$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/768aa1b7-7ef9-31d1-9eea-5f9c238e57e9.roa File: 768aa1b7-7ef9-31d1-9eea-5f9c238e57e9.roa (raw, json) Hash identifier: 0vR0rhAGJ4hR100TVMXhGx19lM+ROOqY5Iq12NV3Ovs= Subject key identifier: 3F:DB:A4:3F:D9:B3:54:4A:BF:19:0D:1D:21:80:93:50:EE:8C:40:6B Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D44FA6C3C1A976D62DEFFF980 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/768aa1b7-7ef9-31d1-9eea-5f9c238e57e9.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 173.230.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:6c:3c:1a:97:6d:62:de:ff:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=c2fa0111-df3c-4fc1-bc4a-1e2c24c183d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:46:4c:14:6e:27:a2:6e:23:7c:92:b5:7a:df: a5:f4:bc:24:62:81:f0:c9:b4:dd:dc:4c:f7:95:ab: 46:3f:c4:ea:76:9f:f6:b3:22:2c:a6:2f:3c:5a:61: 36:e5:e6:87:1d:5e:12:5c:dc:48:d9:23:34:1e:aa: 56:00:73:91:c5:ef:90:ef:2f:66:58:a6:9d:0a:ab: d3:ce:60:0f:82:83:32:44:cf:af:68:4d:06:16:d2: 01:a8:95:b0:4c:23:ab:aa:22:41:f1:b5:8e:09:ae: 3d:43:58:52:cf:32:d2:57:0b:e8:b5:f8:8f:84:ab: 07:1d:f4:f6:07:ec:04:ff:1b:d4:c8:43:bd:21:ce: 34:d6:36:bf:6b:e6:3a:fe:a4:a2:6c:a4:11:ae:51: 29:09:6f:e2:63:75:5a:dc:67:e1:d3:ee:49:20:c2: 39:16:0b:6e:be:12:00:98:44:e6:f5:ff:b2:c1:5f: 66:b4:07:bb:5f:54:e1:00:3e:4a:90:5a:aa:49:36: 89:73:2f:62:6f:1f:c7:c8:47:e8:8e:6b:b8:61:f5: bf:f0:a4:3e:5d:f3:46:a6:55:40:10:f5:0a:26:63: 22:bb:fd:2f:47:06:cb:12:37:c2:70:19:d5:d7:ee: 06:0b:ba:e2:b4:d7:fe:53:09:ca:b1:68:d6:bb:a1: d4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DB:A4:3F:D9:B3:54:4A:BF:19:0D:1D:21:80:93:50:EE:8C:40:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/768aa1b7-7ef9-31d1-9eea-5f9c238e57e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 173.230.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:0e:66:13:58:b0:c1:67:ca:bd:e5:6b:f0:53:24:df:e3:7b: 33:9f:49:96:fc:00:8a:9c:b6:a8:7b:ae:9b:60:a8:14:75:29: 0c:dd:18:1b:77:46:09:2e:1b:ec:3f:96:69:5e:43:9f:4d:51: 24:69:61:d1:d1:2c:df:91:a0:8f:13:16:bc:09:b1:52:7e:f1: 34:ae:14:cd:4a:60:a4:c9:a7:33:aa:96:89:cc:0c:73:60:b8: 87:c0:3e:d6:ad:96:2b:55:90:1d:a5:27:b1:f5:c3:ce:55:a8: a6:75:16:5e:6c:ce:ce:25:25:38:af:fc:74:fc:c5:ae:05:52: 85:d1:d4:04:69:0a:c4:df:cf:28:05:29:60:39:0d:7b:a6:e4: d7:1c:5b:a8:f7:48:ff:ab:a0:5e:b7:dd:5c:4d:c0:38:d1:6d: 26:14:43:d8:43:09:d0:dc:92:0d:10:49:0f:d0:73:ea:83:62: 84:d2:8a:e2:ac:06:eb:91:54:9a:95:f6:76:57:5b:66:71:b6: 58:8f:32:84:50:fe:11:60:32:54:e3:2c:e9:40:7c:2b:ce:26: 3f:81:87:20:4e:2e:f3:ba:4e:62:6b:7f:ce:68:fd:00:6e:88: 9e:78:00:6d:ab:b1:e2:16:a7:e1:d2:0f:d1:c8:35:b7:48:5a: 22:9b:ff:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mw8GpdtYt7/+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YzJmYTAxMTEtZGYzYy00ZmMxLWJjNGEtMWUyYzI0YzE4M2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUZMFG4nom4jfJK1et+l9LwkYoHwybTd3Ez3 latGP8Tqdp/2syIspi88WmE25eaHHV4SXNxI2SM0HqpWAHORxe+Q7y9mWKadCqvT zmAPgoMyRM+vaE0GFtIBqJWwTCOrqiJB8bWOCa49Q1hSzzLSVwvotfiPhKsHHfT2 B+wE/xvUyEO9Ic401ja/a+Y6/qSibKQRrlEpCW/iY3Va3Gfh0+5JIMI5FgtuvhIA mETm9f+ywV9mtAe7X1ThAD5KkFqqSTaJcy9ibx/HyEfojmu4YfW/8KQ+XfNGplVA EPUKJmMiu/0vRwbLEjfCcBnV1+4GC7ritNf+UwnKsWjWu6HUGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/bpD/Zs1RKvxkNHSGAk1DujEBrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNzY4YWExYjctN2VmOS0z MWQxLTllZWEtNWY5YzIzOGU1N2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreY7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEOZhNYsMFnyr3la/BTJN/jezOfSZb8AIqctqh7rptgqBR1KQzdGBt3 RgkuG+w/lmleQ59NUSRpYdHRLN+RoI8TFrwJsVJ+8TSuFM1KYKTJpzOqlonMDHNg uIfAPtatlitVkB2lJ7H1w85VqKZ1Fl5szs4lJTiv/HT8xa4FUoXR1ARpCsTfzygF KWA5DXum5NccW6j3SP+roF633VxNwDjRbSYUQ9hDCdDckg0QSQ/Qc+qDYoTSiuKs BuuRVJqV9nZXW2ZxtliPMoRQ/hFgMlTjLOlAfCvOJj+BhyBOLvO6TmJrf85o/QBu iJ54AG2rseIWp+HSD9HINbdIWiKb//Y= -----END CERTIFICATE-----Generated at Thu Mar 26 20:27:19 2026 by rpki-client