$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/5b665c2e-c2d1-394f-a379-8b42a79c90ee.roa File: 5b665c2e-c2d1-394f-a379-8b42a79c90ee.roa (raw, json) Hash identifier: bLEQsXb+3AJj3CjmwzdGdejOIQf2hsEsoekENgcF2Vs= Subject key identifier: A8:A1:DC:E7:5D:BC:03:2D:98:32:C4:11:9D:12:1B:7E:38:B2:22:8D Certificate issuer: /CN=eeff816f-42ef-47a6-ba61-7075adb85329 Certificate serial: 010D0C9F4328584D3B34E6257338AA152C5C1780 Authority key identifier: EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/5b665c2e-c2d1-394f-a379-8b42a79c90ee.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 393457 IP address blocks: 23.128.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:e6:25:73:38:aa:15:2c:5c:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeff816f-42ef-47a6-ba61-7075adb85329 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=e44bcf64-6381-456a-8a88-a86c3a7acc10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:39:5e:6a:d6:80:8f:de:37:07:a8:e0:6b:b7: 47:40:9e:77:2e:3c:87:42:70:0d:1d:95:0f:2f:e0: 33:01:96:5b:cd:3b:7b:6b:34:97:53:31:a1:5a:fc: 01:1c:0d:2e:df:9b:5d:33:f5:b7:0f:14:a3:db:4c: 07:a8:30:93:f2:3b:ea:cd:d5:dd:5a:fd:49:f4:28: 2e:99:72:b1:c1:f8:63:3c:bc:99:23:f4:30:fd:7f: 1a:88:92:53:a6:3d:77:ef:7c:e6:45:b0:1c:73:1c: b8:c4:37:b5:d0:83:71:ec:26:67:1c:3f:61:54:90: fe:14:71:9a:76:92:ae:1f:26:e6:cc:0e:62:e4:73: a3:9f:01:38:05:0a:b4:30:71:f6:95:df:75:1c:d4: 2f:8a:92:6f:5f:07:c7:d5:71:6d:91:1e:53:a9:da: 06:fd:b5:50:52:f9:06:87:7a:09:3e:cb:20:98:00: eb:e3:ca:fa:39:40:3c:ae:e5:92:75:e2:b8:ce:08: cd:b4:86:b5:25:88:d9:71:4a:57:d7:07:b2:07:f6: 4a:8c:6e:5a:26:03:3f:b7:1a:55:16:01:95:ed:4f: e9:76:2f:e9:3f:c9:e6:20:c7:42:e1:d2:5c:31:9c: 2f:7a:ec:51:66:de:98:a8:e1:05:0c:fb:83:d1:2a: 19:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A1:DC:E7:5D:BC:03:2D:98:32:C4:11:9D:12:1B:7E:38:B2:22:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/5b665c2e-c2d1-394f-a379-8b42a79c90ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl X509v3 Authority Key Identifier: keyid:EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer sbgp-ipAddrBlock: critical IPv4: 23.128.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:f3:cb:33:58:27:b3:34:eb:0f:4d:37:39:9e:3d:bc:f1:ca: 93:a1:6c:a7:54:e3:1d:10:34:1d:16:17:3b:4a:83:fb:05:8a: c1:f4:f7:f0:6f:3a:3b:3b:50:aa:2d:7b:80:60:e5:ad:06:ec: fe:14:30:2b:37:32:ea:98:00:fc:44:b6:a5:65:f7:76:57:ea: 4a:7e:39:1a:83:07:dd:ba:57:88:62:e0:b7:02:17:3d:64:ac: 68:4f:90:55:fa:57:9d:76:68:ec:82:88:5e:c7:19:d6:40:78: 51:99:bf:c2:c3:cd:06:ae:34:fd:0d:b2:21:d7:d7:2c:e3:08: fd:8e:41:7c:78:fc:03:99:41:98:eb:21:f8:fd:a4:27:73:a5: 67:38:3e:36:54:40:3f:5b:56:ca:51:85:75:db:ba:77:d4:0f: 0c:77:7e:bc:22:a1:a4:5b:d7:c3:56:0f:3d:5f:2b:20:52:ca: 4f:fc:95:b1:8a:33:b8:03:91:92:82:f9:a5:82:93:c4:60:59: ea:ae:cd:ab:a2:64:2d:e7:0e:2a:84:e4:d4:df:be:a8:45:72: ea:fe:3e:8f:8d:dc:f8:84:f8:03:54:98:42:f5:96:a1:b1:4a: ce:a2:8e:8c:0f:21:2f:88:12:3d:db:b7:50:13:cb:d6:82:2d: 8f:f8:ab:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NOYlcziqFSxcF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVmZjgxNmYtNDJlZi00N2E2LWJhNjEtNzA3NWFkYjg1 MzI5MB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk ZTQ0YmNmNjQtNjM4MS00NTZhLThhODgtYTg2YzNhN2FjYzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjleataAj943B6jga7dHQJ53LjyHQnANHZUP L+AzAZZbzTt7azSXUzGhWvwBHA0u35tdM/W3DxSj20wHqDCT8jvqzdXdWv1J9Cgu mXKxwfhjPLyZI/Qw/X8aiJJTpj1373zmRbAccxy4xDe10INx7CZnHD9hVJD+FHGa dpKuHybmzA5i5HOjnwE4BQq0MHH2ld91HNQvipJvXwfH1XFtkR5TqdoG/bVQUvkG h3oJPssgmADr48r6OUA8ruWSdeK4zgjNtIa1JYjZcUpX1weyB/ZKjG5aJgM/txpV FgGV7U/pdi/pP8nmIMdC4dJcMZwveuxRZt6YqOEFDPuD0SoZ7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKih3OddvAMtmDLEEZ0SG344siKNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZWZm ODE2Zi00MmVmLTQ3YTYtYmE2MS03MDc1YWRiODUzMjkvNWI2NjVjMmUtYzJkMS0z OTRmLWEzNzktOGI0MmE3OWM5MGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWVmZjgxNmYtNDJlZi00N2E2LWJh NjEtNzA3NWFkYjg1MzI5L2VlZmY4MTZmLTQyZWYtNDdhNi1iYTYxLTcwNzVhZGI4 NTMyOS5jcmwwHwYDVR0jBBgwFoAU6ll783GIb8wezeqNVRDlPcsR9H0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZWZmODE2Zi00MmVmLTQ3YTYtYmE2MS03MDc1 YWRiODUzMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4AAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvzyzNYJ7M06w9NNzmePbzxypOhbKdU4x0QNB0WFztKg/sFisH09/Bv Ojs7UKote4Bg5a0G7P4UMCs3MuqYAPxEtqVl93ZX6kp+ORqDB926V4hi4LcCFz1k rGhPkFX6V512aOyCiF7HGdZAeFGZv8LDzQauNP0NsiHX1yzjCP2OQXx4/AOZQZjr Ifj9pCdzpWc4PjZUQD9bVspRhXXbunfUDwx3frwioaRb18NWDz1fKyBSyk/8lbGK M7gDkZKC+aWCk8RgWequzauiZC3nDiqE5NTfvqhFcur+Po+N3PiE+ANUmEL1lqGx Ss6ijowPIS+IEj3bt1ATy9aCLY/4q9M= -----END CERTIFICATE-----Generated at Thu Mar 26 17:25:05 2026 by rpki-client