$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/5fbdd11a-f602-32ae-ada7-555d0e61d29a.roa File: 5fbdd11a-f602-32ae-ada7-555d0e61d29a.roa (raw, json) Hash identifier: 9RN4DczoqmlaeZqkoK/6WRb377oDZx/zKF4UhNkcae0= Subject key identifier: C3:BF:08:8F:88:A3:24:3A:53:58:2E:C9:8C:02:B2:E4:78:62:38:B9 Certificate issuer: /CN=2e54985a-e92a-475c-b554-3b9ed1b239dc Certificate serial: 010D0C9F4328584D300AB32CA0211A74DFF2F780 Authority key identifier: 02:5D:79:74:8B:CB:F8:42:3B:E8:49:CE:29:C2:F1:B5:7C:7A:5F:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/5fbdd11a-f602-32ae-ada7-555d0e61d29a.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 399870 IP address blocks: 23.128.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:b3:2c:a0:21:1a:74:df:f2:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e54985a-e92a-475c-b554-3b9ed1b239dc Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=d209711e-64bb-40d4-ab6e-67699a6faec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:95:e8:b2:3a:d3:a7:19:98:e2:70:cc:96:7f: e8:88:ec:b4:d1:da:37:4f:4c:22:12:72:50:6a:0c: b4:8c:1a:91:e6:12:4f:c7:12:88:33:7a:04:43:2b: 43:5e:6d:47:74:9c:65:e6:16:96:fd:de:01:c5:55: ef:c9:d0:09:d6:a0:f4:47:d9:4d:68:9e:a7:ff:27: 72:12:60:9b:76:a8:ae:87:5b:6d:e9:04:08:6f:a0: 2b:e4:27:8e:33:0a:52:78:f3:ac:07:c6:93:d0:a3: bb:a9:22:4e:37:3e:22:4b:87:a9:65:92:e1:a7:5f: 3d:40:1c:31:d1:20:d9:26:82:86:64:db:5c:92:d6: bb:00:33:f3:2b:fa:d1:cc:2d:40:98:dc:b0:5f:14: dd:08:30:d2:4c:38:ac:82:62:86:9d:91:90:35:fb: 59:e9:b8:41:2c:6d:af:d3:d0:d8:c3:5c:19:55:fe: 5a:13:d3:55:9e:4e:eb:a5:91:86:08:05:72:7f:96: e3:95:3a:86:75:29:51:1f:42:b6:17:40:04:06:85: 84:80:10:da:43:c6:21:5d:68:a4:1b:5e:38:1c:62: 8d:79:8b:d5:92:97:0e:49:0e:b5:7d:57:8b:d6:b3: c6:b8:db:fd:0f:59:f8:ac:91:b6:97:c3:31:24:82: 6b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BF:08:8F:88:A3:24:3A:53:58:2E:C9:8C:02:B2:E4:78:62:38:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/5fbdd11a-f602-32ae-ada7-555d0e61d29a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.crl X509v3 Authority Key Identifier: keyid:02:5D:79:74:8B:CB:F8:42:3B:E8:49:CE:29:C2:F1:B5:7C:7A:5F:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer sbgp-ipAddrBlock: critical IPv4: 23.128.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:1a:57:17:24:c6:2b:52:1f:52:27:0a:4f:eb:e1:ae:fe:9a: 3c:39:2c:11:19:a0:29:e3:92:2d:18:b9:b8:62:41:fb:d6:28: d0:ac:76:80:65:35:b3:69:0e:57:43:d7:53:fd:b6:84:b3:e4: cb:42:87:14:26:84:a0:a8:44:4b:8b:38:b5:b5:87:cd:8b:0a: 1e:cb:96:4a:bf:94:eb:b4:96:99:d8:0e:c2:3f:05:de:52:fa: 3d:d0:98:2a:78:41:52:1e:39:ff:13:ca:2a:9e:94:0e:70:c5: d0:b4:23:d9:76:17:24:1b:98:9e:8e:e1:7a:2a:10:97:b8:30: fb:69:81:95:0c:09:4d:2e:f8:c3:10:1b:0a:55:2c:04:ab:7e: b2:d5:af:6b:42:f8:c9:df:ed:5c:e2:96:e0:0b:55:cd:25:73: cd:e0:11:75:12:15:7a:6f:6f:e5:41:bd:59:8d:eb:fc:8c:a4: 6a:90:69:4a:af:63:24:c6:9f:89:aa:1d:ff:31:15:58:ca:fb: bd:f0:b5:a7:f7:4e:d1:c7:ee:29:3e:f8:45:f4:d0:5b:25:65: b7:4a:ab:04:02:8b:25:45:40:50:76:be:49:ce:91:a1:62:32: 8e:6c:22:0a:a0:c6:4d:3e:06:b0:65:72:fa:77:bc:df:57:13: d7:af:6d:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCrMsoCEadN/y94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU1NDk4NWEtZTkyYS00NzVjLWI1NTQtM2I5ZWQxYjIz OWRjMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZDIwOTcxMWUtNjRiYi00MGQ0LWFiNmUtNjc2OTlhNmZhZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZXosjrTpxmY4nDMln/oiOy00do3T0wiEnJQ agy0jBqR5hJPxxKIM3oEQytDXm1HdJxl5haW/d4BxVXvydAJ1qD0R9lNaJ6n/ydy EmCbdqiuh1tt6QQIb6Ar5CeOMwpSePOsB8aT0KO7qSJONz4iS4epZZLhp189QBwx 0SDZJoKGZNtckta7ADPzK/rRzC1AmNywXxTdCDDSTDisgmKGnZGQNftZ6bhBLG2v 09DYw1wZVf5aE9NVnk7rpZGGCAVyf5bjlTqGdSlRH0K2F0AEBoWEgBDaQ8YhXWik G144HGKNeYvVkpcOSQ61fVeL1rPGuNv9D1n4rJG2l8MxJIJreQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMO/CI+IoyQ6U1guyYwCsuR4Yji5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZTU0 OTg1YS1lOTJhLTQ3NWMtYjU1NC0zYjllZDFiMjM5ZGMvNWZiZGQxMWEtZjYwMi0z MmFlLWFkYTctNTU1ZDBlNjFkMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmU1NDk4NWEtZTkyYS00NzVjLWI1 NTQtM2I5ZWQxYjIzOWRjLzJlNTQ5ODVhLWU5MmEtNDc1Yy1iNTU0LTNiOWVkMWIy MzlkYy5jcmwwHwYDVR0jBBgwFoAUAl15dIvL+EI76EnOKcLxtXx6XyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZTU0OTg1YS1lOTJhLTQ3NWMtYjU1NC0zYjll ZDFiMjM5ZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4C8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkaVxckxitSH1InCk/r4a7+mjw5LBEZoCnjki0YubhiQfvWKNCsdoBl NbNpDldD11P9toSz5MtChxQmhKCoREuLOLW1h82LCh7Llkq/lOu0lpnYDsI/Bd5S +j3QmCp4QVIeOf8TyiqelA5wxdC0I9l2FyQbmJ6O4XoqEJe4MPtpgZUMCU0u+MMQ GwpVLASrfrLVr2tC+Mnf7VziluALVc0lc83gEXUSFXpvb+VBvVmN6/yMpGqQaUqv YyTGn4mqHf8xFVjK+73wtaf3TtHH7ik++EX00FslZbdKqwQCiyVFQFB2vknOkaFi Mo5sIgqgxk0+BrBlcvp3vN9XE9evbZY= -----END CERTIFICATE-----Generated at Thu Mar 26 12:23:46 2026 by rpki-client