$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/d960457e-2ea4-3166-b8a3-8fdc7d7edc54.roa File: d960457e-2ea4-3166-b8a3-8fdc7d7edc54.roa (raw, json) Hash identifier: Bz8eG56XNJRjn3xNFtm1jT8WkvfLyMU7y8DvDKdxUWM= Subject key identifier: 7A:C9:B4:C9:86:AC:9B:F9:C9:CC:27:35:18:0B:FC:BE:D3:93:B8:F7 Certificate issuer: /CN=f89b2137-fc39-48ca-9b75-2b8574c1a143 Certificate serial: 010D0C9F4328584D117268AAC18F1FA47ADA4B80 Authority key identifier: 1B:14:BC:5E:3F:CB:F4:B5:05:60:EB:59:1F:0B:4C:01:76:E4:8A:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/d960457e-2ea4-3166-b8a3-8fdc7d7edc54.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 395898 IP address blocks: 23.186.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/f89b2137-fc39-48ca-9b75-2b8574c1a143.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/f89b2137-fc39-48ca-9b75-2b8574c1a143.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:68:aa:c1:8f:1f:a4:7a:da:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f89b2137-fc39-48ca-9b75-2b8574c1a143 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=2a96fe12-93e9-421d-81a5-35ff771e5e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:32:03:60:70:9a:1a:eb:db:c4:44:03:46: 8a:3c:55:20:df:05:3e:03:a2:69:d0:ef:11:db:24: bc:fa:c6:d8:e7:0b:93:13:d0:75:0d:a6:13:a1:96: 39:ae:27:6d:15:c2:90:8c:f2:c1:58:98:e9:64:43: 47:64:7d:f6:bd:62:0b:9d:71:4a:7c:46:b0:44:dd: 5c:92:34:83:94:e0:9a:31:34:53:d2:f4:12:bf:27: 61:f6:46:2f:6d:06:79:89:01:cd:42:c9:bc:ef:ae: 22:75:10:35:70:61:fc:a3:2f:4c:4f:65:8e:72:13: 96:de:54:5b:93:89:d5:b7:eb:59:13:9d:ba:8f:2c: a6:78:ce:62:82:e0:28:0a:eb:5d:db:26:91:87:bd: f5:e6:fc:e8:64:bd:57:1e:3f:28:79:96:53:31:c3: 81:f2:6d:7d:d1:fb:f1:5b:f3:4c:5d:2d:5b:b1:c9: 99:44:30:71:56:46:c7:6b:82:93:d1:99:96:79:5a: a5:ce:7e:64:56:f1:eb:5a:94:81:a2:0d:24:27:10: 8b:af:cc:93:d3:82:b6:5a:b7:ad:fd:27:a0:a0:02: 8e:c6:e5:3f:3c:36:82:c3:cb:c2:15:f8:5e:d5:9c: 8e:10:95:9b:76:f7:b9:f4:af:b4:da:7f:ba:0c:aa: bc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C9:B4:C9:86:AC:9B:F9:C9:CC:27:35:18:0B:FC:BE:D3:93:B8:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/d960457e-2ea4-3166-b8a3-8fdc7d7edc54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/f89b2137-fc39-48ca-9b75-2b8574c1a143.crl X509v3 Authority Key Identifier: keyid:1B:14:BC:5E:3F:CB:F4:B5:05:60:EB:59:1F:0B:4C:01:76:E4:8A:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143.cer sbgp-ipAddrBlock: critical IPv4: 23.186.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:3e:6b:6b:47:0d:8d:51:76:67:cb:0f:c6:a3:e0:1f:f6:55: 9b:0c:ba:77:38:c5:c2:2e:dc:d4:c3:98:18:f7:f0:0b:cb:4e: a8:8b:08:1c:c8:f1:00:50:21:2e:9c:69:c8:6b:05:30:d6:5c: 6b:ab:da:d3:c2:51:5a:c3:e4:ef:71:b7:ec:99:0c:23:60:32: b8:bf:59:41:5b:8b:2a:e0:7d:27:24:ab:37:bc:a8:3e:7e:ca: b2:07:de:96:e8:81:da:b9:af:7a:40:d6:0f:b1:ce:86:24:d9: 14:4c:5b:e6:26:6b:e0:54:3e:f0:b3:bd:da:bf:77:3b:8b:b1: ba:c2:f7:f8:4f:20:bc:ea:48:a8:45:03:f3:66:e7:ec:c4:6a: 5d:a3:26:fe:5a:48:81:01:a5:f3:7f:dd:86:96:c7:f1:26:47: 1a:87:27:c0:5f:54:47:88:1b:69:42:45:dc:2c:20:ae:66:03: 26:fb:0b:d5:74:ae:54:e6:55:be:ee:28:75:ee:a8:a1:82:39: a1:09:df:cd:21:80:4d:73:8d:12:4f:d0:3c:a6:e9:4c:b1:2d: 5c:55:7a:b3:02:e2:f5:e1:31:8c:e5:11:ac:f4:d8:1a:32:9f: 62:6c:65:73:dd:9d:58:c7:0c:d7:43:70:5b:8a:e3:dc:8d:f5: 47:78:02:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcmiqwY8fpHraS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg5YjIxMzctZmMzOS00OGNhLTliNzUtMmI4NTc0YzFh MTQzMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk MmE5NmZlMTItOTNlOS00MjFkLTgxYTUtMzVmZjc3MWU1ZTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk0yA2Bwmhrr28REA0aKPFUg3wU+A6Jp0O8R 2yS8+sbY5wuTE9B1DaYToZY5ridtFcKQjPLBWJjpZENHZH32vWILnXFKfEawRN1c kjSDlOCaMTRT0vQSvydh9kYvbQZ5iQHNQsm8764idRA1cGH8oy9MT2WOchOW3lRb k4nVt+tZE526jyymeM5iguAoCutd2yaRh7315vzoZL1XHj8oeZZTMcOB8m190fvx W/NMXS1bscmZRDBxVkbHa4KT0ZmWeVqlzn5kVvHrWpSBog0kJxCLr8yT04K2Wret /SegoAKOxuU/PDaCw8vCFfhe1ZyOEJWbdve59K+02n+6DKq8KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrJtMmGrJv5ycwnNRgL/L7Tk7j3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mODli MjEzNy1mYzM5LTQ4Y2EtOWI3NS0yYjg1NzRjMWExNDMvZDk2MDQ1N2UtMmVhNC0z MTY2LWI4YTMtOGZkYzdkN2VkYzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjg5YjIxMzctZmMzOS00OGNhLTli NzUtMmI4NTc0YzFhMTQzL2Y4OWIyMTM3LWZjMzktNDhjYS05Yjc1LTJiODU3NGMx YTE0My5jcmwwHwYDVR0jBBgwFoAUGxS8Xj/L9LUFYOtZHwtMAXbkit4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mODliMjEzNy1mYzM5LTQ4Y2EtOWI3NS0yYjg1 NzRjMWExNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIs+a2tHDY1RdmfLD8aj4B/2VZsMunc4xcIu3NTDmBj38AvLTqiLCBzI 8QBQIS6cachrBTDWXGur2tPCUVrD5O9xt+yZDCNgMri/WUFbiyrgfSckqze8qD5+ yrIH3pbogdq5r3pA1g+xzoYk2RRMW+Yma+BUPvCzvdq/dzuLsbrC9/hPILzqSKhF A/Nm5+zEal2jJv5aSIEBpfN/3YaWx/EmRxqHJ8BfVEeIG2lCRdwsIK5mAyb7C9V0 rlTmVb7uKHXuqKGCOaEJ380hgE1zjRJP0Dym6UyxLVxVerMC4vXhMYzlEaz02Boy n2JsZXPdnVjHDNdDcFuK49yN9Ud4AvQ= -----END CERTIFICATE-----Generated at Thu Mar 26 14:15:19 2026 by rpki-client