:7f:4f:92:9b:74:65:e0:1b:ee:4d: f4:b9:12:92:9f:6a:28:4c:9a:1b:e9:51:08:84:ce: 6b:47:7e:b1:fc:25:9c:0d:61:bc:e9:56:49:bd:30: 91:ec:e8:4d:a1:c0:2d:b3:93:74:1b:c6:a0:16:dd: 89:fa:d2:97:ca:b8:65:72:c5:e6:53:91:e0:98:9e: e9:15:24:b3:1b:6d:95:85:44:f3:7b:5f:68:1a:cc: 85:ba:27:91:d9:67:ee:fd:50:84:c2:4d:5a:e0:bb: e7:fe:3f:f7:bd:30:c9:78:96:b9:e4:06:29:06:46: 7f:76:92:f0:d8:26:9e:12:0e:25:73:5b:20:36:b8: 9c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1C:D1:42:0A:06:4D:93:61:C0:4C:C0:09:85:A9:CC:04:46:E1:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7/289bd71b-2aa4-38c0-9cbb-96cb01650911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.crl X509v3 Authority Key Identifier: keyid:B8:E7:12:EE:2F:6D:1F:A1:7B:D3:84:C1:89:3C:1D:CC:2F:DD:26:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.cer sbgp-ipAddrBlock: critical IPv4: 23.147.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:0a:ec:89:bc:f0:14:40:47:b5:53:bf:dd:db:c3:fc:33:b9: 79:f8:d0:84:10:41:9a:2b:43:3b:06:14:96:95:9e:bb:26:db: 1f:ff:d1:c0:a2:de:1f:ac:da:a9:a8:2a:19:d7:bc:10:04:7c: e9:12:c6:b5:89:48:85:15:fe:ed:cf:34:15:74:a8:f2:03:60: ce:f6:c7:80:a2:66:d8:d5:5e:8b:3a:8a:eb:a6:c0:bf:36:1a: 85:d2:ac:22:ba:49:07:af:2a:bc:12:6d:4f:3f:36:47:c7:3c: 12:c1:e7:38:e8:c8:34:25:f2:1a:89:a3:c7:f7:ce:57:f9:c0: 8c:35:09:31:bd:bb:34:b9:f8:2d:a7:cd:b2:4c:57:8e:03:58: 69:1f:41:40:32:08:d5:dc:80:c3:0b:b4:f8:cf:1b:9f:03:48: 0d:81:a9:84:56:ca:57:ee:72:22:43:9e:14:a1:7b:04:f9:88: ea:7d:28:f6:82:1e:a1:12:64:d1:ee:8c:21:a7:c9:cf:06:00: 57:4a:a3:28:81:4e:ee:87:56:08:26:27:dd:43:ae:06:94:f9: 26:e9:62:06:1a:7c:c5:54:f6:0f:ea:2f:bd:30:74:cf:67:bc: fa:98:2f:72:60:ce:4b:29:36:0b:35:d0:e2:35:fa:cc:31:10: 82:ec:62:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ov6m1kpaiJUhOnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNmN2ZmYzItMzdlNy00ZjZiLThlMDAtZjYyZDYyODIx ZGU3MB4XDTI2MDMyNzEzMDA0MFoXDTI2MDYyNTEzMDA0MFowLzEtMCsGA1UEAxMk ZmExNjY1NjgtMzVjMy00ZDY5LWEwZGQtOGU0ZDZlYzMwYjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWPpaTEu29q0hWxAqkLP/YeB6vBwcBa/0N3P VGTMeQQ7/ozJh8C9B6D4FnITKPRLghSsWI/iWbJTqphwx1lgpDPEpmtDcwx7sFdt WjgPkQe3ocdN8cWkUZtOkpb+VD7iGxwOfzX/Lr+kI70VZRquOrwH6qNXiW+qjtv2 O39Pkpt0ZeAb7k30uRKSn2ooTJob6VEIhM5rR36x/CWcDWG86VZJvTCR7OhNocAt s5N0G8agFt2J+tKXyrhlcsXmU5HgmJ7pFSSzG22VhUTze19oGsyFuieR2Wfu/VCE wk1a4Lvn/j/3vTDJeJa55AYpBkZ/dpLw2CaeEg4lc1sgNricvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYc0UIKBk2TYcBMwAmFqcwERuELMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lM2Y3 ZmZjMi0zN2U3LTRmNmItOGUwMC1mNjJkNjI4MjFkZTcvMjg5YmQ3MWItMmFhNC0z OGMwLTljYmItOTZjYjAxNjUwOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZTNmN2ZmYzItMzdlNy00ZjZiLThl MDAtZjYyZDYyODIxZGU3L2UzZjdmZmMyLTM3ZTctNGY2Yi04ZTAwLWY2MmQ2Mjgy MWRlNy5jcmwwHwYDVR0jBBgwFoAUuOcS7i9tH6F704TBiTwdzC/dJoMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lM2Y3ZmZjMi0zN2U3LTRmNmItOGUwMC1mNjJk NjI4MjFkZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5NMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUK7Im88BRAR7VTv93bw/wzuXn40IQQQZorQzsGFJaVnrsm2x//0cCi 3h+s2qmoKhnXvBAEfOkSxrWJSIUV/u3PNBV0qPIDYM72x4CiZtjVXos6iuumwL82 GoXSrCK6SQevKrwSbU8/NkfHPBLB5zjoyDQl8hqJo8f3zlf5wIw1CTG9uzS5+C2n zbJMV44DWGkfQUAyCNXcgMMLtPjPG58DSA2BqYRWylfuciJDnhShewT5iOp9KPaC HqESZNHujCGnyc8GAFdKoyiBTu6HVggmJ91DrgaU+SbpYgYafMVU9g/qL70wdM9n vPqYL3JgzkspNgs10OI1+swxEILsYn4= -----END CERTIFICATE-----Generated at Mon Apr 13 12:05:23 2026 by rpki-client