$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/db4190ad-5350-383b-b3b5-9d97a927e02f.roa File: db4190ad-5350-383b-b3b5-9d97a927e02f.roa (raw, json) Hash identifier: 673sGI/Kv5mlcaOi6DpksEW5d10P3QC/5N37vbqEJWU= Subject key identifier: D7:74:92:FD:AD:A5:3C:13:06:DD:7F:2A:98:5C:21:4A:09:DF:4E:F0 Certificate issuer: /CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Certificate serial: 010D0C9F4328584D19B4B7E8110235D736E9C000 Authority key identifier: BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/db4190ad-5350-383b-b3b5-9d97a927e02f.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 21859 IP address blocks: 23.128.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:b7:e8:11:02:35:d7:36:e9:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=f4a6bdd5-efff-409e-bd1a-47b9976c8ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:20:12:1d:7a:67:93:45:68:9a:a6:7b:40:c6: 07:9f:56:17:f3:18:de:eb:01:18:1f:95:0d:e1:f5: f8:9b:89:fe:46:8c:0e:e5:b2:24:23:2a:58:16:16: 60:ad:8b:e1:61:37:ec:2f:c0:f9:6e:7f:73:31:a0: 58:63:1f:45:ad:f7:0b:de:4b:68:23:c7:73:9b:ee: 6d:b0:6d:01:fc:f4:cd:f1:3e:eb:aa:70:b3:bb:b4: 1c:1d:45:14:74:36:d9:10:28:2c:38:b4:f9:b8:48: cc:12:d1:6c:52:45:d2:0a:bb:d3:12:5e:93:a2:47: 25:ee:ce:55:9b:d5:b1:ee:37:0e:9d:a9:ca:41:df: 59:68:c0:10:82:be:57:6e:e3:68:15:9f:6d:7c:6a: c6:9e:76:36:c0:32:dd:cc:cb:b8:42:d2:a5:dd:18: 9d:e9:26:e8:41:e3:53:20:c2:00:2c:a6:f5:59:bc: bc:88:d1:06:5b:eb:33:32:2b:e1:2f:21:64:94:0b: 69:97:22:00:02:d9:a9:8e:0d:92:2b:c9:2b:e0:ed: 9e:2f:3c:6d:a2:d5:e7:a5:a7:b3:72:d7:fd:86:ef: de:16:48:57:59:93:55:93:cb:45:1b:fd:8f:a7:b1: e4:0d:df:37:4b:c3:65:9a:88:1b:ab:05:47:fd:53: 8f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:74:92:FD:AD:A5:3C:13:06:DD:7F:2A:98:5C:21:4A:09:DF:4E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/db4190ad-5350-383b-b3b5-9d97a927e02f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl X509v3 Authority Key Identifier: keyid:BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer sbgp-ipAddrBlock: critical IPv4: 23.128.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:5c:21:d5:3d:09:f9:17:38:15:47:b4:22:01:04:12:fb:24: d2:16:22:85:73:e6:b1:87:90:e3:bb:c4:f0:ea:e3:d2:bc:2e: 63:55:56:6f:c9:1d:28:57:d1:a2:f6:84:26:d8:2c:97:6d:67: 3a:10:a1:71:0b:fd:e5:51:d0:08:12:6d:6d:f8:ff:b1:58:71: 17:3b:87:e0:07:00:f2:44:2b:eb:44:2e:d1:7d:b9:9a:81:67: 3b:ee:8d:39:68:00:37:ef:d4:22:60:97:3c:60:7d:a8:48:82: a5:00:c2:e2:f2:14:9f:97:bc:7a:65:2c:6f:fd:46:f6:a8:50: 3d:ca:60:9a:66:71:0b:5e:58:19:0f:ec:99:45:14:c4:01:5d: 97:7a:2e:65:33:5e:c5:a1:b9:97:2c:c6:5d:f5:97:36:30:7f: 5c:8a:dd:bf:b8:0e:43:b7:db:28:16:8e:c9:5a:81:86:21:14: 3b:a2:b8:0c:81:95:c1:e0:52:cc:ae:4d:e7:f5:76:a9:5f:6b: ef:6b:79:e4:81:db:bb:1b:1e:df:11:30:03:ed:af:2b:29:8e: 0d:97:12:1c:02:a2:57:b5:d9:33:65:d1:23:99:f9:87:20:65: 06:a1:a1:78:e8:dc:b0:26:94:89:b6:99:b9:4c:27:e9:11:89: be:18:3c:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtLfoEQI11zbpwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU0YTFkZmEtODg2Ny00YWVmLWEyZTYtMTMxZTkzYWRk OWY5MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZjRhNmJkZDUtZWZmZi00MDllLWJkMWEtNDdiOTk3NmM4ZWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSASHXpnk0VomqZ7QMYHn1YX8xje6wEYH5UN 4fX4m4n+RowO5bIkIypYFhZgrYvhYTfsL8D5bn9zMaBYYx9FrfcL3ktoI8dzm+5t sG0B/PTN8T7rqnCzu7QcHUUUdDbZECgsOLT5uEjMEtFsUkXSCrvTEl6Tokcl7s5V m9Wx7jcOnanKQd9ZaMAQgr5XbuNoFZ9tfGrGnnY2wDLdzMu4QtKl3Rid6SboQeNT IMIALKb1Wby8iNEGW+szMivhLyFklAtplyIAAtmpjg2SK8kr4O2eLzxtotXnpaez ctf9hu/eFkhXWZNVk8tFG/2Pp7HkDd83S8NlmogbqwVH/VOPtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNd0kv2tpTwTBt1/KphcIUoJ307wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRh MWRmYS04ODY3LTRhZWYtYTJlNi0xMzFlOTNhZGQ5ZjkvZGI0MTkwYWQtNTM1MC0z ODNiLWIzYjUtOWQ5N2E5MjdlMDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGU0YTFkZmEtODg2Ny00YWVmLWEy ZTYtMTMxZTkzYWRkOWY5L2RlNGExZGZhLTg4NjctNGFlZi1hMmU2LTEzMWU5M2Fk ZDlmOS5jcmwwHwYDVR0jBBgwFoAUvthWMuuMpErA6gOYoNHxLymRA8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRhMWRmYS04ODY3LTRhZWYtYTJlNi0xMzFl OTNhZGQ5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4DEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9cIdU9CfkXOBVHtCIBBBL7JNIWIoVz5rGHkOO7xPDq49K8LmNVVm/J HShX0aL2hCbYLJdtZzoQoXEL/eVR0AgSbW34/7FYcRc7h+AHAPJEK+tELtF9uZqB ZzvujTloADfv1CJglzxgfahIgqUAwuLyFJ+XvHplLG/9RvaoUD3KYJpmcQteWBkP 7JlFFMQBXZd6LmUzXsWhuZcsxl31lzYwf1yK3b+4DkO32ygWjslagYYhFDuiuAyB lcHgUsyuTef1dqlfa+9reeSB27sbHt8RMAPtryspjg2XEhwCole12TNl0SOZ+Ycg ZQahoXjo3LAmlIm2mblMJ+kRib4YPEQ= -----END CERTIFICATE-----Generated at Thu Mar 26 15:43:12 2026 by rpki-client