$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/e713b0c7-ac64-3c9e-8a7c-1289e6550c40.roa File: e713b0c7-ac64-3c9e-8a7c-1289e6550c40.roa (raw, json) Hash identifier: sJhdWN9qdH/YgcflapnbAxEMtNROcmblNDova4VNCHo= Subject key identifier: B3:40:47:0B:38:7A:E5:3C:47:A7:FF:1E:56:29:AE:DE:A5:6A:53:F6 Certificate issuer: /CN=c9fc1d52-c008-4fdc-acd1-73ab6c71b153 Certificate serial: 010D0C9F4328584D3F64F38E9F67A8158298EC80 Authority key identifier: CF:1B:30:11:70:75:38:4F:72:3E:E9:B0:CD:09:2A:B7:5A:08:C6:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/e713b0c7-ac64-3c9e-8a7c-1289e6550c40.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 40706 IP address blocks: 23.157.224.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f3:8e:9f:67:a8:15:82:98:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9fc1d52-c008-4fdc-acd1-73ab6c71b153 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=42851b23-0332-4b19-b50a-83bdf7b76c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b2:f0:a0:2e:99:37:71:24:ab:61:e1:63:ae: 56:f6:fe:95:08:23:64:b2:bf:49:af:79:2d:95:68: 55:e9:24:5e:2c:ca:20:92:89:51:bf:55:f0:a5:7e: 85:43:27:a0:f4:35:b3:48:f1:4b:ea:e8:92:a8:f8: f0:64:f2:22:b4:40:25:d7:51:b7:8f:91:e7:6b:67: 7e:45:0b:88:f0:4f:ac:87:35:59:45:f6:a2:1e:cc: e4:e6:42:bf:0f:89:7f:0b:f1:ab:77:55:64:a6:de: 5c:02:b5:86:a5:fd:b8:f8:b0:c3:29:0e:7a:3d:19: ca:f0:85:88:7d:2c:a2:ea:a9:02:db:b4:e6:4b:e2: 68:6d:fc:a7:df:1f:1f:a6:db:23:ce:45:b8:2f:da: eb:4a:7f:32:ec:47:8a:96:fb:63:60:5f:4e:d4:14: 94:66:9c:23:93:91:cf:8e:82:c1:8a:31:2a:48:bf: 45:dd:48:fd:c5:ec:05:20:88:d3:22:a9:e3:51:24: 76:63:1f:09:69:72:5f:fd:b2:3b:1c:34:fa:80:00: de:93:6c:c2:f1:cc:d1:f9:64:c6:92:c8:a4:62:a4: 4b:f2:cb:bd:72:c5:8f:0d:2d:12:66:1a:7c:54:79: f1:57:98:35:e6:70:2d:94:02:60:a4:f0:95:35:f9: 86:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:40:47:0B:38:7A:E5:3C:47:A7:FF:1E:56:29:AE:DE:A5:6A:53:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/e713b0c7-ac64-3c9e-8a7c-1289e6550c40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.crl X509v3 Authority Key Identifier: keyid:CF:1B:30:11:70:75:38:4F:72:3E:E9:B0:CD:09:2A:B7:5A:08:C6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer sbgp-ipAddrBlock: critical IPv4: 23.157.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e9:8e:07:6a:0c:cd:91:2d:80:53:1b:ac:76:15:b1:b9:cd: a5:0d:19:16:3f:e1:fe:00:fb:5b:e9:3a:ce:33:6f:85:08:0b: a9:3f:55:ce:e4:09:b2:5a:b9:0e:4b:32:e0:fb:71:83:0b:34: e6:b1:9f:7f:b4:5a:9d:e3:fe:fb:e3:16:2a:e9:e8:0d:e3:2f: e6:a6:2b:77:dc:e8:19:3a:83:22:b9:73:94:16:06:cc:25:f0: a7:10:48:73:68:9e:17:ec:75:87:7b:86:a7:ec:bb:ef:47:1a: fc:70:6c:4f:1d:fb:a2:71:a2:ef:3a:b0:94:f8:71:67:a3:91: 19:3b:7e:0b:29:a7:12:48:06:0f:3d:dd:ce:b9:86:81:ec:5c: 84:d8:e5:f0:95:fe:60:fd:4c:bd:c9:20:cf:6d:c8:9f:75:f7: 77:3c:89:15:aa:56:26:3a:0d:39:e1:86:6f:26:a6:f7:49:b8: 7f:9a:95:16:79:34:52:97:eb:80:de:cb:8d:0c:94:d2:5c:04: a2:e4:ca:83:3a:03:8b:18:4b:e2:1b:1f:4e:db:05:2c:2b:2a: 01:8b:df:87:ee:48:78:74:ee:4a:ad:77:89:2f:b9:61:8d:1f: 40:b5:79:05:16:35:eb:42:48:8b:ae:e2:cc:2c:fa:c8:35:d3: 54:2d:54:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZPOOn2eoFYKY7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlmYzFkNTItYzAwOC00ZmRjLWFjZDEtNzNhYjZjNzFi MTUzMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NDI4NTFiMjMtMDMzMi00YjE5LWI1MGEtODNiZGY3Yjc2YzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbLwoC6ZN3Ekq2HhY65W9v6VCCNksr9Jr3kt lWhV6SReLMogkolRv1XwpX6FQyeg9DWzSPFL6uiSqPjwZPIitEAl11G3j5Hna2d+ RQuI8E+shzVZRfaiHszk5kK/D4l/C/Grd1Vkpt5cArWGpf24+LDDKQ56PRnK8IWI fSyi6qkC27TmS+Jobfyn3x8fptsjzkW4L9rrSn8y7EeKlvtjYF9O1BSUZpwjk5HP joLBijEqSL9F3Uj9xewFIIjTIqnjUSR2Yx8JaXJf/bI7HDT6gADek2zC8czR+WTG ksikYqRL8su9csWPDS0SZhp8VHnxV5g15nAtlAJgpPCVNfmGVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNARws4euU8R6f/HlYprt6lalP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jOWZj MWQ1Mi1jMDA4LTRmZGMtYWNkMS03M2FiNmM3MWIxNTMvZTcxM2IwYzctYWM2NC0z YzllLThhN2MtMTI4OWU2NTUwYzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzlmYzFkNTItYzAwOC00ZmRjLWFj ZDEtNzNhYjZjNzFiMTUzL2M5ZmMxZDUyLWMwMDgtNGZkYy1hY2QxLTczYWI2Yzcx YjE1My5jcmwwHwYDVR0jBBgwFoAUzxswEXB1OE9yPumwzQkqt1oIxu8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jOWZjMWQ1Mi1jMDA4LTRmZGMtYWNkMS03M2Fi NmM3MWIxNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXpjgdqDM2RLYBTG6x2FbG5zaUNGRY/4f4A+1vpOs4zb4UIC6k/Vc7k CbJauQ5LMuD7cYMLNOaxn3+0Wp3j/vvjFirp6A3jL+amK3fc6Bk6gyK5c5QWBswl 8KcQSHNonhfsdYd7hqfsu+9HGvxwbE8d+6Jxou86sJT4cWejkRk7fgsppxJIBg89 3c65hoHsXITY5fCV/mD9TL3JIM9tyJ9193c8iRWqViY6DTnhhm8mpvdJuH+alRZ5 NFKX64Dey40MlNJcBKLkyoM6A4sYS+IbH07bBSwrKgGL34fuSHh07kqtd4kvuWGN H0C1eQUWNetCSIuu4sws+sg101QtVLM= -----END CERTIFICATE-----Generated at Thu Mar 26 20:15:30 2026 by rpki-client