$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/d86e1d6a-231b-39dc-8464-adea1810b9b4.roa File: d86e1d6a-231b-39dc-8464-adea1810b9b4.roa (raw, json) Hash identifier: VNCTrxyEfb2rfSLS8vxgiiEygMHtxPc/OeTwdMwYsvE= Subject key identifier: 8A:5D:CF:94:78:DF:1C:3C:D7:0D:10:15:24:10:80:CE:42:85:87:17 Certificate issuer: /CN=40898705-dca0-471d-ab1b-b12e6e8e7c83 Certificate serial: 010D0C9F4328584D4446F55A99444294BD56B4F0 Authority key identifier: D4:50:5F:18:28:00:9D:4A:97:41:09:C9:41:47:31:78:ED:C9:48:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/d86e1d6a-231b-39dc-8464-adea1810b9b4.roa Signing time: Mon 23 Mar 2026 18:59:31 +0000 ROA not before: Mon 23 Mar 2026 18:59:31 +0000 ROA not after: Sun 21 Jun 2026 18:59:31 +0000 asID: 402261 IP address blocks: 23.154.132.0/24 maxlen: 24 2620:7f:1450::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/40898705-dca0-471d-ab1b-b12e6e8e7c83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/40898705-dca0-471d-ab1b-b12e6e8e7c83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:46:f5:5a:99:44:42:94:bd:56:b4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40898705-dca0-471d-ab1b-b12e6e8e7c83 Validity Not Before: Mar 23 18:59:31 2026 GMT Not After : Jun 21 18:59:31 2026 GMT Subject: CN=04ccd846-c708-4ffb-9115-3d25b7498930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0b:c4:64:ba:0b:b4:2f:ad:a8:dc:73:19:95: 76:eb:05:94:45:ab:64:2d:f4:63:55:73:ab:8b:2f: 20:a6:ef:9f:ec:58:91:dc:c8:7f:55:f1:dc:ec:48: 2d:96:54:f3:ed:d7:f1:a9:bb:da:66:75:1d:72:9b: bb:fa:a5:e7:3d:09:30:77:94:38:b0:6e:c7:66:77: 78:b3:6e:2f:b8:62:42:46:6e:da:54:f3:70:25:05: 17:72:8a:d8:36:ad:04:7a:36:0f:a0:4a:fa:ce:76: 53:00:44:ff:27:a9:51:99:11:01:2f:4d:a7:39:03: 19:b0:a9:5e:5b:95:78:a6:69:e0:e6:ce:8c:0f:12: 36:50:27:ee:d4:5e:3e:56:b1:a3:ee:93:b4:59:c8: 2b:71:97:43:40:d9:c2:42:61:90:2e:63:82:27:59: 95:cc:ff:db:bc:56:7d:1e:8a:8d:17:15:b2:c3:7c: f5:ed:61:f3:d4:56:11:00:cf:bd:b3:64:d7:7a:e1: 2f:11:59:03:44:46:58:89:74:76:6e:37:60:24:19: f7:31:f1:58:b2:fa:b7:95:ec:91:dc:c9:72:f5:2a: e8:49:2f:42:a2:f6:97:36:a0:56:da:35:48:04:19: c0:ae:42:19:a5:b7:9f:c3:07:a3:fc:c6:0b:01:91: 8c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5D:CF:94:78:DF:1C:3C:D7:0D:10:15:24:10:80:CE:42:85:87:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/d86e1d6a-231b-39dc-8464-adea1810b9b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/40898705-dca0-471d-ab1b-b12e6e8e7c83.crl X509v3 Authority Key Identifier: keyid:D4:50:5F:18:28:00:9D:4A:97:41:09:C9:41:47:31:78:ED:C9:48:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83.cer sbgp-ipAddrBlock: critical IPv4: 23.154.132.0/24 IPv6: 2620:7f:1450::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e9:08:d7:52:3d:bf:23:f7:50:d5:41:f5:85:d4:06:77:35: 1c:e9:23:fe:fc:83:63:61:1e:5d:3e:89:f7:01:54:59:e7:3d: ab:7b:07:6b:da:60:a8:e9:a3:6c:62:ac:a3:8c:e5:c6:a2:09: d7:67:eb:05:a9:cb:30:e7:22:6b:de:bd:d3:48:f8:77:77:07: 94:17:a3:8d:5d:3d:51:86:7e:ef:9e:74:17:65:de:64:2d:7c: d3:82:63:9c:e5:0c:21:c0:ac:e0:b5:55:b5:62:30:35:fd:58: 18:76:44:47:4b:0b:26:ff:0e:76:76:7f:ff:16:51:e2:56:20: ad:87:a3:75:45:b5:ce:a2:17:1b:1a:42:de:af:fd:6b:b3:03: 0e:8a:5d:5e:4a:7a:cd:7f:6e:a2:2b:ab:40:ae:70:f1:35:b6: 31:29:14:5f:e8:ce:8f:59:68:50:b3:7f:1a:13:32:0a:a6:83: c5:85:79:45:19:4c:2d:34:7e:53:f7:4b:e0:80:9f:1e:b0:d0: d8:27:9c:0d:7b:b3:83:2b:38:b5:e8:40:9e:17:e3:c4:ad:40: 8a:a3:a1:b3:30:43:c2:2c:02:82:c0:57:5e:07:f6:0e:12:87: 84:a9:96:b5:94:ce:96:d2:95:e3:08:62:b6:0d:14:e3:23:5f: 6a:6f:3a:94 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1ERvVamURClL1WtPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDA4OTg3MDUtZGNhMC00NzFkLWFiMWItYjEyZTZlOGU3 YzgzMB4XDTI2MDMyMzE4NTkzMVoXDTI2MDYyMTE4NTkzMVowLzEtMCsGA1UEAxMk MDRjY2Q4NDYtYzcwOC00ZmZiLTkxMTUtM2QyNWI3NDk4OTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwvEZLoLtC+tqNxzGZV26wWURatkLfRjVXOr iy8gpu+f7FiR3Mh/VfHc7EgtllTz7dfxqbvaZnUdcpu7+qXnPQkwd5Q4sG7HZnd4 s24vuGJCRm7aVPNwJQUXcorYNq0EejYPoEr6znZTAET/J6lRmREBL02nOQMZsKle W5V4pmng5s6MDxI2UCfu1F4+VrGj7pO0WcgrcZdDQNnCQmGQLmOCJ1mVzP/bvFZ9 HoqNFxWyw3z17WHz1FYRAM+9s2TXeuEvEVkDREZYiXR2bjdgJBn3MfFYsvq3leyR 3Mly9SroSS9CovaXNqBW2jVIBBnArkIZpbefwwej/MYLAZGMGQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFIpdz5R43xw81w0QFSQQgM5ChYcXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80MDg5 ODcwNS1kY2EwLTQ3MWQtYWIxYi1iMTJlNmU4ZTdjODMvZDg2ZTFkNmEtMjMxYi0z OWRjLTg0NjQtYWRlYTE4MTBiOWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNDA4OTg3MDUtZGNhMC00NzFkLWFi MWItYjEyZTZlOGU3YzgzLzQwODk4NzA1LWRjYTAtNDcxZC1hYjFiLWIxMmU2ZThl N2M4My5jcmwwHwYDVR0jBBgwFoAU1FBfGCgAnUqXQQnJQUcxeO3JSG0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80MDg5ODcwNS1kY2EwLTQ3MWQtYWIxYi1iMTJl NmU4ZTdjODMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF5qEMA8E AgACMAkDBwAmIAB/FFAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAROkI11I9vyP3UNVB9YXUBnc1HOkj/vyD Y2EeXT6J9wFUWec9q3sHa9pgqOmjbGKso4zlxqIJ12frBanLMOcia96900j4d3cH lBejjV09UYZ+7550F2XeZC1804JjnOUMIcCs4LVVtWIwNf1YGHZER0sLJv8OdnZ/ /xZR4lYgrYejdUW1zqIXGxpC3q/9a7MDDopdXkp6zX9uoiurQK5w8TW2MSkUX+jO j1loULN/GhMyCqaDxYV5RRlMLTR+U/dL4ICfHrDQ2CecDXuzgys4tehAnhfjxK1A iqOhszBDwiwCgsBXXgf2DhKHhKmWtZTOltKV4whitg0U4yNfam86lA== -----END CERTIFICATE-----Generated at Wed Mar 25 21:17:45 2026 by rpki-client