$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0fd5bed-a231-3a28-aac4-a1195018a2c6.roa File: d0fd5bed-a231-3a28-aac4-a1195018a2c6.roa (raw, json) Hash identifier: yDLUWaMGtrXlk1EJCPZsIlh8p6HwkKgVpSAT8XSqlLQ= Subject key identifier: 32:4C:30:11:F9:2E:7F:F1:85:96:52:B1:5F:46:32:EC:14:61:25:C5 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D24E1336E36EE054A8F8C2280 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0fd5bed-a231-3a28-aac4-a1195018a2c6.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 44559 IP address blocks: 23.230.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:33:6e:36:ee:05:4a:8f:8c:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=64b56f1e-b0f3-4331-9135-d28a9212f8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f8:8f:47:60:3e:33:da:ea:81:7f:65:15:bd: 49:f1:ec:50:2c:93:e0:33:9e:a8:5e:14:91:de:4b: 1a:8c:91:d8:20:0b:9c:b0:bc:a3:b4:08:32:5b:93: 97:1b:df:2f:0a:65:2c:0e:11:64:f3:b9:3d:a1:c1: 91:59:d3:e8:f4:af:5b:46:22:ec:ea:41:e3:9e:45: ad:87:df:39:f8:52:f3:6b:f8:f0:32:d1:e0:ee:db: eb:7d:18:35:99:24:f5:af:30:24:4d:32:76:a4:de: 8c:11:16:53:83:e5:e1:e6:3c:f0:13:38:b5:4b:51: d2:d8:77:75:70:1f:66:91:0d:ef:9d:41:92:2a:37: dd:5b:8f:fb:57:41:f3:33:a1:76:25:05:f5:68:da: dc:55:c3:2e:bb:16:4d:b0:c5:bd:1e:57:ab:76:35: dc:62:36:08:f2:a0:32:45:76:e3:10:ed:96:79:58: 0d:15:cc:5a:55:df:fa:22:ca:4f:0f:d8:91:72:02: c6:c0:25:ce:2e:fd:08:06:54:91:9d:de:e3:2f:18: 96:8b:92:fc:06:04:d2:41:5e:18:3a:fe:e6:d5:d9: 88:16:09:23:4e:a5:56:74:19:18:a1:c2:40:3a:5d: 54:0b:db:1b:c9:ef:b1:d6:b2:63:26:35:a6:d1:50: 3d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4C:30:11:F9:2E:7F:F1:85:96:52:B1:5F:46:32:EC:14:61:25:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0fd5bed-a231-3a28-aac4-a1195018a2c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 23.230.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b1:58:fc:b5:4a:b7:d7:3f:b7:6c:bb:44:11:07:f6:c1:5e: 5f:3c:b3:c9:e2:f9:d9:62:c9:09:bd:f1:07:36:68:0b:04:85: 76:67:56:6e:60:a4:51:cb:61:23:e1:a7:52:e8:33:7b:9e:9b: 55:69:9f:70:df:45:fd:49:b3:3f:5f:05:d9:fd:21:cd:c8:e8: 17:cd:0f:cc:7c:9f:27:43:82:be:f0:4a:72:50:9a:9c:e6:82: 86:38:89:d2:ec:e3:66:cd:d1:cd:33:13:9f:5e:44:e3:44:8b: 9c:fb:48:c6:de:e1:c9:fa:84:f7:f9:be:54:e9:d9:9d:7b:d8: 43:1e:9e:23:31:97:b4:c2:bf:cc:0d:c3:9d:ce:62:91:76:83: 9c:2d:bc:19:a9:3f:01:5e:2a:63:6b:63:1b:e9:58:4f:9e:ad: 7e:af:f8:2c:84:d3:b7:8b:ed:5c:5a:11:91:f9:26:8c:26:dc: 7f:05:dc:b5:9d:05:7c:8b:f6:8f:56:f8:7b:f6:b8:d8:03:fa: 3c:da:9e:36:bb:31:7e:a0:9c:6b:34:10:e9:7d:e0:a7:f1:07: 9c:e7:f4:23:f2:b5:d4:ae:5a:50:0b:d9:3a:59:0f:28:67:6f: a6:9e:05:80:92:4e:0a:ff:1b:9f:66:c6:05:85:b9:eb:f1:e7: 31:33:97:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4TNuNu4FSo+MIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NjRiNTZmMWUtYjBmMy00MzMxLTkxMzUtZDI4YTkyMTJmOGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzviPR2A+M9rqgX9lFb1J8exQLJPgM56oXhSR 3ksajJHYIAucsLyjtAgyW5OXG98vCmUsDhFk87k9ocGRWdPo9K9bRiLs6kHjnkWt h985+FLza/jwMtHg7tvrfRg1mST1rzAkTTJ2pN6MERZTg+Xh5jzwEzi1S1HS2Hd1 cB9mkQ3vnUGSKjfdW4/7V0HzM6F2JQX1aNrcVcMuuxZNsMW9HlerdjXcYjYI8qAy RXbjEO2WeVgNFcxaVd/6IspPD9iRcgLGwCXOLv0IBlSRnd7jLxiWi5L8BgTSQV4Y Ov7m1dmIFgkjTqVWdBkYocJAOl1UC9sbye+x1rJjJjWm0VA9JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJMMBH5Ln/xhZZSsV9GMuwUYSXFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDBmZDViZWQtYTIzMS0z YTI4LWFhYzQtYTExOTUwMThhMmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+b0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSxWPy1SrfXP7dsu0QRB/bBXl88s8ni+dliyQm98Qc2aAsEhXZnVm5g pFHLYSPhp1LoM3uem1Vpn3DfRf1Jsz9fBdn9Ic3I6BfND8x8nydDgr7wSnJQmpzm goY4idLs42bN0c0zE59eRONEi5z7SMbe4cn6hPf5vlTp2Z172EMeniMxl7TCv8wN w53OYpF2g5wtvBmpPwFeKmNrYxvpWE+erX6v+CyE07eL7VxaEZH5Jowm3H8F3LWd BXyL9o9W+Hv2uNgD+jzanja7MX6gnGs0EOl94KfxB5zn9CPytdSuWlAL2TpZDyhn b6aeBYCSTgr/G59mxgWFuevx5zEzl8Y= -----END CERTIFICATE-----Generated at Thu Mar 26 02:46:13 2026 by rpki-client