$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/f1428052-35e1-39f6-a7a4-5464e85eb554.roa File: f1428052-35e1-39f6-a7a4-5464e85eb554.roa (raw, json) Hash identifier: D38+n6MgTWYXWLayrzxp2B9iOtTxKInbG69VjZlKkFM= Subject key identifier: 63:DF:F9:CA:61:06:DA:1B:69:15:A1:2C:97:94:0E:9F:EE:46:2A:1D Certificate issuer: /CN=1d52c1d1-8920-4ee9-a78f-3ec07db187a7 Certificate serial: 010D0C9F4328584D343A17040015533BF9C85560 Authority key identifier: 4E:BC:CC:38:96:22:CA:6D:F4:C6:79:E3:F8:A9:09:59:A9:52:72:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/f1428052-35e1-39f6-a7a4-5464e85eb554.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 402069 IP address blocks: 23.147.12.0/24 maxlen: 24 2602:f525::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:17:04:00:15:53:3b:f9:c8:55:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d52c1d1-8920-4ee9-a78f-3ec07db187a7 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=11c09dc1-5aa4-4ff0-bae1-50d5cd74711d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c7:a8:bb:8e:b0:e8:46:14:ce:ff:df:23:2f: db:19:82:12:e2:0f:49:fc:3f:5c:f6:37:ae:e9:a1: 3b:d9:c3:65:a9:dd:fc:ef:50:2b:c7:b9:97:ed:94: e5:1a:df:ce:3b:5a:b0:79:75:42:d1:c6:1d:d1:29: 45:3f:11:b6:aa:09:73:29:17:9a:94:30:61:d9:27: 5f:c8:0a:4c:88:2e:9b:eb:d4:e6:b1:6e:43:99:46: 57:11:bb:c3:55:c5:ae:54:3e:09:b9:3b:4d:89:e7: f4:02:ea:a1:d1:ab:d8:62:dd:9e:d8:cc:76:b3:20: f5:6e:5c:bc:65:1a:ab:60:24:1c:8b:fd:15:f3:72: ab:44:8b:76:75:49:55:be:75:6c:a8:0b:cf:25:12: 78:dc:8d:e5:b5:ab:b1:b6:1f:a1:0a:52:b7:0e:06: 0f:00:46:58:aa:79:33:f6:c1:db:2f:81:1b:ef:51: cc:92:40:dd:34:41:0e:b8:6c:45:00:a0:3c:b5:77: 8e:4a:77:06:72:96:bb:49:50:3e:ff:03:95:8c:35: 2c:83:d8:cd:4a:b0:cd:af:51:64:40:f8:fb:62:16: c4:85:73:7f:73:f1:f6:33:57:a9:d6:c1:7a:69:67: 6f:bd:ef:3a:6f:42:f8:04:37:c0:f3:7d:18:9f:c4: 1f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DF:F9:CA:61:06:DA:1B:69:15:A1:2C:97:94:0E:9F:EE:46:2A:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/f1428052-35e1-39f6-a7a4-5464e85eb554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.crl X509v3 Authority Key Identifier: keyid:4E:BC:CC:38:96:22:CA:6D:F4:C6:79:E3:F8:A9:09:59:A9:52:72:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.cer sbgp-ipAddrBlock: critical IPv4: 23.147.12.0/24 IPv6: 2602:f525::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:9f:4f:a8:6f:f5:7d:a7:09:d8:b4:a8:60:16:d1:e7:73:56: 8e:94:42:85:d6:3e:8f:29:fa:d3:28:71:d4:e4:ae:26:ac:5d: 6a:b0:f3:d2:a9:39:63:36:fe:09:f1:d4:fd:05:b4:2c:a4:43: ae:e4:4e:72:99:d6:01:5e:f7:7f:32:0f:bb:e5:30:f5:5c:0c: 03:cb:59:e5:b7:ec:f3:3a:7a:f9:b0:c8:06:20:f9:e4:57:fd: f5:0c:1d:c5:a5:38:5f:29:0a:8d:4c:c3:2b:24:8f:66:5e:1e: 66:d4:72:75:e6:5c:a8:d6:f8:c1:ff:44:90:41:f5:34:76:c9: 03:d6:eb:47:82:2e:f7:7a:42:28:b7:09:3f:fa:46:46:3c:c2: 94:63:ad:80:c6:e0:ee:37:70:c0:05:4c:70:89:32:ef:f3:9d: b3:cc:6f:98:a9:c5:f4:1a:7b:40:a4:82:ac:63:ec:13:3d:7c: f5:95:35:a8:9a:78:82:03:40:ec:8b:e8:4c:25:89:1e:c2:0a: 41:1c:86:b9:e4:a7:b5:74:80:c6:9e:21:bc:af:73:64:8e:72: 1e:87:83:5a:76:37:5e:76:03:12:41:24:e4:18:cf:81:be:ef: ed:d0:50:4d:a8:23:fe:b3:36:f0:c8:e2:3c:17:74:4a:bc:5c: 45:8c:78:7b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE00OhcEABVTO/nIVWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ1MmMxZDEtODkyMC00ZWU5LWE3OGYtM2VjMDdkYjE4 N2E3MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk MTFjMDlkYzEtNWFhNC00ZmYwLWJhZTEtNTBkNWNkNzQ3MTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA98eou46w6EYUzv/fIy/bGYIS4g9J/D9c9jeu 6aE72cNlqd3871Arx7mX7ZTlGt/OO1qweXVC0cYd0SlFPxG2qglzKRealDBh2Sdf yApMiC6b69TmsW5DmUZXEbvDVcWuVD4JuTtNief0Auqh0avYYt2e2Mx2syD1bly8 ZRqrYCQci/0V83KrRIt2dUlVvnVsqAvPJRJ43I3ltauxth+hClK3DgYPAEZYqnkz 9sHbL4Eb71HMkkDdNEEOuGxFAKA8tXeOSncGcpa7SVA+/wOVjDUsg9jNSrDNr1Fk QPj7YhbEhXN/c/H2M1ep1sF6aWdvve86b0L4BDfA830Yn8Qf6wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGPf+cphBtobaRWhLJeUDp/uRiodMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xZDUy YzFkMS04OTIwLTRlZTktYTc4Zi0zZWMwN2RiMTg3YTcvZjE0MjgwNTItMzVlMS0z OWY2LWE3YTQtNTQ2NGU4NWViNTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMWQ1MmMxZDEtODkyMC00ZWU5LWE3 OGYtM2VjMDdkYjE4N2E3LzFkNTJjMWQxLTg5MjAtNGVlOS1hNzhmLTNlYzA3ZGIx ODdhNy5jcmwwHwYDVR0jBBgwFoAUTrzMOJYiym30xnnj+KkJWalScj8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xZDUyYzFkMS04OTIwLTRlZTktYTc4Zi0zZWMw N2RiMTg3YTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5MMMA4E AgACMAgDBgAmAvUlADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSn0+ob/V9pwnYtKhgFtHnc1aOlEKF1j6P KfrTKHHU5K4mrF1qsPPSqTljNv4J8dT9BbQspEOu5E5ymdYBXvd/Mg+75TD1XAwD y1nlt+zzOnr5sMgGIPnkV/31DB3FpThfKQqNTMMrJI9mXh5m1HJ15lyo1vjB/0SQ QfU0dskD1utHgi73ekIotwk/+kZGPMKUY62AxuDuN3DABUxwiTLv852zzG+YqcX0 GntApIKsY+wTPXz1lTWomniCA0Dsi+hMJYkewgpBHIa55Ke1dIDGniG8r3NkjnIe h4NadjdedgMSQSTkGM+Bvu/t0FBNqCP+szbwyOI8F3RKvFxFjHh7 -----END CERTIFICATE-----Generated at Thu Mar 26 16:06:25 2026 by rpki-client