$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/233688fe-a33c-3a81-9597-da16bac00035.roa File: 233688fe-a33c-3a81-9597-da16bac00035.roa (raw, json) Hash identifier: AlT+zCZRUyki1kmKBybKIhb9o+qCloO+TzUiUKwBIBY= Subject key identifier: C7:EA:DA:64:E7:E1:E5:B9:42:EC:9E:2F:96:45:BB:A7:DF:EA:76:3E Certificate issuer: /CN=1a4a4def-a575-48e1-87d5-56942434422a Certificate serial: 010D0C9F4328584D3DFFB5D80EFD9B74F3903180 Authority key identifier: 05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/233688fe-a33c-3a81-9597-da16bac00035.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 16509 IP address blocks: 192.41.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b5:d8:0e:fd:9b:74:f3:90:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4a4def-a575-48e1-87d5-56942434422a Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=340e9eee-b817-4b04-9c38-a4622b5d631d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5c:82:8b:7a:aa:ad:97:45:f6:3d:7b:40:4b: 64:89:b6:86:89:00:65:ec:9f:07:9a:51:ad:6e:81: 19:7b:c8:be:29:53:1a:27:cf:e9:2c:1d:7a:ab:8a: fe:9e:1e:80:25:58:3c:9a:22:6d:10:cb:71:b9:c6: 35:de:c9:41:8a:f0:0d:51:e7:c8:99:43:27:a9:90: 59:0c:4c:23:6c:93:10:ff:dd:46:30:d9:8f:db:6e: c9:60:0a:cb:21:2f:c2:c6:a6:91:7c:c7:00:2f:96: 69:21:8c:a7:25:fc:0f:5e:db:2d:01:05:1a:e9:b4: 70:b4:d1:d7:71:4b:b0:9d:1c:bc:4b:0c:35:e9:b7: 8b:12:29:1b:4a:77:87:95:5a:c8:1e:2a:54:dc:33: dd:80:0c:96:c3:1f:1b:6d:fd:d7:dc:0f:a8:81:53: 86:5b:ca:57:55:3b:fc:e0:0d:36:44:14:20:b2:1e: c5:2c:2d:6d:a6:e4:d9:61:ec:95:45:25:e2:8f:db: 6f:49:0e:f0:9d:e1:2c:bc:e1:7a:fe:0d:10:27:85: 60:49:6a:03:95:92:a0:04:0a:26:5e:cf:bf:9a:ea: 46:f7:46:dd:e0:47:df:7c:22:85:93:42:52:4e:b6: 75:b8:19:2f:54:56:4a:a8:67:63:09:eb:8e:50:0a: 3b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EA:DA:64:E7:E1:E5:B9:42:EC:9E:2F:96:45:BB:A7:DF:EA:76:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/233688fe-a33c-3a81-9597-da16bac00035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl X509v3 Authority Key Identifier: keyid:05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer sbgp-ipAddrBlock: critical IPv4: 192.41.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:01:8e:5d:b4:88:0e:ec:e7:0d:39:89:ec:b0:51:5b:79:1e: 78:51:fc:2c:43:4e:8d:33:59:8a:ee:30:89:d2:8c:00:84:6f: 33:8d:fd:5e:4f:b0:f0:95:86:e4:cc:8f:67:37:4a:90:e0:13: 89:68:9b:3e:f7:66:30:aa:43:2f:c1:bc:ef:6b:e7:f6:36:3e: 74:68:a1:f1:04:3b:80:f2:08:1b:da:71:99:2b:f3:64:f8:0d: 6e:5c:4b:ec:d2:66:f8:f3:a1:b0:40:f1:1b:20:ca:7f:0f:ba: 22:e6:a5:b0:84:05:20:4b:3d:63:f2:59:4a:91:06:2f:b6:2d: 37:0c:94:ba:72:19:6c:83:cb:44:6a:da:7e:e7:42:4b:b3:be: 54:f3:60:8d:14:82:3a:df:44:82:77:3d:95:99:05:81:40:9a: 06:7f:3b:c5:ab:ea:c2:01:35:d9:8c:55:3f:4d:2d:90:e3:1a: 53:d1:26:3d:f6:2c:f3:9f:10:2f:08:c4:21:7e:02:c1:38:6b: 30:a0:f4:51:32:0d:4a:1a:e7:84:0a:53:15:e4:fd:4f:24:94: 51:e5:ef:ac:af:62:b3:8e:e5:04:1b:fb:9e:bd:43:bd:50:1a: 23:aa:22:46:a0:31:19:14:d7:82:fb:17:e7:4b:4a:a7:18:27: db:d9:83:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7XYDv2bdPOQMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE0YTRkZWYtYTU3NS00OGUxLTg3ZDUtNTY5NDI0MzQ0 MjJhMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MzQwZTllZWUtYjgxNy00YjA0LTljMzgtYTQ2MjJiNWQ2MzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVyCi3qqrZdF9j17QEtkibaGiQBl7J8HmlGt boEZe8i+KVMaJ8/pLB16q4r+nh6AJVg8miJtEMtxucY13slBivANUefImUMnqZBZ DEwjbJMQ/91GMNmP227JYArLIS/CxqaRfMcAL5ZpIYynJfwPXtstAQUa6bRwtNHX cUuwnRy8Sww16beLEikbSneHlVrIHipU3DPdgAyWwx8bbf3X3A+ogVOGW8pXVTv8 4A02RBQgsh7FLC1tpuTZYeyVRSXij9tvSQ7wneEsvOF6/g0QJ4VgSWoDlZKgBAom Xs+/mupG90bd4EfffCKFk0JSTrZ1uBkvVFZKqGdjCeuOUAo7CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfq2mTn4eW5QuyeL5ZFu6ff6nY+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRh NGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0MjQzNDQyMmEvMjMzNjg4ZmUtYTMzYy0z YTgxLTk1OTctZGExNmJhYzAwMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWE0YTRkZWYtYTU3NS00OGUxLTg3 ZDUtNTY5NDI0MzQ0MjJhLzFhNGE0ZGVmLWE1NzUtNDhlMS04N2Q1LTU2OTQyNDM0 NDIyYS5jcmwwHwYDVR0jBBgwFoAUBW4Y3lSa3v6pP3yK6HLSiS8mL0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRhNGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0 MjQzNDQyMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCnfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcBjl20iA7s5w05ieywUVt5HnhR/CxDTo0zWYruMInSjACEbzON/V5P sPCVhuTMj2c3SpDgE4lomz73ZjCqQy/BvO9r5/Y2PnRoofEEO4DyCBvacZkr82T4 DW5cS+zSZvjzobBA8Rsgyn8PuiLmpbCEBSBLPWPyWUqRBi+2LTcMlLpyGWyDy0Rq 2n7nQkuzvlTzYI0UgjrfRIJ3PZWZBYFAmgZ/O8Wr6sIBNdmMVT9NLZDjGlPRJj32 LPOfEC8IxCF+AsE4azCg9FEyDUoa54QKUxXk/U8klFHl76yvYrOO5QQb+569Q71Q GiOqIkagMRkU14L7F+dLSqcYJ9vZg3g= -----END CERTIFICATE-----Generated at Thu Mar 26 02:12:19 2026 by rpki-client