$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/3a6f4677-1f72-3f32-9bd0-2fac4dc95a01.roa File: 3a6f4677-1f72-3f32-9bd0-2fac4dc95a01.roa (raw, json) Hash identifier: X64PkmFxRNZSCYy63oLkiJJEB3tJd2Wtfd50tKaxSTA= Subject key identifier: 5E:AC:55:BE:48:4E:88:0B:DD:73:73:52:5C:7C:91:C8:28:BC:E9:F1 Certificate issuer: /CN=e0dd35b2-9124-461e-adea-17906cb49705 Certificate serial: 010D0C9F4328584D27AA09342EE17BA7A5BEA2F8 Authority key identifier: 42:59:56:81:9E:CB:EA:62:C6:17:E7:07:7A:5A:1E:3C:50:4C:EA:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/3a6f4677-1f72-3f32-9bd0-2fac4dc95a01.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 198949 IP address blocks: 23.157.32.0/24 maxlen: 24 192.86.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/e0dd35b2-9124-461e-adea-17906cb49705.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/e0dd35b2-9124-461e-adea-17906cb49705.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:09:34:2e:e1:7b:a7:a5:be:a2:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dd35b2-9124-461e-adea-17906cb49705 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=19737d2e-6219-41c0-bf6d-f8b4ade9379f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d7:1a:b5:e3:6d:ac:4c:ce:77:86:87:24:39: 45:7b:de:3f:e3:c2:8a:97:c9:60:c8:ab:42:b4:dc: b7:9b:0d:5e:e0:e7:b6:10:7e:b1:86:9b:60:33:35: 9c:c5:f1:9c:77:6e:d5:f3:33:10:0d:9d:97:99:53: 1f:53:ee:11:05:06:fc:6c:f2:6f:26:26:01:ae:cc: 48:02:1d:fe:1a:70:20:0c:29:5f:47:48:90:4c:12: a1:9b:e0:23:d3:00:b7:33:04:62:55:5c:c5:ca:92: 24:33:b7:29:f7:eb:a0:b7:bf:b2:d5:10:17:80:3a: 33:8b:96:25:b0:8d:f0:97:fa:5a:90:f6:a7:33:0d: 58:44:98:dd:8b:5a:d8:74:1a:f0:d1:1c:3b:94:09: a1:1a:e5:77:5b:8d:ac:86:2b:ff:29:54:e5:6c:c9: 55:7b:95:90:fe:47:b0:94:5c:9f:14:57:85:bf:95: 0f:e6:b2:a7:df:ac:26:3c:ea:28:32:96:69:83:4d: e8:70:b2:52:73:00:bb:63:ab:ca:45:7f:bb:ed:73: 8c:3b:b4:c0:4e:64:c8:47:2c:61:65:5a:c0:5e:04: 51:5c:72:bf:1e:80:18:70:91:8c:0f:7f:c7:a8:46: ca:28:f7:5b:33:3f:29:72:c0:96:ac:ce:ae:ba:6f: 21:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AC:55:BE:48:4E:88:0B:DD:73:73:52:5C:7C:91:C8:28:BC:E9:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/3a6f4677-1f72-3f32-9bd0-2fac4dc95a01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/e0dd35b2-9124-461e-adea-17906cb49705.crl X509v3 Authority Key Identifier: keyid:42:59:56:81:9E:CB:EA:62:C6:17:E7:07:7A:5A:1E:3C:50:4C:EA:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705.cer sbgp-ipAddrBlock: critical IPv4: 23.157.32.0/24 192.86.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:0d:c5:5d:52:18:c8:d2:ef:c3:2d:9c:c0:17:1c:6d:41:19: d7:56:50:95:4f:e1:8d:c5:bd:9b:c1:c6:f0:2f:ea:5c:77:a8: 75:c6:26:47:63:30:d3:55:56:c5:e8:6c:ac:2a:1b:de:5f:ea: 45:d2:ba:2d:72:64:cc:fb:82:be:f7:20:aa:d5:3c:91:cf:9c: 8a:db:1f:7f:d4:b8:f0:e2:49:05:34:30:6a:3d:01:1a:68:50: 23:23:49:7c:d1:8b:9d:ea:93:c4:43:88:0c:25:9e:fd:08:19: 11:b9:6e:e9:e3:e5:99:b0:2f:75:c2:9b:6b:8e:7a:8b:9d:03: b1:a6:b1:b1:c8:1e:14:0f:7f:88:06:c4:8a:42:79:f0:97:ba: 2c:01:a1:e8:07:54:3c:39:0d:75:cd:b0:08:2e:56:e1:07:a6: 91:34:50:29:07:63:b3:0d:54:10:c7:36:67:0c:b3:19:1a:12: 22:42:b5:70:ad:29:cb:1a:fc:f4:05:9d:78:1d:7b:99:f0:76: 21:bd:56:78:77:73:d4:dd:bf:1f:37:bf:72:90:ba:f5:55:01: 6c:5c:45:e8:c9:6c:d8:ea:c8:e4:04:94:da:1e:98:f4:ec:23: fe:4d:a2:65:2b:82:77:7d:1a:78:b1:33:3f:ce:61:4a:af:93: 44:3e:10:80 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0nqgk0LuF7p6W+ovgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTBkZDM1YjItOTEyNC00NjFlLWFkZWEtMTc5MDZjYjQ5 NzA1MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MTk3MzdkMmUtNjIxOS00MWMwLWJmNmQtZjhiNGFkZTkzNzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodcateNtrEzOd4aHJDlFe94/48KKl8lgyKtC tNy3mw1e4Oe2EH6xhptgMzWcxfGcd27V8zMQDZ2XmVMfU+4RBQb8bPJvJiYBrsxI Ah3+GnAgDClfR0iQTBKhm+Aj0wC3MwRiVVzFypIkM7cp9+ugt7+y1RAXgDozi5Yl sI3wl/pakPanMw1YRJjdi1rYdBrw0Rw7lAmhGuV3W42shiv/KVTlbMlVe5WQ/kew lFyfFFeFv5UP5rKn36wmPOooMpZpg03ocLJScwC7Y6vKRX+77XOMO7TATmTIRyxh ZVrAXgRRXHK/HoAYcJGMD3/HqEbKKPdbMz8pcsCWrM6uum8hmwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFF6sVb5ITogL3XNzUlx8kcgovOnxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lMGRk MzViMi05MTI0LTQ2MWUtYWRlYS0xNzkwNmNiNDk3MDUvM2E2ZjQ2NzctMWY3Mi0z ZjMyLTliZDAtMmZhYzRkYzk1YTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZTBkZDM1YjItOTEyNC00NjFlLWFk ZWEtMTc5MDZjYjQ5NzA1L2UwZGQzNWIyLTkxMjQtNDYxZS1hZGVhLTE3OTA2Y2I0 OTcwNS5jcmwwHwYDVR0jBBgwFoAUQllWgZ7L6mLGF+cHeloePFBM6k0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lMGRkMzViMi05MTI0LTQ2MWUtYWRlYS0xNzkw NmNiNDk3MDUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF50gAwQA wFZRMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIUNxV1SGMjS78MtnMAXHG1BGddWUJVP4Y3FvZvBxvAv6lx3 qHXGJkdjMNNVVsXobKwqG95f6kXSui1yZMz7gr73IKrVPJHPnIrbH3/UuPDiSQU0 MGo9ARpoUCMjSXzRi53qk8RDiAwlnv0IGRG5bunj5ZmwL3XCm2uOeoudA7GmsbHI HhQPf4gGxIpCefCXuiwBoegHVDw5DXXNsAguVuEHppE0UCkHY7MNVBDHNmcMsxka EiJCtXCtKcsa/PQFnXgde5nwdiG9Vnh3c9Tdvx83v3KQuvVVAWxcRejJbNjqyOQE lNoemPTsI/5NomUrgnd9GnixMz/OYUqvk0Q+EIA= -----END CERTIFICATE-----Generated at Thu Mar 26 11:28:00 2026 by rpki-client