$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/8b8be658-4911-3e79-adcb-5f756862b67a.roa File: 8b8be658-4911-3e79-adcb-5f756862b67a.roa (raw, json) Hash identifier: inKQlJOwi66xAUwJtlIqTPBbiyCV8+eGmRu6Jt6kutY= Subject key identifier: EA:61:F2:B3:DA:AC:EA:79:FA:BF:54:47:FB:28:91:0B:71:D1:36:B1 Certificate issuer: /CN=d4558eff-6c26-4a17-bb9e-54377ea2aef1 Certificate serial: 010D0C9F4328584D2BDA1DD08E4C6FBDED299700 Authority key identifier: DC:06:EB:8D:D4:86:04:61:98:24:E0:81:39:DF:98:1A:AC:54:39:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/8b8be658-4911-3e79-adcb-5f756862b67a.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 46505 IP address blocks: 23.187.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:1d:d0:8e:4c:6f:bd:ed:29:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4558eff-6c26-4a17-bb9e-54377ea2aef1 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=782a1cbf-d524-4a7a-bdbe-eeafc07eb82b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:71:57:33:da:98:d4:43:de:92:3b:0e:47:47: 63:eb:b3:4e:b1:58:8d:6b:0e:e2:db:9f:59:96:f8: 40:4b:d7:b2:e7:e8:79:41:40:f2:a3:4d:d0:f2:6b: 3a:75:71:41:6b:7e:66:da:50:bf:dc:2f:13:43:5d: ab:ce:44:26:f2:f2:94:6b:4c:07:b4:ad:41:b1:d8: 29:22:ed:b2:44:ad:32:47:a8:77:d4:1d:b3:63:60: ed:93:31:8a:ac:4b:50:e4:32:ee:c3:3e:0e:74:26: ae:e9:ed:f3:59:18:d5:b1:02:52:5f:59:01:83:19: 30:d7:bf:3f:45:cb:6e:43:b3:6a:40:6d:f7:a2:27: 03:5d:88:5a:76:a1:f7:76:eb:f6:d3:4b:71:2e:9e: cf:c8:65:d5:3f:71:5a:ed:43:12:d4:ef:f0:fe:e2: 5a:a0:eb:a9:f6:c1:4f:c7:35:3c:e0:0a:8d:91:23: 59:2f:3d:18:28:ec:c0:52:76:7e:e8:33:71:5b:37: 59:3c:eb:b1:b1:c8:5c:4b:4f:a5:5f:e2:d7:12:2e: 1d:ad:28:5c:8a:53:11:41:50:2d:01:9e:18:ef:51: 1f:a2:73:60:aa:e2:39:9f:4e:11:c7:30:8a:ae:09: 7e:c5:ab:d1:8c:7d:d7:70:a8:75:32:68:15:99:11: 03:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:61:F2:B3:DA:AC:EA:79:FA:BF:54:47:FB:28:91:0B:71:D1:36:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/8b8be658-4911-3e79-adcb-5f756862b67a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.crl X509v3 Authority Key Identifier: keyid:DC:06:EB:8D:D4:86:04:61:98:24:E0:81:39:DF:98:1A:AC:54:39:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer sbgp-ipAddrBlock: critical IPv4: 23.187.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:03:84:39:07:63:aa:09:eb:0e:9b:93:d7:28:1d:a4:06:f2: fa:01:8b:7a:92:f4:4f:06:70:af:7d:82:1d:30:c7:a9:e9:2a: 76:0d:ac:e5:8f:17:77:4f:0a:9d:5f:fc:24:f5:1c:d5:85:c0: 8a:f2:41:54:2c:b0:d7:d6:88:0d:7b:57:81:06:cc:32:2a:0b: 1f:26:99:f0:6d:99:5f:ca:7c:3a:fd:bb:a4:a2:a9:0a:01:9c: 0e:75:c5:0d:b4:76:a8:fb:c2:29:e9:b6:6f:79:0f:07:8b:7a: b2:ad:d5:9a:db:43:de:1b:5f:ce:d3:06:e6:b9:e7:07:18:77: 2d:0b:83:27:24:02:e1:99:d2:b4:0b:0a:ce:8f:c2:bf:cc:a5: 1f:af:3b:b1:fb:db:08:c8:d6:63:21:ac:97:42:4d:df:31:50: 5e:af:27:34:f8:fa:38:ad:64:95:f6:38:3f:58:a1:7d:99:d6: 01:84:fe:7f:da:41:6e:9d:19:2b:fc:6c:d0:ba:f2:fd:bd:8a: 5e:1d:dc:dd:25:91:c9:ec:f8:00:26:5a:9f:9c:e3:e2:43:97: 5e:be:5f:ae:ee:c6:be:df:68:19:01:da:86:24:7c:6d:e9:4b: b6:92:a9:ee:17:50:fc:54:be:43:b2:a8:5e:e4:f1:4a:91:9b: 29:14:11:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2h3Qjkxvve0plwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NThlZmYtNmMyNi00YTE3LWJiOWUtNTQzNzdlYTJh ZWYxMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NzgyYTFjYmYtZDUyNC00YTdhLWJkYmUtZWVhZmMwN2ViODJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3FXM9qY1EPekjsOR0dj67NOsViNaw7i259Z lvhAS9ey5+h5QUDyo03Q8ms6dXFBa35m2lC/3C8TQ12rzkQm8vKUa0wHtK1Bsdgp Iu2yRK0yR6h31B2zY2DtkzGKrEtQ5DLuwz4OdCau6e3zWRjVsQJSX1kBgxkw178/ RctuQ7NqQG33oicDXYhadqH3duv200txLp7PyGXVP3Fa7UMS1O/w/uJaoOup9sFP xzU84AqNkSNZLz0YKOzAUnZ+6DNxWzdZPOuxschcS0+lX+LXEi4drShcilMRQVAt AZ4Y71EfonNgquI5n04RxzCKrgl+xavRjH3XcKh1MmgVmREDKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOph8rParOp5+r9UR/sokQtx0TaxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDU1 OGVmZi02YzI2LTRhMTctYmI5ZS01NDM3N2VhMmFlZjEvOGI4YmU2NTgtNDkxMS0z ZTc5LWFkY2ItNWY3NTY4NjJiNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQ1NThlZmYtNmMyNi00YTE3LWJi OWUtNTQzNzdlYTJhZWYxL2Q0NTU4ZWZmLTZjMjYtNGExNy1iYjllLTU0Mzc3ZWEy YWVmMS5jcmwwHwYDVR0jBBgwFoAU3AbrjdSGBGGYJOCBOd+YGqxUOXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNDU1OGVmZi02YzI2LTRhMTctYmI5ZS01NDM3 N2VhMmFlZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7v4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIADhDkHY6oJ6w6bk9coHaQG8voBi3qS9E8GcK99gh0wx6npKnYNrOWP F3dPCp1f/CT1HNWFwIryQVQssNfWiA17V4EGzDIqCx8mmfBtmV/KfDr9u6SiqQoB nA51xQ20dqj7winptm95DweLerKt1ZrbQ94bX87TBua55wcYdy0LgyckAuGZ0rQL Cs6Pwr/MpR+vO7H72wjI1mMhrJdCTd8xUF6vJzT4+jitZJX2OD9YoX2Z1gGE/n/a QW6dGSv8bNC68v29il4d3N0lkcns+AAmWp+c4+JDl16+X67uxr7faBkB2oYkfG3p S7aSqe4XUPxUvkOyqF7k8UqRmykUEW8= -----END CERTIFICATE-----Generated at Wed Mar 25 23:22:36 2026 by rpki-client