$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/69d68907-27fa-324f-9d10-081d4279bbc0.roa File: 69d68907-27fa-324f-9d10-081d4279bbc0.roa (raw, json) Hash identifier: bhB52mNyS+dxFc6GK8Dwx/tuLBDNCdy/dv+4gW3JBqg= Subject key identifier: DA:85:9C:D8:E4:B3:CD:8A:00:91:1E:79:FC:45:06:7E:0C:BD:5F:A5 Certificate issuer: /CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Certificate serial: 010D0C9F4328584D3B34D92EB2E265B00024DC00 Authority key identifier: C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/69d68907-27fa-324f-9d10-081d4279bbc0.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 400304 IP address blocks: 23.147.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:d9:2e:b2:e2:65:b0:00:24:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=3dfcd4b4-7258-4342-8a67-94bc65430f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4d:e2:6d:31:57:75:46:59:d7:33:cd:9b:75: 99:16:cd:77:33:0b:ab:30:19:cb:3f:57:9c:9f:fa: ae:f7:79:2b:39:8e:ea:33:99:55:f9:84:cc:bf:82: 89:5e:73:6e:9e:97:e0:9a:df:8b:e9:76:ba:17:7a: 21:96:df:1e:b9:00:40:b6:c6:be:41:1c:b7:91:f8: 9a:f0:38:25:bd:6a:f5:05:54:3b:65:f8:e7:a9:e8: 70:59:6b:fd:3e:dd:5c:b2:7c:94:b8:da:70:72:f9: 10:a2:4f:a0:31:7c:7b:e1:6f:ca:e6:c0:0b:31:49: 0e:79:30:80:ef:8d:b8:c8:24:ca:f0:80:51:39:09: 9a:c5:b3:18:78:64:09:d5:5c:19:e2:78:b8:b9:11: a4:64:5f:27:cb:d2:c9:87:cb:08:c8:13:9b:8c:d3: 37:5f:44:61:cc:99:34:90:7d:09:69:d7:b0:02:54: d4:f2:19:db:06:0f:cc:99:a9:f5:aa:75:df:dc:93: 9f:2a:5d:1c:57:d6:b9:24:ab:47:46:7d:4a:d7:bd: 5b:e5:33:26:66:30:8f:52:ee:95:5f:2a:f1:f4:01: ff:17:d3:ba:e8:7a:d2:b4:9e:a3:80:8f:4b:c4:07: 15:2d:38:79:73:f5:63:9a:b5:c7:8a:d0:7d:a4:b9: 4f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:85:9C:D8:E4:B3:CD:8A:00:91:1E:79:FC:45:06:7E:0C:BD:5F:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/69d68907-27fa-324f-9d10-081d4279bbc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl X509v3 Authority Key Identifier: keyid:C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer sbgp-ipAddrBlock: critical IPv4: 23.147.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:dd:c5:8d:e9:3c:89:7b:fd:fb:a8:68:e1:49:59:b5:12:45: d5:6f:3e:09:db:11:83:e8:64:88:c1:35:85:06:10:be:c6:e5: b2:cd:50:3c:a4:09:c5:d7:f6:6d:7a:52:2c:3e:f2:d7:9a:b8: c9:69:c2:3f:0a:9f:a5:76:f5:e7:b4:0b:f8:47:93:34:f3:b5: bc:5e:53:3e:10:e9:0a:5d:94:2e:a9:62:5c:85:57:f2:61:d3: f3:53:26:a1:6f:d8:c3:3e:c0:e6:f5:28:83:98:17:7e:89:b1: 3c:ab:f5:94:08:8d:7f:37:e6:76:fc:06:85:36:75:75:37:10: e2:69:ba:5c:c8:04:a2:1f:32:c8:82:30:c6:8c:a6:fd:5d:84: 0d:4b:6b:d9:04:01:89:fe:1a:18:df:52:51:8b:fb:e0:fb:a1: b3:e7:20:15:d0:44:6f:30:35:a6:0e:50:bf:4c:00:54:71:2f: d1:b4:5d:cd:0c:57:68:2e:e2:e9:4a:48:3d:8f:d2:49:b1:66: 00:22:2a:75:ca:a0:9c:90:25:9c:df:0d:b3:45:a9:97:7b:fb: c0:b8:79:3b:03:ea:3f:1a:2b:70:5d:89:e5:24:86:67:44:79: 17:72:c9:47:0b:7c:1c:d5:61:66:f7:7a:6a:e1:1b:c9:5e:19: 0b:af:3c:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NNkusuJlsAAk3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1N2ZkMTgtM2M2NS00M2EzLTk2YzEtYTZmZTYxMDI4 YzcyMB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk M2RmY2Q0YjQtNzI1OC00MzQyLThhNjctOTRiYzY1NDMwZjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg03ibTFXdUZZ1zPNm3WZFs13MwurMBnLP1ec n/qu93krOY7qM5lV+YTMv4KJXnNunpfgmt+L6Xa6F3ohlt8euQBAtsa+QRy3kfia 8DglvWr1BVQ7ZfjnqehwWWv9Pt1csnyUuNpwcvkQok+gMXx74W/K5sALMUkOeTCA 7424yCTK8IBROQmaxbMYeGQJ1VwZ4ni4uRGkZF8ny9LJh8sIyBObjNM3X0RhzJk0 kH0JadewAlTU8hnbBg/Mman1qnXf3JOfKl0cV9a5JKtHRn1K171b5TMmZjCPUu6V Xyrx9AH/F9O66HrStJ6jgI9LxAcVLTh5c/VjmrXHitB9pLlPHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqFnNjks82KAJEeefxFBn4MvV+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTU3 ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZlNjEwMjhjNzIvNjlkNjg5MDctMjdmYS0z MjRmLTlkMTAtMDgxZDQyNzliYmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGU1N2ZkMTgtM2M2NS00M2EzLTk2 YzEtYTZmZTYxMDI4YzcyL2RlNTdmZDE4LTNjNjUtNDNhMy05NmMxLWE2ZmU2MTAy OGM3Mi5jcmwwHwYDVR0jBBgwFoAUyLwb9S9S6U+Vy3r8GAwCZEBMgj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZTU3ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZl NjEwMjhjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5OZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANHdxY3pPIl7/fuoaOFJWbUSRdVvPgnbEYPoZIjBNYUGEL7G5bLNUDyk CcXX9m16Uiw+8teauMlpwj8Kn6V29ee0C/hHkzTztbxeUz4Q6QpdlC6pYlyFV/Jh 0/NTJqFv2MM+wOb1KIOYF36JsTyr9ZQIjX835nb8BoU2dXU3EOJpulzIBKIfMsiC MMaMpv1dhA1La9kEAYn+GhjfUlGL++D7obPnIBXQRG8wNaYOUL9MAFRxL9G0Xc0M V2gu4ulKSD2P0kmxZgAiKnXKoJyQJZzfDbNFqZd7+8C4eTsD6j8aK3BdieUkhmdE eRdyyUcLfBzVYWb3emrhG8leGQuvPK8= -----END CERTIFICATE-----Generated at Thu Mar 26 15:43:21 2026 by rpki-client