$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/7dcaa39c-7090-3cb6-9901-2a900809a80e.roa File: 7dcaa39c-7090-3cb6-9901-2a900809a80e.roa (raw, json) Hash identifier: +aFU8agRZYUnJEbkF7URFO1vpjWOUGmdUWT5bj3SC4c= Subject key identifier: 39:B7:C2:3C:5E:82:ED:DD:FF:C0:AA:C0:FC:E9:8B:C3:15:82:4D:85 Certificate issuer: /CN=0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0 Certificate serial: 010D0C9F4328584D7207A450AEB6C55AF83E61C0 Authority key identifier: 11:79:D4:A6:A6:31:48:56:5D:61:E7:8D:06:1F:79:A2:6D:0A:FF:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/7dcaa39c-7090-3cb6-9901-2a900809a80e.roa Signing time: Thu 09 Apr 2026 04:19:07 +0000 ROA not before: Thu 09 Apr 2026 04:19:07 +0000 ROA not after: Wed 08 Jul 2026 04:19:07 +0000 asID: 979 IP address blocks: 23.141.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:72:07:a4:50:ae:b6:c5:5a:f8:3e:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0 Validity Not Before: Apr 9 04:19:07 2026 GMT Not After : Jul 8 04:19:07 2026 GMT Subject: CN=fc567a1e-6506-474c-b9fd-b0ab74f7fa59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0a:ab:c6:d5:d1:9d:c1:83:25:a1:bd:5d:0e: bf:56:0d:78:04:a0:1c:21:89:9e:89:26:79:34:39: f8:05:ea:4a:5c:d9:e2:02:69:7f:fd:11:a4:de:4c: a5:57:d5:d2:22:de:e9:ca:f4:1e:0c:4a:3c:0a:18: cf:3c:96:c8:56:8a:4e:39:a5:72:59:18:4c:b4:8f: fc:3c:78:3e:95:e6:f8:7d:5f:27:9f:fd:ed:7a:fc: b8:2c:c5:b4:b4:d3:9c:39:d1:e1:c4:df:44:e0:67: 60:7c:20:d4:1d:6c:d7:9a:cc:92:8a:95:68:8e:2a: 5a:58:a4:f2:b7:1c:23:17:0c:d3:83:19:ff:d8:52: 10:bd:a9:c1:9d:94:55:59:19:cd:3e:c3:f1:b0:1a: 87:f5:a7:ae:06:ca:75:08:82:aa:b2:8b:e4:6f:c0: 64:64:d1:5a:ac:2e:e1:d1:ac:14:17:e0:3e:40:c8: b4:6d:ee:85:f0:06:32:41:fc:12:80:9b:c6:09:92: 81:36:57:77:a5:ff:85:26:d2:ea:67:ab:a3:c3:71: c3:91:93:bb:48:cd:63:21:1a:85:5a:9f:5d:45:29: 03:f6:eb:f6:1d:37:19:5c:51:a7:04:0e:3e:0c:1c: ec:35:aa:ab:97:b9:be:ac:bd:ad:40:66:8e:bd:ff: f2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B7:C2:3C:5E:82:ED:DD:FF:C0:AA:C0:FC:E9:8B:C3:15:82:4D:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/7dcaa39c-7090-3cb6-9901-2a900809a80e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.crl X509v3 Authority Key Identifier: keyid:11:79:D4:A6:A6:31:48:56:5D:61:E7:8D:06:1F:79:A2:6D:0A:FF:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.cer sbgp-ipAddrBlock: critical IPv4: 23.141.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:94:bd:c8:2c:73:13:f7:6e:c2:ca:4f:89:dc:68:6b:3c:6a: aa:43:0e:c0:c2:34:26:24:d0:17:33:ee:38:ac:e5:1b:7d:0d: 54:3e:4a:dc:78:9b:5f:14:f0:7a:fa:4e:a2:1c:e9:5f:fb:45: f7:b7:77:2b:ff:f7:e3:a5:bf:26:5f:b3:0f:62:75:6d:70:99: ea:6a:00:77:c6:0f:fd:bd:cc:f3:92:84:2e:1a:58:fc:10:90: 62:e8:d6:e0:9c:f8:a8:5c:a9:a6:84:41:ab:b7:e1:94:04:36: cc:03:c3:ba:12:79:10:5e:26:0b:c9:d7:17:b3:d8:3e:e1:43: 40:24:d1:da:d5:b5:5b:ce:e5:98:f4:9a:e0:3f:21:41:6f:51: e2:76:7d:ca:8b:2b:3f:c7:8d:b4:35:e3:b4:10:4b:66:f8:0c: f4:0f:6d:f7:35:44:ef:87:48:9e:a2:a1:c3:03:34:fe:02:f0: 0c:05:04:d5:52:0d:91:49:42:9e:6a:db:fd:99:3d:2a:e4:72: 4b:f5:68:dc:f1:cb:8b:53:39:9e:91:bc:29:bd:af:c6:b5:c6: 86:dd:f9:48:f5:fc:19:eb:d4:2b:b9:d1:35:4a:94:34:82:17: 02:05:83:50:94:ef:0d:4e:4a:fb:46:a5:c5:68:8f:8a:b7:64: 18:6e:5f:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1yB6RQrrbFWvg+YcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFkYjRkOWEtOWZjNC00M2Y3LThjZmItOTUxMTljMWRk ZGYwMB4XDTI2MDQwOTA0MTkwN1oXDTI2MDcwODA0MTkwN1owLzEtMCsGA1UEAxMk ZmM1NjdhMWUtNjUwNi00NzRjLWI5ZmQtYjBhYjc0ZjdmYTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwqrxtXRncGDJaG9XQ6/Vg14BKAcIYmeiSZ5 NDn4BepKXNniAml//RGk3kylV9XSIt7pyvQeDEo8ChjPPJbIVopOOaVyWRhMtI/8 PHg+leb4fV8nn/3tevy4LMW0tNOcOdHhxN9E4GdgfCDUHWzXmsySipVojipaWKTy txwjFwzTgxn/2FIQvanBnZRVWRnNPsPxsBqH9aeuBsp1CIKqsovkb8BkZNFarC7h 0awUF+A+QMi0be6F8AYyQfwSgJvGCZKBNld3pf+FJtLqZ6ujw3HDkZO7SM1jIRqF Wp9dRSkD9uv2HTcZXFGnBA4+DBzsNaqrl7m+rL2tQGaOvf/yPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDm3wjxegu3d/8CqwPzpi8MVgk2FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYWRi NGQ5YS05ZmM0LTQzZjctOGNmYi05NTExOWMxZGRkZjAvN2RjYWEzOWMtNzA5MC0z Y2I2LTk5MDEtMmE5MDA4MDlhODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGFkYjRkOWEtOWZjNC00M2Y3LThj ZmItOTUxMTljMWRkZGYwLzBhZGI0ZDlhLTlmYzQtNDNmNy04Y2ZiLTk1MTE5YzFk ZGRmMC5jcmwwHwYDVR0jBBgwFoAUEXnUpqYxSFZdYeeNBh95om0K/4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYWRiNGQ5YS05ZmM0LTQzZjctOGNmYi05NTEx OWMxZGRkZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF43MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqUvcgscxP3bsLKT4ncaGs8aqpDDsDCNCYk0Bcz7jis5Rt9DVQ+Stx4 m18U8Hr6TqIc6V/7Rfe3dyv/9+OlvyZfsw9idW1wmepqAHfGD/29zPOShC4aWPwQ kGLo1uCc+KhcqaaEQau34ZQENswDw7oSeRBeJgvJ1xez2D7hQ0Ak0drVtVvO5Zj0 muA/IUFvUeJ2fcqLKz/HjbQ147QQS2b4DPQPbfc1RO+HSJ6iocMDNP4C8AwFBNVS DZFJQp5q2/2ZPSrkckv1aNzxy4tTOZ6RvCm9r8a1xobd+Uj1/Bnr1Cu50TVKlDSC FwIFg1CU7w1OSvtGpcVoj4q3ZBhuX5c= -----END CERTIFICATE-----Generated at Mon Apr 13 09:28:16 2026 by rpki-client