$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa File: a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa (raw, json) Hash identifier: gg4xbR0VEim24imf9Co6WueARSxYLGPkErhtTAZ2tO0= Subject key identifier: 08:C0:CE:B4:D7:25:13:C3:C4:39:B0:D9:21:31:E8:5D:0F:21:25:35 Certificate issuer: /CN=3d1c406c-fcae-4d83-9c1a-5c930e814683 Certificate serial: 010D0C9F4328584D0D427056346BF03A04C5BC00 Authority key identifier: 9A:E4:16:BE:62:8E:A9:D2:ED:EA:9F:D7:48:81:B2:B5:31:0D:A1:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 401473 IP address blocks: 23.128.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:70:56:34:6b:f0:3a:04:c5:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d1c406c-fcae-4d83-9c1a-5c930e814683 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=39106472-1aed-4cf8-a39c-3a0562251611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:6d:04:19:cf:aa:41:5e:53:3e:6c:2e:a4: 07:7f:f7:e4:f3:9a:ee:53:2b:5c:83:84:94:d8:f3: d0:ef:5d:74:2e:07:ad:31:05:51:a8:3b:41:25:12: c2:26:4f:25:01:2f:b2:c9:24:43:1b:9d:b5:3f:c5: d5:da:8d:f0:7d:fb:11:4a:85:a8:6b:1f:92:36:18: e0:5b:b0:c6:70:9f:27:bd:4e:3e:33:78:aa:03:8c: 51:89:c9:21:c3:be:54:26:a7:d5:64:5d:7e:ac:3c: d3:8c:32:aa:96:a7:5a:4b:f2:ce:0a:ec:34:55:58: c1:43:1d:d7:79:17:47:7d:2b:11:bd:7c:f3:05:9b: 3d:cb:33:29:4d:02:a7:f9:91:13:5f:56:e2:48:4b: 08:05:23:7c:6e:b3:45:6e:74:ea:cf:a5:13:1f:f3: b4:5d:84:de:74:ad:07:99:71:53:cc:c0:4c:76:0d: 10:6c:f8:d4:f6:d9:35:0d:d6:32:d6:0a:cb:71:0a: 89:e3:47:b6:b8:8d:89:20:db:0a:44:26:d6:91:f7: 49:e7:5d:8a:80:ef:0e:e9:54:de:a4:46:ea:e5:56: 2f:ec:39:90:d5:98:f7:eb:69:80:2c:82:e7:3e:fd: 6b:fb:19:f1:fa:b3:f7:a0:22:ae:35:59:0f:0f:03: e8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C0:CE:B4:D7:25:13:C3:C4:39:B0:D9:21:31:E8:5D:0F:21:25:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.crl X509v3 Authority Key Identifier: keyid:9A:E4:16:BE:62:8E:A9:D2:ED:EA:9F:D7:48:81:B2:B5:31:0D:A1:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer sbgp-ipAddrBlock: critical IPv4: 23.128.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:d7:ae:3a:08:92:7a:6d:1e:36:1b:65:47:15:79:96:20:7d: 10:f3:e7:5e:72:28:4e:2f:0a:87:df:97:aa:70:ae:4e:64:3c: 75:41:24:48:04:f1:c8:cd:35:2d:69:68:cc:35:15:21:8a:05: 15:04:35:27:cb:52:67:49:7e:ce:a3:c1:8f:b1:59:6d:f3:95: 7a:6f:4d:ca:dd:b1:41:28:4e:a5:d1:50:f6:75:08:9d:a9:a1: b7:57:e5:f7:53:10:7d:9f:84:bc:de:ac:71:07:bd:9d:05:b6: 9a:e6:9c:49:59:d7:9e:57:43:01:2e:08:46:f2:ea:84:74:09: 61:57:e1:79:43:22:f5:5e:07:ae:52:0e:b4:00:3f:bc:97:9d: aa:56:c2:aa:0b:ac:d1:f9:d5:03:30:85:b1:fd:b8:15:1c:6a: f6:d1:e5:9d:b6:d2:99:15:55:a7:6e:ca:50:ea:39:58:d3:36: 6a:7d:d1:a6:9f:e8:98:0a:f5:fa:68:20:92:ed:67:b5:ac:6f: cc:aa:ab:ac:12:e7:8c:c6:91:29:08:6f:ac:6c:33:c6:2b:93: 4e:07:0e:24:af:56:12:74:f4:11:96:bb:87:0f:04:c3:9f:92: 50:3f:ea:3d:25:3f:9b:b8:9d:05:31:38:2e:ca:c2:e8:be:41: e5:e4:06:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQnBWNGvwOgTFvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxYzQwNmMtZmNhZS00ZDgzLTljMWEtNWM5MzBlODE0 NjgzMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk MzkxMDY0NzItMWFlZC00Y2Y4LWEzOWMtM2EwNTYyMjUxNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT9tBBnPqkFeUz5sLqQHf/fk85ruUytcg4SU 2PPQ7110LgetMQVRqDtBJRLCJk8lAS+yySRDG521P8XV2o3wffsRSoWoax+SNhjg W7DGcJ8nvU4+M3iqA4xRickhw75UJqfVZF1+rDzTjDKqlqdaS/LOCuw0VVjBQx3X eRdHfSsRvXzzBZs9yzMpTQKn+ZETX1biSEsIBSN8brNFbnTqz6UTH/O0XYTedK0H mXFTzMBMdg0QbPjU9tk1DdYy1grLcQqJ40e2uI2JINsKRCbWkfdJ512KgO8O6VTe pEbq5VYv7DmQ1Zj362mALILnPv1r+xnx+rP3oCKuNVkPDwPouwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjAzrTXJRPDxDmw2SEx6F0PISU1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDFj NDA2Yy1mY2FlLTRkODMtOWMxYS01YzkzMGU4MTQ2ODMvYTM1MDhhY2YtNmFjZi0z MGY3LWI4YzAtYThkODFiMGU0MWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QxYzQwNmMtZmNhZS00ZDgzLTlj MWEtNWM5MzBlODE0NjgzLzNkMWM0MDZjLWZjYWUtNGQ4My05YzFhLTVjOTMwZTgx NDY4My5jcmwwHwYDVR0jBBgwFoAUmuQWvmKOqdLt6p/XSIGytTENoVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDFjNDA2Yy1mY2FlLTRkODMtOWMxYS01Yzkz MGU4MTQ2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4DcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLXrjoIknptHjYbZUcVeZYgfRDz515yKE4vCoffl6pwrk5kPHVBJEgE 8cjNNS1paMw1FSGKBRUENSfLUmdJfs6jwY+xWW3zlXpvTcrdsUEoTqXRUPZ1CJ2p obdX5fdTEH2fhLzerHEHvZ0FtprmnElZ155XQwEuCEby6oR0CWFX4XlDIvVeB65S DrQAP7yXnapWwqoLrNH51QMwhbH9uBUcavbR5Z220pkVVaduylDqOVjTNmp90aaf 6JgK9fpoIJLtZ7Wsb8yqq6wS54zGkSkIb6xsM8Yrk04HDiSvVhJ09BGWu4cPBMOf klA/6j0lP5u4nQUxOC7Kwui+QeXkBpY= -----END CERTIFICATE-----Generated at Thu Mar 26 21:17:22 2026 by rpki-client