$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/af45c448-14d3-3c4a-8e2e-45a385458a84.roa File: af45c448-14d3-3c4a-8e2e-45a385458a84.roa (raw, json) Hash identifier: qgBZUQADYJxtP6L7iaoJJ5mXW6ShdEu5ThciL/YS2fg= Subject key identifier: 01:AB:9E:6D:36:4E:16:12:B3:7F:0B:09:8F:96:25:E3:48:19:F8:00 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D44FA6562F119916555B46880 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/af45c448-14d3-3c4a-8e2e-45a385458a84.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 173.230.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:65:62:f1:19:91:65:55:b4:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=27df06ea-bdab-44f5-a90b-e343ad6c3679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8c:c6:ce:e7:17:6b:33:f8:9c:0e:8b:59:69: e5:77:24:69:73:01:3a:05:db:b4:26:ce:10:8d:19: 36:77:66:c8:c7:97:89:69:80:9d:0a:85:21:a6:74: b0:86:f9:b7:de:9e:82:7a:cc:25:b9:35:f0:ab:b4: 0d:8c:23:13:e0:f6:d2:9c:1c:16:25:ec:50:f9:87: 26:77:49:5a:f0:fc:d6:96:78:b1:f7:ce:ea:52:b4: 54:d4:8a:04:a7:2d:85:d7:72:80:4c:20:c2:63:31: 58:af:99:40:c2:d3:83:ad:b4:ec:72:34:6f:ec:11: 73:9d:a1:69:ad:37:a8:65:c3:4e:2b:be:17:6a:6a: fd:83:7f:97:bc:9d:d3:4c:0c:94:92:84:fc:df:32: 54:a4:21:dd:2c:48:47:51:87:35:c6:b0:b2:8b:0d: 57:66:c6:34:d4:51:56:d3:5b:0c:e0:ff:7b:de:f1: d3:b8:c8:ee:f8:52:0e:62:68:91:64:27:4f:17:66: 6e:18:ae:c8:98:99:36:b2:ba:c2:74:32:b5:9e:5a: 89:7f:08:35:2a:ea:e9:16:22:b2:97:42:e8:22:81: bd:c8:56:18:ef:a3:40:63:83:eb:da:12:5d:f6:50: 8a:79:e5:08:c9:34:67:dc:5a:fd:5a:f2:26:3e:74: 4c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AB:9E:6D:36:4E:16:12:B3:7F:0B:09:8F:96:25:E3:48:19:F8:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/af45c448-14d3-3c4a-8e2e-45a385458a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 173.230.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:93:e0:f3:28:e4:eb:01:32:ac:5a:d2:fe:0c:ae:85:5e:aa: 30:c1:d6:b7:4e:f2:6f:3c:42:8f:89:9d:75:7d:d8:32:27:93: cc:3b:fa:5b:c7:81:57:53:86:e6:48:be:ba:ef:ef:1c:f8:cf: 18:d9:1b:76:90:28:c1:7f:a1:42:16:44:64:c5:29:e9:fb:79: 2c:a3:f6:7d:d0:88:d7:c5:10:17:6d:28:3b:94:84:63:5c:66: d0:85:35:a3:fd:c9:28:c2:a8:a6:31:a0:91:75:2a:24:1c:b2: 00:67:c8:8e:5c:31:55:79:9a:32:d7:de:b1:30:a3:ba:d2:58: 8f:76:fe:67:d4:e4:95:db:a8:d9:6c:dd:85:19:96:67:60:de: 15:55:9a:4f:66:eb:7e:85:dd:a2:ef:d8:b2:9f:96:4f:3d:98: 95:ee:c5:87:dd:0b:4c:23:40:0e:26:ff:dd:c9:26:e6:5b:90: 53:1f:35:b0:91:b3:33:f3:31:ca:b4:a9:e0:97:23:34:20:41: c5:f8:e5:f9:f5:70:c4:a1:2e:e6:bb:be:02:de:2b:77:77:d4: 81:59:a8:e2:5f:6c:96:1f:0c:b5:36:80:14:a8:3e:fa:92:4e: 32:c3:ee:c3:17:80:78:14:af:6e:bd:df:13:dc:1f:37:3c:d6: 64:63:a2:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mVi8RmRZVW0aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MjdkZjA2ZWEtYmRhYi00NGY1LWE5MGItZTM0M2FkNmMzNjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4zGzucXazP4nA6LWWnldyRpcwE6Bdu0Js4Q jRk2d2bIx5eJaYCdCoUhpnSwhvm33p6CeswluTXwq7QNjCMT4PbSnBwWJexQ+Ycm d0la8PzWlnix987qUrRU1IoEpy2F13KATCDCYzFYr5lAwtODrbTscjRv7BFznaFp rTeoZcNOK74Xamr9g3+XvJ3TTAyUkoT83zJUpCHdLEhHUYc1xrCyiw1XZsY01FFW 01sM4P973vHTuMju+FIOYmiRZCdPF2ZuGK7ImJk2srrCdDK1nlqJfwg1KurpFiKy l0LoIoG9yFYY76NAY4Pr2hJd9lCKeeUIyTRn3Fr9WvImPnRMuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGrnm02ThYSs38LCY+WJeNIGfgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYWY0NWM0NDgtMTRkMy0z YzRhLThlMmUtNDVhMzg1NDU4YTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreY8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmT4PMo5OsBMqxa0v4MroVeqjDB1rdO8m88Qo+JnXV92DInk8w7+lvH gVdThuZIvrrv7xz4zxjZG3aQKMF/oUIWRGTFKen7eSyj9n3QiNfFEBdtKDuUhGNc ZtCFNaP9ySjCqKYxoJF1KiQcsgBnyI5cMVV5mjLX3rEwo7rSWI92/mfU5JXbqNls 3YUZlmdg3hVVmk9m636F3aLv2LKflk89mJXuxYfdC0wjQA4m/93JJuZbkFMfNbCR szPzMcq0qeCXIzQgQcX45fn1cMShLua7vgLeK3d31IFZqOJfbJYfDLU2gBSoPvqS TjLD7sMXgHgUr2693xPcHzc81mRjopU= -----END CERTIFICATE-----Generated at Thu Mar 26 20:26:59 2026 by rpki-client