$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89581af2-795b-3183-8d0d-8ed71ec17c4f.roa File: 89581af2-795b-3183-8d0d-8ed71ec17c4f.roa (raw, json) Hash identifier: bbkGbZ6trvc38Vqyx6oxkPSFolHvOrJdvhK6YxH1CXg= Subject key identifier: 43:CC:B4:5A:50:E4:F5:43:21:C5:EF:99:5F:63:0C:90:38:30:59:35 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E02C686645F57822FB6C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89581af2-795b-3183-8d0d-8ed71ec17c4f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 23.236.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:2c:68:66:45:f5:78:22:fb:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=632c7b7c-5644-4683-aff5-581b947cc07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:38:7e:de:68:34:5a:ed:26:d9:cf:ba:af:b2: 65:14:2a:2d:41:f4:5a:e5:fc:13:9e:cb:ac:f2:ea: b3:d6:bf:7d:64:da:c9:ef:8d:a7:85:ba:7d:bf:2b: b5:06:dc:4d:1c:88:b3:06:30:96:c0:aa:44:70:b2: 8e:3d:4b:2a:b4:bf:49:af:27:15:93:05:ba:be:86: 7a:2e:41:b6:bc:46:1e:48:20:ec:48:e4:52:07:d2: bf:8b:f3:de:5b:53:3f:a4:8c:ca:6a:30:55:d3:77: 1d:ed:5a:e4:9c:bb:63:05:a0:10:ac:dc:b6:d7:52: bc:f0:23:bd:2e:16:6c:fb:18:7c:87:87:eb:3e:0d: 0d:3c:70:4c:1a:45:4e:43:81:ae:b9:b9:dd:c6:3a: dc:bb:7f:18:32:13:e4:3f:bf:68:a2:ca:f6:08:23: 43:43:48:0c:f4:cf:5f:5b:e3:99:41:4a:31:84:d7: 22:db:c0:ed:05:43:db:54:29:a3:d2:5c:cf:72:87: 1a:1c:72:c3:80:07:99:9e:6d:d8:fa:8f:a2:d3:89: 8e:77:47:5d:34:f7:55:fd:6b:c6:e4:4a:42:49:f4: 50:96:33:b4:b7:07:d8:b9:64:57:a5:2b:24:10:f1: f2:fb:d9:0e:ea:64:ba:ef:40:3d:57:10:cc:43:64: 4a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CC:B4:5A:50:E4:F5:43:21:C5:EF:99:5F:63:0C:90:38:30:59:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89581af2-795b-3183-8d0d-8ed71ec17c4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.236.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:66:e8:f0:8c:c6:53:78:f9:27:b3:e0:cb:87:56:d8:8f:67: 2c:fb:7a:26:77:9b:b0:66:68:53:78:7a:bc:15:a2:b3:25:cd: 03:42:e6:cc:8f:c5:ec:43:e3:55:20:8b:9a:fd:1c:d8:0b:1c: b6:cc:e6:07:8e:b2:44:c6:9b:23:d1:13:40:9e:e6:ad:78:c2: 93:e5:cf:3b:f1:84:4c:b3:e6:0d:f0:a7:35:77:d4:7c:e3:b2: 83:9f:5e:ee:bf:b3:e2:f1:47:05:5a:0f:82:1a:c0:42:a0:47: 3e:63:69:61:c3:9f:21:09:c7:f2:22:9f:8b:62:58:11:e8:d6: 62:2b:13:90:d0:e1:2c:6b:92:87:ad:d4:33:49:0f:c8:07:59: 80:f5:a0:e9:81:9b:4d:53:9f:25:45:de:da:56:77:d5:78:33: 34:8d:7d:ba:79:55:cb:41:97:1a:18:6c:47:89:25:bd:2c:d2: 59:f6:a8:ba:18:ff:c3:44:43:9a:12:3f:7f:a2:01:57:82:b1: 2c:cb:3e:10:5d:7f:31:db:e5:df:7c:ec:aa:cb:d6:02:fe:3a: 05:ab:20:40:d2:bf:10:9f:f7:9d:fb:8d:6f:96:bb:ea:e0:c9: 46:06:7b:99:f1:24:ed:ec:f4:a4:3c:e5:b1:d2:be:2a:c1:20: 01:df:78:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4CxoZkX1eCL7bAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NjMyYzdiN2MtNTY0NC00NjgzLWFmZjUtNTgxYjk0N2NjMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zh+3mg0Wu0m2c+6r7JlFCotQfRa5fwTnsus 8uqz1r99ZNrJ742nhbp9vyu1BtxNHIizBjCWwKpEcLKOPUsqtL9JrycVkwW6voZ6 LkG2vEYeSCDsSORSB9K/i/PeW1M/pIzKajBV03cd7VrknLtjBaAQrNy211K88CO9 LhZs+xh8h4frPg0NPHBMGkVOQ4Guubndxjrcu38YMhPkP79oosr2CCNDQ0gM9M9f W+OZQUoxhNci28DtBUPbVCmj0lzPcocaHHLDgAeZnm3Y+o+i04mOd0ddNPdV/WvG 5EpCSfRQljO0twfYuWRXpSskEPHy+9kO6mS670A9VxDMQ2RKgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPMtFpQ5PVDIcXvmV9jDJA4MFk1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODk1ODFhZjItNzk1Yi0z MTgzLThkMGQtOGVkNzFlYzE3YzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+w1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElm6PCMxlN4+Sez4MuHVtiPZyz7eiZ3m7BmaFN4erwVorMlzQNC5syP xexD41Ugi5r9HNgLHLbM5geOskTGmyPRE0Ce5q14wpPlzzvxhEyz5g3wpzV31Hzj soOfXu6/s+LxRwVaD4IawEKgRz5jaWHDnyEJx/Iin4tiWBHo1mIrE5DQ4Sxrkoet 1DNJD8gHWYD1oOmBm01TnyVF3tpWd9V4MzSNfbp5VctBlxoYbEeJJb0s0ln2qLoY /8NEQ5oSP3+iAVeCsSzLPhBdfzHb5d987KrL1gL+OgWrIEDSvxCf9537jW+Wu+rg yUYGe5nxJO3s9KQ85bHSvirBIAHfeIY= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:21 2026 by rpki-client