$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/99dd9df1-85c8-3156-9ead-c836be3c6a64.roa File: 99dd9df1-85c8-3156-9ead-c836be3c6a64.roa (raw, json) Hash identifier: Izd4GaxqqCmTosyhQ12ioqmsGiZ7DaR3HF/G8GJCm5E= Subject key identifier: 4F:A6:1C:25:06:54:2D:D2:B9:29:0F:82:0F:FD:53:56:9A:D6:A7:63 Certificate issuer: /CN=423dceca-a5b5-4f9a-8509-49ac01f41c66 Certificate serial: 010D0C9F4328584D359FD8526729DDE001C09800 Authority key identifier: FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/99dd9df1-85c8-3156-9ead-c836be3c6a64.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 63101 IP address blocks: 23.188.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:d8:52:67:29:dd:e0:01:c0:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=423dceca-a5b5-4f9a-8509-49ac01f41c66 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=ca881cd2-86ed-49e5-b7c6-79b5ced34726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1c:40:da:9a:9b:0c:69:e6:05:cf:6b:fe:de: 8a:63:f7:c5:77:62:2c:8b:81:aa:9a:aa:20:23:26: cd:03:73:6e:f3:d7:27:46:60:b5:5b:2e:9b:09:3a: 22:c6:10:b3:64:c5:ee:d5:e0:4d:f2:83:92:ed:a7: 6c:c0:da:7c:b6:e5:a4:94:48:59:ae:0d:a8:8f:df: e9:49:33:63:37:84:1b:6a:19:90:96:98:e2:0b:55: 81:e2:b4:bc:2d:2e:96:ac:3f:2e:53:2d:64:46:36: 1b:24:f9:1c:a4:89:04:19:cf:a7:65:46:af:03:f1: 5b:bd:e8:33:f8:de:8e:62:1e:44:64:c8:a5:9d:de: 2e:d0:7c:58:1b:78:5d:5e:02:73:54:52:07:29:1f: 5f:ed:9d:fc:46:3c:12:4e:12:be:ce:a9:e3:38:91: 26:d8:d6:ad:8f:8a:96:87:47:b2:28:69:8c:9a:fe: 53:81:cd:21:a4:50:90:cc:66:bd:a7:77:da:8e:2b: 40:84:3d:fa:30:d6:a5:30:25:fb:37:b1:bc:7e:b7: ff:f3:42:8d:f7:49:82:2c:e3:60:cc:4a:07:d1:f1: 3f:90:63:d2:05:1c:1d:83:fb:6a:6f:df:3c:ae:e9: 62:5a:27:a9:d2:67:72:10:eb:b3:32:4a:3c:f2:91: 83:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A6:1C:25:06:54:2D:D2:B9:29:0F:82:0F:FD:53:56:9A:D6:A7:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/99dd9df1-85c8-3156-9ead-c836be3c6a64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl X509v3 Authority Key Identifier: keyid:FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer sbgp-ipAddrBlock: critical IPv4: 23.188.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:bd:22:f1:e5:3d:13:2b:97:68:ef:c7:65:d5:da:27:9f:10: 8c:8a:ba:71:b6:95:33:1c:f4:cd:83:59:be:c4:37:eb:00:2a: 62:24:69:5b:0d:ba:cc:69:a4:66:e5:df:fd:01:36:bb:55:0d: c7:5a:5b:9f:80:48:d0:30:bf:c3:94:30:6b:f0:d6:1b:b1:38: 09:f2:b8:ba:e1:5f:27:74:20:be:02:4f:07:62:51:3a:fa:68: 56:01:9d:a8:b1:51:0a:56:25:61:fc:0e:6e:59:27:76:ba:cd: fb:4a:23:1f:0f:4c:93:a3:4c:18:94:af:44:57:f5:35:28:ed: 25:b8:0c:a0:95:f2:a7:01:08:6f:0f:46:b5:99:c6:0f:66:5c: 6f:75:71:93:79:f8:e6:5d:c0:03:69:3f:6e:db:52:fe:8b:0d: 88:50:4f:4a:65:03:21:69:df:78:a2:22:42:48:09:ee:7c:f0: 60:51:00:c1:9f:26:0d:ff:90:f5:02:f2:4b:ea:00:31:83:89: 6d:32:23:da:42:03:a1:2e:be:3e:27:52:35:e5:d3:5c:68:ee: 5f:7a:fa:01:4a:f6:6d:f2:cc:3d:0c:cb:7e:75:4d:9e:f0:bb: 69:14:28:d1:bf:29:c4:c4:ab:97:b0:aa:19:52:56:e3:bd:7a: 48:ff:4d:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n9hSZynd4AHAmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIzZGNlY2EtYTViNS00ZjlhLTg1MDktNDlhYzAxZjQx YzY2MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk Y2E4ODFjZDItODZlZC00OWU1LWI3YzYtNzliNWNlZDM0NzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxxA2pqbDGnmBc9r/t6KY/fFd2Isi4Gqmqog IybNA3Nu89cnRmC1Wy6bCToixhCzZMXu1eBN8oOS7adswNp8tuWklEhZrg2oj9/p STNjN4QbahmQlpjiC1WB4rS8LS6WrD8uUy1kRjYbJPkcpIkEGc+nZUavA/Fbvegz +N6OYh5EZMilnd4u0HxYG3hdXgJzVFIHKR9f7Z38RjwSThK+zqnjOJEm2Natj4qW h0eyKGmMmv5Tgc0hpFCQzGa9p3fajitAhD36MNalMCX7N7G8frf/80KN90mCLONg zEoH0fE/kGPSBRwdg/tqb988ruliWiep0mdyEOuzMko88pGDuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+mHCUGVC3SuSkPgg/9U1aa1qdjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MjNk Y2VjYS1hNWI1LTRmOWEtODUwOS00OWFjMDFmNDFjNjYvOTlkZDlkZjEtODVjOC0z MTU2LTllYWQtYzgzNmJlM2M2YTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDIzZGNlY2EtYTViNS00ZjlhLTg1 MDktNDlhYzAxZjQxYzY2LzQyM2RjZWNhLWE1YjUtNGY5YS04NTA5LTQ5YWMwMWY0 MWM2Ni5jcmwwHwYDVR0jBBgwFoAU/3Vd00ovBtKid/BxEOGI+/7B1+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MjNkY2VjYS1hNWI1LTRmOWEtODUwOS00OWFj MDFmNDFjNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7woMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJu9IvHlPRMrl2jvx2XV2iefEIyKunG2lTMc9M2DWb7EN+sAKmIkaVsN usxppGbl3/0BNrtVDcdaW5+ASNAwv8OUMGvw1huxOAnyuLrhXyd0IL4CTwdiUTr6 aFYBnaixUQpWJWH8Dm5ZJ3a6zftKIx8PTJOjTBiUr0RX9TUo7SW4DKCV8qcBCG8P RrWZxg9mXG91cZN5+OZdwANpP27bUv6LDYhQT0plAyFp33iiIkJICe588GBRAMGf Jg3/kPUC8kvqADGDiW0yI9pCA6Euvj4nUjXl01xo7l96+gFK9m3yzD0My351TZ7w u2kUKNG/KcTEq5ewqhlSVuO9ekj/TXs= -----END CERTIFICATE-----Generated at Thu Mar 26 17:58:02 2026 by rpki-client