$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6/9bb20dfe-3d3c-3429-a356-daa81adc653f.roa File: 9bb20dfe-3d3c-3429-a356-daa81adc653f.roa (raw, json) Hash identifier: DCDjRe7JgY2hTtNW6Cs+p9XQSi094NYaU8zzZRRjRuU= Subject key identifier: 27:FD:D8:CB:22:1F:FE:E7:5E:80:08:60:02:47:A1:BC:34:C0:C5:CC Certificate issuer: /CN=0bc475b7-f559-4c8e-a66b-c6e0cacf90f6 Certificate serial: 010D0C9F4328584D490FF9554E65E6A9FC24D280 Authority key identifier: 4D:2F:44:8B:8E:BF:31:A5:86:8D:75:D4:55:5D:52:71:83:CD:46:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6/9bb20dfe-3d3c-3429-a356-daa81adc653f.roa Signing time: Wed 25 Mar 2026 12:07:46 +0000 ROA not before: Wed 25 Mar 2026 12:07:46 +0000 ROA not after: Tue 23 Jun 2026 12:07:46 +0000 asID: 9304 IP address blocks: 23.131.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:0f:f9:55:4e:65:e6:a9:fc:24:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bc475b7-f559-4c8e-a66b-c6e0cacf90f6 Validity Not Before: Mar 25 12:07:46 2026 GMT Not After : Jun 23 12:07:46 2026 GMT Subject: CN=998eca47-ea71-449d-a797-8db8ed06092f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d7:3d:39:b5:46:2e:dc:7f:cc:df:56:c6:11: 78:d7:89:90:a2:5c:ec:61:81:f0:c4:f4:0c:5c:79: 6b:4a:05:74:bf:63:7c:e5:94:65:38:58:15:5c:86: 31:10:a4:6b:90:61:dd:e4:03:ad:41:1a:c9:ce:95: 71:f7:65:72:9b:1b:62:e2:89:8f:0c:d3:3a:7f:bf: 71:f4:b4:d3:e7:53:71:ab:67:b4:a2:70:7b:4a:21: 8c:bf:ca:41:9b:d7:03:46:ab:f6:9c:da:4b:67:89: 60:b7:91:3e:bc:b1:ec:a5:68:cc:bc:5d:de:5e:59: 86:09:ed:91:66:0b:bf:15:ea:cd:d2:00:9c:75:56: e7:31:36:bc:9e:2f:52:ee:15:49:38:56:87:35:11: 16:2a:32:eb:ea:77:83:96:01:07:d1:9a:ee:c5:60: fd:68:02:dc:07:6d:75:79:ce:6c:21:29:1d:e0:3e: cb:d3:69:c5:73:33:e7:60:79:81:02:76:69:7e:58: fe:64:9b:6e:ca:f4:72:a7:5e:f5:04:05:12:7c:ee: 9d:dc:a1:ca:3b:c9:d3:41:6f:51:88:55:57:e9:5a: 1d:0f:17:65:dc:bf:06:d5:28:4c:61:79:34:5a:1e: fc:b7:77:9d:cc:43:53:77:d9:93:fb:ac:45:33:15: 52:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FD:D8:CB:22:1F:FE:E7:5E:80:08:60:02:47:A1:BC:34:C0:C5:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6/9bb20dfe-3d3c-3429-a356-daa81adc653f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6.crl X509v3 Authority Key Identifier: keyid:4D:2F:44:8B:8E:BF:31:A5:86:8D:75:D4:55:5D:52:71:83:CD:46:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6.cer sbgp-ipAddrBlock: critical IPv4: 23.131.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c0:62:50:ac:f3:1e:97:10:21:9d:51:b6:c0:fd:f1:06:1d: 1e:58:ed:8c:06:02:a7:b0:26:f8:ff:e1:10:98:5d:a1:6b:47: fa:8f:f7:15:78:ac:c1:4b:57:fa:ae:45:ca:7e:f8:32:86:a5: 39:77:6a:ee:51:95:ab:ab:dd:f9:0f:b8:d8:da:fc:47:3a:42: e8:62:31:47:b5:e5:2b:30:a8:15:f1:bf:29:3d:70:cb:49:71: d8:8e:bc:4e:c4:c1:37:41:22:32:b5:7e:f0:c2:9f:99:7a:04: 0e:76:b0:12:2c:e1:ee:6a:ff:cc:d8:13:c0:59:90:ed:fb:e2: 1f:47:52:58:ac:59:1a:64:3b:2f:d7:7e:cd:5b:ad:a4:da:33: 63:1f:38:57:1a:a8:30:f7:26:a1:2d:e9:3a:26:be:20:3c:01: 8f:71:e8:00:b0:4d:fb:14:4b:fb:61:63:7f:ac:04:5a:35:d5: c2:4a:b3:ae:2c:e0:5b:2c:9b:ab:5a:e7:db:b8:3a:2c:43:a2: 74:a2:e9:26:f6:cc:b9:5e:49:11:b6:b4:cb:59:80:1d:9e:d7: ee:f5:77:89:ca:4f:30:e7:3b:03:5e:2b:68:18:d5:a9:bd:9c: 1e:19:86:8c:9f:4b:b8:51:b7:39:0e:85:8f:07:d3:ed:71:fd: cf:9a:fd:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JD/lVTmXmqfwk0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJjNDc1YjctZjU1OS00YzhlLWE2NmItYzZlMGNhY2Y5 MGY2MB4XDTI2MDMyNTEyMDc0NloXDTI2MDYyMzEyMDc0NlowLzEtMCsGA1UEAxMk OTk4ZWNhNDctZWE3MS00NDlkLWE3OTctOGRiOGVkMDYwOTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdc9ObVGLtx/zN9WxhF414mQolzsYYHwxPQM XHlrSgV0v2N85ZRlOFgVXIYxEKRrkGHd5AOtQRrJzpVx92Vymxti4omPDNM6f79x 9LTT51Nxq2e0onB7SiGMv8pBm9cDRqv2nNpLZ4lgt5E+vLHspWjMvF3eXlmGCe2R Zgu/FerN0gCcdVbnMTa8ni9S7hVJOFaHNREWKjLr6neDlgEH0ZruxWD9aALcB211 ec5sISkd4D7L02nFczPnYHmBAnZpflj+ZJtuyvRyp171BAUSfO6d3KHKO8nTQW9R iFVX6VodDxdl3L8G1ShMYXk0Wh78t3edzENTd9mT+6xFMxVS0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCf92MsiH/7nXoAIYAJHobw0wMXMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wYmM0 NzViNy1mNTU5LTRjOGUtYTY2Yi1jNmUwY2FjZjkwZjYvOWJiMjBkZmUtM2QzYy0z NDI5LWEzNTYtZGFhODFhZGM2NTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMGJjNDc1YjctZjU1OS00YzhlLWE2 NmItYzZlMGNhY2Y5MGY2LzBiYzQ3NWI3LWY1NTktNGM4ZS1hNjZiLWM2ZTBjYWNm OTBmNi5jcmwwHwYDVR0jBBgwFoAUTS9Ei46/MaWGjXXUVV1ScYPNRvcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wYmM0NzViNy1mNTU5LTRjOGUtYTY2Yi1jNmUw Y2FjZjkwZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4OIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDAYlCs8x6XECGdUbbA/fEGHR5Y7YwGAqewJvj/4RCYXaFrR/qP9xV4 rMFLV/quRcp++DKGpTl3au5Rlaur3fkPuNja/Ec6QuhiMUe15SswqBXxvyk9cMtJ cdiOvE7EwTdBIjK1fvDCn5l6BA52sBIs4e5q/8zYE8BZkO374h9HUlisWRpkOy/X fs1braTaM2MfOFcaqDD3JqEt6TomviA8AY9x6ACwTfsUS/thY3+sBFo11cJKs64s 4Fssm6ta59u4OixDonSi6Sb2zLleSRG2tMtZgB2e1+71d4nKTzDnOwNeK2gY1am9 nB4ZhoyfS7hRtzkOhY8H0+1x/c+a/Vw= -----END CERTIFICATE-----Generated at Thu Mar 26 12:13:27 2026 by rpki-client