$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec/ada54cf3-8423-3a65-99ba-057950859788.roa File: ada54cf3-8423-3a65-99ba-057950859788.roa (raw, json) Hash identifier: JegnWjmN/uYLRwLTe5bSomfknPvvT6Qz3z0MX9I0blo= Subject key identifier: E9:12:1A:76:BE:8B:1E:5F:0E:10:31:B8:4B:CD:8C:DF:EA:B5:C8:74 Certificate issuer: /CN=fc36d1ae-ceb3-4fab-9df1-071c2c65feec Certificate serial: 010D0C9F4328584D97556BC96F3364BE48F0C400 Authority key identifier: E1:78:80:9D:DE:AA:90:2F:87:4C:E1:7E:AD:35:49:38:01:CF:68:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec/ada54cf3-8423-3a65-99ba-057950859788.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 402067 IP address blocks: 23.147.252.0/24 maxlen: 24 2602:f509::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec/fc36d1ae-ceb3-4fab-9df1-071c2c65feec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec/fc36d1ae-ceb3-4fab-9df1-071c2c65feec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:6b:c9:6f:33:64:be:48:f0:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc36d1ae-ceb3-4fab-9df1-071c2c65feec Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=90a95bb4-4579-4d78-ad7c-bb8332124c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:27:0a:e3:5b:b6:b2:db:8e:12:ec:2b:b0:4f: 8e:1d:b0:7d:d3:a1:06:a5:33:7d:dc:08:51:2b:c3: 2b:8a:44:5e:7c:2a:18:dd:a5:d8:b4:0c:69:b7:a3: cd:0e:1b:99:95:00:82:92:95:88:67:98:8e:5d:9d: 79:fb:70:c8:bc:f8:c8:7f:e2:15:31:88:f8:82:ed: ed:7b:95:a0:d3:dc:04:21:40:27:db:13:91:29:28: b9:c4:df:60:22:08:42:14:8b:d7:54:4e:92:62:54: a5:cf:8a:d0:ce:b2:35:7a:31:8a:5e:43:c3:23:f8: ce:68:c4:79:85:bf:74:60:cb:16:89:91:51:0b:9f: 66:a8:63:80:f4:23:c0:b5:de:e2:83:34:98:1f:34: 7f:90:b7:ac:3a:ef:ee:3c:1a:5f:b1:b8:c7:52:d7: 27:e0:19:ff:c1:26:29:71:48:75:88:08:10:56:74: f7:c3:a4:a7:5f:a2:0e:cd:ef:5b:f6:71:68:7a:e9: 2a:81:1d:9e:5f:61:78:f6:b5:4a:2c:1b:9a:22:d3: 89:79:54:55:15:e7:83:26:fb:02:09:d8:22:96:f2: e1:0c:a2:f7:bd:de:56:94:72:dc:c0:7a:64:20:b5: f5:01:c8:03:53:48:44:9b:4a:63:cb:20:eb:c6:c2: ad:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:12:1A:76:BE:8B:1E:5F:0E:10:31:B8:4B:CD:8C:DF:EA:B5:C8:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec/ada54cf3-8423-3a65-99ba-057950859788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec/fc36d1ae-ceb3-4fab-9df1-071c2c65feec.crl X509v3 Authority Key Identifier: keyid:E1:78:80:9D:DE:AA:90:2F:87:4C:E1:7E:AD:35:49:38:01:CF:68:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec.cer sbgp-ipAddrBlock: critical IPv4: 23.147.252.0/24 IPv6: 2602:f509::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:f5:c1:b1:fb:35:54:3a:35:13:f3:5e:fe:f5:64:91:e7:9e: c3:f3:89:81:f7:e5:d7:48:56:f3:06:32:a8:92:80:b3:fb:f4: 6c:ac:34:01:62:21:d4:46:9e:82:1c:15:34:0d:07:2b:20:e8: 28:ae:bf:b1:6a:b7:7b:52:b0:3b:2a:5a:6a:28:85:c3:46:c6: c6:23:22:4b:07:e4:ef:cf:7b:4a:33:ad:f2:d3:c5:c0:1c:48: 8c:8f:a3:92:09:a9:7b:9c:cf:1c:80:fc:98:9f:29:e2:69:8f: 14:44:f8:71:4c:61:33:46:e5:9b:6b:f5:e5:78:d6:61:4d:62: e5:1c:7b:03:aa:c3:09:c4:cb:4c:c7:26:e0:ce:81:7f:3e:25: 8b:0c:2a:fa:82:1b:b6:c8:91:6e:64:fe:07:95:aa:cb:f4:06: 7a:be:04:f7:62:4c:7c:2e:01:d5:93:9d:40:f3:f2:9b:5f:08: ef:e5:05:2a:c3:3f:0b:e2:4b:c6:45:0b:c9:77:5a:fe:e5:bd: 50:f4:0e:e7:02:0c:2f:ab:33:aa:c9:d4:d9:b9:4a:be:9b:79: 38:19:d2:de:5c:7b:77:a0:e8:d3:dd:9e:f8:cb:3a:92:22:87: 60:de:c7:95:0b:64:5e:8f:a1:97:d5:0c:4e:cd:94:ee:a4:68: 4b:4b:0e:22 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2XVWvJbzNkvkjwxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzNmQxYWUtY2ViMy00ZmFiLTlkZjEtMDcxYzJjNjVm ZWVjMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk OTBhOTViYjQtNDU3OS00ZDc4LWFkN2MtYmI4MzMyMTI0YzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqScK41u2stuOEuwrsE+OHbB906EGpTN93AhR K8MrikRefCoY3aXYtAxpt6PNDhuZlQCCkpWIZ5iOXZ15+3DIvPjIf+IVMYj4gu3t e5Wg09wEIUAn2xORKSi5xN9gIghCFIvXVE6SYlSlz4rQzrI1ejGKXkPDI/jOaMR5 hb90YMsWiZFRC59mqGOA9CPAtd7igzSYHzR/kLesOu/uPBpfsbjHUtcn4Bn/wSYp cUh1iAgQVnT3w6SnX6IOze9b9nFoeukqgR2eX2F49rVKLBuaItOJeVRVFeeDJvsC CdgilvLhDKL3vd5WlHLcwHpkILX1AcgDU0hEm0pjyyDrxsKtgwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOkSGna+ix5fDhAxuEvNjN/qtch0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mYzM2 ZDFhZS1jZWIzLTRmYWItOWRmMS0wNzFjMmM2NWZlZWMvYWRhNTRjZjMtODQyMy0z YTY1LTk5YmEtMDU3OTUwODU5Nzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZmMzNmQxYWUtY2ViMy00ZmFiLTlk ZjEtMDcxYzJjNjVmZWVjL2ZjMzZkMWFlLWNlYjMtNGZhYi05ZGYxLTA3MWMyYzY1 ZmVlYy5jcmwwHwYDVR0jBBgwFoAU4XiAnd6qkC+HTOF+rTVJOAHPaKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mYzM2ZDFhZS1jZWIzLTRmYWItOWRmMS0wNzFj MmM2NWZlZWMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5P8MA4E AgACMAgDBgAmAvUJADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAV9cGx+zVUOjUT817+9WSR557D84mB9+XX SFbzBjKokoCz+/RsrDQBYiHURp6CHBU0DQcrIOgorr+xard7UrA7KlpqKIXDRsbG IyJLB+Tvz3tKM63y08XAHEiMj6OSCal7nM8cgPyYnyniaY8URPhxTGEzRuWba/Xl eNZhTWLlHHsDqsMJxMtMxybgzoF/PiWLDCr6ghu2yJFuZP4HlarL9AZ6vgT3Ykx8 LgHVk51A8/KbXwjv5QUqwz8L4kvGRQvJd1r+5b1Q9A7nAgwvqzOqydTZuUq+m3k4 GdLeXHt3oOjT3Z74yzqSIodg3seVC2Rej6GX1QxOzZTupGhLSw4i -----END CERTIFICATE-----Generated at Thu Apr 30 12:48:51 2026 by rpki-client