$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/28b7558c-0a86-30e8-a429-1570b46f2dc7.roa File: 28b7558c-0a86-30e8-a429-1570b46f2dc7.roa (raw, json) Hash identifier: JjppoV8CmShKYFAk5JQv6XeiX2z+RsdoV7eJ8AIp/dI= Subject key identifier: BC:A9:18:99:0F:4B:3C:6F:46:1A:FF:23:06:6D:73:B5:9B:F5:A8:EB Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281 Certificate serial: 010D0C9F4328584D237A432F68D2DD9CEF2BF580 Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/28b7558c-0a86-30e8-a429-1570b46f2dc7.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 20473 IP address blocks: 23.154.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:43:2f:68:d2:dd:9c:ef:2b:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=ced9a7eb-c46f-4229-b767-6334f46061d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:f7:a2:4f:1b:99:94:38:54:7e:c4:e2:a9:05: 50:6d:71:00:ab:81:24:40:fa:ec:c3:d6:8c:52:51: c1:8d:4e:fb:14:e9:2a:a2:70:61:e7:df:93:6e:b6: 39:61:d9:1a:3a:ed:63:3b:20:9f:97:e1:29:57:1b: e2:fe:1b:3c:53:bb:35:79:b1:80:7c:21:88:4c:48: 11:ef:e5:d8:fd:f5:43:cb:d7:b5:14:92:20:3c:3b: 4c:14:b1:a4:d3:ca:d7:2c:d1:46:3e:33:c7:cc:04: 07:53:af:69:8c:ff:e3:04:5b:c1:e9:8b:1e:6b:54: be:d7:3e:79:d1:ff:0e:bf:98:f9:26:09:be:9f:3e: 1b:f2:53:f7:16:8c:7d:62:54:14:e4:dc:2b:a7:d3: f3:8d:6c:3b:5f:f5:92:6e:74:cd:c6:68:81:b7:14: 3a:ac:0f:35:b0:af:b1:64:05:83:54:8d:7d:e9:26: c6:27:33:6e:55:e4:5f:ea:c3:bb:e9:25:34:39:01: 82:97:83:9b:14:3c:4d:03:2b:89:43:68:6f:95:ab: ff:5e:8d:96:dd:0e:03:4b:1c:f0:6b:0e:31:4d:62: fb:80:88:6d:9f:b4:7f:3c:c9:d8:cb:ea:0c:18:c1: 68:dc:69:b7:1d:58:b9:ba:27:40:4c:cb:6a:a5:a2: eb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A9:18:99:0F:4B:3C:6F:46:1A:FF:23:06:6D:73:B5:9B:F5:A8:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/28b7558c-0a86-30e8-a429-1570b46f2dc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl X509v3 Authority Key Identifier: keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer sbgp-ipAddrBlock: critical IPv4: 23.154.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a6:39:cd:6f:a5:fe:2f:97:3d:c3:49:e6:3a:fd:e6:4d:8f: d5:f2:e2:61:56:48:b9:c8:e5:b4:a0:9d:31:78:33:e2:97:39: b0:1a:c1:f8:58:30:ab:e5:1d:3b:17:c9:88:b3:0a:cc:77:ac: e1:0d:db:19:ab:84:94:11:f4:16:1a:77:32:08:a0:24:de:d4: 89:c6:a6:47:04:85:eb:8e:23:a6:8e:f1:25:64:7f:7d:75:5f: e3:4a:ac:85:da:a9:7c:86:90:bd:4f:90:52:a9:1b:0c:c6:85: 27:aa:d9:93:de:d2:e4:26:ce:8d:20:72:93:05:55:51:59:ca: 5f:89:cf:a8:50:d0:fb:ae:eb:ef:82:9a:1f:03:12:79:1a:d2: af:5d:ac:a4:50:36:87:07:00:df:77:c4:d4:1c:15:ca:18:ec: 6a:eb:ad:51:67:e6:26:07:1f:c8:f4:24:5b:99:c4:32:ef:0f: b6:15:64:8f:21:9f:99:04:55:8f:3a:af:d6:9f:4c:9f:60:bb: aa:75:8c:2a:f2:82:cf:3f:0d:eb:31:8a:d8:0b:e4:99:35:0a: c2:75:1c:cc:e7:64:c2:19:19:88:f1:a4:db:1f:a0:b5:13:9c: 1e:70:c5:8f:79:29:10:70:72:7e:b7:df:f8:e8:d3:5b:fb:db: 2a:63:4b:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekMvaNLdnO8r9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1 MjgxMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk Y2VkOWE3ZWItYzQ2Zi00MjI5LWI3NjctNjMzNGY0NjA2MWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9veiTxuZlDhUfsTiqQVQbXEAq4EkQPrsw9aM UlHBjU77FOkqonBh59+TbrY5YdkaOu1jOyCfl+EpVxvi/hs8U7s1ebGAfCGITEgR 7+XY/fVDy9e1FJIgPDtMFLGk08rXLNFGPjPHzAQHU69pjP/jBFvB6Ysea1S+1z55 0f8Ov5j5Jgm+nz4b8lP3Fox9YlQU5Nwrp9PzjWw7X/WSbnTNxmiBtxQ6rA81sK+x ZAWDVI196SbGJzNuVeRf6sO76SU0OQGCl4ObFDxNAyuJQ2hvlav/Xo2W3Q4DSxzw aw4xTWL7gIhtn7R/PMnYy+oMGMFo3Gm3HVi5uidATMtqpaLrywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLypGJkPSzxvRhr/IwZtc7Wb9ajrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvMjhiNzU1OGMtMGE4Ni0z MGU4LWE0MjktMTU3MGI0NmYyZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0 ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5pYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOmOc1vpf4vlz3DSeY6/eZNj9Xy4mFWSLnI5bSgnTF4M+KXObAawfhY MKvlHTsXyYizCsx3rOEN2xmrhJQR9BYadzIIoCTe1InGpkcEheuOI6aO8SVkf311 X+NKrIXaqXyGkL1PkFKpGwzGhSeq2ZPe0uQmzo0gcpMFVVFZyl+Jz6hQ0Puu6++C mh8DEnka0q9drKRQNocHAN93xNQcFcoY7GrrrVFn5iYHH8j0JFuZxDLvD7YVZI8h n5kEVY86r9afTJ9gu6p1jCrygs8/DesxitgL5Jk1CsJ1HMznZMIZGYjxpNsfoLUT nB5wxY95KRBwcn633/jo01v72ypjS7Y= -----END CERTIFICATE-----Generated at Thu Mar 26 19:44:06 2026 by rpki-client