$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/421f59cb-e0a2-3bec-9337-1c49aa0e73ca.roa File: 421f59cb-e0a2-3bec-9337-1c49aa0e73ca.roa (raw, json) Hash identifier: 8He8KREFasumtdVQ6nTyUe2UpxXDRXb/yh0XXdoR1+4= Subject key identifier: 02:A9:8A:DA:1E:B9:54:A1:01:48:45:23:B3:03:25:E8:D3:BC:06:E1 Certificate issuer: /CN=9d5e8807-643a-46c3-a245-693c793610e4 Certificate serial: 010D0C9F4328584D422F865F4764D7E8860B3600 Authority key identifier: 11:4F:A0:4D:D4:E3:78:3B:8A:F0:63:E9:49:24:2C:99:63:83:3C:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/421f59cb-e0a2-3bec-9337-1c49aa0e73ca.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 7018 IP address blocks: 23.129.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:86:5f:47:64:d7:e8:86:0b:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5e8807-643a-46c3-a245-693c793610e4 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=6559f063-c3e6-4f3f-9fba-561c384346bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:ec:e8:96:a7:fc:b9:a2:72:a1:ec:b8:7f: 05:2f:b4:01:f3:81:1d:b0:59:24:2f:ac:a5:b9:ca: ea:39:58:e8:12:83:4b:d0:b5:fc:9a:17:ed:fc:88: c4:47:f7:8e:62:55:26:45:ea:9c:96:5c:c8:cf:79: 6a:fe:88:a2:2a:f7:d9:b7:95:bc:ae:82:1f:7f:e7: 65:01:9a:8f:82:47:36:89:10:a6:b3:70:b0:a9:98: a7:02:3b:85:12:10:39:e6:c8:2f:58:70:63:a3:33: 1b:2e:0d:41:36:43:9f:fe:49:46:78:ef:df:d3:d4: b4:fa:b2:91:91:09:93:af:89:a6:b0:94:cc:bb:84: ab:05:7c:75:5c:00:ac:c3:02:e3:e7:32:e6:f8:cf: 08:e3:60:5b:67:b1:e5:94:8e:5a:c4:8e:0c:08:72: de:44:be:d8:2a:df:98:df:08:fd:f3:a4:2e:68:98: 0a:6a:4f:3e:72:66:93:73:e7:bc:1b:3d:35:e7:55: 50:93:99:6f:6b:9e:b8:8a:c3:1a:7c:da:07:31:42: e0:19:db:8f:6a:9c:ca:69:f2:19:30:ce:fa:76:e5: 4e:19:f1:17:0e:50:e4:40:56:5f:d5:46:60:76:26: a0:18:ec:2f:5e:4e:e4:a0:63:e2:0c:4f:1b:ce:d9: 06:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A9:8A:DA:1E:B9:54:A1:01:48:45:23:B3:03:25:E8:D3:BC:06:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/421f59cb-e0a2-3bec-9337-1c49aa0e73ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.crl X509v3 Authority Key Identifier: keyid:11:4F:A0:4D:D4:E3:78:3B:8A:F0:63:E9:49:24:2C:99:63:83:3C:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer sbgp-ipAddrBlock: critical IPv4: 23.129.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:3d:4f:49:10:2f:02:8a:f5:75:60:4a:5e:a6:4e:5b:22:c5: 43:79:00:e9:f5:2a:b7:1c:5e:a8:c0:7d:aa:c7:bb:d2:53:af: 08:ba:79:71:7b:a3:77:ff:d0:62:63:1d:ce:51:56:df:00:11: 25:5d:4b:35:dc:f6:e6:c6:8c:74:44:2a:71:74:0c:bf:76:88: 88:ed:f3:1e:7f:06:54:11:fe:49:1d:fd:6f:b4:b8:50:d6:32: 59:07:29:f7:d0:c9:41:55:18:9c:80:3d:64:22:48:32:7d:ac: 5a:8b:00:62:f3:fb:70:82:d7:8c:25:be:25:91:30:7a:b5:dd: ed:c3:89:ae:f9:44:dd:b6:bd:a4:f9:f5:c2:32:87:c6:6f:a5: 77:aa:1f:98:98:7a:7b:4a:3f:9d:3a:05:30:e8:d0:e1:18:bc: 38:03:81:4f:ba:14:b3:1d:f2:0f:8b:8d:f4:1c:4b:4f:c4:91: 79:ff:d0:d1:88:f9:75:cf:64:fd:b7:49:86:c9:0e:f6:36:d1: 35:db:c4:21:cf:bf:85:5d:46:b6:89:77:f5:42:96:68:81:7c: e6:ca:c7:37:c9:e5:d5:19:b9:75:fd:3b:ca:45:68:27:07:fb: 43:26:31:c1:e3:2c:54:47:1a:29:eb:c3:a0:74:4a:f2:ae:13: b7:87:b3:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL4ZfR2TX6IYLNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQ1ZTg4MDctNjQzYS00NmMzLWEyNDUtNjkzYzc5MzYx MGU0MB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk NjU1OWYwNjMtYzNlNi00ZjNmLTlmYmEtNTYxYzM4NDM0NmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3/s6Jan/LmicqHsuH8FL7QB84EdsFkkL6yl ucrqOVjoEoNL0LX8mhft/IjER/eOYlUmReqcllzIz3lq/oiiKvfZt5W8roIff+dl AZqPgkc2iRCms3CwqZinAjuFEhA55sgvWHBjozMbLg1BNkOf/klGeO/f09S0+rKR kQmTr4mmsJTMu4SrBXx1XACswwLj5zLm+M8I42BbZ7HllI5axI4MCHLeRL7YKt+Y 3wj986QuaJgKak8+cmaTc+e8Gz0151VQk5lva564isMafNoHMULgGduPapzKafIZ MM76duVOGfEXDlDkQFZf1UZgdiagGOwvXk7koGPiDE8bztkGjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKpitoeuVShAUhFI7MDJejTvAbhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZDVl ODgwNy02NDNhLTQ2YzMtYTI0NS02OTNjNzkzNjEwZTQvNDIxZjU5Y2ItZTBhMi0z YmVjLTkzMzctMWM0OWFhMGU3M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWQ1ZTg4MDctNjQzYS00NmMzLWEy NDUtNjkzYzc5MzYxMGU0LzlkNWU4ODA3LTY0M2EtNDZjMy1hMjQ1LTY5M2M3OTM2 MTBlNC5jcmwwHwYDVR0jBBgwFoAUEU+gTdTjeDuK8GPpSSQsmWODPMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZDVlODgwNy02NDNhLTQ2YzMtYTI0NS02OTNj NzkzNjEwZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4HcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB09T0kQLwKK9XVgSl6mTlsixUN5AOn1KrccXqjAfarHu9JTrwi6eXF7 o3f/0GJjHc5RVt8AESVdSzXc9ubGjHREKnF0DL92iIjt8x5/BlQR/kkd/W+0uFDW MlkHKffQyUFVGJyAPWQiSDJ9rFqLAGLz+3CC14wlviWRMHq13e3Dia75RN22vaT5 9cIyh8ZvpXeqH5iYentKP506BTDo0OEYvDgDgU+6FLMd8g+LjfQcS0/EkXn/0NGI +XXPZP23SYbJDvY20TXbxCHPv4VdRraJd/VClmiBfObKxzfJ5dUZuXX9O8pFaCcH +0MmMcHjLFRHGinrw6B0SvKuE7eHs+Y= -----END CERTIFICATE-----Generated at Sat Mar 28 10:46:48 2026 by rpki-client