$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/a2022f42-0e7e-346d-8d87-d07af1866713.roa File: a2022f42-0e7e-346d-8d87-d07af1866713.roa (raw, json) Hash identifier: kzPg9Q4soyRFKiFwBQA6LrUQNN+JuBadsMvkK9240pQ= Subject key identifier: 59:B7:5C:84:3A:82:F6:D0:F7:07:9B:69:BE:AA:D1:9E:CD:B2:72:B7 Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4 Certificate serial: 010D0C9F4328584D24DFA3FF566CCFE193A62700 Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/a2022f42-0e7e-346d-8d87-d07af1866713.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 55571 IP address blocks: 167.23.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:a3:ff:56:6c:cf:e1:93:a6:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=7a93dfd9-4334-4722-babc-25a0f0262ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f5:d9:67:b2:a4:ab:04:56:b8:ac:8d:34:bb: 34:19:3f:69:1a:25:d9:7b:fb:a1:65:0c:08:ce:31: bf:de:d2:87:3a:63:19:b1:1e:d9:a5:b0:fe:7d:c1: fa:cf:72:9d:15:b7:4f:b2:b3:7a:b1:fc:3e:25:33: 96:4b:85:b3:9d:27:04:fe:e2:57:c4:80:9a:d4:a9: d3:f9:7f:04:ff:89:ce:68:e7:75:7b:93:8b:2b:7e: 43:60:3c:33:8c:00:cf:d9:7d:7f:d9:26:7d:c2:1a: dd:7c:ad:36:0f:e2:94:33:db:55:91:04:32:d5:a7: 6c:53:0e:a8:7b:5f:51:88:27:04:01:0f:73:7f:40: 63:9d:93:95:7f:d8:68:8a:f6:27:9e:fe:e6:9c:79: 7b:59:12:c2:dd:1a:2d:c9:92:c8:a8:9f:e3:0c:75: 1f:23:f0:9b:0e:f4:ef:93:7f:da:e6:42:e3:5d:bd: 1e:44:d1:a5:d3:d4:6d:71:4c:08:b2:d6:46:f8:16: 7d:82:d4:3a:02:9c:c8:bc:3c:92:d6:83:02:2c:81: bd:e9:35:c9:a0:47:66:95:77:33:b7:ac:f6:e8:be: 94:eb:7c:d0:c4:e7:e4:08:a1:4e:54:0f:00:34:be: 9a:64:0a:ca:f5:54:9e:14:2e:d0:18:7a:55:6e:22: 0c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B7:5C:84:3A:82:F6:D0:F7:07:9B:69:BE:AA:D1:9E:CD:B2:72:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/a2022f42-0e7e-346d-8d87-d07af1866713.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl X509v3 Authority Key Identifier: keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer sbgp-ipAddrBlock: critical IPv4: 167.23.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ab:2d:6f:3a:a2:06:69:81:1b:10:c4:67:40:72:b7:07:6d: 95:fa:3a:fe:2a:d7:c6:ab:fa:cd:e1:b1:83:8c:53:e5:8a:91: 55:21:b1:13:1b:2d:6a:13:f3:a2:a2:43:eb:f6:c0:fe:a3:9e: 32:22:1e:60:19:c5:80:4d:6e:96:3d:d4:a8:da:47:6d:f1:46: 10:2d:17:d2:7f:bc:d2:4c:22:33:84:08:b9:8a:84:7e:e7:f5: 7f:81:7a:d6:77:2e:d2:bb:f3:0f:e2:b3:70:70:f3:a7:c3:fe: 45:a5:a3:5c:76:28:ec:bd:5f:17:37:3f:bc:45:ee:99:20:1d: 0c:8d:12:62:71:c7:89:87:1a:cf:83:c7:9f:ba:f3:06:06:52: cf:8a:d3:79:e0:dc:bd:fe:96:7b:5f:d1:71:87:c6:ec:95:15: 76:a0:31:6d:f2:ae:81:64:ac:32:b6:e3:2a:b4:34:a5:e5:1d: 48:dd:9b:4e:99:77:ab:ba:9d:7f:cb:6d:24:06:25:41:7b:8e: 80:70:84:a8:8d:74:86:94:74:5c:a0:93:7c:39:9f:de:7f:c7: d9:52:ba:83:d6:80:0d:6b:c5:25:79:ed:05:a3:dc:4c:5c:46: 84:47:00:9b:a6:0f:00:f8:4f:9c:4e:c2:25:e1:6b:ae:36:68: 4c:52:d5:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k36P/VmzP4ZOmJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm OGM0MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk N2E5M2RmZDktNDMzNC00NzIyLWJhYmMtMjVhMGYwMjYyZmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvXZZ7KkqwRWuKyNNLs0GT9pGiXZe/uhZQwI zjG/3tKHOmMZsR7ZpbD+fcH6z3KdFbdPsrN6sfw+JTOWS4WznScE/uJXxICa1KnT +X8E/4nOaOd1e5OLK35DYDwzjADP2X1/2SZ9whrdfK02D+KUM9tVkQQy1adsUw6o e19RiCcEAQ9zf0BjnZOVf9hoivYnnv7mnHl7WRLC3RotyZLIqJ/jDHUfI/CbDvTv k3/a5kLjXb0eRNGl09RtcUwIstZG+BZ9gtQ6ApzIvDyS1oMCLIG96TXJoEdmlXcz t6z26L6U63zQxOfkCKFOVA8ANL6aZArK9VSeFC7QGHpVbiIMuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFm3XIQ6gvbQ9webab6q0Z7NsnK3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1 OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvYTIwMjJmNDItMGU3ZS0z NDZkLThkODctZDA3YWYxODY2NzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5 NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxd8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWrLW86ogZpgRsQxGdAcrcHbZX6Ov4q18ar+s3hsYOMU+WKkVUhsRMb LWoT86KiQ+v2wP6jnjIiHmAZxYBNbpY91KjaR23xRhAtF9J/vNJMIjOECLmKhH7n 9X+BetZ3LtK78w/is3Bw86fD/kWlo1x2KOy9Xxc3P7xF7pkgHQyNEmJxx4mHGs+D x5+68wYGUs+K03ng3L3+lntf0XGHxuyVFXagMW3yroFkrDK24yq0NKXlHUjdm06Z d6u6nX/LbSQGJUF7joBwhKiNdIaUdFygk3w5n95/x9lSuoPWgA1rxSV57QWj3Exc RoRHAJumDwD4T5xOwiXha642aExS1bI= -----END CERTIFICATE-----Generated at Thu Mar 26 15:23:35 2026 by rpki-client