$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/ec69835c-0929-34da-8360-1c7309443e7a.roa File: ec69835c-0929-34da-8360-1c7309443e7a.roa (raw, json) Hash identifier: OqUPdplNY3Qvenw1h/ehzzg799Ksn5ChmriP5OdtrRM= Subject key identifier: E1:4C:13:F2:61:E1:D8:48:58:ED:DB:57:71:29:01:C7:1F:9B:8E:42 Certificate issuer: /CN=8a57b69a-d683-4350-83d4-e449c0242b7d Certificate serial: 010D0C9F4328584D143D46D8D7BE2002E2410700 Authority key identifier: 38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/ec69835c-0929-34da-8360-1c7309443e7a.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 55134 IP address blocks: 23.173.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:46:d8:d7:be:20:02:e2:41:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a57b69a-d683-4350-83d4-e449c0242b7d Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=a9485f75-a3a9-406d-abca-9d321fd1d917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:64:07:13:32:4e:85:3f:98:1a:b7:4a:48:c4: cf:dc:24:43:53:10:78:56:53:b2:6a:ad:7b:cc:ce: 8b:3c:81:bf:c1:ae:46:a7:ea:fe:f8:94:a9:65:b2: 89:bb:6d:c3:ba:c1:b7:a9:ba:a9:66:a8:07:86:4f: d9:f3:13:7d:b5:b8:ad:d6:2e:a9:3f:f7:68:15:f0: 42:79:ef:24:be:10:32:ac:11:a5:54:9f:f9:c3:88: f7:4a:86:ea:59:90:83:47:9c:3b:c4:22:ce:df:1f: 45:37:fd:e6:d5:c4:59:9c:b5:1b:22:95:72:69:49: f8:b9:7b:60:13:21:f1:85:ff:ca:0b:d4:28:2b:7f: c1:94:c5:df:d9:22:15:34:52:a8:21:bb:df:ae:c4: ab:bd:d8:1a:4c:58:76:6b:db:de:7b:86:3d:13:39: 56:05:b5:6f:1e:eb:86:98:c3:ab:e7:09:45:18:ae: 26:bf:b1:b0:9c:fe:87:d1:20:0a:64:37:cc:8b:c1: d0:17:19:ae:33:f1:fc:65:61:ae:8f:39:2b:02:0c: 98:91:85:7c:4d:79:13:ad:fb:37:b8:06:3d:e3:7d: da:b0:fc:16:0c:a7:07:28:e4:eb:43:69:17:1b:8a: 0f:97:56:4c:32:0a:b5:ca:6e:36:49:48:9d:57:c8: 4a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4C:13:F2:61:E1:D8:48:58:ED:DB:57:71:29:01:C7:1F:9B:8E:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/ec69835c-0929-34da-8360-1c7309443e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl X509v3 Authority Key Identifier: keyid:38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer sbgp-ipAddrBlock: critical IPv4: 23.173.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:76:aa:89:28:a2:99:3c:67:a5:06:9c:8b:a2:cc:61:19:03: e7:f4:8b:b5:eb:90:71:f9:2c:6a:07:c3:aa:53:f0:8a:a5:dd: 7f:44:78:73:5f:64:66:f1:19:3b:f8:f5:8f:0f:d2:71:d1:a4: 70:a8:09:4a:da:a9:9f:80:7a:85:81:ee:d9:6a:c9:63:d3:25: fb:fb:00:62:10:cb:19:69:e7:15:5f:2e:31:53:90:cb:7e:f1: 3c:57:69:9c:e5:42:46:0e:22:5c:9d:e1:28:86:df:a0:75:01: a0:f9:5d:9a:03:cc:58:b6:51:b2:d1:c2:d9:da:87:5f:af:9b: cb:e3:7c:0d:0f:87:53:31:d3:38:a3:93:08:f9:53:06:02:67: 10:56:95:6b:a3:c9:98:13:00:74:70:56:27:e6:a3:66:c5:09: 05:b9:08:d6:87:b6:03:7b:14:82:0c:81:52:46:96:94:97:df: 23:4c:80:54:f6:76:78:e7:7f:e5:69:d3:be:11:b3:8a:aa:a0: 31:50:62:22:d8:22:f9:35:7e:c5:4d:f8:a9:b9:82:8e:c8:f4: 9b:96:bb:3e:fb:9f:f2:d6:64:00:fc:fe:1c:28:53:24:45:43: 62:0d:5d:23:3c:2a:7e:93:99:ee:10:a5:67:c6:9c:b3:13:fc: 26:51:4b:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUbY174gAuJBBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1N2I2OWEtZDY4My00MzUwLTgzZDQtZTQ0OWMwMjQy YjdkMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YTk0ODVmNzUtYTNhOS00MDZkLWFiY2EtOWQzMjFmZDFkOTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGQHEzJOhT+YGrdKSMTP3CRDUxB4VlOyaq17 zM6LPIG/wa5Gp+r++JSpZbKJu23DusG3qbqpZqgHhk/Z8xN9tbit1i6pP/doFfBC ee8kvhAyrBGlVJ/5w4j3SobqWZCDR5w7xCLO3x9FN/3m1cRZnLUbIpVyaUn4uXtg EyHxhf/KC9QoK3/BlMXf2SIVNFKoIbvfrsSrvdgaTFh2a9vee4Y9EzlWBbVvHuuG mMOr5wlFGK4mv7GwnP6H0SAKZDfMi8HQFxmuM/H8ZWGujzkrAgyYkYV8TXkTrfs3 uAY9433asPwWDKcHKOTrQ2kXG4oPl1ZMMgq1ym42SUidV8hKjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFME/Jh4dhIWO3bV3EpAccfm45CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3 YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5YzAyNDJiN2QvZWM2OTgzNWMtMDkyOS0z NGRhLTgzNjAtMWM3MzA5NDQzZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE1N2I2OWEtZDY4My00MzUwLTgz ZDQtZTQ0OWMwMjQyYjdkLzhhNTdiNjlhLWQ2ODMtNDM1MC04M2Q0LWU0NDljMDI0 MmI3ZC5jcmwwHwYDVR0jBBgwFoAUOI0GpLjVtS4yQPkEl81TEdyFbwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5 YzAyNDJiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF61IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAt2qokoopk8Z6UGnIuizGEZA+f0i7XrkHH5LGoHw6pT8Iql3X9EeHNf ZGbxGTv49Y8P0nHRpHCoCUraqZ+AeoWB7tlqyWPTJfv7AGIQyxlp5xVfLjFTkMt+ 8TxXaZzlQkYOIlyd4SiG36B1AaD5XZoDzFi2UbLRwtnah1+vm8vjfA0Ph1Mx0zij kwj5UwYCZxBWlWujyZgTAHRwVifmo2bFCQW5CNaHtgN7FIIMgVJGlpSX3yNMgFT2 dnjnf+Vp074Rs4qqoDFQYiLYIvk1fsVN+Km5go7I9JuWuz77n/LWZAD8/hwoUyRF Q2INXSM8Kn6Tme4QpWfGnLMT/CZRS4E= -----END CERTIFICATE-----Generated at Thu Mar 26 19:26:36 2026 by rpki-client