$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/525cb8cc-a19e-362c-834b-664f1ba9b526.roa File: 525cb8cc-a19e-362c-834b-664f1ba9b526.roa (raw, json) Hash identifier: 2OtQSm+CKFZAt5SRbO3aC9JlYq3GSnLw8vU19VR8UI0= Subject key identifier: FC:B0:ED:A5:72:21:A2:97:2B:8D:4F:28:41:B0:DD:EF:CA:50:75:17 Certificate issuer: /CN=da942a2e-a28e-4dd7-8986-8cd9d0811b18 Certificate serial: 010D0C9F4328584D1B1A1C6C171521D90A52B0C0 Authority key identifier: 8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/525cb8cc-a19e-362c-834b-664f1ba9b526.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 401489 IP address blocks: 23.191.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:1c:6c:17:15:21:d9:0a:52:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da942a2e-a28e-4dd7-8986-8cd9d0811b18 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=fe6fd082-8ff4-4358-a2ee-525721f8ed25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:a4:48:d6:f6:3b:68:21:0b:02:08:08:5f: 3b:b4:57:5a:5d:6a:49:ea:c8:63:76:06:d4:7f:fe: 46:77:c5:80:41:9b:c3:5a:85:bb:7a:21:15:82:0a: 95:a7:ea:a7:41:c2:86:40:09:5b:a1:2a:e2:86:d4: 8c:da:b0:df:bc:a0:28:72:e1:f1:ee:53:30:34:59: 6d:31:7e:20:f4:0a:b6:64:e9:fd:41:36:1f:e8:90: 0b:36:34:ec:bb:42:1b:f2:cb:39:34:9b:4f:af:1f: 66:44:72:2e:8d:24:c1:38:ca:6e:bb:e9:c6:ef:52: 9d:b5:d6:01:54:89:28:ea:a0:7c:96:da:58:09:2b: bc:78:5d:27:ec:19:1f:8d:4c:40:7f:ce:d7:3a:d7: e9:fe:88:13:53:33:0a:20:d3:ad:e6:57:00:e9:6a: cf:fa:c5:08:14:31:ad:1a:64:b1:0b:23:72:63:5c: 1a:21:e0:39:1b:fc:77:1c:a8:a4:1e:46:7c:ab:e5: 7e:56:aa:fe:f7:e7:4d:38:66:8a:18:83:97:aa:ea: a0:84:0b:70:46:54:75:47:64:c9:52:37:a0:ac:83: 99:81:bc:d6:97:bc:3f:d4:3a:97:62:96:2b:fd:d8: 6c:39:1a:ef:0f:1c:c8:44:5b:c4:3b:cf:ed:0f:fc: 2f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B0:ED:A5:72:21:A2:97:2B:8D:4F:28:41:B0:DD:EF:CA:50:75:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/525cb8cc-a19e-362c-834b-664f1ba9b526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.crl X509v3 Authority Key Identifier: keyid:8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer sbgp-ipAddrBlock: critical IPv4: 23.191.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:4b:9b:38:67:15:5a:2c:28:68:78:0b:0c:ef:20:b6:ad:52: 28:c8:3e:15:ba:f2:c6:dd:c9:26:6d:1b:fe:36:c5:46:8b:71: 6a:aa:2a:8d:c8:58:fc:e1:6b:3b:94:8e:5e:68:42:5d:0c:95: 77:a8:3e:5d:8e:15:04:da:13:9d:55:2c:3e:ee:08:32:21:d4: 2b:95:83:9a:e9:85:68:c0:8d:b2:e4:71:fb:35:2a:e5:e2:a6: 3a:ce:39:2c:31:35:d3:28:1b:3f:08:ca:d7:ea:6e:d0:2b:e8: f7:97:f6:1b:5a:9c:3d:c0:db:a2:bd:5a:f7:a5:80:b1:0b:e5: e4:b2:f6:6b:cc:8c:d8:54:be:f8:99:e1:43:91:7f:c9:a6:cf: 4f:14:15:08:ee:3f:ba:72:97:f4:17:00:c2:20:67:65:6d:8d: 5a:54:48:66:c6:e5:2b:13:1e:04:b0:db:ae:cb:64:5e:b6:c4: d9:6f:8a:ac:c1:06:17:0e:7b:34:ab:e8:ab:53:24:a5:98:43: bb:5e:1d:11:97:56:69:71:1a:88:eb:bf:a3:ea:51:23:94:10: ad:ef:d5:17:eb:38:f4:90:33:8a:34:af:ef:1a:cf:dc:c1:b2: 19:4f:7b:57:2f:82:83:63:4e:1e:f0:81:f2:16:82:10:e0:df: a3:e1:b4:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGhxsFxUh2QpSsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE5NDJhMmUtYTI4ZS00ZGQ3LTg5ODYtOGNkOWQwODEx YjE4MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk ZmU2ZmQwODItOGZmNC00MzU4LWEyZWUtNTI1NzIxZjhlZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+mkSNb2O2ghCwIICF87tFdaXWpJ6shjdgbU f/5Gd8WAQZvDWoW7eiEVggqVp+qnQcKGQAlboSrihtSM2rDfvKAocuHx7lMwNFlt MX4g9Aq2ZOn9QTYf6JALNjTsu0Ib8ss5NJtPrx9mRHIujSTBOMpuu+nG71KdtdYB VIko6qB8ltpYCSu8eF0n7BkfjUxAf87XOtfp/ogTUzMKINOt5lcA6WrP+sUIFDGt GmSxCyNyY1waIeA5G/x3HKikHkZ8q+V+Vqr+9+dNOGaKGIOXquqghAtwRlR1R2TJ UjegrIOZgbzWl7w/1DqXYpYr/dhsORrvDxzIRFvEO8/tD/wvlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyw7aVyIaKXK41PKEGw3e/KUHUXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYTk0 MmEyZS1hMjhlLTRkZDctODk4Ni04Y2Q5ZDA4MTFiMTgvNTI1Y2I4Y2MtYTE5ZS0z NjJjLTgzNGItNjY0ZjFiYTliNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGE5NDJhMmUtYTI4ZS00ZGQ3LTg5 ODYtOGNkOWQwODExYjE4L2RhOTQyYTJlLWEyOGUtNGRkNy04OTg2LThjZDlkMDgx MWIxOC5jcmwwHwYDVR0jBBgwFoAUjx/K5tPSLHj+6uRZ9KttEgf4C/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYTk0MmEyZS1hMjhlLTRkZDctODk4Ni04Y2Q5 ZDA4MTFiMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpLmzhnFVosKGh4CwzvILatUijIPhW68sbdySZtG/42xUaLcWqqKo3I WPzhazuUjl5oQl0MlXeoPl2OFQTaE51VLD7uCDIh1CuVg5rphWjAjbLkcfs1KuXi pjrOOSwxNdMoGz8IytfqbtAr6PeX9htanD3A26K9WvelgLEL5eSy9mvMjNhUvviZ 4UORf8mmz08UFQjuP7pyl/QXAMIgZ2VtjVpUSGbG5SsTHgSw267LZF62xNlviqzB BhcOezSr6KtTJKWYQ7teHRGXVmlxGojrv6PqUSOUEK3v1RfrOPSQM4o0r+8az9zB shlPe1cvgoNjTh7wgfIWghDg36PhtEA= -----END CERTIFICATE-----Generated at Sat Mar 28 13:43:03 2026 by rpki-client