$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa File: e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa (raw, json) Hash identifier: kYkwr3MdyTGbjKq9B8JystsMAPxOmo1EjdRHiG2mqiE= Subject key identifier: 4C:BA:47:8D:5C:FB:73:FC:D8:EE:62:51:29:BD:C9:97:33:6D:9E:9C Certificate issuer: /CN=897be676-f6c1-4efc-8bef-a425edb4f479 Certificate serial: 010D0C9F4328584D422F861FDA038BC92F2D7780 Authority key identifier: C8:BA:3D:7B:FD:79:A2:67:06:5E:EB:F0:4E:03:A9:64:77:91:44:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 7018 IP address blocks: 23.129.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:86:1f:da:03:8b:c9:2f:2d:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897be676-f6c1-4efc-8bef-a425edb4f479 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=0ac0bc16-5ac2-4fe1-b2a3-5bfa12d0fb28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:66:c9:99:e7:b4:35:c8:25:62:61:f2:68:29: 59:22:02:5e:ac:73:3c:a1:74:b8:3f:7d:3c:98:5a: de:7a:d4:a9:3a:4c:d7:b7:cb:a1:62:53:6f:d5:ea: ae:65:04:31:c5:68:38:dc:48:97:6c:0d:ab:c6:e0: d1:11:d5:81:88:43:da:6c:e1:ab:bb:d3:5a:9e:81: 06:8e:30:95:1d:17:b3:0d:0a:e0:5b:50:02:19:d5: c4:a8:a0:40:8b:8a:68:b5:66:13:05:4f:cb:1c:04: 4d:17:91:c1:62:00:b1:fe:5f:69:5e:a4:b2:c5:41: 30:7d:21:4e:f6:06:4d:31:15:e5:f0:57:6f:ff:0f: 3c:82:29:c8:fa:e5:26:43:53:41:04:8b:58:69:28: 6b:2f:db:36:44:e1:53:7e:72:20:47:a4:bd:0d:9e: 5d:9e:d0:d8:14:03:7e:34:19:10:46:f4:ef:bd:2f: d4:c9:4f:67:fb:0e:4b:04:ab:d8:a6:82:8f:02:53: 51:a3:b2:98:d8:2a:90:66:48:5e:81:50:5f:84:56: 68:56:59:d4:23:f8:6a:93:04:31:63:a9:0d:ed:65: 5a:c0:fe:c7:ef:75:ea:c7:96:39:a7:07:19:20:04: 6d:15:be:70:d2:98:f2:6e:8b:c4:87:88:e0:20:3a: 56:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BA:47:8D:5C:FB:73:FC:D8:EE:62:51:29:BD:C9:97:33:6D:9E:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.crl X509v3 Authority Key Identifier: keyid:C8:BA:3D:7B:FD:79:A2:67:06:5E:EB:F0:4E:03:A9:64:77:91:44:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer sbgp-ipAddrBlock: critical IPv4: 23.129.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a8:e8:46:a1:03:31:58:33:c9:87:4c:f8:fb:fc:12:13:12: 71:b2:8b:44:02:bf:e5:09:f7:98:e5:9e:b7:5d:1e:56:67:26: 4a:2f:2b:3c:e3:fe:54:38:44:cf:49:57:2d:7c:7f:78:f2:8a: 60:f3:21:f4:9c:b4:df:25:3b:ba:95:47:3f:87:f2:0b:e2:4a: 4d:3c:cc:39:d8:87:ec:e7:8e:c7:cb:66:1e:e7:3e:e6:c7:e1: d1:db:fb:87:83:38:f6:f7:4e:93:be:b9:e2:21:81:14:e9:bc: f5:bc:f5:5b:15:78:07:b8:3b:04:0f:ba:fa:c4:dc:9f:82:c4: 4b:0c:60:aa:ab:b5:c1:dd:ba:0e:ed:ae:ac:8f:38:60:59:bd: 36:8d:b1:fb:25:e0:45:9b:2e:57:3c:4e:3f:13:fa:e9:38:9f: 7a:ef:1c:ca:d3:9b:98:fe:7b:e2:f1:3c:ea:2e:ba:3b:50:3c: 54:a6:d4:1d:e2:f0:93:1a:b7:f8:b9:88:9c:93:53:71:4d:4e: 45:de:8d:83:64:7b:46:11:c1:58:31:a2:cc:04:9c:2a:a2:dd: f8:30:46:90:69:54:3c:47:ef:73:e5:45:6c:61:39:4e:50:37: 73:d8:e9:64:5d:bc:12:f1:db:24:57:cc:13:ba:45:1b:9a:6e: d2:f3:da:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL4Yf2gOLyS8td4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk3YmU2NzYtZjZjMS00ZWZjLThiZWYtYTQyNWVkYjRm NDc5MB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk MGFjMGJjMTYtNWFjMi00ZmUxLWIyYTMtNWJmYTEyZDBmYjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmbJmee0NcglYmHyaClZIgJerHM8oXS4P308 mFreetSpOkzXt8uhYlNv1equZQQxxWg43EiXbA2rxuDREdWBiEPabOGru9NanoEG jjCVHRezDQrgW1ACGdXEqKBAi4potWYTBU/LHARNF5HBYgCx/l9pXqSyxUEwfSFO 9gZNMRXl8Fdv/w88ginI+uUmQ1NBBItYaShrL9s2ROFTfnIgR6S9DZ5dntDYFAN+ NBkQRvTvvS/UyU9n+w5LBKvYpoKPAlNRo7KY2CqQZkhegVBfhFZoVlnUI/hqkwQx Y6kN7WVawP7H73Xqx5Y5pwcZIARtFb5w0pjybovEh4jgIDpW5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEy6R41c+3P82O5iUSm9yZczbZ6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84OTdi ZTY3Ni1mNmMxLTRlZmMtOGJlZi1hNDI1ZWRiNGY0NzkvZTNmOGJkYTctMmVlYi0z ZGNkLTgyNDItM2E0OTdmNDc4YjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODk3YmU2NzYtZjZjMS00ZWZjLThi ZWYtYTQyNWVkYjRmNDc5Lzg5N2JlNjc2LWY2YzEtNGVmYy04YmVmLWE0MjVlZGI0 ZjQ3OS5jcmwwHwYDVR0jBBgwFoAUyLo9e/15omcGXuvwTgOpZHeRROQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84OTdiZTY3Ni1mNmMxLTRlZmMtOGJlZi1hNDI1 ZWRiNGY0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWo6EahAzFYM8mHTPj7/BITEnGyi0QCv+UJ95jlnrddHlZnJkovKzzj /lQ4RM9JVy18f3jyimDzIfSctN8lO7qVRz+H8gviSk08zDnYh+znjsfLZh7nPubH 4dHb+4eDOPb3TpO+ueIhgRTpvPW89VsVeAe4OwQPuvrE3J+CxEsMYKqrtcHdug7t rqyPOGBZvTaNsfsl4EWbLlc8Tj8T+uk4n3rvHMrTm5j+e+LxPOouujtQPFSm1B3i 8JMat/i5iJyTU3FNTkXejYNke0YRwVgxoswEnCqi3fgwRpBpVDxH73PlRWxhOU5Q N3PY6WRdvBLx2yRXzBO6RRuabtLz2mk= -----END CERTIFICATE-----Generated at Thu Mar 26 04:10:56 2026 by rpki-client