$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096/ff061e09-d341-38c4-8f9a-595215185617.roa File: ff061e09-d341-38c4-8f9a-595215185617.roa (raw, json) Hash identifier: Qdm41Lxa+TajgoMhFofUzha5nnM1AQU8MT0pjFIz2p4= Subject key identifier: 99:BB:58:8F:48:11:2F:6F:27:A4:7C:B2:B7:FE:66:1D:78:E3:13:FB Certificate issuer: /CN=2826e068-eb57-4472-b533-533d04280096 Certificate serial: 010D0C9F4328584D2D3F7EADFE560F7AE50F69B0 Authority key identifier: 39:CD:44:1C:9F:0F:B5:CD:12:FF:00:FC:EA:00:1B:BD:E9:12:C0:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096/ff061e09-d341-38c4-8f9a-595215185617.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 20367 IP address blocks: 23.158.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096/2826e068-eb57-4472-b533-533d04280096.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096/2826e068-eb57-4472-b533-533d04280096.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:7e:ad:fe:56:0f:7a:e5:0f:69:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2826e068-eb57-4472-b533-533d04280096 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=5f474637-10b6-4a48-a595-199c57508690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a1:c5:c4:71:68:f2:00:0a:54:34:39:8b:b3: 2a:2a:f3:1c:68:fb:d7:da:9e:b5:ec:6f:56:b5:a2: ce:b7:a1:5d:9c:39:39:c0:59:f7:7a:1e:d3:fb:49: 32:5e:84:d1:57:4f:fe:df:c9:e7:3b:da:a2:97:2e: ee:b2:64:91:e4:c4:37:e9:fc:19:ed:80:8a:92:6f: bc:4b:80:e2:1e:6f:27:4d:2d:2c:1e:f1:61:73:42: d2:02:b1:e1:1e:d0:58:36:dd:8f:98:af:cd:1b:c7: 5f:9b:fe:eb:c2:bf:59:db:a5:c7:fa:c9:9c:ce:a7: 1e:8e:81:bc:99:fb:31:3c:ae:07:d2:17:a4:f8:a9: 19:fe:49:3c:b2:7c:7a:c7:06:b1:be:02:d2:d1:cf: 1e:d9:a1:32:e1:24:7c:39:e5:7b:ec:83:59:bc:75: b8:2b:21:34:e8:2b:48:b6:e8:93:37:c2:59:21:8d: 61:30:9d:5d:41:f3:5d:31:28:64:21:47:c6:b2:47: 40:53:b3:20:7c:59:e1:10:40:ec:e3:36:d4:84:44: 29:7c:ba:ca:ef:a8:2d:4f:56:a3:e5:31:6f:45:4d: 30:50:af:96:b6:1b:e0:81:3a:cf:80:b7:9c:3f:c2: 22:65:fb:b8:68:c3:61:98:61:c8:84:f5:54:c2:3e: 1a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BB:58:8F:48:11:2F:6F:27:A4:7C:B2:B7:FE:66:1D:78:E3:13:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096/ff061e09-d341-38c4-8f9a-595215185617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096/2826e068-eb57-4472-b533-533d04280096.crl X509v3 Authority Key Identifier: keyid:39:CD:44:1C:9F:0F:B5:CD:12:FF:00:FC:EA:00:1B:BD:E9:12:C0:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096.cer sbgp-ipAddrBlock: critical IPv4: 23.158.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:01:77:8b:f4:d1:d7:16:56:bb:5e:16:ba:81:58:7c:6a:67: 85:ad:39:e5:e1:d7:16:4d:9f:f4:6e:e8:51:64:18:96:3d:c1: 3f:9c:df:ac:48:57:12:4a:0a:60:15:50:9e:82:34:36:7e:f7: ff:b3:41:af:48:71:37:e7:f7:99:06:02:d8:aa:1e:9b:50:ac: 9f:66:ff:ae:61:e5:5b:88:98:97:a5:91:aa:69:81:79:d5:de: 8c:6a:b2:c3:47:07:f7:49:01:b8:d2:53:29:74:61:1b:b6:32: d0:06:9e:f8:75:7d:dd:b6:fc:dd:4b:43:5d:30:a9:dd:8a:39: 89:1b:5c:d4:43:a3:c4:59:d6:bb:ea:b1:b7:73:ad:ab:ff:bb: 11:c2:12:35:e2:14:cd:df:a4:75:c0:9a:7b:4c:d2:c1:41:e7: dd:b8:2e:74:82:db:c4:5e:1b:0e:9f:1d:15:27:eb:e8:92:07: 06:6e:77:aa:e8:62:73:bf:d3:2d:f7:be:41:a5:30:3f:24:22: cc:eb:55:aa:c2:66:bb:6a:6b:8c:d1:a6:56:d6:89:00:6e:21: 5a:03:31:69:12:95:a1:8f:19:8a:b7:d0:48:f6:2a:52:c5:d6: d6:81:06:a6:8b:cd:57:e8:5e:0d:2d:26:69:f5:65:df:5b:2d: d6:44:f3:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP36t/lYPeuUPabAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgyNmUwNjgtZWI1Ny00NDcyLWI1MzMtNTMzZDA0Mjgw MDk2MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk NWY0NzQ2MzctMTBiNi00YTQ4LWE1OTUtMTk5YzU3NTA4NjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaHFxHFo8gAKVDQ5i7MqKvMcaPvX2p617G9W taLOt6FdnDk5wFn3eh7T+0kyXoTRV0/+38nnO9qily7usmSR5MQ36fwZ7YCKkm+8 S4DiHm8nTS0sHvFhc0LSArHhHtBYNt2PmK/NG8dfm/7rwr9Z26XH+smczqcejoG8 mfsxPK4H0hek+KkZ/kk8snx6xwaxvgLS0c8e2aEy4SR8OeV77INZvHW4KyE06CtI tuiTN8JZIY1hMJ1dQfNdMShkIUfGskdAU7MgfFnhEEDs4zbUhEQpfLrK76gtT1aj 5TFvRU0wUK+WthvggTrPgLecP8IiZfu4aMNhmGHIhPVUwj4amwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJm7WI9IES9vJ6R8srf+Zh144xP7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yODI2 ZTA2OC1lYjU3LTQ0NzItYjUzMy01MzNkMDQyODAwOTYvZmYwNjFlMDktZDM0MS0z OGM0LThmOWEtNTk1MjE1MTg1NjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjgyNmUwNjgtZWI1Ny00NDcyLWI1 MzMtNTMzZDA0MjgwMDk2LzI4MjZlMDY4LWViNTctNDQ3Mi1iNTMzLTUzM2QwNDI4 MDA5Ni5jcmwwHwYDVR0jBBgwFoAUOc1EHJ8Ptc0S/wD86gAbvekSwG0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yODI2ZTA2OC1lYjU3LTQ0NzItYjUzMy01MzNk MDQyODAwOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF56YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAABd4v00dcWVrteFrqBWHxqZ4WtOeXh1xZNn/Ru6FFkGJY9wT+c36xI VxJKCmAVUJ6CNDZ+9/+zQa9IcTfn95kGAtiqHptQrJ9m/65h5VuImJelkappgXnV 3oxqssNHB/dJAbjSUyl0YRu2MtAGnvh1fd22/N1LQ10wqd2KOYkbXNRDo8RZ1rvq sbdzrav/uxHCEjXiFM3fpHXAmntM0sFB5924LnSC28ReGw6fHRUn6+iSBwZud6ro YnO/0y33vkGlMD8kIszrVarCZrtqa4zRplbWiQBuIVoDMWkSlaGPGYq30Ej2KlLF 1taBBqaLzVfoXg0tJmn1Zd9bLdZE85k= -----END CERTIFICATE-----Generated at Thu Mar 26 18:26:58 2026 by rpki-client