$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/f1b366da-3abf-3f7f-8b29-5b099b2e9327.roa File: f1b366da-3abf-3f7f-8b29-5b099b2e9327.roa (raw, json) Hash identifier: +NZBlUT5p3pPRVHAqVCrMlGG9+y0YXrvyTnupWPzNsc= Subject key identifier: 81:9E:7B:62:B7:40:11:18:89:24:D0:5D:50:50:EE:FD:B0:55:60:A1 Certificate issuer: /CN=1cce0e4f-1927-4581-821f-686f4e5fd6be Certificate serial: 010D0C9F4328584D300A2DDDBDA387A3FAC183C0 Authority key identifier: EA:9E:FD:70:5E:BD:A0:8B:D3:6E:67:DF:53:85:8F:1C:AE:47:D6:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/f1b366da-3abf-3f7f-8b29-5b099b2e9327.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7837 IP address blocks: 23.189.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:2d:dd:bd:a3:87:a3:fa:c1:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cce0e4f-1927-4581-821f-686f4e5fd6be Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=6fee6fe0-48fc-4712-87a8-44502173f5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:66:e3:c7:40:b3:c7:70:57:83:7e:98:b5:ad: 43:06:5a:8c:c8:5c:9f:64:d3:b9:3d:6b:2f:72:9a: 1e:21:ef:0b:79:fb:6f:4f:43:97:71:10:f1:55:44: 81:30:a8:b4:40:6b:72:a6:33:ee:d0:b4:34:74:50: b4:3a:54:fd:17:50:48:8b:35:ac:78:69:c0:8a:9b: e7:b6:b8:6e:e2:bf:e1:50:4e:36:cb:c0:f7:51:e7: 59:73:0c:1c:2a:b4:52:da:b7:81:f6:c4:ec:ff:9f: 62:ce:44:6a:6c:64:2d:45:ce:96:b9:ee:bc:3a:56: 70:70:c2:2f:27:3b:67:4d:19:bc:2f:f7:34:07:f5: 59:97:68:f9:66:4f:7b:9a:53:da:94:57:5c:70:36: e0:a5:14:e1:22:bf:bc:30:e0:c9:4a:ef:5b:3b:40: bc:8e:52:4a:80:96:f0:92:39:55:3e:2f:88:61:65: b1:65:d5:a0:29:f3:b5:fb:81:ce:8a:b1:ce:d5:7b: 7b:39:5e:cb:ad:b0:01:3f:ea:08:fb:be:81:e6:f7: 74:87:07:a4:a1:84:38:d4:43:5d:c7:06:1f:6e:31: e8:cf:bf:e8:89:34:75:50:30:fe:6b:86:f8:5a:7a: 49:f7:5c:1f:52:dc:b3:4f:80:61:f1:82:ff:cf:40: 16:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9E:7B:62:B7:40:11:18:89:24:D0:5D:50:50:EE:FD:B0:55:60:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/f1b366da-3abf-3f7f-8b29-5b099b2e9327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.crl X509v3 Authority Key Identifier: keyid:EA:9E:FD:70:5E:BD:A0:8B:D3:6E:67:DF:53:85:8F:1C:AE:47:D6:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer sbgp-ipAddrBlock: critical IPv4: 23.189.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:94:1a:d4:77:2b:3c:e0:49:13:d8:20:f9:61:ad:09:83:45: ff:b8:a0:20:05:d5:ac:1e:04:25:db:3d:6d:33:19:8b:dc:6c: 89:f5:9e:27:14:19:db:93:95:ff:7d:4c:0e:df:7c:d5:96:7e: 4b:3d:dc:99:c7:87:23:ba:40:a7:10:34:a9:ac:e0:f6:04:2d: b2:f9:25:93:5a:7a:fb:7a:0c:61:d8:75:e2:d6:f4:29:19:11: 25:40:93:16:d2:dd:e5:d7:58:9d:b9:4d:0a:de:85:a8:69:e0: 96:b9:39:63:5b:54:77:ec:8a:1d:d7:fa:ea:d1:8b:fc:28:e0: 2d:30:30:ba:8f:f6:f0:8c:a2:ea:65:6a:d9:d4:cf:1a:f4:81: 51:5c:58:91:ce:62:49:ed:0b:ed:ad:8c:73:af:06:11:be:69: d3:e0:bd:fc:e3:50:34:15:89:a1:a1:9f:e9:09:3f:e1:03:6d: 5e:09:b0:e9:65:23:1c:1b:94:ef:e1:24:7a:85:5e:28:92:02: 4d:23:8b:a0:80:dc:6f:5e:2a:02:9e:34:ff:a2:c4:63:db:89: bf:8f:72:3f:dc:c6:79:62:f1:7a:64:69:cd:c2:30:ff:1c:96: 29:1f:a1:27:ca:3d:44:9c:d6:0e:9d:37:ce:31:5c:30:af:58: be:de:45:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCi3dvaOHo/rBg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNjZTBlNGYtMTkyNy00NTgxLTgyMWYtNjg2ZjRlNWZk NmJlMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NmZlZTZmZTAtNDhmYy00NzEyLTg3YTgtNDQ1MDIxNzNmNWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2bjx0Czx3BXg36Yta1DBlqMyFyfZNO5PWsv cpoeIe8LeftvT0OXcRDxVUSBMKi0QGtypjPu0LQ0dFC0OlT9F1BIizWseGnAipvn trhu4r/hUE42y8D3UedZcwwcKrRS2reB9sTs/59izkRqbGQtRc6Wue68OlZwcMIv JztnTRm8L/c0B/VZl2j5Zk97mlPalFdccDbgpRThIr+8MODJSu9bO0C8jlJKgJbw kjlVPi+IYWWxZdWgKfO1+4HOirHO1Xt7OV7LrbABP+oI+76B5vd0hwekoYQ41ENd xwYfbjHoz7/oiTR1UDD+a4b4WnpJ91wfUtyzT4Bh8YL/z0AWewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGee2K3QBEYiSTQXVBQ7v2wVWChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Nl MGU0Zi0xOTI3LTQ1ODEtODIxZi02ODZmNGU1ZmQ2YmUvZjFiMzY2ZGEtM2FiZi0z ZjdmLThiMjktNWIwOTliMmU5MzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWNjZTBlNGYtMTkyNy00NTgxLTgy MWYtNjg2ZjRlNWZkNmJlLzFjY2UwZTRmLTE5MjctNDU4MS04MjFmLTY4NmY0ZTVm ZDZiZS5jcmwwHwYDVR0jBBgwFoAU6p79cF69oIvTbmffU4WPHK5H1pEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xY2NlMGU0Zi0xOTI3LTQ1ODEtODIxZi02ODZm NGU1ZmQ2YmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF73IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+UGtR3KzzgSRPYIPlhrQmDRf+4oCAF1aweBCXbPW0zGYvcbIn1nicU GduTlf99TA7ffNWWfks93JnHhyO6QKcQNKms4PYELbL5JZNaevt6DGHYdeLW9CkZ ESVAkxbS3eXXWJ25TQrehahp4Ja5OWNbVHfsih3X+urRi/wo4C0wMLqP9vCMoupl atnUzxr0gVFcWJHOYkntC+2tjHOvBhG+adPgvfzjUDQViaGhn+kJP+EDbV4JsOll IxwblO/hJHqFXiiSAk0ji6CA3G9eKgKeNP+ixGPbib+Pcj/cxnli8Xpkac3CMP8c likfoSfKPUSc1g6dN84xXDCvWL7eRUw= -----END CERTIFICATE-----Generated at Thu Mar 26 09:03:53 2026 by rpki-client