$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b/1c3c5206-4853-33db-affb-6a400827364e.roa File: 1c3c5206-4853-33db-affb-6a400827364e.roa (raw, json) Hash identifier: LhxlXxYBR5Rp/vdlWw8k7kXpX0RvDgZGqSeRZIp6rAs= Subject key identifier: CF:E7:06:F5:15:A0:81:27:2B:B0:1D:E5:D0:30:3D:78:0E:93:C2:48 Certificate issuer: /CN=624e00b7-d261-42a6-9d37-4a83f37b3d5b Certificate serial: 010D0C9F4328584D24B4C5A29D448DAD40073680 Authority key identifier: DA:78:AC:82:F0:6C:66:8A:CF:2D:1A:CB:75:57:3E:7A:A1:AF:1B:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b/1c3c5206-4853-33db-affb-6a400827364e.roa Signing time: Thu 12 Mar 2026 11:34:55 +0000 ROA not before: Thu 12 Mar 2026 11:34:55 +0000 ROA not after: Wed 10 Jun 2026 11:34:55 +0000 asID: 23437 IP address blocks: 23.153.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b/624e00b7-d261-42a6-9d37-4a83f37b3d5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b/624e00b7-d261-42a6-9d37-4a83f37b3d5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:b4:c5:a2:9d:44:8d:ad:40:07:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=624e00b7-d261-42a6-9d37-4a83f37b3d5b Validity Not Before: Mar 12 11:34:55 2026 GMT Not After : Jun 10 11:34:55 2026 GMT Subject: CN=fa0054e8-f50c-427f-94e1-cea76d9b7538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5d:79:8b:4a:cc:11:20:55:c8:b9:06:65:12: c6:fa:77:4e:95:93:85:ae:64:c2:6b:d5:e6:c1:d0: d2:b4:31:c6:80:48:b6:62:77:28:11:51:2c:4a:87: 43:c7:f1:62:11:f7:cc:ee:c6:a9:98:94:90:74:fc: 33:94:90:96:9f:a6:93:bd:6d:70:a7:cb:35:84:1b: 6b:9e:4c:5a:b1:dd:7b:e3:c9:45:6f:82:89:39:d7: 15:4f:8a:90:5d:71:a1:a3:e0:20:41:34:97:24:cb: 2a:10:80:96:a8:be:9c:76:86:8a:f5:65:b4:df:af: 8e:0a:3d:fb:81:19:57:3e:26:4d:cd:4f:5d:1d:79: a5:85:fc:f8:18:0d:39:1e:cf:b6:a1:3f:63:20:09: 34:7a:21:a4:44:cb:d6:2b:93:bc:36:43:6f:24:f1: 16:98:fd:e4:ca:2e:3f:73:8c:b3:e9:ef:f2:4e:9a: 70:20:08:09:1a:b9:3a:6c:6c:45:de:52:d4:35:9a: 1f:68:83:d9:3f:96:f0:9c:aa:7f:bc:bf:bf:cf:b7: 1b:81:09:69:6b:eb:99:4c:20:73:98:4c:a5:9c:e3: d8:61:8d:83:bf:14:e1:5e:9f:07:3e:bc:b7:4a:e3: 87:b4:02:03:1b:4b:9e:0b:f5:30:44:35:5c:fb:ba: 12:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E7:06:F5:15:A0:81:27:2B:B0:1D:E5:D0:30:3D:78:0E:93:C2:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b/1c3c5206-4853-33db-affb-6a400827364e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b/624e00b7-d261-42a6-9d37-4a83f37b3d5b.crl X509v3 Authority Key Identifier: keyid:DA:78:AC:82:F0:6C:66:8A:CF:2D:1A:CB:75:57:3E:7A:A1:AF:1B:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624e00b7-d261-42a6-9d37-4a83f37b3d5b.cer sbgp-ipAddrBlock: critical IPv4: 23.153.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:7a:61:c9:3a:78:73:18:bf:48:3f:20:4c:db:2d:63:55:04: f5:73:2b:9c:c2:29:4a:1a:ac:57:b6:88:68:3c:4a:13:33:ae: a6:c9:a7:91:d0:2d:97:80:7b:e1:62:e2:25:91:5a:77:a2:41: 69:8d:de:e7:f8:4a:cd:1a:c8:de:26:57:a6:e5:fe:97:57:e7: 20:76:e5:9f:71:02:71:cc:14:63:67:56:d2:42:23:99:db:a8: 90:48:61:fa:d9:76:c0:63:c8:9d:0a:38:06:57:83:4a:f6:bb: bb:3a:e7:a6:38:be:4d:72:19:03:37:6a:e8:bd:7e:aa:95:17: ad:d7:47:64:2e:07:34:20:86:ed:ac:98:a3:c3:12:d0:fd:35: 29:ab:99:31:d4:2a:57:29:5c:2a:c1:dc:10:da:8a:0e:de:37: db:6f:d4:f8:e5:2c:cf:28:53:a1:ed:3a:5d:67:d0:ad:42:d5: f5:40:64:59:b2:7c:10:dc:30:dd:d5:12:e3:c1:02:fa:34:c3: 73:92:bb:b5:b0:33:07:13:88:23:23:19:b5:30:5f:74:42:fb: bd:1d:b1:eb:1a:43:7c:7b:32:5a:4f:79:61:db:f6:3c:d8:38: d0:c3:65:1f:be:fa:22:f1:37:48:48:be:a6:98:b5:5a:8d:54: 7a:76:e0:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ktMWinUSNrUAHNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI0ZTAwYjctZDI2MS00MmE2LTlkMzctNGE4M2YzN2Iz ZDViMB4XDTI2MDMxMjExMzQ1NVoXDTI2MDYxMDExMzQ1NVowLzEtMCsGA1UEAxMk ZmEwMDU0ZTgtZjUwYy00MjdmLTk0ZTEtY2VhNzZkOWI3NTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV15i0rMESBVyLkGZRLG+ndOlZOFrmTCa9Xm wdDStDHGgEi2YncoEVEsSodDx/FiEffM7sapmJSQdPwzlJCWn6aTvW1wp8s1hBtr nkxasd1748lFb4KJOdcVT4qQXXGho+AgQTSXJMsqEICWqL6cdoaK9WW036+OCj37 gRlXPiZNzU9dHXmlhfz4GA05Hs+2oT9jIAk0eiGkRMvWK5O8NkNvJPEWmP3kyi4/ c4yz6e/yTppwIAgJGrk6bGxF3lLUNZofaIPZP5bwnKp/vL+/z7cbgQlpa+uZTCBz mEylnOPYYY2DvxThXp8HPry3SuOHtAIDG0ueC/UwRDVc+7oSdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/nBvUVoIEnK7Ad5dAwPXgOk8JIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82MjRl MDBiNy1kMjYxLTQyYTYtOWQzNy00YTgzZjM3YjNkNWIvMWMzYzUyMDYtNDg1My0z M2RiLWFmZmItNmE0MDA4MjczNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjI0ZTAwYjctZDI2MS00MmE2LTlk MzctNGE4M2YzN2IzZDViLzYyNGUwMGI3LWQyNjEtNDJhNi05ZDM3LTRhODNmMzdi M2Q1Yi5jcmwwHwYDVR0jBBgwFoAU2nisgvBsZorPLRrLdVc+eqGvGwEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82MjRlMDBiNy1kMjYxLTQyYTYtOWQzNy00YTgz ZjM3YjNkNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5m4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZ6Yck6eHMYv0g/IEzbLWNVBPVzK5zCKUoarFe2iGg8ShMzrqbJp5HQ LZeAe+Fi4iWRWneiQWmN3uf4Ss0ayN4mV6bl/pdX5yB25Z9xAnHMFGNnVtJCI5nb qJBIYfrZdsBjyJ0KOAZXg0r2u7s656Y4vk1yGQM3aui9fqqVF63XR2QuBzQghu2s mKPDEtD9NSmrmTHUKlcpXCrB3BDaig7eN9tv1PjlLM8oU6HtOl1n0K1C1fVAZFmy fBDcMN3VEuPBAvo0w3OSu7WwMwcTiCMjGbUwX3RC+70dsesaQ3x7MlpPeWHb9jzY ONDDZR+++iLxN0hIvqaYtVqNVHp24PU= -----END CERTIFICATE-----Generated at Thu Mar 26 05:53:36 2026 by rpki-client