$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/668cf81e-26f7-3cfb-8188-230b6296a5c7.roa File: 668cf81e-26f7-3cfb-8188-230b6296a5c7.roa (raw, json) Hash identifier: 1kKklHrbHVpFQeszSeHpciFk0GpbNCPHKv2eCq5bIa0= Subject key identifier: A0:30:E3:59:BF:85:F5:03:1F:08:64:44:3E:07:30:C5:E2:01:DE:77 Certificate issuer: /CN=7834df4e-1d40-4a3e-b949-220f86329057 Certificate serial: 010D0C9F4328584D4394DCC6C2708688EA05BC80 Authority key identifier: F8:B6:A0:44:6F:BF:CF:F3:72:1A:77:F0:58:71:CB:B0:03:CA:F9:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/668cf81e-26f7-3cfb-8188-230b6296a5c7.roa Signing time: Mon 23 Mar 2026 13:00:39 +0000 ROA not before: Mon 23 Mar 2026 13:00:39 +0000 ROA not after: Sun 21 Jun 2026 13:00:39 +0000 asID: 402102 IP address blocks: 23.151.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/7834df4e-1d40-4a3e-b949-220f86329057.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/7834df4e-1d40-4a3e-b949-220f86329057.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:43:94:dc:c6:c2:70:86:88:ea:05:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7834df4e-1d40-4a3e-b949-220f86329057 Validity Not Before: Mar 23 13:00:39 2026 GMT Not After : Jun 21 13:00:39 2026 GMT Subject: CN=32e7b003-547e-4c7c-a893-39b7a0d431e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a4:d0:05:a2:d2:da:b1:71:5b:26:fe:3f:d4: 65:11:3a:ab:1e:72:d2:1a:3e:24:45:0b:13:97:c1: 8d:5b:19:1c:b9:0c:5c:98:18:49:70:93:85:9c:e9: cd:a6:64:50:e4:28:1e:7a:04:ab:f2:88:30:40:85: c8:8d:89:82:b9:60:fc:55:7d:65:83:08:96:be:39: 9d:b1:5e:33:d9:51:bb:91:c0:72:ef:f3:69:3b:b4: 42:93:ad:c3:38:90:1e:c4:42:c8:4a:e6:97:43:f3: 50:77:e4:93:6b:6b:08:c5:b6:8f:5b:36:b3:16:f6: 58:f6:d5:86:33:8a:aa:51:a5:53:61:23:67:dc:c6: c0:ee:a8:8f:f3:93:24:be:79:41:12:76:1d:5c:45: 57:69:57:cf:ca:16:ac:eb:9f:50:cb:d4:99:bc:01: 96:a6:2a:a0:7a:9b:47:57:0e:81:f9:4c:fc:38:66: 2f:9a:b0:ef:4c:6e:92:08:76:7c:8b:2d:c9:03:9a: cc:f3:77:a1:97:41:af:f7:8f:f2:bc:fb:49:fb:2f: f1:9b:97:af:b1:0c:bf:7e:f1:89:f5:c1:16:45:18: dd:47:f4:37:8e:ea:2c:7d:bf:e2:cd:b1:80:65:9e: 2b:a3:4d:8f:51:a5:99:e0:81:da:a1:d4:83:be:b9: 8a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:30:E3:59:BF:85:F5:03:1F:08:64:44:3E:07:30:C5:E2:01:DE:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/668cf81e-26f7-3cfb-8188-230b6296a5c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/7834df4e-1d40-4a3e-b949-220f86329057.crl X509v3 Authority Key Identifier: keyid:F8:B6:A0:44:6F:BF:CF:F3:72:1A:77:F0:58:71:CB:B0:03:CA:F9:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057.cer sbgp-ipAddrBlock: critical IPv4: 23.151.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:1b:79:70:9c:61:b8:ea:31:48:6d:bd:be:d1:f8:f2:3c:0f: b7:c7:a2:25:6c:1e:74:c7:0a:30:54:97:f0:8b:f9:21:90:ce: 1a:fa:49:35:c5:d9:d1:b4:5a:42:cf:f1:73:31:f9:e2:56:78: 34:40:63:7d:48:69:fd:ed:b2:c6:ae:67:79:85:35:45:55:f6: d4:aa:ba:61:d7:1a:a4:f0:3d:32:ed:52:c4:0e:fd:e7:f6:54: e7:cf:8e:5b:7f:d9:5b:ae:6d:90:c2:16:9e:1a:9b:a8:f0:b9: 2b:95:4c:f9:64:db:65:a2:43:00:69:e4:b6:b7:f0:bf:48:71: d5:10:6c:63:bc:32:75:44:62:32:4e:84:bb:d6:14:74:42:70: 91:7e:fa:a3:d7:bf:32:f6:8a:e6:38:22:6d:21:58:47:65:a4: fb:8a:fe:62:84:ca:d4:fc:72:2e:11:bb:39:5b:95:5c:42:dc: ac:db:45:aa:db:57:28:d5:2d:7d:83:9c:2b:da:5b:d7:b3:4f: 2f:0c:49:bd:ce:79:bb:65:03:a5:e9:ee:40:21:fa:0c:31:d7: cf:93:8b:b3:50:e0:8f:06:95:a9:35:ff:45:28:40:43:5d:fd: 68:e2:af:38:f3:f8:c0:84:96:6e:36:bd:40:a5:6f:00:17:6c: f4:e0:c9:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1DlNzGwnCGiOoFvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzgzNGRmNGUtMWQ0MC00YTNlLWI5NDktMjIwZjg2MzI5 MDU3MB4XDTI2MDMyMzEzMDAzOVoXDTI2MDYyMTEzMDAzOVowLzEtMCsGA1UEAxMk MzJlN2IwMDMtNTQ3ZS00YzdjLWE4OTMtMzliN2EwZDQzMWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqTQBaLS2rFxWyb+P9RlETqrHnLSGj4kRQsT l8GNWxkcuQxcmBhJcJOFnOnNpmRQ5CgeegSr8ogwQIXIjYmCuWD8VX1lgwiWvjmd sV4z2VG7kcBy7/NpO7RCk63DOJAexELISuaXQ/NQd+STa2sIxbaPWzazFvZY9tWG M4qqUaVTYSNn3MbA7qiP85MkvnlBEnYdXEVXaVfPyhas659Qy9SZvAGWpiqgeptH Vw6B+Uz8OGYvmrDvTG6SCHZ8iy3JA5rM83ehl0Gv94/yvPtJ+y/xm5evsQy/fvGJ 9cEWRRjdR/Q3juosfb/izbGAZZ4ro02PUaWZ4IHaodSDvrmKqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAw41m/hfUDHwhkRD4HMMXiAd53MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83ODM0 ZGY0ZS0xZDQwLTRhM2UtYjk0OS0yMjBmODYzMjkwNTcvNjY4Y2Y4MWUtMjZmNy0z Y2ZiLTgxODgtMjMwYjYyOTZhNWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNzgzNGRmNGUtMWQ0MC00YTNlLWI5 NDktMjIwZjg2MzI5MDU3Lzc4MzRkZjRlLTFkNDAtNGEzZS1iOTQ5LTIyMGY4NjMy OTA1Ny5jcmwwHwYDVR0jBBgwFoAU+LagRG+/z/NyGnfwWHHLsAPK+ZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi83ODM0ZGY0ZS0xZDQwLTRhM2UtYjk0OS0yMjBm ODYzMjkwNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5f8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0beXCcYbjqMUhtvb7R+PI8D7fHoiVsHnTHCjBUl/CL+SGQzhr6STXF 2dG0WkLP8XMx+eJWeDRAY31Iaf3tssauZ3mFNUVV9tSqumHXGqTwPTLtUsQO/ef2 VOfPjlt/2VuubZDCFp4am6jwuSuVTPlk22WiQwBp5La38L9IcdUQbGO8MnVEYjJO hLvWFHRCcJF++qPXvzL2iuY4Im0hWEdlpPuK/mKEytT8ci4RuzlblVxC3KzbRarb VyjVLX2DnCvaW9ezTy8MSb3OebtlA6Xp7kAh+gwx18+Ti7NQ4I8Glak1/0UoQENd /Wjirzjz+MCElm42vUClbwAXbPTgyUQ= -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:39 2026 by rpki-client