$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ea57b276-7354-419a-a8a1-323646536899/1919ec93-df0f-3ed3-95a7-c4da27463eed.roa File: 1919ec93-df0f-3ed3-95a7-c4da27463eed.roa (raw, json) Hash identifier: erx29Tzy5X7cpQFk70GOYPbeswP78HQfhpUAYb5yQQc= Subject key identifier: 32:8C:B0:80:54:50:F2:D5:9F:F3:C4:FF:B5:AE:1A:F8:30:DD:14:38 Certificate issuer: /CN=ea57b276-7354-419a-a8a1-323646536899 Certificate serial: 010D0C9F4328584D6D7511B330032E403DDE5680 Authority key identifier: D0:C5:95:65:71:C5:EA:D5:DC:2D:FE:B0:41:BE:9B:50:1A:63:40:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ea57b276-7354-419a-a8a1-323646536899.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ea57b276-7354-419a-a8a1-323646536899/1919ec93-df0f-3ed3-95a7-c4da27463eed.roa Signing time: Tue 07 Apr 2026 13:00:30 +0000 ROA not before: Tue 07 Apr 2026 13:00:30 +0000 ROA not after: Mon 06 Jul 2026 13:00:30 +0000 asID: 19790 IP address blocks: 23.148.36.0/24 maxlen: 24 104.204.160.0/20 maxlen: 24 2602:f587::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ea57b276-7354-419a-a8a1-323646536899/ea57b276-7354-419a-a8a1-323646536899.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ea57b276-7354-419a-a8a1-323646536899/ea57b276-7354-419a-a8a1-323646536899.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ea57b276-7354-419a-a8a1-323646536899.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:75:11:b3:30:03:2e:40:3d:de:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea57b276-7354-419a-a8a1-323646536899 Validity Not Before: Apr 7 13:00:30 2026 GMT Not After : Jul 6 13:00:30 2026 GMT Subject: CN=4f0882de-d8a8-4129-a645-bd09d51e6b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6e:bb:be:71:e4:b4:3f:d5:bd:ea:8a:fb:60: ad:26:b5:b6:b6:8b:3e:3c:bc:f0:d6:20:9e:70:55: 52:c3:1b:84:35:ab:f2:a5:74:ca:89:83:84:a9:f8: 0d:30:02:0b:df:b1:b8:e9:04:8c:89:b5:d2:18:cc: dc:22:89:46:9e:d8:6b:34:15:97:4d:dc:28:d9:26: 6c:99:96:ac:b7:28:59:82:0e:9d:39:e1:00:16:c9: c9:a8:12:b1:b9:e1:37:55:69:9b:92:55:3c:f8:cf: ad:32:4c:09:72:df:a1:d7:eb:09:eb:cb:ff:e5:3b: 28:db:8f:59:c1:62:60:05:f3:99:5d:dc:af:e6:27: 34:e9:a1:23:97:e5:c9:85:c0:8b:7a:9d:a8:41:9e: 1d:24:95:6f:10:8d:b5:b2:91:77:e3:d6:41:89:36: 00:95:0d:a0:45:80:1c:82:e7:e5:39:3f:70:27:96: ea:24:b7:03:3c:aa:6f:91:08:bf:8a:97:77:e1:1e: 33:a9:be:f8:23:84:3d:e9:67:25:3f:63:1f:3c:3d: 5b:a7:80:29:ee:29:d1:a8:84:73:6a:4b:27:16:be: c6:67:f6:94:5d:84:c1:d6:d9:21:16:54:93:b5:79: 96:0c:76:5a:4b:ca:1b:88:7b:8f:93:df:50:89:80: 93:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8C:B0:80:54:50:F2:D5:9F:F3:C4:FF:B5:AE:1A:F8:30:DD:14:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ea57b276-7354-419a-a8a1-323646536899/1919ec93-df0f-3ed3-95a7-c4da27463eed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ea57b276-7354-419a-a8a1-323646536899/ea57b276-7354-419a-a8a1-323646536899.crl X509v3 Authority Key Identifier: keyid:D0:C5:95:65:71:C5:EA:D5:DC:2D:FE:B0:41:BE:9B:50:1A:63:40:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ea57b276-7354-419a-a8a1-323646536899.cer sbgp-ipAddrBlock: critical IPv4: 23.148.36.0/24 104.204.160.0/20 IPv6: 2602:f587::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:0e:5e:0a:17:75:bd:39:84:02:aa:b0:87:36:c4:4b:82:a3: c6:9e:fc:ce:b2:c4:f0:c0:18:69:88:52:92:a5:92:d1:73:6c: 21:26:dd:10:4e:ac:b0:9a:ee:e4:e1:c0:01:1f:eb:6c:d1:64: 5b:32:f4:53:0e:b6:52:6e:67:03:4f:eb:13:76:6c:bd:f6:a1: 60:b3:f2:3b:cb:ee:92:14:81:0a:15:96:b9:5b:d5:92:ca:e0: 82:90:d5:8b:f7:24:66:8a:6b:ce:1d:ed:62:91:38:ba:d3:ef: 77:c6:3a:ad:99:49:8b:31:34:bd:d1:bb:39:ad:fc:da:05:95: dc:db:6d:b7:47:49:87:a2:95:e4:e1:9b:93:3b:1a:95:ac:c1: cb:82:f5:8c:77:66:3f:91:01:82:a2:e3:a2:1c:55:43:5c:42: fd:e4:87:a5:a6:e1:b5:da:b3:12:5e:93:ab:63:a0:e1:8a:92: 5e:22:04:01:28:1c:ed:08:38:0a:3c:90:a3:cd:c4:dc:b4:70: 8e:b8:de:ee:b3:99:ce:2c:08:d9:f4:6f:f7:c0:af:7e:26:77: 52:f0:4d:b3:f2:c7:05:09:e9:b7:32:fb:4c:63:04:a1:a5:c1: 1a:6e:90:48:dd:d7:0d:89:f9:c9:db:bd:07:81:50:04:48:96: 56:b4:17:6a -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE1tdRGzMAMuQD3eVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE1N2IyNzYtNzM1NC00MTlhLWE4YTEtMzIzNjQ2NTM2 ODk5MB4XDTI2MDQwNzEzMDAzMFoXDTI2MDcwNjEzMDAzMFowLzEtMCsGA1UEAxMk NGYwODgyZGUtZDhhOC00MTI5LWE2NDUtYmQwOWQ1MWU2YjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm67vnHktD/VveqK+2CtJrW2tos+PLzw1iCe cFVSwxuENavypXTKiYOEqfgNMAIL37G46QSMibXSGMzcIolGnthrNBWXTdwo2SZs mZastyhZgg6dOeEAFsnJqBKxueE3VWmbklU8+M+tMkwJct+h1+sJ68v/5Tso249Z wWJgBfOZXdyv5ic06aEjl+XJhcCLep2oQZ4dJJVvEI21spF349ZBiTYAlQ2gRYAc guflOT9wJ5bqJLcDPKpvkQi/ipd34R4zqb74I4Q96WclP2MfPD1bp4Ap7inRqIRz aksnFr7GZ/aUXYTB1tkhFlSTtXmWDHZaS8obiHuPk99QiYCTYQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFDKMsIBUUPLVn/PE/7WuGvgw3RQ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYTU3 YjI3Ni03MzU0LTQxOWEtYThhMS0zMjM2NDY1MzY4OTkvMTkxOWVjOTMtZGYwZi0z ZWQzLTk1YTctYzRkYTI3NDYzZWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZWE1N2IyNzYtNzM1NC00MTlhLWE4 YTEtMzIzNjQ2NTM2ODk5L2VhNTdiMjc2LTczNTQtNDE5YS1hOGExLTMyMzY0NjUz Njg5OS5jcmwwHwYDVR0jBBgwFoAU0MWVZXHF6tXcLf6wQb6bUBpjQEgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYTU3YjI3Ni03MzU0LTQxOWEtYThhMS0zMjM2 NDY1MzY4OTkuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5QkAwQE aMygMA4EAgACMAgDBgQmAvWHADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZDl4KF3W9OYQCqrCHNsRLgqPG nvzOssTwwBhpiFKSpZLRc2whJt0QTqywmu7k4cABH+ts0WRbMvRTDrZSbmcDT+sT dmy99qFgs/I7y+6SFIEKFZa5W9WSyuCCkNWL9yRmimvOHe1ikTi60+93xjqtmUmL MTS90bs5rfzaBZXc2223R0mHopXk4ZuTOxqVrMHLgvWMd2Y/kQGCouOiHFVDXEL9 5IelpuG12rMSXpOrY6DhipJeIgQBKBztCDgKPJCjzcTctHCOuN7us5nOLAjZ9G/3 wK9+JndS8E2z8scFCem3MvtMYwShpcEabpBI3dcNifnJ270HgVAESJZWtBdq -----END CERTIFICATE-----Generated at Mon Apr 13 12:28:42 2026 by rpki-client