$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa File: 73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa (raw, json) Hash identifier: P3zS4Ti7C/WU7nlglOCtC7a/1wja4Dmx/HK+mASjz7M= Subject key identifier: F3:84:FC:E9:AE:D2:73:A0:BC:AB:00:02:AB:70:3D:95:A1:0E:5E:28 Certificate issuer: /CN=103e2c68-3cdd-47e4-bce0-07faaeba78e1 Certificate serial: 010D0C9F4328584D4A8FA57D17CA2184E36D3E80 Authority key identifier: 90:4D:9C:1B:E6:96:A5:67:07:28:6B:32:12:80:86:30:8C:AB:D5:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 400154 IP address blocks: 23.128.168.0/24 maxlen: 24 2606:8cc0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/103e2c68-3cdd-47e4-bce0-07faaeba78e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/103e2c68-3cdd-47e4-bce0-07faaeba78e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:a5:7d:17:ca:21:84:e3:6d:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=103e2c68-3cdd-47e4-bce0-07faaeba78e1 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=a06d1535-f843-42a1-b34d-802684c3db4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ed:aa:99:7c:7a:a9:da:e5:3c:c8:20:4f:39: 92:16:07:ca:85:35:1d:aa:87:7b:ee:69:cd:14:97: 4f:6e:39:2b:42:60:42:46:5c:c9:f9:0c:4a:b2:b5: cb:e6:2d:f4:75:0f:9d:23:85:8b:0c:7a:81:0a:a7: e3:9d:69:ca:59:9a:e3:08:f0:61:4a:cd:9a:50:ba: 0b:f6:bc:ca:35:30:a6:81:b7:f3:57:a2:bd:d7:ae: 0f:10:b5:62:06:b5:ac:2a:81:ac:b8:5d:9e:94:de: ef:ba:ad:f5:6e:e1:c1:b2:8a:ed:af:8d:ca:86:62: 1f:45:64:19:34:3d:65:5a:af:ba:47:01:51:40:dd: c3:38:3c:a2:b6:52:33:fc:ce:fa:50:a8:57:a1:2a: b4:29:0a:71:f3:14:02:a0:c7:ee:5a:d9:4a:57:1b: dc:a5:6a:c2:ff:bb:2f:02:73:95:c6:08:b8:91:93: 5a:59:07:d2:c7:19:11:0d:f4:21:50:80:56:0b:a5: 2e:52:3c:be:60:36:6f:19:21:32:be:8b:19:67:5b: bd:fb:08:de:f0:9d:0e:64:e2:32:58:7b:60:13:27: ef:82:66:00:22:6e:99:73:20:5b:67:cb:ed:8d:11: 58:58:09:de:43:71:54:f5:93:9f:96:4c:05:0f:97: f2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:84:FC:E9:AE:D2:73:A0:BC:AB:00:02:AB:70:3D:95:A1:0E:5E:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/103e2c68-3cdd-47e4-bce0-07faaeba78e1.crl X509v3 Authority Key Identifier: keyid:90:4D:9C:1B:E6:96:A5:67:07:28:6B:32:12:80:86:30:8C:AB:D5:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1.cer sbgp-ipAddrBlock: critical IPv4: 23.128.168.0/24 IPv6: 2606:8cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:77:02:01:b5:a2:39:47:90:45:b9:31:98:5e:93:07:3b:03: 60:72:c6:2b:79:b0:92:e7:4b:41:ef:43:d4:5b:07:91:e0:70: de:1d:f5:2c:38:91:33:c1:cf:8b:77:e4:05:ce:60:c7:78:1a: 77:22:13:3c:c4:10:3a:0a:fc:cf:4b:22:3e:b2:5c:e1:4f:bf: 0b:4a:fd:90:26:ee:7d:8c:63:45:e2:a8:68:86:b8:02:ca:85: 33:62:d5:24:24:c7:d7:c5:9a:c0:44:e5:b9:55:e9:49:6d:a6: 60:a3:d9:16:d3:35:64:cd:f9:11:7d:79:b1:04:91:38:34:17: b9:61:35:11:a4:04:20:ab:7d:ea:07:26:13:c8:78:63:9c:6b: 1f:da:2b:77:37:f5:38:87:18:8a:d8:85:5f:0c:2b:ae:a5:b8: 9a:57:2b:99:7b:f4:c3:85:66:7a:34:47:41:5c:9f:09:a6:f5: bc:a1:f0:99:12:5f:92:7d:54:0b:94:59:19:01:b7:d1:25:bd: 7a:2d:16:3b:be:1d:e5:6f:c0:27:a4:32:6a:b4:7c:36:ca:04: 13:f0:98:f6:74:96:04:80:2e:08:de:a9:22:44:ec:7c:83:d5: 74:7b:d4:62:37:c7:82:48:b1:37:73:6e:18:d8:6a:a9:95:a3: e6:2e:6f:3b -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE1Kj6V9F8ohhONtPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTAzZTJjNjgtM2NkZC00N2U0LWJjZTAtMDdmYWFlYmE3 OGUxMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk YTA2ZDE1MzUtZjg0My00MmExLWIzNGQtODAyNjg0YzNkYjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+2qmXx6qdrlPMggTzmSFgfKhTUdqod77mnN FJdPbjkrQmBCRlzJ+QxKsrXL5i30dQ+dI4WLDHqBCqfjnWnKWZrjCPBhSs2aULoL 9rzKNTCmgbfzV6K9164PELViBrWsKoGsuF2elN7vuq31buHBsortr43KhmIfRWQZ ND1lWq+6RwFRQN3DODyitlIz/M76UKhXoSq0KQpx8xQCoMfuWtlKVxvcpWrC/7sv AnOVxgi4kZNaWQfSxxkRDfQhUIBWC6UuUjy+YDZvGSEyvosZZ1u9+wje8J0OZOIy WHtgEyfvgmYAIm6ZcyBbZ8vtjRFYWAneQ3FU9ZOflkwFD5fynwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFPOE/Omu0nOgvKsAAqtwPZWhDl4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMDNl MmM2OC0zY2RkLTQ3ZTQtYmNlMC0wN2ZhYWViYTc4ZTEvNzNlNjBmY2UtNDhhZC0z Y2ZmLWJhYWEtOWM2YzFkMWQ0NzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTAzZTJjNjgtM2NkZC00N2U0LWJj ZTAtMDdmYWFlYmE3OGUxLzEwM2UyYzY4LTNjZGQtNDdlNC1iY2UwLTA3ZmFhZWJh NzhlMS5jcmwwHwYDVR0jBBgwFoAUkE2cG+aWpWcHKGsyEoCGMIyr1S0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMDNlMmM2OC0zY2RkLTQ3ZTQtYmNlMC0wN2Zh YWViYTc4ZTEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4CoMA0E AgACMAcDBQAmBozAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAFh3AgG1ojlHkEW5MZhekwc7A2Byxit5sJLn S0HvQ9RbB5HgcN4d9Sw4kTPBz4t35AXOYMd4GnciEzzEEDoK/M9LIj6yXOFPvwtK /ZAm7n2MY0XiqGiGuALKhTNi1SQkx9fFmsBE5blV6UltpmCj2RbTNWTN+RF9ebEE kTg0F7lhNRGkBCCrfeoHJhPIeGOcax/aK3c39TiHGIrYhV8MK66luJpXK5l79MOF Zno0R0Fcnwmm9byh8JkSX5J9VAuUWRkBt9ElvXotFju+HeVvwCekMmq0fDbKBBPw mPZ0lgSALgjeqSJE7HyD1XR71GI3x4JIsTdzbhjYaqmVo+Yubzs= -----END CERTIFICATE-----Generated at Sat Mar 28 12:10:31 2026 by rpki-client