$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/b1dcdda9-884b-3019-8488-5a1bd95222d2.roa File: b1dcdda9-884b-3019-8488-5a1bd95222d2.roa (raw, json) Hash identifier: Bu8NXp/W008PraQboiCncC3qvMvhqrtbTNmTbFVs7HA= Subject key identifier: 07:FD:98:1C:5F:00:E0:89:1E:C5:0B:B7:32:BA:A9:F6:F7:A1:74:14 Certificate issuer: /CN=a08a8360-966b-4e4f-9006-479f72f36651 Certificate serial: 010D0C9F4328584D2BD9FD70EF00283DFF448C00 Authority key identifier: 3B:6E:53:45:7D:66:F1:B4:28:14:0A:C6:34:36:B8:BB:97:19:D2:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/b1dcdda9-884b-3019-8488-5a1bd95222d2.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 199073 IP address blocks: 23.151.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/a08a8360-966b-4e4f-9006-479f72f36651.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/a08a8360-966b-4e4f-9006-479f72f36651.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:d9:fd:70:ef:00:28:3d:ff:44:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08a8360-966b-4e4f-9006-479f72f36651 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=e8cc7c9f-79b0-430e-9997-0aaffd44bcaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:78:20:c6:c4:d3:d2:4e:0c:be:77:4c:73:01: 24:2e:6e:29:81:92:b2:3d:5f:b8:e2:84:11:a9:2b: 72:0e:23:e0:58:3b:e9:7b:c9:5f:7b:a6:03:9d:32: 7d:41:03:25:cc:5a:55:c9:b5:ff:15:d2:c5:80:40: 45:d6:92:61:bf:23:27:26:7e:65:e6:75:f8:04:9c: 04:84:4c:e8:18:86:2a:3d:1b:0b:63:20:c5:a3:64: cf:08:ab:30:97:69:71:e8:b4:1e:cb:f5:10:04:a9: c9:1b:b9:4d:ab:ee:6a:be:a6:69:98:db:7f:0f:85: cc:bf:67:b6:92:4a:c6:16:09:01:31:cd:6a:65:ef: e3:44:0b:0f:65:ec:ba:10:55:a6:c1:3f:38:04:28: 63:87:99:68:47:d8:88:fa:88:f3:10:ff:63:0d:47: fc:96:8a:7c:21:43:3c:e7:c9:1e:de:fc:33:9e:ca: 9e:3c:0a:57:67:e4:d8:a4:18:ad:a7:9b:68:78:d9: ac:aa:1f:d5:7e:b1:0c:c6:b6:31:97:81:5f:c9:16: a2:80:23:dd:82:70:b4:88:2d:cd:d1:e5:32:34:ce: 29:e8:e4:c4:b5:e5:b1:8b:62:8b:dd:75:ec:84:99: 8c:3b:b8:34:ed:b5:dc:d8:34:ed:ce:2b:4c:13:c6: 9a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FD:98:1C:5F:00:E0:89:1E:C5:0B:B7:32:BA:A9:F6:F7:A1:74:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/b1dcdda9-884b-3019-8488-5a1bd95222d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/a08a8360-966b-4e4f-9006-479f72f36651.crl X509v3 Authority Key Identifier: keyid:3B:6E:53:45:7D:66:F1:B4:28:14:0A:C6:34:36:B8:BB:97:19:D2:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651.cer sbgp-ipAddrBlock: critical IPv4: 23.151.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:06:77:b6:32:b3:be:99:96:ec:7a:29:9b:3e:74:02:ed:a8: 37:cb:97:ec:f9:da:84:33:17:00:7d:49:3e:05:86:57:dc:43: b3:84:ae:90:8f:33:75:5e:67:39:37:35:1d:18:ce:9b:c0:28: 75:c8:e7:10:e2:90:6e:0b:f1:6d:2f:dd:25:49:9e:95:96:fd: 0c:d4:be:14:1f:49:16:48:94:33:7f:c4:48:c1:11:12:08:77: 5c:87:1c:36:18:8f:28:58:a6:9d:50:03:5e:01:7a:65:1f:d5: 0c:de:dd:47:23:77:95:d9:69:40:e5:02:9e:3b:54:95:4a:a1: b1:2a:53:4f:6a:e6:b9:20:17:de:af:fe:62:45:93:85:bd:ac: 3a:bb:a1:52:77:ed:cc:47:d5:3a:86:ec:0f:3e:0d:ad:5d:e5: c2:50:a5:5d:76:5f:a6:01:09:bd:ab:76:79:f4:1c:af:b9:49: c0:ef:f5:04:7a:f7:33:7f:bd:d3:43:f3:64:24:8c:bb:af:3d: 41:d7:5b:2c:86:a9:f6:03:10:2a:f4:a3:92:6e:08:bf:06:85: eb:67:d3:06:5c:ec:34:74:52:ad:d9:6c:dc:e6:df:8b:c1:ec: cd:5e:2c:be:b6:02:cb:d2:74:d9:28:e6:d0:9d:74:b9:a7:76: db:5c:87:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2f1w7wAoPf9EjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA4YTgzNjAtOTY2Yi00ZTRmLTkwMDYtNDc5ZjcyZjM2 NjUxMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZThjYzdjOWYtNzliMC00MzBlLTk5OTctMGFhZmZkNDRiY2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXggxsTT0k4MvndMcwEkLm4pgZKyPV+44oQR qStyDiPgWDvpe8lfe6YDnTJ9QQMlzFpVybX/FdLFgEBF1pJhvyMnJn5l5nX4BJwE hEzoGIYqPRsLYyDFo2TPCKswl2lx6LQey/UQBKnJG7lNq+5qvqZpmNt/D4XMv2e2 kkrGFgkBMc1qZe/jRAsPZey6EFWmwT84BChjh5loR9iI+ojzEP9jDUf8lop8IUM8 58ke3vwznsqePApXZ+TYpBitp5toeNmsqh/VfrEMxrYxl4FfyRaigCPdgnC0iC3N 0eUyNM4p6OTEteWxi2KL3XXshJmMO7g07bXc2DTtzitME8aatQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAf9mBxfAOCJHsULtzK6qfb3oXQUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hMDhh ODM2MC05NjZiLTRlNGYtOTAwNi00NzlmNzJmMzY2NTEvYjFkY2RkYTktODg0Yi0z MDE5LTg0ODgtNWExYmQ5NTIyMmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTA4YTgzNjAtOTY2Yi00ZTRmLTkw MDYtNDc5ZjcyZjM2NjUxL2EwOGE4MzYwLTk2NmItNGU0Zi05MDA2LTQ3OWY3MmYz NjY1MS5jcmwwHwYDVR0jBBgwFoAUO25TRX1m8bQoFArGNDa4u5cZ0oEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hMDhhODM2MC05NjZiLTRlNGYtOTAwNi00Nzlm NzJmMzY2NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5fUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUGd7Yys76Zlux6KZs+dALtqDfLl+z52oQzFwB9ST4FhlfcQ7OErpCP M3VeZzk3NR0YzpvAKHXI5xDikG4L8W0v3SVJnpWW/QzUvhQfSRZIlDN/xEjBERII d1yHHDYYjyhYpp1QA14BemUf1Qze3Ucjd5XZaUDlAp47VJVKobEqU09q5rkgF96v /mJFk4W9rDq7oVJ37cxH1TqG7A8+Da1d5cJQpV12X6YBCb2rdnn0HK+5ScDv9QR6 9zN/vdND82QkjLuvPUHXWyyGqfYDECr0o5JuCL8Ghetn0wZc7DR0Uq3ZbNzm34vB 7M1eLL62AsvSdNko5tCddLmndttchyc= -----END CERTIFICATE-----Generated at Fri Mar 27 01:10:30 2026 by rpki-client