$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/d32c4d0b-ff22-3ce7-8796-58eb2e9e8671.roa File: d32c4d0b-ff22-3ce7-8796-58eb2e9e8671.roa (raw, json) Hash identifier: u5Z5By7KTyAyYjHQ1gWszb2Gw1flOQ7xC5wfn5jqGcI= Subject key identifier: 6B:E2:2C:92:1B:C8:76:ED:6C:FD:29:7F:70:5F:9F:BD:80:E4:4B:DD Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F4328584D1F4A3FDD4A7ECDDCAF741690 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/d32c4d0b-ff22-3ce7-8796-58eb2e9e8671.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 7489 IP address blocks: 23.133.0.0/24 maxlen: 24 202.5.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:3f:dd:4a:7e:cd:dc:af:74:16:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=46aebcaa-5901-42b7-b901-a61a5c8a49e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:54:6f:51:36:0f:c8:88:ae:14:d3:f6:8d:ff: ff:d7:3d:32:74:fc:97:c0:28:8a:d4:b5:a6:e7:c2: 6f:62:51:f9:2d:2c:86:6a:66:cb:a5:a0:26:11:f7: c9:f9:cc:26:4d:21:75:3b:ec:1d:05:00:d4:00:f3: c3:08:46:98:98:3a:68:70:40:09:da:26:3d:b4:73: 44:b1:c8:af:07:66:8c:cc:0f:a0:34:80:e8:58:23: 43:4c:02:36:de:92:d0:4f:57:15:28:9d:5a:4f:97: bd:44:16:c4:1a:9e:a4:e8:09:f0:8d:f4:e5:2e:e1: 69:a3:d2:91:c7:e7:aa:6f:47:de:d1:ef:da:fe:ee: 5e:9e:d2:78:99:b7:d1:42:69:f4:02:da:10:53:b4: c5:4f:75:f1:54:09:cb:19:ac:34:50:d3:06:c0:98: 54:bc:e8:b6:80:77:c8:65:f0:11:1e:1b:14:8c:9b: ca:e2:89:c8:6a:1d:fb:e8:ff:3d:98:7e:df:54:62: ff:6b:8a:0a:d4:0c:43:4b:42:ec:a3:70:be:91:b2: 20:be:1e:0f:23:ea:85:1c:a7:02:22:d3:e1:74:b8: 32:5f:9d:bb:85:a7:b6:36:93:d4:ad:c4:c2:35:fc: 37:de:d7:59:4c:65:d7:43:66:5b:40:3d:aa:33:2b: 89:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E2:2C:92:1B:C8:76:ED:6C:FD:29:7F:70:5F:9F:BD:80:E4:4B:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/d32c4d0b-ff22-3ce7-8796-58eb2e9e8671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 23.133.0.0/24 202.5.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:0a:b1:2d:ac:f2:45:37:81:0e:92:13:f9:ce:92:ee:d6:85: 32:2f:06:e0:71:c0:c9:61:a2:a6:d6:b0:f3:3d:97:e5:2f:34: 41:26:09:89:f0:b4:b2:74:44:0e:4d:c7:64:2e:40:d0:58:56: ce:7c:28:f7:e0:a5:7b:8b:2b:8c:9f:4e:7f:c3:f3:a3:11:5d: c7:c7:6b:6c:ad:1d:de:d1:f4:2d:5d:cd:4c:1e:8d:d6:ee:96: 64:9e:82:52:de:b0:59:34:f7:6a:05:b2:b5:e2:eb:2a:1d:f6: a4:d8:4d:77:24:32:68:33:ca:d3:06:18:d7:a4:1c:fa:45:bf: a8:0a:b8:2a:da:10:bf:e6:70:76:7e:46:d4:2c:2e:f7:f6:4c: 36:32:b9:1f:3f:3c:12:ee:99:68:84:29:73:42:93:74:3e:02: 97:10:a4:9c:c3:c4:84:f0:51:ac:f9:c1:c6:fd:8d:2e:08:7d: 58:1a:16:ee:c3:8c:dd:96:90:ac:ec:5e:b5:39:b0:fb:2a:61: 1b:fa:93:c1:e9:b5:97:5a:42:3a:d5:f6:f9:b6:71:74:9c:83: b1:7a:a1:c7:7f:82:a9:39:7e:b8:70:0a:89:f1:61:be:11:9d: 3d:fe:3a:d8:56:17:f7:cf:a3:57:f2:f2:22:52:3c:d8:3f:8b: 93:b9:37:c2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0fSj/dSn7N3K90FpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NDZhZWJjYWEtNTkwMS00MmI3LWI5MDEtYTYxYTVjOGE0OWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlRvUTYPyIiuFNP2jf//1z0ydPyXwCiK1LWm 58JvYlH5LSyGambLpaAmEffJ+cwmTSF1O+wdBQDUAPPDCEaYmDpocEAJ2iY9tHNE scivB2aMzA+gNIDoWCNDTAI23pLQT1cVKJ1aT5e9RBbEGp6k6AnwjfTlLuFpo9KR x+eqb0fe0e/a/u5entJ4mbfRQmn0AtoQU7TFT3XxVAnLGaw0UNMGwJhUvOi2gHfI ZfARHhsUjJvK4onIah376P89mH7fVGL/a4oK1AxDS0Lso3C+kbIgvh4PI+qFHKcC ItPhdLgyX527hae2NpPUrcTCNfw33tdZTGXXQ2ZbQD2qMyuJwwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGviLJIbyHbtbP0pf3Bfn72A5EvdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvZDMyYzRkMGItZmYyMi0z Y2U3LTg3OTYtNThlYjJlOWU4NjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4UAAwQA ygUdMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAI0KsS2s8kU3gQ6SE/nOku7WhTIvBuBxwMlhoqbWsPM9l+Uv NEEmCYnwtLJ0RA5Nx2QuQNBYVs58KPfgpXuLK4yfTn/D86MRXcfHa2ytHd7R9C1d zUwejdbulmSeglLesFk092oFsrXi6yod9qTYTXckMmgzytMGGNekHPpFv6gKuCra EL/mcHZ+RtQsLvf2TDYyuR8/PBLumWiEKXNCk3Q+ApcQpJzDxITwUaz5wcb9jS4I fVgaFu7DjN2WkKzsXrU5sPsqYRv6k8HptZdaQjrV9vm2cXScg7F6ocd/gqk5frhw ConxYb4RnT3+OthWF/fPo1fy8iJSPNg/i5O5N8I= -----END CERTIFICATE-----Generated at Thu Mar 26 12:07:00 2026 by rpki-client