$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/a19978cd-8f19-3a48-80db-a6ea43fcd63f.roa File: a19978cd-8f19-3a48-80db-a6ea43fcd63f.roa (raw, json) Hash identifier: SP+XN9sf1gsAZC+eQ3uoclT9IR0fvoMrp71/b/pOoLU= Subject key identifier: AB:83:1E:04:19:6F:C4:36:D2:83:23:76:3D:EC:4A:91:45:7B:C8:85 Certificate issuer: /CN=1b03e342-d588-4239-8704-6688d01760d9 Certificate serial: 010D0C9F4328584D1B19F372FEC4BEF866D0C980 Authority key identifier: 13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/a19978cd-8f19-3a48-80db-a6ea43fcd63f.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 397031 IP address blocks: 23.150.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:f3:72:fe:c4:be:f8:66:d0:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b03e342-d588-4239-8704-6688d01760d9 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=3ad185bf-8a06-4ccb-b463-24cfa9e918bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:0c:0e:51:4c:a0:36:b8:0d:ca:59:34:48: 18:da:81:ef:5b:cb:d3:7d:40:b2:c5:18:e0:8f:67: 16:dc:63:0b:ce:9a:dd:ef:6c:4c:e1:2d:8d:07:f5: ac:82:8b:45:f9:e4:12:6a:ef:a7:e6:3d:8f:b9:b0: c5:8e:0a:bc:ce:f5:8c:d6:e6:a2:ff:27:a4:f2:16: 24:d3:76:ca:58:e0:37:2d:d9:ae:c2:95:12:b9:47: fe:a2:3b:80:d3:03:42:5c:d4:65:f1:a6:8a:6a:40: fd:08:00:ed:3e:fd:de:19:0a:ff:bc:40:f6:77:8b: 4f:d3:bb:69:01:74:b4:49:48:8b:5c:27:fe:4b:3f: 44:8c:c1:ff:ed:c2:5c:20:3a:21:95:5b:26:c0:80: 9a:f8:f6:8f:9b:ff:b6:ef:4b:4a:e3:4a:c9:68:10: 9f:f7:db:13:0c:c0:0e:52:02:11:92:ca:f5:10:76: e6:6b:db:fd:46:91:68:74:6b:6f:48:2d:af:ac:0d: d8:1b:fa:62:28:79:dc:46:26:2e:14:12:9a:15:16: 74:be:4f:e8:23:50:cd:68:8d:ec:27:cc:59:2d:9f: 49:ca:26:76:e7:56:f1:51:b4:56:df:90:87:df:a8: 3f:e1:91:0f:e8:fc:9d:c6:d6:46:73:9b:02:13:3b: e3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:83:1E:04:19:6F:C4:36:D2:83:23:76:3D:EC:4A:91:45:7B:C8:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/a19978cd-8f19-3a48-80db-a6ea43fcd63f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.crl X509v3 Authority Key Identifier: keyid:13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer sbgp-ipAddrBlock: critical IPv4: 23.150.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:90:26:e8:a3:d1:9c:f8:e3:65:07:48:1a:50:ad:c9:56:2f: da:f7:50:0b:9c:ce:8b:4d:a0:33:cf:de:70:cf:25:73:97:9b: cc:01:80:62:4a:04:ca:8b:84:bd:1b:72:03:cf:b5:20:27:f9: f5:b1:1e:47:2a:f0:a6:9d:2e:e2:78:a9:e4:79:18:88:93:c1: da:02:13:4d:6a:10:8d:e0:de:0a:9f:f7:f3:11:3f:5e:d6:29: ff:62:94:b6:a4:1e:ac:20:ad:8d:aa:6b:98:8d:94:82:fe:ee: 34:ef:8b:34:cc:b4:63:f7:79:44:51:73:5f:ae:c8:4e:49:a1: 33:42:b4:7f:9f:b2:33:1a:31:9e:0e:f5:8d:a7:5b:89:71:2b: b3:9c:7a:1b:07:7c:b6:d2:7c:a9:a8:db:ed:6f:63:4a:8d:00: 13:e7:3f:31:7c:61:16:b3:65:e9:94:9e:9a:fd:73:63:a3:18: 36:95:16:47:51:75:4f:7c:b1:6f:e2:c7:10:96:b7:dd:89:35: 3f:2e:27:b2:54:49:84:e6:06:93:2d:53:32:9d:9d:0a:58:1a: a8:bb:ce:b8:f6:89:e1:e6:c0:45:eb:7f:67:b7:08:b9:b5:9c: fb:76:a8:5f:21:19:c7:68:3b:51:8a:9f:66:cf:27:d1:33:80: 2d:89:02:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGfNy/sS++GbQyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWIwM2UzNDItZDU4OC00MjM5LTg3MDQtNjY4OGQwMTc2 MGQ5MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk M2FkMTg1YmYtOGEwNi00Y2NiLWI0NjMtMjRjZmE5ZTkxOGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpkMDlFMoDa4DcpZNEgY2oHvW8vTfUCyxRjg j2cW3GMLzprd72xM4S2NB/WsgotF+eQSau+n5j2PubDFjgq8zvWM1uai/yek8hYk 03bKWOA3LdmuwpUSuUf+ojuA0wNCXNRl8aaKakD9CADtPv3eGQr/vED2d4tP07tp AXS0SUiLXCf+Sz9EjMH/7cJcIDohlVsmwICa+PaPm/+270tK40rJaBCf99sTDMAO UgIRksr1EHbma9v9RpFodGtvSC2vrA3YG/piKHncRiYuFBKaFRZ0vk/oI1DNaI3s J8xZLZ9JyiZ251bxUbRW35CH36g/4ZEP6PydxtZGc5sCEzvj7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuDHgQZb8Q20oMjdj3sSpFFe8iFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xYjAz ZTM0Mi1kNTg4LTQyMzktODcwNC02Njg4ZDAxNzYwZDkvYTE5OTc4Y2QtOGYxOS0z YTQ4LTgwZGItYTZlYTQzZmNkNjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWIwM2UzNDItZDU4OC00MjM5LTg3 MDQtNjY4OGQwMTc2MGQ5LzFiMDNlMzQyLWQ1ODgtNDIzOS04NzA0LTY2ODhkMDE3 NjBkOS5jcmwwHwYDVR0jBBgwFoAUE3B5Q6GpUgJKNAaz0vqM7Y/ikSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xYjAzZTM0Mi1kNTg4LTQyMzktODcwNC02Njg4 ZDAxNzYwZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF5agMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmQJuij0Zz442UHSBpQrclWL9r3UAuczotNoDPP3nDPJXOXm8wBgGJK BMqLhL0bcgPPtSAn+fWxHkcq8KadLuJ4qeR5GIiTwdoCE01qEI3g3gqf9/MRP17W Kf9ilLakHqwgrY2qa5iNlIL+7jTvizTMtGP3eURRc1+uyE5JoTNCtH+fsjMaMZ4O 9Y2nW4lxK7OcehsHfLbSfKmo2+1vY0qNABPnPzF8YRazZemUnpr9c2OjGDaVFkdR dU98sW/ixxCWt92JNT8uJ7JUSYTmBpMtUzKdnQpYGqi7zrj2ieHmwEXrf2e3CLm1 nPt2qF8hGcdoO1GKn2bPJ9EzgC2JAlw= -----END CERTIFICATE-----Generated at Thu Mar 26 23:47:40 2026 by rpki-client