$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/0ccec1d9-bdbf-390f-86f2-af13d7c9146f.roa File: 0ccec1d9-bdbf-390f-86f2-af13d7c9146f.roa (raw, json) Hash identifier: FJL1zsV6Ou9P379GYDeDSQvCG52EOBeqFQclaZjJ0QU= Subject key identifier: 17:26:0D:DF:72:FE:D6:CC:93:28:B2:EA:DD:13:36:98:48:8A:8F:B2 Certificate issuer: /CN=d70b978a-944a-401c-aa25-2ebbd4d58340 Certificate serial: 010D0C9F4328584D1F4A0B686315E89F530CE180 Authority key identifier: 73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/0ccec1d9-bdbf-390f-86f2-af13d7c9146f.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 38008 IP address blocks: 23.143.8.0/24 maxlen: 24 2602:27c::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:0b:68:63:15:e8:9f:53:0c:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70b978a-944a-401c-aa25-2ebbd4d58340 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=5c218aaf-ccd8-48e9-a84a-5e235cedfd91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:36:e4:47:90:4a:86:e7:15:75:d5:ce:62:68: c6:b1:7c:e5:f8:1d:4d:f8:5b:e8:89:99:59:15:20: 47:a3:de:c2:57:3f:65:94:9b:99:e2:bd:e7:21:e5: 2c:91:e2:d5:9d:66:ee:11:6b:c8:9f:2f:b3:90:d1: 23:a8:65:20:32:3b:32:6a:d4:f8:1f:09:1e:f5:eb: 07:0f:64:b3:cf:4b:ae:f9:9f:6d:67:8c:b8:cc:9a: e4:44:a7:54:11:ee:e7:57:f2:ce:31:28:fb:88:06: fe:99:85:06:c1:90:66:0d:2c:4c:16:08:b9:04:2c: 8a:8b:c3:38:10:b4:57:cf:9a:89:ec:91:97:fd:56: d5:59:48:ab:66:3c:46:a6:39:36:88:96:d3:3d:b0: 68:79:23:ab:54:63:08:31:05:b2:34:a1:e3:90:11: 31:5c:86:eb:a2:c6:bd:9c:95:3d:48:df:fc:d3:85: 66:83:b2:26:a1:40:d4:1f:f2:86:c2:15:5a:d1:56: 1a:3c:e9:8f:52:53:f1:e5:a4:97:f5:0d:86:36:ea: d5:db:a2:9f:4a:73:62:d8:da:8b:ec:89:93:86:60: be:fa:ab:68:43:02:5c:ee:08:24:88:fa:bc:12:6c: f1:02:e5:a2:99:ec:63:59:7f:64:7a:7f:f7:46:65: e3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:26:0D:DF:72:FE:D6:CC:93:28:B2:EA:DD:13:36:98:48:8A:8F:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/0ccec1d9-bdbf-390f-86f2-af13d7c9146f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl X509v3 Authority Key Identifier: keyid:73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer sbgp-ipAddrBlock: critical IPv4: 23.143.8.0/24 IPv6: 2602:27c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:53:b1:e1:f1:25:77:6d:f6:e2:26:7a:ea:a4:82:27:60:a4: a6:7e:79:f2:e7:59:66:30:0f:63:28:b1:bc:ad:6f:a0:41:2f: 46:75:70:76:33:7f:cb:5a:aa:a4:46:bc:e9:1d:bb:80:2d:06: f4:0f:34:08:db:22:6f:33:ec:78:04:ae:92:1d:4f:ba:d6:74: ed:f8:0e:71:4c:14:ca:1a:31:dc:13:9d:c5:bc:ef:c0:0c:50: f4:c1:bd:a9:15:2e:0a:2b:1f:d6:9d:16:80:04:00:99:c9:3e: 84:f0:61:ac:e3:ee:cd:9e:73:67:71:c2:b0:3e:bf:d7:d7:98: 0c:01:e8:a0:26:35:da:91:1c:cd:f3:b1:94:05:06:a1:c2:de: 41:ff:7c:08:c1:ef:75:0c:d4:84:27:99:2a:5e:2d:5c:0c:98: f2:d2:e8:b7:05:84:29:b5:6d:d2:15:1a:69:1c:79:ce:c6:69: df:7e:41:c5:93:e4:59:2a:ac:88:2e:f6:78:b9:5c:f1:9b:89: 6d:b1:e1:1a:fb:53:f6:84:d0:1c:ca:21:8b:55:a3:02:20:de: ff:6a:80:d9:dd:b5:ed:80:04:3e:12:40:8c:18:7e:c5:34:c7: f9:aa:30:1c:f4:6c:62:c2:48:b3:e7:cd:9c:5e:5a:40:ec:39: 04:75:17:ba -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE0fSgtoYxXon1MM4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwYjk3OGEtOTQ0YS00MDFjLWFhMjUtMmViYmQ0ZDU4 MzQwMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NWMyMThhYWYtY2NkOC00OGU5LWE4NGEtNWUyMzVjZWRmZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzbkR5BKhucVddXOYmjGsXzl+B1N+FvoiZlZ FSBHo97CVz9llJuZ4r3nIeUskeLVnWbuEWvIny+zkNEjqGUgMjsyatT4Hwke9esH D2Szz0uu+Z9tZ4y4zJrkRKdUEe7nV/LOMSj7iAb+mYUGwZBmDSxMFgi5BCyKi8M4 ELRXz5qJ7JGX/VbVWUirZjxGpjk2iJbTPbBoeSOrVGMIMQWyNKHjkBExXIbrosa9 nJU9SN/804Vmg7ImoUDUH/KGwhVa0VYaPOmPUlPx5aSX9Q2GNurV26KfSnNi2NqL 7ImThmC++qtoQwJc7ggkiPq8EmzxAuWimexjWX9ken/3RmXjqQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBcmDd9y/tbMkyiy6t0TNphIio+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNzBi OTc4YS05NDRhLTQwMWMtYWEyNS0yZWJiZDRkNTgzNDAvMGNjZWMxZDktYmRiZi0z OTBmLTg2ZjItYWYxM2Q3YzkxNDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDcwYjk3OGEtOTQ0YS00MDFjLWFh MjUtMmViYmQ0ZDU4MzQwL2Q3MGI5NzhhLTk0NGEtNDAxYy1hYTI1LTJlYmJkNGQ1 ODM0MC5jcmwwHwYDVR0jBBgwFoAUcx9dnRTzp+3CNGp0KmTLcKr/LnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNzBiOTc4YS05NDRhLTQwMWMtYWEyNS0yZWJi ZDRkNTgzNDAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF48IMA4E AgACMAgDBgQmAgJ8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBDU7Hh8SV3bfbiJnrqpIInYKSmfnny51lm MA9jKLG8rW+gQS9GdXB2M3/LWqqkRrzpHbuALQb0DzQI2yJvM+x4BK6SHU+61nTt +A5xTBTKGjHcE53FvO/ADFD0wb2pFS4KKx/WnRaABACZyT6E8GGs4+7NnnNnccKw Pr/X15gMAeigJjXakRzN87GUBQahwt5B/3wIwe91DNSEJ5kqXi1cDJjy0ui3BYQp tW3SFRppHHnOxmnffkHFk+RZKqyILvZ4uVzxm4ltseEa+1P2hNAcyiGLVaMCIN7/ aoDZ3bXtgAQ+EkCMGH7FNMf5qjAc9Gxiwkiz582cXlpA7DkEdRe6 -----END CERTIFICATE-----Generated at Thu Mar 26 14:14:47 2026 by rpki-client