$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/70ced955-b379-3b9b-85ce-9969295b8607.roa File: 70ced955-b379-3b9b-85ce-9969295b8607.roa (raw, json) Hash identifier: sRZ3O3XCYCc1hoVZy61EyvIDW1gPSK29PGBscOlLkII= Subject key identifier: EC:A7:CC:CF:F8:EA:10:3E:CA:62:72:31:DD:87:8F:FE:D7:7A:AF:0D Certificate issuer: /CN=a9586916-68f6-41f9-8be8-415f39b3aff8 Certificate serial: 010D0C9F4328584D39CF7641C5C312F26324EE00 Authority key identifier: 5B:6E:C2:B5:3E:A6:B3:1B:94:41:13:E4:FF:1C:FC:9D:4C:05:30:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/70ced955-b379-3b9b-85ce-9969295b8607.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 402095 IP address blocks: 23.151.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:76:41:c5:c3:12:f2:63:24:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9586916-68f6-41f9-8be8-415f39b3aff8 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=0b6ff718-14e6-4fbd-bcf2-63fb5871f476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:85:8e:17:a9:b4:16:19:b1:c6:22:28:62:c7: cb:cd:8e:1f:4a:d1:c1:e1:3d:b2:8d:66:81:b0:e5: 57:21:6d:dd:a0:9a:2f:3a:bc:92:41:84:a6:15:b3: 82:f4:e1:53:66:2f:00:b6:20:92:ce:53:50:55:b1: d9:a6:bb:a3:d9:cf:1d:2c:5d:54:cb:04:91:88:f6: 92:45:ce:12:eb:4d:38:49:e3:cb:ce:74:31:7f:f7: be:68:b1:46:4e:19:aa:f1:54:ac:d5:35:28:7e:47: 2c:3a:6e:34:12:54:d4:fb:8e:7c:d3:2b:9d:66:1e: fe:31:c3:c9:93:11:8c:d9:a2:65:54:cd:ed:c9:ae: 21:96:9d:ae:7f:5c:8c:df:be:ce:65:fc:77:c2:15: 5a:0b:21:75:ee:5f:d7:c1:aa:70:6e:40:9e:3d:41: ba:87:ba:91:cb:8c:25:b8:bd:f4:1d:cb:2f:74:c7: 1e:30:b1:59:73:81:3b:9d:44:e5:19:8d:91:d2:62: 18:f2:b0:85:7b:d1:8f:9b:2c:b4:71:94:d7:ea:90: 10:19:d3:5c:8e:6f:c5:81:73:3d:1f:5b:2a:a8:18: 03:5b:44:08:2c:04:58:ce:38:d0:ab:76:be:b9:f0: aa:33:db:bb:c9:8b:76:9b:d6:35:f3:97:1e:a2:6f: 11:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A7:CC:CF:F8:EA:10:3E:CA:62:72:31:DD:87:8F:FE:D7:7A:AF:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/70ced955-b379-3b9b-85ce-9969295b8607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.crl X509v3 Authority Key Identifier: keyid:5B:6E:C2:B5:3E:A6:B3:1B:94:41:13:E4:FF:1C:FC:9D:4C:05:30:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer sbgp-ipAddrBlock: critical IPv4: 23.151.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d8:c6:fb:66:3a:b1:6a:3e:0c:7a:c5:0f:eb:39:9c:f5:3d: e3:bc:bf:ef:44:79:e8:80:0c:f1:d1:2f:50:4b:5a:1d:32:92: a2:20:ad:60:12:f5:51:92:1b:2e:52:31:41:ee:e2:28:46:be: 32:f4:bb:73:1a:4d:37:4d:32:cd:e2:8c:9a:bc:26:33:0a:d6: 59:cc:5c:42:2a:bb:b0:4e:e5:27:9a:44:af:21:d8:73:c2:96: e8:28:76:5e:a3:5b:78:30:b7:77:24:33:65:62:dc:69:dd:e0: f0:c6:c2:bf:00:d1:fe:c3:4b:87:f5:9b:67:0a:cf:36:ae:ff: 6f:53:a7:86:83:8f:ff:14:7b:eb:94:2f:eb:10:3e:48:ab:20: 42:88:15:e0:5f:0c:96:d4:55:c0:d3:f1:36:84:fa:1c:ff:f4: ae:2c:a2:52:07:11:c2:af:69:0b:f1:5a:51:23:28:04:b6:40: 2c:27:cb:fc:41:ee:a2:38:ff:41:2d:1f:16:e7:8d:8f:b0:7b: 12:d9:94:67:0e:e7:cb:7f:be:be:a7:fa:75:8c:59:61:dc:96: 9f:f9:23:fa:7d:3f:1c:02:b7:3f:b8:cf:03:81:e6:c4:4f:f8: d8:eb:be:19:d6:13:38:c5:ab:66:5c:cf:5d:91:30:e7:d8:ec: d3:e8:c2:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z3ZBxcMS8mMk7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk1ODY5MTYtNjhmNi00MWY5LThiZTgtNDE1ZjM5YjNh ZmY4MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk MGI2ZmY3MTgtMTRlNi00ZmJkLWJjZjItNjNmYjU4NzFmNDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4WOF6m0FhmxxiIoYsfLzY4fStHB4T2yjWaB sOVXIW3doJovOrySQYSmFbOC9OFTZi8AtiCSzlNQVbHZpruj2c8dLF1UywSRiPaS Rc4S6004SePLznQxf/e+aLFGThmq8VSs1TUofkcsOm40ElTU+4580yudZh7+McPJ kxGM2aJlVM3tya4hlp2uf1yM377OZfx3whVaCyF17l/XwapwbkCePUG6h7qRy4wl uL30HcsvdMceMLFZc4E7nUTlGY2R0mIY8rCFe9GPmyy0cZTX6pAQGdNcjm/FgXM9 H1sqqBgDW0QILARYzjjQq3a+ufCqM9u7yYt2m9Y185ceom8R6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOynzM/46hA+ymJyMd2Hj/7Xeq8NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOTU4 NjkxNi02OGY2LTQxZjktOGJlOC00MTVmMzliM2FmZjgvNzBjZWQ5NTUtYjM3OS0z YjliLTg1Y2UtOTk2OTI5NWI4NjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTk1ODY5MTYtNjhmNi00MWY5LThi ZTgtNDE1ZjM5YjNhZmY4L2E5NTg2OTE2LTY4ZjYtNDFmOS04YmU4LTQxNWYzOWIz YWZmOC5jcmwwHwYDVR0jBBgwFoAUW27CtT6msxuUQRPk/xz8nUwFMIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOTU4NjkxNi02OGY2LTQxZjktOGJlOC00MTVm MzliM2FmZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5fsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDYxvtmOrFqPgx6xQ/rOZz1PeO8v+9EeeiADPHRL1BLWh0ykqIgrWAS 9VGSGy5SMUHu4ihGvjL0u3MaTTdNMs3ijJq8JjMK1lnMXEIqu7BO5SeaRK8h2HPC lugodl6jW3gwt3ckM2Vi3Gnd4PDGwr8A0f7DS4f1m2cKzzau/29Tp4aDj/8Ue+uU L+sQPkirIEKIFeBfDJbUVcDT8TaE+hz/9K4solIHEcKvaQvxWlEjKAS2QCwny/xB 7qI4/0EtHxbnjY+wexLZlGcO58t/vr6n+nWMWWHclp/5I/p9PxwCtz+4zwOB5sRP +NjrvhnWEzjFq2Zcz12RMOfY7NPowmw= -----END CERTIFICATE-----Generated at Thu Mar 26 09:22:19 2026 by rpki-client