$ rpki-client -vvf rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/32332e3134302e32302e302f32342d3234203d3e20343031373630.roa File: 32332e3134302e32302e302f32342d3234203d3e20343031373630.roa (raw, json) Hash identifier: JYka4q/SpkE1ju1vuX7IkdbkGd8YfduInR5R6Pavz90= Subject key identifier: 21:A6:93:D4:FA:57:54:C3:21:F7:F6:10:C1:4A:6D:6A:81:99:66:A3 Certificate issuer: /CN=cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0 Certificate serial: 793337B0E59E3998DE8A278ECD40D4C20E26E3F2 Authority key identifier: 4D:38:A4:FE:84:0C:F5:EF:A4:E4:46:9C:CD:6F:62:95:E3:74:1F:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0.cer Subject info access: rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/32332e3134302e32302e302f32342d3234203d3e20343031373630.roa Signing time: Mon 11 May 2026 14:29:12 +0000 ROA not before: Mon 11 May 2026 14:24:12 +0000 ROA not after: Mon 10 May 2027 14:29:12 +0000 asID: 401760 IP address blocks: 23.140.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.crl rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/e91c6482-7261-4772-b3f7-fd5fa4ae995c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/e91c6482-7261-4772-b3f7-fd5fa4ae995c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 12:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:33:37:b0:e5:9e:39:98:de:8a:27:8e:cd:40:d4:c2:0e:26:e3:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0 Validity Not Before: May 11 14:24:12 2026 GMT Not After : May 10 14:29:12 2027 GMT Subject: CN=21A693D4FA5754C321F7F610C14A6D6A819966A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:94:35:d8:7b:ee:e7:d1:fc:70:f7:5a:2f: bf:b1:9b:8c:81:2e:7b:0f:30:45:40:1b:ec:cf:39: 0f:b7:02:90:4d:6b:cc:6c:dc:2b:c4:97:fe:3a:12: 50:ee:9a:a3:b7:25:01:ad:b6:9e:66:67:cd:5f:96: 4a:56:2d:1c:b5:b5:c8:ab:74:d8:6b:b5:46:4f:c5: 4e:09:ae:35:cc:67:f8:36:dc:f8:65:6b:f6:b4:a1: c1:b2:de:23:c8:c4:df:fd:b0:8a:b7:87:69:e4:cb: 07:1a:3a:d2:6d:a9:8e:34:c2:72:17:e3:3b:22:de: fb:b6:3e:7d:67:84:53:65:4e:48:f5:59:fc:36:e7: f0:d4:b3:91:15:b0:fb:d5:8b:f7:bc:7c:1a:e3:01: 0c:d6:a8:14:82:09:6d:18:cc:c0:7e:f8:f6:56:a9: 0d:b5:b1:ad:3d:e3:df:eb:9a:72:6c:95:da:1b:15: 01:c7:2f:2a:8f:f8:a7:8b:58:50:2e:f6:78:f7:b6: 99:20:ec:6b:c1:5a:51:8c:c1:82:40:07:f2:7b:fa: 81:39:c6:7b:6b:8f:b1:5d:f8:c6:07:99:2e:0a:e6: f8:f5:89:b1:54:ab:7b:65:20:1d:23:a6:23:86:ea: 54:39:c3:f5:bd:9f:db:ca:3f:2c:aa:ab:24:c0:fe: 30:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A6:93:D4:FA:57:54:C3:21:F7:F6:10:C1:4A:6D:6A:81:99:66:A3 X509v3 Authority Key Identifier: keyid:4D:38:A4:FE:84:0C:F5:EF:A4:E4:46:9C:CD:6F:62:95:E3:74:1F:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/32332e3134302e32302e302f32342d3234203d3e20343031373630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.140.20.0/24 Signature Algorithm: sha256WithRSAEncryption 72:41:d9:85:52:bd:49:4d:42:db:5e:fa:a7:6a:7a:6b:dc:c4: 60:16:fa:17:e4:88:79:3e:86:45:74:04:0e:f3:76:6c:48:af: aa:90:7b:9a:f8:12:86:ff:aa:60:a9:3f:fd:87:a0:2f:a1:89: 80:1b:33:1e:28:96:f3:53:a1:ba:bc:4a:e1:a9:27:d1:2d:f5: 98:0d:f1:07:57:43:b8:c4:9c:e1:97:be:db:3c:ac:7b:73:2b: fd:ab:7e:06:17:77:43:f6:c8:55:16:db:1d:81:40:a7:bc:c1: 34:b7:56:61:3d:f8:33:d0:bb:d0:66:c4:c8:86:49:72:f7:0f: 8b:54:c8:8a:7f:30:5f:2a:3f:b8:a2:d2:05:7b:43:8f:a9:f4: 12:87:87:04:c4:84:41:a2:b5:30:2f:9c:b7:be:f4:58:b4:f4: fe:71:cd:99:0c:91:ff:25:f5:20:d2:57:a1:9a:84:ca:00:7d: 4f:98:42:2b:57:1b:93:db:e3:f7:c0:be:9b:2e:70:bd:e4:a8: 69:3e:2f:12:d3:20:92:cc:ed:9d:e2:93:ad:94:3a:2b:3a:26: ab:36:83:d8:99:41:15:7f:c2:72:f0:c3:44:b0:6a:d8:29:a3: 83:83:50:ab:9a:fc:12:18:7e:c6:9f:7b:2d:f5:5c:a7:74:b5: 62:bb:9c:90 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgIUeTM3sOWeOZjeiieOzUDUwg4m4/IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyY2IxZWUwMGNjYWE3MTZjOTVkZTE5ZjZlMmFjYzk3YTc4 YzY5Yzg4NDVhN2Y3MDVmYTAwHhcNMjYwNTExMTQyNDEyWhcNMjcwNTEwMTQyOTEy WjAzMTEwLwYDVQQDEygyMUE2OTNENEZBNTc1NEMzMjFGN0Y2MTBDMTRBNkQ2QTgx OTk2NkEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwqUNdh77ufR /HD3Wi+/sZuMgS57DzBFQBvszzkPtwKQTWvMbNwrxJf+OhJQ7pqjtyUBrbaeZmfN X5ZKVi0ctbXIq3TYa7VGT8VOCa41zGf4Ntz4ZWv2tKHBst4jyMTf/bCKt4dp5MsH GjrSbamONMJyF+M7It77tj59Z4RTZU5I9Vn8Nufw1LORFbD71Yv3vHwa4wEM1qgU ggltGMzAfvj2VqkNtbGtPePf65pybJXaGxUBxy8qj/ini1hQLvZ497aZIOxrwVpR jMGCQAfye/qBOcZ7a4+xXfjGB5kuCub49YmxVKt7ZSAdI6YjhupUOcP1vZ/byj8s qqskwP4w3wIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFCGmk9T6V1TDIff2EMFKbWqB mWajMB8GA1UdIwQYMBaAFE04pP6EDPXvpORGnM1vYpXjdB+4MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzNiMDFiNzQ0YzhiODRkNzJiMmFhNjI0N2EyYzA2NDAxLzAv NEQzOEE0RkU4NDBDRjVFRkE0RTQ0NjlDQ0Q2RjYyOTVFMzc0MUZCOC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1L2U5MWM2NDgyLTcyNjEtNDc3Mi1iM2Y3LWZkNWZhNGFlOTk1Yy9jYjFl ZTAwY2NhYTcxNmM5NWRlMTlmNmUyYWNjOTdhNzhjNjljODg0NWE3ZjcwNWZhMC5j ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8zYjAxYjc0NGM4Yjg0ZDcyYjJhYTYy NDdhMmMwNjQwMS8wLzMyMzMyZTMxMzQzMDJlMzIzMDJlMzAyZjMyMzQyZDMyMzQy MDNkM2UyMDM0MzAzMTM3MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABeMFDANBgkqhkiG9w0BAQsF AAOCAQEAckHZhVK9SU1C2176p2p6a9zEYBb6F+SIeT6GRXQEDvN2bEivqpB7mvgS hv+qYKk//YegL6GJgBszHiiW81OhurxK4akn0S31mA3xB1dDuMSc4Ze+2zyse3Mr /at+Bhd3Q/bIVRbbHYFAp7zBNLdWYT34M9C70GbEyIZJcvcPi1TIin8wXyo/uKLS BXtDj6n0EoeHBMSEQaK1MC+ct770WLT0/nHNmQyR/yX1INJXoZqEygB9T5hCK1cb k9vj98C+my5wveSoaT4vEtMgksztneKTrZQ6KzomqzaD2JlBFX/CcvDDRLBq2Cmj g4NQq5r8Ehh+xp97LfVcp3S1YruckA== -----END CERTIFICATE-----Generated at Wed May 13 01:19:40 2026 by rpki-client