$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/91e1a3cc-e019-3754-b8b6-315f387f30d2.roa File: 91e1a3cc-e019-3754-b8b6-315f387f30d2.roa (raw, json) Hash identifier: wiekXQagK8Yk3esIeZJRHWZsj0SNzeKmoEBrbs5U5hA= Subject key identifier: EF:78:FF:A9:83:BF:8B:D7:81:4B:85:DE:04:7C:B7:08:1A:E8:A8:F0 Certificate issuer: /CN=478a0a21-d101-464c-8706-25bb157545c8 Certificate serial: 010D0C9F4328584D3F64F12A076EC52D680549A0 Authority key identifier: 35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/91e1a3cc-e019-3754-b8b6-315f387f30d2.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 401457 IP address blocks: 23.128.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f1:2a:07:6e:c5:2d:68:05:49:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=478a0a21-d101-464c-8706-25bb157545c8 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=f8b01ad1-96e8-4b60-ba63-4ee784fcca35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:02:a8:0c:1b:28:ae:b0:3c:76:73:9c:f7:4d: 99:84:2e:4e:a3:d4:75:0c:85:2d:76:51:d6:c3:b4: 3f:82:26:3b:fd:94:79:d8:0a:86:da:ab:5d:9a:b9: 76:4b:69:62:05:3c:bc:63:e6:b7:98:10:cc:24:83: bf:1b:80:11:3b:38:f3:cd:25:d3:31:c6:fa:18:7d: 98:15:47:e3:7f:9d:b4:26:28:c9:a3:66:9d:2d:92: 64:c3:2d:e3:ad:a9:e1:d6:a4:2d:06:a8:ce:c1:63: 5b:e1:64:08:26:ba:e9:02:5f:f2:38:46:cc:ef:fa: 70:fd:c1:c8:b1:3d:c5:77:7b:49:c6:ae:5c:d1:62: 9e:84:da:4a:3f:3f:b6:f7:a3:a8:0c:f9:7b:7d:e7: 17:fb:10:63:56:6a:af:64:7e:3f:39:e7:f8:9d:af: d6:57:8f:85:e8:4b:ea:8a:1a:fa:20:1f:35:18:42: 87:4e:c4:5f:52:82:45:f3:8c:d3:3a:a4:68:77:9c: a7:b4:31:1e:12:7a:5b:6e:8d:02:93:6c:a4:a2:41: 0b:09:18:8b:08:30:75:a1:1a:27:63:20:d1:24:ae: b7:b2:45:23:23:78:60:7e:34:f9:53:7d:c0:6a:90: e8:87:e8:4e:4a:30:e5:a6:4c:9b:94:95:1c:6f:fd: bb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:78:FF:A9:83:BF:8B:D7:81:4B:85:DE:04:7C:B7:08:1A:E8:A8:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/91e1a3cc-e019-3754-b8b6-315f387f30d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.crl X509v3 Authority Key Identifier: keyid:35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer sbgp-ipAddrBlock: critical IPv4: 23.128.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:50:87:d0:64:81:e9:4c:cd:1f:35:48:6c:a2:f4:6c:82:c4: 40:72:19:0a:42:22:8b:33:f9:49:dc:71:b3:fb:80:e1:3b:a3: e8:7a:da:03:3e:06:50:f3:27:18:13:f8:69:9c:b7:48:be:5b: c4:ef:eb:6c:38:f8:6a:61:05:00:f7:5c:37:79:de:a7:a7:61: 12:66:2e:12:b2:65:87:ba:5b:e8:28:e1:f6:ee:c6:5e:ae:7f: 14:ee:05:cc:10:a6:bb:63:23:37:9e:d4:28:9c:56:82:01:ee: ed:e7:55:95:a4:f6:67:19:bb:84:1c:37:48:7e:27:29:1c:46: ce:2a:56:bd:fd:39:58:47:2b:a8:9e:d0:f6:e0:d5:e6:6a:ce: 59:85:52:7c:a7:09:c4:65:5d:a7:bb:56:e5:e6:c7:fb:5b:85: 8a:f1:1e:cc:54:44:e5:f6:5d:43:ba:19:b7:05:39:6b:e7:46: 4f:71:63:b9:74:49:5f:58:c3:24:b8:d5:d6:36:17:96:5f:db: 8c:7c:4e:56:a0:70:8d:94:c2:44:74:ce:ea:30:e2:ca:8c:1d: 8d:75:d7:cb:c9:10:a9:33:d3:ea:3c:90:0d:94:71:e5:5d:60: 57:a1:3d:8e:5c:33:41:3d:56:58:5f:78:10:4f:5b:0f:a6:d5: 1a:59:1f:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZPEqB27FLWgFSaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDc4YTBhMjEtZDEwMS00NjRjLTg3MDYtMjViYjE1NzU0 NWM4MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZjhiMDFhZDEtOTZlOC00YjYwLWJhNjMtNGVlNzg0ZmNjYTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAKoDBsorrA8dnOc902ZhC5Oo9R1DIUtdlHW w7Q/giY7/ZR52AqG2qtdmrl2S2liBTy8Y+a3mBDMJIO/G4AROzjzzSXTMcb6GH2Y FUfjf520JijJo2adLZJkwy3jranh1qQtBqjOwWNb4WQIJrrpAl/yOEbM7/pw/cHI sT3Fd3tJxq5c0WKehNpKPz+296OoDPl7fecX+xBjVmqvZH4/Oef4na/WV4+F6Evq ihr6IB81GEKHTsRfUoJF84zTOqRod5yntDEeEnpbbo0Ck2ykokELCRiLCDB1oRon YyDRJK63skUjI3hgfjT5U33AapDoh+hOSjDlpkyblJUcb/27KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO94/6mDv4vXgUuF3gR8twga6KjwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80Nzhh MGEyMS1kMTAxLTQ2NGMtODcwNi0yNWJiMTU3NTQ1YzgvOTFlMWEzY2MtZTAxOS0z NzU0LWI4YjYtMzE1ZjM4N2YzMGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDc4YTBhMjEtZDEwMS00NjRjLTg3 MDYtMjViYjE1NzU0NWM4LzQ3OGEwYTIxLWQxMDEtNDY0Yy04NzA2LTI1YmIxNTc1 NDVjOC5jcmwwHwYDVR0jBBgwFoAUNcXLPqvEc4Whq6zjIWHTNz4I6RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NzhhMGEyMS1kMTAxLTQ2NGMtODcwNi0yNWJi MTU3NTQ1YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4CEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpQh9BkgelMzR81SGyi9GyCxEByGQpCIosz+UnccbP7gOE7o+h62gM+ BlDzJxgT+Gmct0i+W8Tv62w4+GphBQD3XDd53qenYRJmLhKyZYe6W+go4fbuxl6u fxTuBcwQprtjIzee1CicVoIB7u3nVZWk9mcZu4QcN0h+JykcRs4qVr39OVhHK6ie 0Pbg1eZqzlmFUnynCcRlXae7VuXmx/tbhYrxHsxUROX2XUO6GbcFOWvnRk9xY7l0 SV9YwyS41dY2F5Zf24x8TlagcI2UwkR0zuow4sqMHY1118vJEKkz0+o8kA2UceVd YFehPY5cM0E9VlhfeBBPWw+m1RpZH9E= -----END CERTIFICATE-----Generated at Thu Mar 26 06:27:27 2026 by rpki-client