$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/ffe04b76-6663-3c40-bf1c-61fc74949fb9.roa File: ffe04b76-6663-3c40-bf1c-61fc74949fb9.roa (raw, json) Hash identifier: l1KevzMPJ5oJRRQDRFO5XAlNDylYrl3xHdHgFTzHhHk= Subject key identifier: 99:AF:99:DC:55:11:FE:B8:C8:C2:EE:BC:F0:D6:93:A4:FE:EC:82:89 Certificate issuer: /CN=425f73bb-63fc-4aec-8f78-14a58f92bf2e Certificate serial: 010D0C9F4328584D1707DA13BBB4DE4B642AD9C0 Authority key identifier: CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/ffe04b76-6663-3c40-bf1c-61fc74949fb9.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 397700 IP address blocks: 23.188.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:da:13:bb:b4:de:4b:64:2a:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=425f73bb-63fc-4aec-8f78-14a58f92bf2e Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=9c85fb1f-6938-4f92-8379-2e613d9b1fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:82:a0:ec:4f:33:4d:f2:cd:dc:46:96:11:c2: 1d:d1:c4:8b:82:b8:1e:7a:54:9d:bc:6b:e7:c0:f9: b7:e3:93:64:7a:1c:ce:20:7a:c7:8f:14:cb:3f:e8: dc:fb:08:c1:69:24:ee:0e:fe:87:06:29:82:80:a8: 6c:80:77:da:01:17:11:49:c1:86:7f:01:ef:aa:3a: 9f:26:c8:0c:9e:e0:15:ba:62:c9:bb:74:ac:51:23: 13:c6:40:84:74:00:e4:43:ab:a5:1b:e1:6b:a6:c1: b0:3c:e1:66:77:2f:9a:10:dc:df:4d:52:b7:47:d3: 19:0d:8a:87:12:8d:b5:d6:3b:03:1d:88:d9:52:c4: c4:2e:74:08:42:18:46:a7:07:bd:a3:b0:ab:f3:83: 00:a5:71:7b:67:48:6b:74:73:77:83:4f:5c:08:b9: 08:da:0a:df:56:82:8f:0f:0f:74:e1:02:d3:11:48: 9e:df:52:63:d2:68:89:6c:e9:ac:31:38:c6:24:c1: 59:3a:5b:b9:1e:39:65:af:5c:81:46:37:bb:63:51: 75:5c:e5:a7:ac:73:d2:44:fd:78:b3:53:19:22:ad: 90:0a:7d:fa:57:c0:a3:96:55:bc:16:7d:64:fb:2b: 79:a7:2b:dd:fc:ed:5d:da:3a:62:33:91:33:7d:bb: 4d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AF:99:DC:55:11:FE:B8:C8:C2:EE:BC:F0:D6:93:A4:FE:EC:82:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/ffe04b76-6663-3c40-bf1c-61fc74949fb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.crl X509v3 Authority Key Identifier: keyid:CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer sbgp-ipAddrBlock: critical IPv4: 23.188.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:9c:ef:2b:44:1b:55:49:04:32:35:74:95:6c:49:c1:ca:7c: 47:e4:7d:91:6e:d6:06:e5:f2:a2:cb:e5:85:e7:59:78:a5:e9: 7d:3e:e8:21:b5:2a:2b:e7:d1:7f:6b:7c:c2:7f:c4:99:65:38: f3:e3:4f:2b:4b:3d:d1:92:70:c3:ac:6b:4a:16:77:99:c8:e4: cb:7c:5c:20:9d:b3:b7:1d:39:89:ac:19:de:cd:82:68:30:b8: 3c:39:69:9f:dd:e2:b9:cb:ec:c9:54:f0:50:0c:0f:7d:95:9a: 8b:f7:5e:00:59:22:16:77:e3:9e:4c:7f:b3:4f:61:fa:ea:ca: c0:a8:f1:ac:33:1f:16:c1:00:01:6a:e5:56:11:9c:13:2d:6c: cb:ab:30:5c:6b:fa:98:5a:df:c8:5c:e3:82:44:09:cd:1b:f1: 02:64:1b:5c:2f:95:2f:04:c3:32:07:87:df:ff:f8:08:9e:6b: 6e:5c:b7:d2:bc:ce:ad:da:b6:54:79:9e:9c:be:4b:8f:40:d9: 5a:eb:70:b4:e1:0d:fb:08:c2:e4:5a:25:35:bc:4b:35:ac:79: b8:7b:c1:30:1e:49:d6:fa:76:61:bc:b4:3d:2f:5e:23:ce:51: a5:b9:74:83:d4:62:22:38:f2:fe:b1:bf:f4:2b:e8:eb:bb:c5: 0c:99:d4:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB9oTu7TeS2Qq2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI1ZjczYmItNjNmYy00YWVjLThmNzgtMTRhNThmOTJi ZjJlMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk OWM4NWZiMWYtNjkzOC00ZjkyLTgzNzktMmU2MTNkOWIxZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oKg7E8zTfLN3EaWEcId0cSLgrgeelSdvGvn wPm345NkehzOIHrHjxTLP+jc+wjBaSTuDv6HBimCgKhsgHfaARcRScGGfwHvqjqf JsgMnuAVumLJu3SsUSMTxkCEdADkQ6ulG+FrpsGwPOFmdy+aENzfTVK3R9MZDYqH Eo211jsDHYjZUsTELnQIQhhGpwe9o7Cr84MApXF7Z0hrdHN3g09cCLkI2grfVoKP Dw904QLTEUie31Jj0miJbOmsMTjGJMFZOlu5Hjllr1yBRje7Y1F1XOWnrHPSRP14 s1MZIq2QCn36V8CjllW8Fn1k+yt5pyvd/O1d2jpiM5EzfbtN8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmvmdxVEf64yMLuvPDWk6T+7IKJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MjVm NzNiYi02M2ZjLTRhZWMtOGY3OC0xNGE1OGY5MmJmMmUvZmZlMDRiNzYtNjY2My0z YzQwLWJmMWMtNjFmYzc0OTQ5ZmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDI1ZjczYmItNjNmYy00YWVjLThm NzgtMTRhNThmOTJiZjJlLzQyNWY3M2JiLTYzZmMtNGFlYy04Zjc4LTE0YTU4Zjky YmYyZS5jcmwwHwYDVR0jBBgwFoAUzyYIjF78+kjGRYjG5g3WKfeTW6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MjVmNzNiYi02M2ZjLTRhZWMtOGY3OC0xNGE1 OGY5MmJmMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7wYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSc7ytEG1VJBDI1dJVsScHKfEfkfZFu1gbl8qLL5YXnWXil6X0+6CG1 Kivn0X9rfMJ/xJllOPPjTytLPdGScMOsa0oWd5nI5Mt8XCCds7cdOYmsGd7Ngmgw uDw5aZ/d4rnL7MlU8FAMD32Vmov3XgBZIhZ3455Mf7NPYfrqysCo8awzHxbBAAFq 5VYRnBMtbMurMFxr+pha38hc44JECc0b8QJkG1wvlS8EwzIHh9//+Aiea25ct9K8 zq3atlR5npy+S49A2VrrcLThDfsIwuRaJTW8SzWsebh7wTAeSdb6dmG8tD0vXiPO UaW5dIPUYiI48v6xv/Qr6Ou7xQyZ1M8= -----END CERTIFICATE-----Generated at Thu Mar 26 02:38:15 2026 by rpki-client