$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/de1128f6-2454-37c2-9ef2-9471ef36bf4f.roa File: de1128f6-2454-37c2-9ef2-9471ef36bf4f.roa (raw, json) Hash identifier: YCah5Wmv0Qwa3o9i3UbsK/KhEvrPzyTCJLazo6Y4cK0= Subject key identifier: FC:CB:0E:B5:ED:AD:67:67:22:A7:ED:DC:A3:0E:28:2B:5E:33:D2:4C Certificate issuer: /CN=2e54985a-e92a-475c-b554-3b9ed1b239dc Certificate serial: 010D0C9F4328584D143D7FB3ABFF09361E9614B0 Authority key identifier: 02:5D:79:74:8B:CB:F8:42:3B:E8:49:CE:29:C2:F1:B5:7C:7A:5F:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/de1128f6-2454-37c2-9ef2-9471ef36bf4f.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 7018 IP address blocks: 23.128.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:7f:b3:ab:ff:09:36:1e:96:14:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e54985a-e92a-475c-b554-3b9ed1b239dc Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=dd86e33f-b4bc-4cd6-a7ca-1a9a1245627b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fa:86:f7:06:0c:b8:fe:74:68:92:76:49:79: 4e:51:5c:cb:f9:b4:84:44:7d:7f:ac:b9:bf:a9:78: 36:a0:b8:99:c0:73:94:c5:fe:e0:d7:00:94:5a:b6: fb:df:43:fd:dc:f2:86:3b:61:6f:4c:36:b9:59:c4: b3:69:11:1b:f4:b7:23:f2:e3:da:e7:71:25:ca:ea: d3:ec:47:6a:04:76:ee:e3:b5:54:61:98:93:9f:48: 41:2f:b1:e6:6b:7a:f0:f5:5d:e0:ee:2d:c7:fd:ab: b4:e2:42:8e:de:cf:18:60:b9:9c:45:2b:6c:60:c1: c4:2f:4c:e4:6d:30:e5:f6:92:da:57:59:37:ad:a8: d2:73:6c:0d:ae:0f:5f:02:c9:58:3d:95:2d:1a:1e: df:64:5b:1e:30:e7:0a:8e:9b:a4:fa:f0:24:a8:0d: 07:56:c6:36:dd:85:cc:fe:0e:60:50:b4:25:ab:35: f2:c7:8e:cd:4a:a4:fb:bf:5a:f6:57:d8:03:4a:4d: f9:6b:57:5c:90:3d:e5:cf:78:e1:53:63:ef:44:9b: e3:2c:36:26:30:00:06:6b:cf:dd:8b:19:fb:a7:68: ee:54:85:be:ee:98:ac:1b:98:97:74:8f:ec:0a:b6: 19:f5:d5:a2:ae:c2:4a:c0:a6:e2:89:66:68:a4:68: 11:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CB:0E:B5:ED:AD:67:67:22:A7:ED:DC:A3:0E:28:2B:5E:33:D2:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/de1128f6-2454-37c2-9ef2-9471ef36bf4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.crl X509v3 Authority Key Identifier: keyid:02:5D:79:74:8B:CB:F8:42:3B:E8:49:CE:29:C2:F1:B5:7C:7A:5F:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer sbgp-ipAddrBlock: critical IPv4: 23.128.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:64:b9:39:d3:48:49:25:5f:2b:b6:2c:0b:4c:cf:bd:d5:7f: 7b:83:e5:23:fb:1a:82:b1:39:d6:67:63:18:de:3d:90:ce:48: 4c:d9:30:eb:0f:92:89:fb:90:76:09:96:6d:51:20:df:ae:3d: 5e:2c:60:e9:9f:04:44:08:22:9b:78:81:d1:df:4d:27:57:21: ee:9b:bb:de:81:2f:05:e6:39:49:5e:80:f0:7d:15:64:c1:7c: ae:2c:c0:3e:ee:ed:67:0a:d5:38:68:7c:71:55:41:a1:42:a5: 47:17:06:3c:dc:ef:06:e8:01:24:35:67:d3:59:66:78:7a:c9: ca:3d:45:fc:16:31:0d:33:ba:17:7b:57:79:3d:72:3f:64:07: 8d:4a:64:84:2f:a8:61:03:78:f4:bc:58:d3:ae:9d:cb:92:e2: 61:af:0a:12:f3:f8:51:7e:96:91:dd:3c:be:d5:52:d5:2c:05: 8a:39:1a:96:32:0e:7d:be:9b:f4:ac:08:8c:f4:54:47:5f:8b: e2:f3:30:50:b8:51:32:f2:82:21:d3:c5:7e:d2:12:49:85:c9: 4c:79:ef:d5:a6:78:86:68:ed:16:7c:af:de:b4:b7:e6:7f:50: f4:cc:35:cd:67:1a:10:75:71:87:7e:2b:5b:ce:3d:fe:54:6c: 2c:1c:89:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPX+zq/8JNh6WFLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU1NDk4NWEtZTkyYS00NzVjLWI1NTQtM2I5ZWQxYjIz OWRjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZGQ4NmUzM2YtYjRiYy00Y2Q2LWE3Y2EtMWE5YTEyNDU2MjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPqG9wYMuP50aJJ2SXlOUVzL+bSERH1/rLm/ qXg2oLiZwHOUxf7g1wCUWrb730P93PKGO2FvTDa5WcSzaREb9Lcj8uPa53ElyurT 7EdqBHbu47VUYZiTn0hBL7Hma3rw9V3g7i3H/au04kKO3s8YYLmcRStsYMHEL0zk bTDl9pLaV1k3rajSc2wNrg9fAslYPZUtGh7fZFseMOcKjpuk+vAkqA0HVsY23YXM /g5gULQlqzXyx47NSqT7v1r2V9gDSk35a1dckD3lz3jhU2PvRJvjLDYmMAAGa8/d ixn7p2juVIW+7pisG5iXdI/sCrYZ9dWirsJKwKbiiWZopGgRaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzLDrXtrWdnIqft3KMOKCteM9JMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZTU0 OTg1YS1lOTJhLTQ3NWMtYjU1NC0zYjllZDFiMjM5ZGMvZGUxMTI4ZjYtMjQ1NC0z N2MyLTllZjItOTQ3MWVmMzZiZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmU1NDk4NWEtZTkyYS00NzVjLWI1 NTQtM2I5ZWQxYjIzOWRjLzJlNTQ5ODVhLWU5MmEtNDc1Yy1iNTU0LTNiOWVkMWIy MzlkYy5jcmwwHwYDVR0jBBgwFoAUAl15dIvL+EI76EnOKcLxtXx6XyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZTU0OTg1YS1lOTJhLTQ3NWMtYjU1NC0zYjll ZDFiMjM5ZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4C8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpkuTnTSEklXyu2LAtMz73Vf3uD5SP7GoKxOdZnYxjePZDOSEzZMOsP kon7kHYJlm1RIN+uPV4sYOmfBEQIIpt4gdHfTSdXIe6bu96BLwXmOUlegPB9FWTB fK4swD7u7WcK1ThofHFVQaFCpUcXBjzc7wboASQ1Z9NZZnh6yco9RfwWMQ0zuhd7 V3k9cj9kB41KZIQvqGEDePS8WNOuncuS4mGvChLz+FF+lpHdPL7VUtUsBYo5GpYy Dn2+m/SsCIz0VEdfi+LzMFC4UTLygiHTxX7SEkmFyUx579WmeIZo7RZ8r960t+Z/ UPTMNc1nGhB1cYd+K1vOPf5UbCwcib0= -----END CERTIFICATE-----Generated at Wed Mar 25 23:24:54 2026 by rpki-client