$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/87664052-795b-32ea-a22c-6b5d3132878f.roa File: 87664052-795b-32ea-a22c-6b5d3132878f.roa (raw, json) Hash identifier: 18ydOeEQQQHej44YbCwyvN3umG0viveWuhVCbV+R43s= Subject key identifier: 58:31:E4:15:70:72:C2:5D:8B:14:13:AA:BF:B6:BD:72:56:B3:F8:71 Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4 Certificate serial: 010D0C9F4328584D24DFA4231E22E283FF5B6280 Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/87664052-795b-32ea-a22c-6b5d3132878f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 55571 IP address blocks: 167.23.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:a4:23:1e:22:e2:83:ff:5b:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=49e2efdd-0626-42de-8daa-c00f774ded62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b3:41:eb:9e:eb:6d:96:1c:ff:62:e9:81:c3: 0f:14:84:e7:fd:bc:01:3f:92:7b:3d:d5:50:4c:7b: 33:65:9b:ef:35:3f:3e:59:70:2f:40:21:01:3b:19: 89:88:02:ac:9f:0a:0e:1a:00:b7:21:bd:ab:cb:2a: 8c:48:06:f3:ff:dc:ff:db:bd:bb:c9:c1:8a:4f:7b: 1d:0d:22:9f:d4:f5:9b:2a:b9:09:8c:c0:25:1b:c3: b5:57:8f:67:82:3d:ab:90:c2:97:44:72:5f:be:63: a1:b6:3b:19:03:ea:f6:47:cf:98:79:f1:47:ab:22: 6b:96:5b:f1:78:f6:20:49:ed:24:a0:34:da:03:f9: 97:d4:4e:8d:b2:ec:f2:18:46:96:d3:40:3b:6f:83: 81:11:b1:ee:17:e1:6a:36:3f:03:16:5c:49:90:b7: 0e:e1:8a:7c:f7:37:5d:3b:f0:64:23:0a:c4:b8:a5: c7:f0:d2:da:aa:d7:ea:be:e0:9e:e4:41:c1:18:fc: 39:be:9d:b6:e7:7e:5b:43:d1:76:99:b6:91:a1:d3: db:50:a2:46:3a:94:1a:7c:f0:dd:c6:62:14:b5:a1: f8:d3:59:0b:94:86:bd:32:f6:75:77:20:ee:cf:71: 6f:0d:1a:16:8f:a2:51:5c:7b:e9:7e:a8:0f:be:35: 59:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:31:E4:15:70:72:C2:5D:8B:14:13:AA:BF:B6:BD:72:56:B3:F8:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/87664052-795b-32ea-a22c-6b5d3132878f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl X509v3 Authority Key Identifier: keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer sbgp-ipAddrBlock: critical IPv4: 167.23.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:85:bb:ce:a5:bd:67:4e:dd:c4:39:90:28:b5:16:d3:81:34: e4:83:73:b6:90:a9:d7:28:28:2b:3c:a9:f8:06:16:01:ea:23: 89:7c:1a:98:e7:05:b7:52:53:c0:c4:da:79:83:37:3d:76:43: 57:64:44:9c:b8:a3:2a:52:62:e5:02:8e:7c:60:6e:8b:ae:27: 84:f2:6f:48:8c:e0:64:bc:4b:bc:ea:50:8c:38:b6:a1:5b:bd: 2e:a2:e0:f9:85:14:2f:27:33:76:06:e9:dd:1b:69:11:76:d8: 8f:54:3f:c8:1a:a6:4e:b9:8a:53:bf:fa:ff:6e:65:6b:9d:d0: ce:9e:86:59:08:24:eb:3d:23:6c:df:6a:89:4d:16:db:61:42: 62:7f:42:d0:3d:d1:8a:97:c4:bc:88:69:85:23:ca:84:cb:65: 82:d3:3b:95:dc:af:bb:15:a3:12:a3:80:57:f5:0f:0e:16:ec: fa:75:31:c5:de:3f:73:37:59:88:ee:46:5f:b0:d4:4f:7f:ef: f3:e3:a4:75:f2:88:25:9e:90:3a:b9:54:1b:d7:20:3c:69:af: a2:35:bb:2e:5e:a0:ff:37:58:12:fa:dd:24:bb:b1:01:ed:ab: 8e:63:08:19:4f:74:c7:ab:e5:e6:76:40:ff:68:1d:c3:54:fd: df:b4:2d:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k36QjHiLig/9bYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm OGM0MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDllMmVmZGQtMDYyNi00MmRlLThkYWEtYzAwZjc3NGRlZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbNB657rbZYc/2LpgcMPFITn/bwBP5J7PdVQ THszZZvvNT8+WXAvQCEBOxmJiAKsnwoOGgC3Ib2ryyqMSAbz/9z/2727ycGKT3sd DSKf1PWbKrkJjMAlG8O1V49ngj2rkMKXRHJfvmOhtjsZA+r2R8+YefFHqyJrllvx ePYgSe0koDTaA/mX1E6NsuzyGEaW00A7b4OBEbHuF+FqNj8DFlxJkLcO4Yp89zdd O/BkIwrEuKXH8NLaqtfqvuCe5EHBGPw5vp22535bQ9F2mbaRodPbUKJGOpQafPDd xmIUtaH401kLlIa9MvZ1dyDuz3FvDRoWj6JRXHvpfqgPvjVZ9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgx5BVwcsJdixQTqr+2vXJWs/hxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1 OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvODc2NjQwNTItNzk1Yi0z MmVhLWEyMmMtNmI1ZDMxMzI4NzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5 NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxd9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqFu86lvWdO3cQ5kCi1FtOBNOSDc7aQqdcoKCs8qfgGFgHqI4l8Gpjn BbdSU8DE2nmDNz12Q1dkRJy4oypSYuUCjnxgbouuJ4Tyb0iM4GS8S7zqUIw4tqFb vS6i4PmFFC8nM3YG6d0baRF22I9UP8gapk65ilO/+v9uZWud0M6ehlkIJOs9I2zf aolNFtthQmJ/QtA90YqXxLyIaYUjyoTLZYLTO5Xcr7sVoxKjgFf1Dw4W7Pp1McXe P3M3WYjuRl+w1E9/7/PjpHXyiCWekDq5VBvXIDxpr6I1uy5eoP83WBL63SS7sQHt q45jCBlPdMer5eZ2QP9oHcNU/d+0LZ8= -----END CERTIFICATE-----Generated at Thu Mar 26 15:06:45 2026 by rpki-client