$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa File: 38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa (raw, json) Hash identifier: b+71THmjeppJky5F5bbmT1O/8/gYBZwqRPTBfqz0xTw= Subject key identifier: AA:5D:43:32:7F:26:85:83:40:41:18:31:77:F7:20:96:0F:9D:33:19 Certificate issuer: /CN=68de9da0-8f7e-4231-9340-c37abafc3714 Certificate serial: 010D0C9F4328584D3F64EF4114CBD29684119300 Authority key identifier: DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 1030 IP address blocks: 23.166.200.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:ef:41:14:cb:d2:96:84:11:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68de9da0-8f7e-4231-9340-c37abafc3714 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=aa6fb9f0-3d63-406f-9452-62ad927dc2b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:99:2c:6c:23:67:0d:81:d4:3f:d5:95:c0:31: b3:ad:ca:76:52:cd:9f:35:b4:42:ff:8e:0e:27:ac: 75:e6:72:36:a8:bc:e8:11:d7:5e:e7:7a:a5:1b:5d: 6e:72:67:ff:26:f1:87:fb:64:d9:00:64:c5:6a:fc: f6:84:a9:e4:eb:11:91:5a:30:6d:4d:a1:24:d9:45: 44:be:b8:48:36:45:ea:59:d4:23:86:e0:8a:3e:e6: 77:da:9a:05:d2:5a:b5:b0:c9:70:4a:74:d3:2b:a7: 0a:3b:6c:a2:9f:33:7c:f9:6f:a7:85:9d:d8:2d:78: 00:8e:f0:cd:4d:e7:af:57:c8:7a:f9:2d:62:cc:de: bb:2d:50:a9:f8:78:d1:9e:8f:12:67:17:e2:eb:a8: 53:1f:a6:d2:99:da:c7:34:e0:82:0b:86:c9:71:ab: f3:be:d4:f0:87:2d:e0:dd:07:3f:13:e2:3e:ac:13: 5b:71:dc:8c:c2:f5:e9:19:3b:1c:4e:c7:f7:6b:ce: db:c6:21:71:87:04:58:bf:f2:3c:42:90:5b:d8:f3: 2d:91:00:ea:45:2d:48:1f:26:60:0d:2c:8c:9e:89: f0:77:d0:74:2d:40:f9:d3:56:ac:be:43:d7:78:c8: 6f:c8:c5:06:3d:43:4f:69:8a:b3:b3:ef:3b:7a:27: 9a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5D:43:32:7F:26:85:83:40:41:18:31:77:F7:20:96:0F:9D:33:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.crl X509v3 Authority Key Identifier: keyid:DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer sbgp-ipAddrBlock: critical IPv4: 23.166.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:3b:a5:05:a9:4f:fd:f6:41:bb:a8:6b:7f:bc:65:66:e5:e0: 03:e8:9d:ff:76:93:78:58:62:bc:52:49:9b:d6:87:5c:8c:ea: 31:b5:30:1f:28:bb:d1:a1:f5:54:e7:c4:cc:cc:6d:29:37:3d: d7:11:4d:d9:b7:2b:13:4f:3f:ce:85:0f:e4:4d:49:cb:c0:eb: 53:aa:d0:bc:d1:c7:bf:d7:24:87:a4:fc:28:63:01:aa:f7:60: 17:67:d8:fb:18:8d:f3:44:e0:80:7b:a7:1b:00:9a:a1:19:d0: 24:88:a8:08:4b:29:b6:17:b1:bb:9d:70:1f:f0:5a:6e:f0:21: 2f:8c:6d:ae:66:94:c5:28:7f:a3:64:a8:be:da:4d:1a:3e:3c: 68:1c:34:04:ed:a3:76:10:b9:14:01:4b:d9:a4:2a:76:9d:91: 32:11:af:d9:4a:3f:0b:a1:f7:d6:b6:59:6c:10:85:88:48:20: 12:ea:33:d3:ab:2a:0d:f6:04:19:7b:87:3c:91:21:b4:e8:4a: 90:28:8a:37:c2:2d:97:c1:1d:53:30:1c:12:bd:ec:c8:4e:ad: d7:06:53:86:b4:07:f2:7b:3a:79:4d:24:c4:60:94:7a:53:8d: 63:91:c5:90:f4:72:cf:80:5a:6c:f4:d9:60:21:93:a0:42:be: 92:02:b2:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZO9BFMvSloQRkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhkZTlkYTAtOGY3ZS00MjMxLTkzNDAtYzM3YWJhZmMz NzE0MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YWE2ZmI5ZjAtM2Q2My00MDZmLTk0NTItNjJhZDkyN2RjMmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJksbCNnDYHUP9WVwDGzrcp2Us2fNbRC/44O J6x15nI2qLzoEdde53qlG11ucmf/JvGH+2TZAGTFavz2hKnk6xGRWjBtTaEk2UVE vrhINkXqWdQjhuCKPuZ32poF0lq1sMlwSnTTK6cKO2yinzN8+W+nhZ3YLXgAjvDN TeevV8h6+S1izN67LVCp+HjRno8SZxfi66hTH6bSmdrHNOCCC4bJcavzvtTwhy3g 3Qc/E+I+rBNbcdyMwvXpGTscTsf3a87bxiFxhwRYv/I8QpBb2PMtkQDqRS1IHyZg DSyMnonwd9B0LUD501asvkPXeMhvyMUGPUNPaYqzs+87eieatwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpdQzJ/JoWDQEEYMXf3IJYPnTMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82OGRl OWRhMC04ZjdlLTQyMzEtOTM0MC1jMzdhYmFmYzM3MTQvMzhjYWI0ZmQtYmMzOS0z ZGQ2LWFiNmQtMDVmZDQ2ZTM2MTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjhkZTlkYTAtOGY3ZS00MjMxLTkz NDAtYzM3YWJhZmMzNzE0LzY4ZGU5ZGEwLThmN2UtNDIzMS05MzQwLWMzN2FiYWZj MzcxNC5jcmwwHwYDVR0jBBgwFoAU3HTcGzn5AYyZQEAOWxJ8czrP4Q8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82OGRlOWRhMC04ZjdlLTQyMzEtOTM0MC1jMzdh YmFmYzM3MTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6bIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHM7pQWpT/32Qbuoa3+8ZWbl4APonf92k3hYYrxSSZvWh1yM6jG1MB8o u9Gh9VTnxMzMbSk3PdcRTdm3KxNPP86FD+RNScvA61Oq0LzRx7/XJIek/ChjAar3 YBdn2PsYjfNE4IB7pxsAmqEZ0CSIqAhLKbYXsbudcB/wWm7wIS+Mba5mlMUof6Nk qL7aTRo+PGgcNATto3YQuRQBS9mkKnadkTIRr9lKPwuh99a2WWwQhYhIIBLqM9Or Kg32BBl7hzyRIbToSpAoijfCLZfBHVMwHBK97MhOrdcGU4a0B/J7OnlNJMRglHpT jWORxZD0cs+AWmz02WAhk6BCvpICsmw= -----END CERTIFICATE-----Generated at Thu Mar 26 18:51:07 2026 by rpki-client