$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/667fdc40-14dc-38e1-9460-d4a3e5e33d86.roa File: 667fdc40-14dc-38e1-9460-d4a3e5e33d86.roa (raw, json) Hash identifier: V/kj83sIfrfnFwA8Bqe/p4j9rm5bu2VOx+uo3oKmTdQ= Subject key identifier: A1:73:38:48:FE:56:E5:E8:A5:FE:A1:78:7E:03:06:E5:15:05:BA:87 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E0E5D00AB7D3412A024840 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/667fdc40-14dc-38e1-9460-d4a3e5e33d86.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 23.251.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e5:d0:0a:b7:d3:41:2a:02:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=9d091e4f-fea9-4656-86c9-cbb5bde4a074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:52:b7:d2:c2:60:89:98:c7:bc:b6:86:17:c4: a7:10:b6:a7:43:80:85:42:dc:8c:f2:ad:36:44:d1: 84:f5:04:ac:d8:8f:c8:df:74:36:69:67:6e:a8:e9: 07:97:8e:c6:bd:fb:5f:04:1f:15:f7:d1:85:b6:ed: 0c:8c:ba:85:15:50:29:09:0f:e7:7f:96:1a:e8:af: 46:93:96:c3:80:43:d0:be:e7:82:7d:df:f0:0f:dd: b7:06:9d:dc:78:9b:49:8d:7c:d6:f1:f1:bc:bf:50: 03:ac:34:6d:09:ea:2b:4d:20:96:da:a4:b5:a8:5b: 21:62:da:f7:5a:fe:0e:54:b4:65:3e:50:c4:a9:83: 4c:ab:5e:62:29:c8:af:a8:a5:a6:96:e4:e6:df:6f: 9c:28:2e:0a:a7:95:e9:ab:30:2e:f3:9c:bb:60:ec: fc:c1:88:b6:9d:7a:81:cf:96:f9:c7:46:8c:7e:8b: 8e:59:1b:5f:a1:14:85:d3:81:87:a7:f9:8d:84:b1: ea:be:7e:92:8f:a2:34:1b:54:ed:a8:f8:af:0a:c0: 91:4e:61:26:1d:89:3f:14:71:1a:3e:71:ea:44:dd: 14:49:85:4c:a6:ff:6f:6b:42:bc:42:b1:d1:24:5e: 8a:ea:c2:8a:aa:e7:07:61:d3:45:99:80:52:16:a6: 15:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:73:38:48:FE:56:E5:E8:A5:FE:A1:78:7E:03:06:E5:15:05:BA:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/667fdc40-14dc-38e1-9460-d4a3e5e33d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.251.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:04:3a:65:e4:9c:df:1c:46:07:cc:cf:24:f9:ba:33:24:8f: a3:4e:bb:60:58:81:bc:8f:a7:6d:dc:72:23:c4:9d:36:8b:56: 4d:4a:9f:09:74:c6:14:ae:99:b8:c1:21:63:8b:c2:79:75:e2: 00:17:f7:d4:b4:0f:8a:56:13:31:9b:5d:fc:50:8c:10:dc:6f: 5e:57:f8:8f:72:a0:c4:87:2a:7a:69:2e:a7:97:d7:61:85:c4: b2:ba:9e:2a:89:0a:4b:96:56:84:ec:a9:7d:80:de:55:8a:5f: a9:88:1f:ba:2f:82:4b:4c:54:b4:66:68:4d:4b:2a:c7:91:50: 7b:83:4a:12:08:73:a9:c9:d4:2a:53:87:e9:55:39:d2:bb:ba: 13:37:f9:0a:53:59:ae:2d:dd:a8:04:8f:e6:2b:cd:0f:47:95: 21:f3:43:65:2c:6d:02:80:3d:23:05:31:ff:0c:de:ce:2a:6c: b6:80:2d:3b:bb:aa:d1:d9:38:4d:12:1d:01:be:e4:0c:99:cc: de:df:6c:da:cb:f7:1c:85:5c:6e:29:8b:70:ce:c4:ad:85:9f: e3:0d:eb:f5:09:25:8f:7b:2c:66:21:fa:92:ce:0c:b6:1e:8f: c8:dc:e8:15:4f:46:4c:6c:3d:d3:52:ec:08:39:1f:64:62:79: 3f:9c:97:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OXQCrfTQSoCSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OWQwOTFlNGYtZmVhOS00NjU2LTg2YzktY2JiNWJkZTRhMDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFK30sJgiZjHvLaGF8SnELanQ4CFQtyM8q02 RNGE9QSs2I/I33Q2aWduqOkHl47GvftfBB8V99GFtu0MjLqFFVApCQ/nf5Ya6K9G k5bDgEPQvueCfd/wD923Bp3ceJtJjXzW8fG8v1ADrDRtCeorTSCW2qS1qFshYtr3 Wv4OVLRlPlDEqYNMq15iKcivqKWmluTm32+cKC4Kp5XpqzAu85y7YOz8wYi2nXqB z5b5x0aMfouOWRtfoRSF04GHp/mNhLHqvn6Sj6I0G1TtqPivCsCRTmEmHYk/FHEa PnHqRN0USYVMpv9va0K8QrHRJF6K6sKKqucHYdNFmYBSFqYVcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFzOEj+VuXopf6heH4DBuUVBbqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjY3ZmRjNDAtMTRkYy0z OGUxLTk0NjAtZDRhM2U1ZTMzZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/uZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwEOmXknN8cRgfMzyT5ujMkj6NOu2BYgbyPp23cciPEnTaLVk1Knwl0 xhSumbjBIWOLwnl14gAX99S0D4pWEzGbXfxQjBDcb15X+I9yoMSHKnppLqeX12GF xLK6niqJCkuWVoTsqX2A3lWKX6mIH7ovgktMVLRmaE1LKseRUHuDShIIc6nJ1CpT h+lVOdK7uhM3+QpTWa4t3agEj+YrzQ9HlSHzQ2UsbQKAPSMFMf8M3s4qbLaALTu7 qtHZOE0SHQG+5AyZzN7fbNrL9xyFXG4pi3DOxK2Fn+MN6/UJJY97LGYh+pLODLYe j8jc6BVPRkxsPdNS7Ag5H2RieT+cl2c= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:09 2026 by rpki-client