$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/33a78829-f52e-3d5b-b2f9-190014cde890.roa File: 33a78829-f52e-3d5b-b2f9-190014cde890.roa (raw, json) Hash identifier: v1H3AMd1U47A1yy7OmRywXZb2HEWGk6FRra+c/PTA/0= Subject key identifier: 3F:BE:98:EE:25:3B:20:BA:E2:DA:62:B1:23:62:67:44:C4:F6:1F:A7 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584D07ACE0E49B3424FB48982400 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/33a78829-f52e-3d5b-b2f9-190014cde890.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 16740 IP address blocks: 23.151.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:e0:e4:9b:34:24:fb:48:98:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=a2f129c6-f83a-49df-9608-47cd77ce16d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:ca:69:6e:e7:5c:ce:35:33:9e:e1:4f:02: b9:9f:9d:00:3b:47:6b:11:51:fc:81:be:87:5b:45: f1:a6:b0:20:12:35:b4:e9:58:fa:b8:75:74:c5:73: bb:be:e4:dd:31:4e:ec:d5:7b:3e:f4:c0:e2:97:ca: 36:77:8e:ba:6f:de:b1:57:e0:fd:d9:ed:07:cf:4e: ad:01:72:4f:26:de:e6:a7:15:81:09:a7:b5:bb:24: 1a:6d:33:83:06:06:13:d1:58:d3:63:08:ea:39:aa: 2d:71:9c:56:32:71:2b:d1:43:1a:12:81:78:06:da: 8d:f0:f7:81:e7:db:85:56:40:3f:9b:9a:aa:ba:ff: 37:02:a7:e8:59:57:60:ab:5d:d9:d5:67:8a:d8:fb: db:f9:4a:c1:87:ee:87:75:e7:d7:29:5c:0f:30:e7: 4f:d8:40:dc:2a:9f:79:cf:51:f9:68:d6:62:1c:d6: a0:ea:73:a9:75:c1:f9:e9:cf:e4:b9:c0:a8:dd:93: 08:1a:28:48:25:cb:76:73:2d:cc:40:4f:c2:88:23: 70:37:29:86:50:e8:d3:1a:fe:fa:65:fd:65:f7:45: eb:3d:6b:59:e1:66:4e:e0:07:67:11:b0:56:b7:23: 84:66:16:8f:e8:bb:e1:96:cf:50:9a:c5:36:9e:f1: 4c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BE:98:EE:25:3B:20:BA:E2:DA:62:B1:23:62:67:44:C4:F6:1F:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/33a78829-f52e-3d5b-b2f9-190014cde890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 23.151.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:8b:b3:6b:d8:43:65:9c:9e:d6:cd:01:01:9c:08:6f:6c:22: 97:5d:10:29:24:75:5f:69:c2:79:e8:03:99:ca:7f:b3:c2:14: 60:53:09:19:c0:ec:54:43:b2:55:77:de:dc:9e:2b:14:a8:d3: fc:b7:73:9d:3d:1c:29:59:1e:de:bb:8a:5c:73:1f:6e:ae:2c: b9:cc:48:b6:94:e7:f4:b6:e7:b2:ca:ed:b6:c8:b5:e6:53:ce: cb:f5:3d:14:60:ea:5c:e3:fb:04:ad:f1:33:3e:14:ac:40:15: 49:c1:b5:85:24:5e:87:1c:a8:e3:d9:43:e0:cf:02:f5:1d:fc: 88:37:8d:f1:38:e7:6f:10:7d:00:bb:1e:5b:26:8d:9f:6a:90: 30:57:a0:94:16:cb:be:2d:b0:3d:75:18:6f:06:66:11:81:c6: fd:fe:1d:92:e2:f9:84:bb:34:f0:df:97:f8:f2:4f:44:86:16: 6a:c6:6a:58:3c:f0:45:cf:24:91:59:02:33:19:11:b0:65:6b: f7:c8:68:9a:47:5a:d3:af:c8:0e:0a:15:a1:fa:31:d4:85:51: 98:3a:bf:c0:8d:99:90:f2:61:4a:0d:e7:18:3b:be:86:73:4c: d7:15:73:33:18:2d:3b:e5:b8:45:4b:fa:e4:3f:a6:79:9c:a7: 4b:a6:f5:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrODkmzQk+0iYJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk YTJmMTI5YzYtZjgzYS00OWRmLTk2MDgtNDdjZDc3Y2UxNmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYPKaW7nXM41M57hTwK5n50AO0drEVH8gb6H W0XxprAgEjW06Vj6uHV0xXO7vuTdMU7s1Xs+9MDil8o2d466b96xV+D92e0Hz06t AXJPJt7mpxWBCae1uyQabTODBgYT0VjTYwjqOaotcZxWMnEr0UMaEoF4BtqN8PeB 59uFVkA/m5qquv83AqfoWVdgq13Z1WeK2Pvb+UrBh+6HdefXKVwPMOdP2EDcKp95 z1H5aNZiHNag6nOpdcH56c/kucCo3ZMIGihIJct2cy3MQE/CiCNwNymGUOjTGv76 Zf1l90XrPWtZ4WZO4AdnEbBWtyOEZhaP6Lvhls9QmsU2nvFMjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD++mO4lOyC64tpisSNiZ0TE9h+nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvMzNhNzg4MjktZjUyZS0z ZDViLWIyZjktMTkwMDE0Y2RlODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5cUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuLs2vYQ2WcntbNAQGcCG9sIpddECkkdV9pwnnoA5nKf7PCFGBTCRnA 7FRDslV33tyeKxSo0/y3c509HClZHt67ilxzH26uLLnMSLaU5/S257LK7bbIteZT zsv1PRRg6lzj+wSt8TM+FKxAFUnBtYUkXoccqOPZQ+DPAvUd/Ig3jfE4528QfQC7 HlsmjZ9qkDBXoJQWy74tsD11GG8GZhGBxv3+HZLi+YS7NPDfl/jyT0SGFmrGalg8 8EXPJJFZAjMZEbBla/fIaJpHWtOvyA4KFaH6MdSFUZg6v8CNmZDyYUoN5xg7voZz TNcVczMYLTvluEVL+uQ/pnmcp0um9Uo= -----END CERTIFICATE-----Generated at Thu Mar 26 16:06:31 2026 by rpki-client