$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/d213cd2e-f31e-3c63-a3c0-c36ac894c40b.roa File: d213cd2e-f31e-3c63-a3c0-c36ac894c40b.roa (raw, json) Hash identifier: nCGiRish2tYjS4LtqYlL8KZ87dlsr+ITSl/k59NtY5o= Subject key identifier: 61:D7:0F:84:8D:4F:E7:C6:47:67:BF:65:19:A9:A1:5C:36:31:23:64 Certificate issuer: /CN=dda1859b-9b6c-47e8-8de0-488bb1a65637 Certificate serial: 010D0C9F4328584D27AAFF0A5AB92C5B8444B140 Authority key identifier: D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/d213cd2e-f31e-3c63-a3c0-c36ac894c40b.roa Signing time: Fri 13 Mar 2026 13:02:38 +0000 ROA not before: Fri 13 Mar 2026 13:02:38 +0000 ROA not after: Thu 11 Jun 2026 13:02:38 +0000 asID: 152918 IP address blocks: 23.151.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:ff:0a:5a:b9:2c:5b:84:44:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dda1859b-9b6c-47e8-8de0-488bb1a65637 Validity Not Before: Mar 13 13:02:38 2026 GMT Not After : Jun 11 13:02:38 2026 GMT Subject: CN=9d4f5f3f-57f3-49fc-baae-59126e3b40ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9e:a8:c5:19:99:55:f0:67:d1:7d:8b:1f:ce: 62:b1:95:6e:9b:5c:ce:ef:13:f3:d2:31:b3:22:05: 8b:28:36:f2:b6:9c:f5:9e:6c:cf:9b:18:14:9b:7f: 0d:a7:e0:24:81:cb:df:95:b9:a2:2c:be:75:58:3d: 4b:7b:f6:77:ff:26:11:46:9c:1c:de:8f:7f:68:1c: 70:34:00:26:e1:9f:ef:be:40:c2:e9:1a:13:39:a4: 81:e3:de:ee:d4:a1:6c:5f:3f:e7:5d:c3:6b:98:68: e6:02:d5:ae:7b:b7:b9:91:25:72:8b:f8:88:f9:55: 0a:cf:25:90:f2:d6:ba:cd:2d:08:ba:58:f6:08:6f: fe:69:58:28:f5:c8:0a:95:db:ae:a1:b3:cd:61:67: 31:5a:8e:5d:4e:91:e9:2b:c2:d0:c0:5c:3f:62:ff: 74:53:0c:29:f6:01:58:54:d0:52:6c:7e:5e:48:c2: 61:20:77:26:62:8b:37:8e:82:8d:ef:93:ef:d2:94: 90:a3:c3:e8:66:23:c6:cc:d6:05:10:e5:9a:41:a4: e9:04:08:de:da:ec:de:80:06:57:50:d2:53:36:7a: 1c:89:17:ce:b8:40:34:d2:cb:56:53:4d:66:c1:a5: 4e:14:1e:4a:45:e8:3b:16:d7:03:47:fe:71:19:ed: 29:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D7:0F:84:8D:4F:E7:C6:47:67:BF:65:19:A9:A1:5C:36:31:23:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/d213cd2e-f31e-3c63-a3c0-c36ac894c40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.crl X509v3 Authority Key Identifier: keyid:D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer sbgp-ipAddrBlock: critical IPv4: 23.151.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:00:97:1c:2e:0e:14:cd:c8:71:9b:27:e6:58:0a:b1:67:b3: 24:fa:a1:6d:e7:4f:71:20:35:5c:91:a8:97:c9:c9:b6:57:25: b2:c0:cb:22:f4:54:a2:c1:ef:f9:6b:79:da:77:bc:2e:a7:22: 5f:8c:b2:b6:4d:c0:9e:46:ee:44:ec:4b:f2:b1:6d:71:52:15: 89:7f:f8:7f:b7:b5:f0:1c:ec:66:43:88:2a:99:87:e4:57:b7: 74:a0:35:b5:2e:13:77:17:87:ac:0b:00:3d:97:23:a8:b0:00: 9e:70:2d:6f:f8:01:e1:93:87:5b:8d:a3:b8:bf:25:e5:7f:f0: d3:8f:36:7a:a9:ad:ca:d1:2c:40:60:76:43:88:3e:03:e6:9e: 23:1f:8f:3d:e2:06:33:a4:be:41:05:67:e7:a5:78:f8:8f:3d: b5:28:82:58:92:14:ae:1d:0b:6b:ce:eb:29:a1:bb:6e:bf:f3: a8:92:1a:27:81:7d:ad:db:76:1f:82:f8:25:8c:36:d8:ff:7b: 4a:e3:ba:bf:2e:1f:95:32:32:2d:9f:13:c7:2b:2e:5d:3b:fc: 35:68:8a:5b:2c:cf:cb:07:f0:39:95:2e:e5:a4:2c:0a:91:ca: 27:a1:55:62:0b:4d:ba:bd:33:02:f2:91:49:ec:6c:ec:bb:70: bc:ce:1f:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqv8KWrksW4REsUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRhMTg1OWItOWI2Yy00N2U4LThkZTAtNDg4YmIxYTY1 NjM3MB4XDTI2MDMxMzEzMDIzOFoXDTI2MDYxMTEzMDIzOFowLzEtMCsGA1UEAxMk OWQ0ZjVmM2YtNTdmMy00OWZjLWJhYWUtNTkxMjZlM2I0MGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ6oxRmZVfBn0X2LH85isZVum1zO7xPz0jGz IgWLKDbytpz1nmzPmxgUm38Np+AkgcvflbmiLL51WD1Le/Z3/yYRRpwc3o9/aBxw NAAm4Z/vvkDC6RoTOaSB497u1KFsXz/nXcNrmGjmAtWue7e5kSVyi/iI+VUKzyWQ 8ta6zS0Iulj2CG/+aVgo9cgKlduuobPNYWcxWo5dTpHpK8LQwFw/Yv90Uwwp9gFY VNBSbH5eSMJhIHcmYos3joKN75Pv0pSQo8PoZiPGzNYFEOWaQaTpBAje2uzegAZX UNJTNnociRfOuEA00stWU01mwaVOFB5KReg7FtcDR/5xGe0pHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHXD4SNT+fGR2e/ZRmpoVw2MSNkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZGEx ODU5Yi05YjZjLTQ3ZTgtOGRlMC00ODhiYjFhNjU2MzcvZDIxM2NkMmUtZjMxZS0z YzYzLWEzYzAtYzM2YWM4OTRjNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGRhMTg1OWItOWI2Yy00N2U4LThk ZTAtNDg4YmIxYTY1NjM3L2RkYTE4NTliLTliNmMtNDdlOC04ZGUwLTQ4OGJiMWE2 NTYzNy5jcmwwHwYDVR0jBBgwFoAU0rRS4atE9KjQ2if6ETpX26OVzHMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZGExODU5Yi05YjZjLTQ3ZTgtOGRlMC00ODhi YjFhNjU2MzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5fcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8AlxwuDhTNyHGbJ+ZYCrFnsyT6oW3nT3EgNVyRqJfJybZXJbLAyyL0 VKLB7/lredp3vC6nIl+MsrZNwJ5G7kTsS/KxbXFSFYl/+H+3tfAc7GZDiCqZh+RX t3SgNbUuE3cXh6wLAD2XI6iwAJ5wLW/4AeGTh1uNo7i/JeV/8NOPNnqprcrRLEBg dkOIPgPmniMfjz3iBjOkvkEFZ+elePiPPbUogliSFK4dC2vO6ymhu26/86iSGieB fa3bdh+C+CWMNtj/e0rjur8uH5UyMi2fE8crLl07/DVoilssz8sH8DmVLuWkLAqR yiehVWILTbq9MwLykUnsbOy7cLzOH7Q= -----END CERTIFICATE-----Generated at Thu Mar 26 08:31:48 2026 by rpki-client