$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/41f98563-88ce-3a2f-930b-fd7902d789a9.roa File: 41f98563-88ce-3a2f-930b-fd7902d789a9.roa (raw, json) Hash identifier: cxvzi8EjOgde2n6jjFSjrMcb5oeUZXX9lsJ9JqLk1jU= Subject key identifier: 60:1A:FB:91:9C:02:0C:AF:13:9F:A2:76:1E:92:40:19:98:84:F2:F2 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D47C4E0876FB81E9ABF124E80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/41f98563-88ce-3a2f-930b-fd7902d789a9.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 19157 IP address blocks: 23.86.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:e0:87:6f:b8:1e:9a:bf:12:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=264aae72-4953-4736-83af-df433b677189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7f:f1:12:ec:d9:68:26:8a:f6:cc:c7:91:a6: 58:f4:69:b7:1b:f9:de:cf:53:8d:82:b1:72:81:19: 50:fb:4f:ff:f7:cc:14:e5:c1:91:94:29:10:97:2a: c0:21:3a:99:ce:24:cf:c4:3f:34:7a:bf:4f:71:d7: fa:20:0e:f9:ba:22:80:3a:a0:e5:64:f4:ac:3e:50: c7:65:d2:c7:c7:5f:10:0b:64:22:60:8a:87:54:b7: 97:38:1e:a7:41:f6:94:55:a9:a6:89:43:1e:c5:5a: bb:91:ca:f8:dd:1e:2a:4a:43:f5:dc:5c:ac:dd:42: fd:27:ad:dc:16:b7:72:95:bf:d0:e0:e2:0e:04:6e: 9c:60:91:6b:a9:a5:6b:59:e2:cf:5d:00:1c:6e:38: 8a:ec:80:ff:2a:a6:e6:4b:d2:bd:8d:f6:62:72:05: a8:1a:ad:6c:d5:4c:97:90:ab:f4:92:36:1a:ce:e6: 98:1e:6f:99:b9:33:08:e3:23:aa:a9:d3:99:ee:42: a3:f1:ba:24:30:f1:00:f8:65:5e:d9:67:32:3f:07: 13:2d:5a:12:ff:a9:5d:ed:08:73:99:fa:24:6e:6e: 5e:65:3a:7c:24:61:50:5a:1e:19:b0:2b:d6:56:4c: f3:74:4e:32:28:c7:55:34:5c:ed:bf:ca:1b:1b:57: 5f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1A:FB:91:9C:02:0C:AF:13:9F:A2:76:1E:92:40:19:98:84:F2:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/41f98563-88ce-3a2f-930b-fd7902d789a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 23.86.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:8b:59:d0:ae:94:cf:f2:cc:b6:98:da:51:4d:97:aa:09:52: c0:fb:bf:f1:d4:56:78:f8:d3:67:25:eb:b4:49:79:d7:a9:f5: 31:59:de:29:c4:83:dd:ac:d1:6e:3b:2d:96:9a:bc:07:32:de: e8:1a:54:9d:37:c0:be:60:4e:17:7f:01:53:c0:e7:4e:b4:1d: 1a:57:d5:74:ff:ee:5c:81:61:10:43:44:35:7a:27:a8:b5:83: 96:ec:3a:f1:56:df:73:ce:e8:f6:24:1f:0a:e0:00:4a:4c:17: fc:ed:b7:46:f4:6a:f8:8e:19:cc:0f:c4:df:12:0b:0f:57:34: fd:26:9a:70:2d:e3:46:5e:83:c3:f5:e3:1b:03:64:60:eb:10: 82:15:42:14:e6:0c:0c:7e:40:6e:05:fb:e5:e4:b3:f4:77:75: 8a:3c:0f:94:4f:45:c6:a2:f7:19:19:7e:dd:d6:be:44:f7:dd: 50:f5:ee:bb:06:72:43:ff:20:59:bd:a6:9b:cb:db:9a:b2:77: 28:2b:98:bd:f1:5f:b0:61:86:c3:d6:8e:c3:1f:34:77:57:b6: 3b:0a:bf:f6:ea:82:bc:36:5f:be:f0:2e:a5:35:f7:e7:14:58: 8e:ac:c3:5c:84:57:48:f9:30:50:b9:d5:9f:60:df:61:af:44: 76:f0:da:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOCHb7gemr8SToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk MjY0YWFlNzItNDk1My00NzM2LTgzYWYtZGY0MzNiNjc3MTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03/xEuzZaCaK9szHkaZY9Gm3G/nez1ONgrFy gRlQ+0//98wU5cGRlCkQlyrAITqZziTPxD80er9Pcdf6IA75uiKAOqDlZPSsPlDH ZdLHx18QC2QiYIqHVLeXOB6nQfaUVammiUMexVq7kcr43R4qSkP13Fys3UL9J63c Frdylb/Q4OIOBG6cYJFrqaVrWeLPXQAcbjiK7ID/KqbmS9K9jfZicgWoGq1s1UyX kKv0kjYazuaYHm+ZuTMI4yOqqdOZ7kKj8bokMPEA+GVe2WcyPwcTLVoS/6ld7Qhz mfokbm5eZTp8JGFQWh4ZsCvWVkzzdE4yKMdVNFztv8obG1dffQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAa+5GcAgyvE5+idh6SQBmYhPLyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNDFmOTg1NjMtODhjZS0z YTJmLTkzMGItZmQ3OTAyZDc4OWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1YgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaLWdCulM/yzLaY2lFNl6oJUsD7v/HUVnj402cl67RJedep9TFZ3inE g92s0W47LZaavAcy3ugaVJ03wL5gThd/AVPA5060HRpX1XT/7lyBYRBDRDV6J6i1 g5bsOvFW33PO6PYkHwrgAEpMF/ztt0b0aviOGcwPxN8SCw9XNP0mmnAt40Zeg8P1 4xsDZGDrEIIVQhTmDAx+QG4F++Xks/R3dYo8D5RPRcai9xkZft3WvkT33VD17rsG ckP/IFm9ppvL25qydygrmL3xX7BhhsPWjsMfNHdXtjsKv/bqgrw2X77wLqU19+cU WI6sw1yEV0j5MFC51Z9g32GvRHbw2oA= -----END CERTIFICATE-----Generated at Thu Mar 26 21:10:47 2026 by rpki-client