$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/7017deb8-bb92-3642-93d0-67e0704f3ba3.roa File: 7017deb8-bb92-3642-93d0-67e0704f3ba3.roa (raw, json) Hash identifier: OCrFkJ40f7ze6ZnCSSZdjyLz/H/83uDEb2FPltRl3bM= Subject key identifier: 6E:44:AB:B6:BE:97:1B:B2:14:61:67:0A:E9:39:71:AE:BB:58:0E:92 Certificate issuer: /CN=ef944392-b528-43c2-9abf-e4543229ae2d Certificate serial: 010D0C9F4328584D47C4E72246BBC3CED5113900 Authority key identifier: D4:42:D8:A2:9F:91:A1:39:11:A3:D6:02:E4:F4:E4:3F:46:CD:E9:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/7017deb8-bb92-3642-93d0-67e0704f3ba3.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 23.188.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/ef944392-b528-43c2-9abf-e4543229ae2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/ef944392-b528-43c2-9abf-e4543229ae2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:e7:22:46:bb:c3:ce:d5:11:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef944392-b528-43c2-9abf-e4543229ae2d Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=7804ea14-ab84-4bb6-afbd-1b6b2542e9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1f:69:1a:c8:d9:3e:1c:f0:c4:eb:40:d6:5a: cb:08:3d:83:87:2c:f0:08:e9:d6:bc:08:86:be:6a: 4c:46:c8:38:39:0e:15:4c:ef:bd:de:2a:a5:57:6f: 3b:3c:b3:9a:64:c2:a7:52:23:f5:f8:57:22:d1:76: 38:8b:e7:55:47:97:83:66:c8:0a:2a:fe:0b:5b:b8: 3a:20:1d:03:4f:ad:0f:f8:7b:09:28:c9:86:15:71: f5:fd:a1:ca:5b:4b:b4:18:6d:e7:85:1d:4f:30:08: da:dd:fc:d0:00:e3:f7:94:1c:49:6b:fa:88:b3:1d: f3:e1:2f:1a:75:14:40:a4:b4:c7:fa:32:e3:1a:7e: 14:58:7a:e0:a1:e3:bb:fd:b9:12:1e:33:75:ce:31: dd:3c:b1:de:e0:4f:b8:29:fd:ea:7d:62:14:bc:44: 0f:99:5b:23:eb:d3:a1:6d:2b:0c:9c:07:3f:46:ca: a4:49:16:fa:d2:0c:4a:75:b6:37:9d:76:b9:76:42: 34:66:32:2a:7e:88:34:56:cb:b3:70:fb:18:cb:cd: c6:2c:20:e4:40:f3:04:83:4b:94:f2:1d:b5:5f:57: df:c8:72:c9:0b:04:0c:93:a2:cb:07:b2:64:40:d2: 2a:d3:d6:4f:20:9f:46:ef:1e:48:24:da:c6:ab:d9: 38:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:44:AB:B6:BE:97:1B:B2:14:61:67:0A:E9:39:71:AE:BB:58:0E:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/7017deb8-bb92-3642-93d0-67e0704f3ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/ef944392-b528-43c2-9abf-e4543229ae2d.crl X509v3 Authority Key Identifier: keyid:D4:42:D8:A2:9F:91:A1:39:11:A3:D6:02:E4:F4:E4:3F:46:CD:E9:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d.cer sbgp-ipAddrBlock: critical IPv4: 23.188.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:65:af:d8:bd:23:b6:6f:97:a6:1b:e8:f3:2b:ce:00:dd:16: af:6b:c7:02:17:0e:32:54:85:9a:6d:ca:2a:84:8c:6e:ca:7e: da:6d:45:91:68:f0:ef:07:8d:4d:49:57:42:bc:4f:83:b3:06: a6:c1:2c:0d:13:4a:12:a9:d3:da:8b:08:33:94:81:01:79:ca: 39:bc:45:ba:ad:91:f8:c6:2e:29:dc:39:e0:91:cd:35:82:7a: c4:53:06:39:ff:ab:86:ca:0d:5f:51:40:d9:d6:f3:81:b7:d9: 50:4f:d4:bf:4e:42:0b:e1:ed:36:4c:02:c8:4e:91:7a:d6:6d: 22:51:15:a6:9c:76:8b:ef:ca:c4:d2:a6:1f:b7:4d:3b:33:34: a7:43:28:23:25:de:0b:0c:cf:22:5c:20:e4:54:63:61:4a:6c: df:47:c0:4b:64:10:6c:4e:a0:51:b0:0c:42:38:35:e8:23:80: 86:5e:83:a3:98:7e:80:e4:60:a0:cd:83:3c:13:99:f3:f9:96: 51:95:36:e8:33:73:d8:91:60:3c:1c:0f:c4:41:f6:7f:eb:0f: e3:db:35:8a:e9:04:54:c4:c2:30:9d:cd:7a:54:cd:af:4d:20: cd:13:3d:a1:2e:3a:16:8e:81:2d:23:ee:8f:c0:12:f3:b6:b4: 71:85:e7:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOciRrvDztUROQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY5NDQzOTItYjUyOC00M2MyLTlhYmYtZTQ1NDMyMjlh ZTJkMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk NzgwNGVhMTQtYWI4NC00YmI2LWFmYmQtMWI2YjI1NDJlOWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh9pGsjZPhzwxOtA1lrLCD2DhyzwCOnWvAiG vmpMRsg4OQ4VTO+93iqlV287PLOaZMKnUiP1+Fci0XY4i+dVR5eDZsgKKv4LW7g6 IB0DT60P+HsJKMmGFXH1/aHKW0u0GG3nhR1PMAja3fzQAOP3lBxJa/qIsx3z4S8a dRRApLTH+jLjGn4UWHrgoeO7/bkSHjN1zjHdPLHe4E+4Kf3qfWIUvEQPmVsj69Oh bSsMnAc/RsqkSRb60gxKdbY3nXa5dkI0ZjIqfog0VsuzcPsYy83GLCDkQPMEg0uU 8h21X1ffyHLJCwQMk6LLB7JkQNIq09ZPIJ9G7x5IJNrGq9k47QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5Eq7a+lxuyFGFnCuk5ca67WA6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lZjk0 NDM5Mi1iNTI4LTQzYzItOWFiZi1lNDU0MzIyOWFlMmQvNzAxN2RlYjgtYmI5Mi0z NjQyLTkzZDAtNjdlMDcwNGYzYmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWY5NDQzOTItYjUyOC00M2MyLTlh YmYtZTQ1NDMyMjlhZTJkL2VmOTQ0MzkyLWI1MjgtNDNjMi05YWJmLWU0NTQzMjI5 YWUyZC5jcmwwHwYDVR0jBBgwFoAU1ELYop+RoTkRo9YC5PTkP0bN6fQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lZjk0NDM5Mi1iNTI4LTQzYzItOWFiZi1lNDU0 MzIyOWFlMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7x4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9lr9i9I7Zvl6Yb6PMrzgDdFq9rxwIXDjJUhZptyiqEjG7KftptRZFo 8O8HjU1JV0K8T4OzBqbBLA0TShKp09qLCDOUgQF5yjm8RbqtkfjGLincOeCRzTWC esRTBjn/q4bKDV9RQNnW84G32VBP1L9OQgvh7TZMAshOkXrWbSJRFaacdovvysTS ph+3TTszNKdDKCMl3gsMzyJcIORUY2FKbN9HwEtkEGxOoFGwDEI4NegjgIZeg6OY foDkYKDNgzwTmfP5llGVNugzc9iRYDwcD8RB9n/rD+PbNYrpBFTEwjCdzXpUza9N IM0TPaEuOhaOgS0j7o/AEvO2tHGF5+A= -----END CERTIFICATE-----Generated at Thu Mar 26 09:12:44 2026 by rpki-client