$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/0209baa9-389a-393c-b685-be2cd86201f7.roa File: 0209baa9-389a-393c-b685-be2cd86201f7.roa (raw, json) Hash identifier: 8RfZNtS7/uYMbIGpDHM3konXtpMSGY4kvYYIbxReKsc= Subject key identifier: D8:11:6E:AB:FE:48:F3:68:B9:8E:30:67:F7:98:09:21:4A:68:F9:A1 Certificate issuer: /CN=5c5260f5-8262-4a34-b49c-e993dbadd1b1 Certificate serial: 010D0C9F4328584D44FA3DF2522BCCC1666FA900 Authority key identifier: 68:61:4A:21:BB:FB:DF:5B:84:00:F2:A0:40:DE:24:06:E3:EA:DF:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/0209baa9-389a-393c-b685-be2cd86201f7.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 398310 IP address blocks: 23.157.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:3d:f2:52:2b:cc:c1:66:6f:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5260f5-8262-4a34-b49c-e993dbadd1b1 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=b4345d85-f9ea-4799-b891-43bfd6d17ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:33:ee:57:54:24:f7:ec:d9:64:4a:e6:11:92: 64:46:2f:8d:d4:4e:62:59:85:77:28:b5:3b:a6:5c: d5:f9:ab:cf:91:0d:6a:76:9f:56:03:79:61:ce:c8: 20:fa:6d:ba:38:cf:81:a4:85:ef:7d:dd:2e:75:2c: d8:e8:a8:b6:bb:a5:0f:91:6b:42:c1:f0:fb:76:c1: 97:e5:a6:b3:94:56:cf:4e:d3:c2:b2:70:54:64:79: e1:67:cf:f1:73:b6:57:72:d4:8e:13:c0:aa:39:a5: 2a:f1:c7:c0:70:56:c4:04:08:62:b6:5f:85:fc:c5: d9:d8:1a:91:9f:ee:6b:1d:a5:80:bd:a1:3a:aa:80: e0:16:01:8b:f5:d6:d1:23:ca:6b:5e:34:02:7c:2d: 81:d4:c4:8c:af:38:90:a4:f6:8e:44:31:6b:f4:ef: 69:ef:bf:4c:f6:07:10:7d:27:c5:a5:55:41:c6:81: 15:75:93:55:5d:aa:49:55:a2:ce:a4:6c:c6:21:6f: be:87:16:1f:3b:ae:13:f2:ae:0f:86:03:9e:24:20: e8:a2:f3:e5:56:0f:3c:c2:eb:61:be:bd:00:ae:cb: dc:5a:11:72:13:0f:bb:e6:ea:5f:1d:a0:e2:14:fa: de:11:2d:3d:16:6c:0f:1e:3a:f2:a4:9d:63:96:9c: 60:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:11:6E:AB:FE:48:F3:68:B9:8E:30:67:F7:98:09:21:4A:68:F9:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/0209baa9-389a-393c-b685-be2cd86201f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.crl X509v3 Authority Key Identifier: keyid:68:61:4A:21:BB:FB:DF:5B:84:00:F2:A0:40:DE:24:06:E3:EA:DF:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer sbgp-ipAddrBlock: critical IPv4: 23.157.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e4:d9:6e:df:87:4c:7f:99:f9:0c:1d:bc:cb:d0:15:e0:67: 8b:71:be:fc:c8:d4:d5:bb:f2:9c:79:fe:95:21:90:85:8a:af: 52:03:12:c9:58:4e:a4:d0:15:e5:0f:98:b8:37:23:07:6c:b1: 2f:01:ff:20:4a:c0:20:bc:42:a3:03:48:08:b1:95:9e:c8:e0: ff:b1:1e:65:cc:a2:d9:23:a2:26:b1:56:f2:21:6f:a1:22:ab: 00:3e:33:16:93:bc:1e:26:fe:44:04:35:cd:dc:dd:df:76:fa: e5:32:f2:9f:d8:eb:3c:de:d4:c7:c1:8b:4c:d4:a3:6d:7d:ca: 24:5e:52:93:6b:74:68:ae:ff:e1:1a:7c:64:a0:25:a5:be:5f: 2d:79:57:60:ba:57:29:44:16:a5:6d:a1:11:70:82:37:42:53: b9:87:3b:69:c8:d3:0c:da:14:41:98:ff:4e:70:fa:00:f4:d9: 9f:69:d1:38:ca:0f:d6:e8:d9:39:63:4a:13:f8:97:d7:e1:94: 84:3b:73:46:5b:fe:6c:09:af:1d:75:db:33:b1:ee:a2:f7:9a: b9:c6:52:73:f4:5a:1d:a2:45:86:d2:c0:cd:47:74:81:cc:74: 5d:92:3e:78:d0:e9:a7:55:8a:7c:6c:fb:d8:fe:54:ec:33:84: b3:e1:cf:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+j3yUivMwWZvqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1MjYwZjUtODI2Mi00YTM0LWI0OWMtZTk5M2RiYWRk MWIxMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YjQzNDVkODUtZjllYS00Nzk5LWI4OTEtNDNiZmQ2ZDE3YWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTPuV1Qk9+zZZErmEZJkRi+N1E5iWYV3KLU7 plzV+avPkQ1qdp9WA3lhzsgg+m26OM+BpIXvfd0udSzY6Ki2u6UPkWtCwfD7dsGX 5aazlFbPTtPCsnBUZHnhZ8/xc7ZXctSOE8CqOaUq8cfAcFbEBAhitl+F/MXZ2BqR n+5rHaWAvaE6qoDgFgGL9dbRI8prXjQCfC2B1MSMrziQpPaORDFr9O9p779M9gcQ fSfFpVVBxoEVdZNVXapJVaLOpGzGIW++hxYfO64T8q4PhgOeJCDoovPlVg88wuth vr0ArsvcWhFyEw+75upfHaDiFPreES09FmwPHjrypJ1jlpxghQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgRbqv+SPNouY4wZ/eYCSFKaPmhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YzUy NjBmNS04MjYyLTRhMzQtYjQ5Yy1lOTkzZGJhZGQxYjEvMDIwOWJhYTktMzg5YS0z OTNjLWI2ODUtYmUyY2Q4NjIwMWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWM1MjYwZjUtODI2Mi00YTM0LWI0 OWMtZTk5M2RiYWRkMWIxLzVjNTI2MGY1LTgyNjItNGEzNC1iNDljLWU5OTNkYmFk ZDFiMS5jcmwwHwYDVR0jBBgwFoAUaGFKIbv731uEAPKgQN4kBuPq31MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YzUyNjBmNS04MjYyLTRhMzQtYjQ5Yy1lOTkz ZGJhZGQxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITk2W7fh0x/mfkMHbzL0BXgZ4txvvzI1NW78px5/pUhkIWKr1IDEslY TqTQFeUPmLg3IwdssS8B/yBKwCC8QqMDSAixlZ7I4P+xHmXMotkjoiaxVvIhb6Ei qwA+MxaTvB4m/kQENc3c3d92+uUy8p/Y6zze1MfBi0zUo219yiReUpNrdGiu/+Ea fGSgJaW+Xy15V2C6VylEFqVtoRFwgjdCU7mHO2nI0wzaFEGY/05w+gD02Z9p0TjK D9bo2TljShP4l9fhlIQ7c0Zb/mwJrx112zOx7qL3mrnGUnP0Wh2iRYbSwM1HdIHM dF2SPnjQ6adVinxs+9j+VOwzhLPhz3w= -----END CERTIFICATE-----Generated at Thu Mar 26 15:51:54 2026 by rpki-client