$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/daf6e14a-43ae-3748-bdf4-ad8bfb5284db.roa File: daf6e14a-43ae-3748-bdf4-ad8bfb5284db.roa (raw, json) Hash identifier: iXuedDO82ZEZsK+X8ZikdeiQKNhNVQxyTtcmGLzXaQk= Subject key identifier: F6:F9:B2:13:A3:9C:E8:A1:5B:CC:6C:5D:38:25:5B:B9:79:67:7B:6A Certificate issuer: /CN=d18a2206-bb2d-48cd-9bd8-7806782e1c46 Certificate serial: 010D0C9F4328584D47C4E734B57B65E6ECBE0580 Authority key identifier: 41:EF:FF:2B:26:BF:98:8A:AE:B0:5D:44:5A:FC:9E:87:AB:AD:4F:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/daf6e14a-43ae-3748-bdf4-ad8bfb5284db.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 23.187.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/d18a2206-bb2d-48cd-9bd8-7806782e1c46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/d18a2206-bb2d-48cd-9bd8-7806782e1c46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:e7:34:b5:7b:65:e6:ec:be:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18a2206-bb2d-48cd-9bd8-7806782e1c46 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=1a5b4c15-7907-4803-9c6b-2bf1a43ea80a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f8:9a:f2:cb:6f:94:5c:a2:41:30:c6:f5:e5: ce:d0:80:f0:82:aa:f9:39:0a:3a:6c:14:be:01:27: ec:96:d1:d9:25:22:ec:d0:02:f8:88:6b:df:6d:41: 66:dd:04:e8:38:8c:c6:21:19:f5:3f:47:e8:5c:cc: e4:98:02:ca:20:45:ca:84:30:97:01:20:3e:98:4e: 8b:c4:2d:a9:01:8a:84:c4:07:4b:b5:67:9b:88:6f: d9:c7:00:c3:4e:47:14:e6:f3:79:7c:3c:1a:45:ee: 4c:b6:0b:72:14:e5:9a:e6:8b:27:28:f3:fd:d4:8f: fa:d3:de:88:d8:50:93:cc:e0:6c:6c:02:83:70:89: 99:96:2d:34:91:9a:48:36:98:61:bc:4f:d0:77:0d: f7:12:64:07:45:95:26:f5:98:f8:85:58:65:a4:76: 92:ed:41:3d:23:aa:d5:31:a0:47:1d:b8:a5:d1:c7: 64:9d:a4:71:64:e1:01:d0:bd:62:32:42:32:c1:9c: 4b:12:fd:ba:cd:3b:06:77:91:3a:96:77:fa:91:69: 6f:47:b1:a2:7c:a4:5b:63:fd:43:a1:83:68:06:35: be:64:7d:e4:36:b9:d4:4a:05:cf:cb:44:40:89:3c: 61:f4:eb:33:9e:c9:7c:28:e1:89:3d:0c:09:08:cc: a5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F9:B2:13:A3:9C:E8:A1:5B:CC:6C:5D:38:25:5B:B9:79:67:7B:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/daf6e14a-43ae-3748-bdf4-ad8bfb5284db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/d18a2206-bb2d-48cd-9bd8-7806782e1c46.crl X509v3 Authority Key Identifier: keyid:41:EF:FF:2B:26:BF:98:8A:AE:B0:5D:44:5A:FC:9E:87:AB:AD:4F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46.cer sbgp-ipAddrBlock: critical IPv4: 23.187.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a6:d5:02:d9:e6:ac:b4:ed:39:d8:65:c1:63:e6:0a:67:ae: 47:b3:61:d9:02:4c:81:9c:13:e5:c9:21:45:4a:eb:35:48:fc: 0f:32:e6:d6:ca:ee:e5:ff:03:14:6d:10:2c:cb:33:b4:2b:cc: 29:41:53:40:4f:72:26:bb:b4:2c:50:cb:91:d0:5f:98:27:39: 86:75:86:bb:ba:c6:3d:58:c6:8c:a7:f8:f4:c6:db:18:41:08: 2e:6e:34:09:13:65:25:fe:b5:f4:23:32:21:ca:28:2f:93:32: 1a:45:9e:ee:02:ef:93:ff:53:4b:04:b7:2c:93:6b:d8:0a:ec: 61:47:1e:bf:34:c5:e7:39:e7:9f:ac:1c:7a:ef:ee:b0:12:6d: 02:30:ed:c9:92:8e:b2:5b:ea:14:fb:7a:6f:af:71:2e:53:51: c4:ac:63:82:49:53:d9:a5:27:c9:03:6b:54:bd:d3:2f:38:9f: 90:34:85:45:6c:3f:db:2a:f2:97:67:a4:a2:11:bb:2d:a8:6f: c7:db:c0:e0:73:82:56:6b:ef:ed:8f:8b:54:e3:7a:70:fe:65: ad:2a:38:31:c9:cb:8f:36:52:ec:b3:13:8b:87:9f:a5:ee:7c: db:44:79:a4:e2:1d:ea:6a:91:2d:f8:97:65:1d:f7:f8:60:74: a3:e0:79:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOc0tXtl5uy+BYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE4YTIyMDYtYmIyZC00OGNkLTliZDgtNzgwNjc4MmUx YzQ2MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk MWE1YjRjMTUtNzkwNy00ODAzLTljNmItMmJmMWE0M2VhODBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvia8stvlFyiQTDG9eXO0IDwgqr5OQo6bBS+ ASfsltHZJSLs0AL4iGvfbUFm3QToOIzGIRn1P0foXMzkmALKIEXKhDCXASA+mE6L xC2pAYqExAdLtWebiG/ZxwDDTkcU5vN5fDwaRe5MtgtyFOWa5osnKPP91I/6096I 2FCTzOBsbAKDcImZli00kZpINphhvE/Qdw33EmQHRZUm9Zj4hVhlpHaS7UE9I6rV MaBHHbil0cdknaRxZOEB0L1iMkIywZxLEv26zTsGd5E6lnf6kWlvR7GifKRbY/1D oYNoBjW+ZH3kNrnUSgXPy0RAiTxh9Osznsl8KOGJPQwJCMylqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPb5shOjnOihW8xsXTglW7l5Z3tqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kMThh MjIwNi1iYjJkLTQ4Y2QtOWJkOC03ODA2NzgyZTFjNDYvZGFmNmUxNGEtNDNhZS0z NzQ4LWJkZjQtYWQ4YmZiNTI4NGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDE4YTIyMDYtYmIyZC00OGNkLTli ZDgtNzgwNjc4MmUxYzQ2L2QxOGEyMjA2LWJiMmQtNDhjZC05YmQ4LTc4MDY3ODJl MWM0Ni5jcmwwHwYDVR0jBBgwFoAUQe//Kya/mIqusF1EWvyeh6utT1owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kMThhMjIwNi1iYjJkLTQ4Y2QtOWJkOC03ODA2 NzgyZTFjNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7toMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKm1QLZ5qy07TnYZcFj5gpnrkezYdkCTIGcE+XJIUVK6zVI/A8y5tbK 7uX/AxRtECzLM7QrzClBU0BPcia7tCxQy5HQX5gnOYZ1hru6xj1Yxoyn+PTG2xhB CC5uNAkTZSX+tfQjMiHKKC+TMhpFnu4C75P/U0sEtyyTa9gK7GFHHr80xec555+s HHrv7rASbQIw7cmSjrJb6hT7em+vcS5TUcSsY4JJU9mlJ8kDa1S90y84n5A0hUVs P9sq8pdnpKIRuy2ob8fbwOBzglZr7+2Pi1TjenD+Za0qODHJy482UuyzE4uHn6Xu fNtEeaTiHepqkS34l2Ud9/hgdKPgeRM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:53:00 2026 by rpki-client