$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/dcf95846-6a90-3029-aed6-381d9852d4c9.roa File: dcf95846-6a90-3029-aed6-381d9852d4c9.roa (raw, json) Hash identifier: 1UqJxYusNKdskQsM1I0Xzskh+gxaTT8XcOTMzQdYfvQ= Subject key identifier: F6:11:6F:F4:92:00:02:9D:74:85:02:ED:59:C4:D0:B6:4B:32:40:29 Certificate issuer: /CN=43ba2928-8b99-4e95-865c-b82d26de7be9 Certificate serial: 010D0C9F4328584D300A46C44B48A3F50DCA8765 Authority key identifier: E1:23:0F:1D:10:77:CB:45:75:A8:5F:35:56:3E:40:AF:B8:19:C2:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/dcf95846-6a90-3029-aed6-381d9852d4c9.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 3257 IP address blocks: 23.140.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/43ba2928-8b99-4e95-865c-b82d26de7be9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/43ba2928-8b99-4e95-865c-b82d26de7be9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:46:c4:4b:48:a3:f5:0d:ca:87:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ba2928-8b99-4e95-865c-b82d26de7be9 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=d72dd11b-02be-473c-bfad-a82ec48d511f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:90:84:d1:2b:77:0e:e8:97:cb:69:66:5b:c2: f0:2d:be:3b:9c:df:f3:26:22:56:6c:bc:8c:d3:c8: c3:53:87:b1:20:1f:ff:3b:c6:7b:b5:7d:27:c5:a6: 73:f4:fc:61:99:73:01:03:54:b3:1e:0b:82:43:1d: 87:8b:81:77:1f:16:3b:b6:90:6c:35:e1:5b:51:86: 43:da:69:2c:50:6e:4d:f0:4b:93:55:20:6c:46:e6: 22:3f:67:2a:2b:ea:f3:65:fc:b0:e7:80:51:1a:8f: a5:45:f9:0e:45:f1:64:8b:7d:cd:42:11:b4:6d:47: 72:28:bd:98:4f:47:9c:40:59:75:a3:18:58:55:d2: 39:14:7a:e6:d4:be:2d:b9:ca:d3:be:be:28:99:03: 99:65:fc:18:6c:85:3a:b6:ba:46:a3:d7:55:43:a3: 84:b3:a6:f5:07:f9:8d:fb:d5:af:2c:bf:5d:fe:48: 7b:39:69:21:7b:48:57:59:35:19:3a:76:2f:7c:3f: f3:0b:db:fc:0b:a4:49:af:5a:12:a3:d1:bc:09:6f: 1a:79:03:62:0c:20:4e:aa:1a:90:2a:a2:2b:61:4f: e5:24:e5:f2:58:5a:70:42:16:ef:f4:8b:e4:d4:1d: f9:32:2c:52:73:6a:23:e4:40:43:6c:88:7f:23:4c: 9a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:11:6F:F4:92:00:02:9D:74:85:02:ED:59:C4:D0:B6:4B:32:40:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/dcf95846-6a90-3029-aed6-381d9852d4c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/43ba2928-8b99-4e95-865c-b82d26de7be9.crl X509v3 Authority Key Identifier: keyid:E1:23:0F:1D:10:77:CB:45:75:A8:5F:35:56:3E:40:AF:B8:19:C2:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9.cer sbgp-ipAddrBlock: critical IPv4: 23.140.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:51:e8:83:8f:44:e0:cd:22:1e:30:39:b3:9b:96:21:ad:85: f1:7b:52:6f:88:40:72:1d:3d:db:3f:93:11:c7:61:42:ec:09: 5d:22:00:f6:9e:93:7d:a8:03:7e:e3:2b:c3:92:50:d1:8b:1c: 7f:01:82:9a:c4:af:01:f1:79:11:de:d0:bc:54:36:71:ce:4c: d1:c3:15:e0:51:d1:85:9e:69:e1:23:30:2f:d0:b7:8a:f0:a4: 19:43:19:c1:02:c4:7e:2f:ec:f8:1d:af:7d:92:de:8e:52:88: 04:43:04:1c:5c:0b:97:67:b2:19:87:b5:36:44:d0:fa:44:b2: e1:a2:15:bd:01:2a:fc:3e:70:fa:d3:16:e5:0f:4d:92:c4:1e: a7:3e:0e:c0:00:a8:65:d8:c3:0a:bc:ce:41:60:90:01:5d:a5: c9:c3:ea:b3:da:20:8f:b4:00:60:d8:10:61:3e:9f:d8:cf:9a: cc:cc:8e:76:48:f5:11:57:26:ba:df:62:ea:de:14:2d:47:72: 4e:c6:7b:aa:9d:dd:24:4b:47:bf:52:d3:33:bb:ae:47:ae:2d: e5:ec:8c:4c:67:09:55:df:ab:bf:fc:b8:8f:d7:14:e2:ba:e2: ef:1c:18:45:8f:4e:f9:88:66:7f:57:d0:ab:17:8f:e9:27:9a: f3:4c:c9:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCkbES0ij9Q3Kh2UwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNiYTI5MjgtOGI5OS00ZTk1LTg2NWMtYjgyZDI2ZGU3 YmU5MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZDcyZGQxMWItMDJiZS00NzNjLWJmYWQtYTgyZWM0OGQ1MTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJCE0St3DuiXy2lmW8LwLb47nN/zJiJWbLyM 08jDU4exIB//O8Z7tX0nxaZz9PxhmXMBA1SzHguCQx2Hi4F3HxY7tpBsNeFbUYZD 2mksUG5N8EuTVSBsRuYiP2cqK+rzZfyw54BRGo+lRfkORfFki33NQhG0bUdyKL2Y T0ecQFl1oxhYVdI5FHrm1L4tucrTvr4omQOZZfwYbIU6trpGo9dVQ6OEs6b1B/mN +9WvLL9d/kh7OWkhe0hXWTUZOnYvfD/zC9v8C6RJr1oSo9G8CW8aeQNiDCBOqhqQ KqIrYU/lJOXyWFpwQhbv9Ivk1B35MixSc2oj5EBDbIh/I0yaoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYRb/SSAAKddIUC7VnE0LZLMkApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80M2Jh MjkyOC04Yjk5LTRlOTUtODY1Yy1iODJkMjZkZTdiZTkvZGNmOTU4NDYtNmE5MC0z MDI5LWFlZDYtMzgxZDk4NTJkNGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDNiYTI5MjgtOGI5OS00ZTk1LTg2 NWMtYjgyZDI2ZGU3YmU5LzQzYmEyOTI4LThiOTktNGU5NS04NjVjLWI4MmQyNmRl N2JlOS5jcmwwHwYDVR0jBBgwFoAU4SMPHRB3y0V1qF81Vj5Ar7gZwoEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80M2JhMjkyOC04Yjk5LTRlOTUtODY1Yy1iODJk MjZkZTdiZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4x8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1R6IOPRODNIh4wObObliGthfF7Um+IQHIdPds/kxHHYULsCV0iAPae k32oA37jK8OSUNGLHH8BgprErwHxeRHe0LxUNnHOTNHDFeBR0YWeaeEjMC/Qt4rw pBlDGcECxH4v7Pgdr32S3o5SiARDBBxcC5dnshmHtTZE0PpEsuGiFb0BKvw+cPrT FuUPTZLEHqc+DsAAqGXYwwq8zkFgkAFdpcnD6rPaII+0AGDYEGE+n9jPmszMjnZI 9RFXJrrfYureFC1Hck7Ge6qd3SRLR79S0zO7rkeuLeXsjExnCVXfq7/8uI/XFOK6 4u8cGEWPTvmIZn9X0KsXj+knmvNMyeY= -----END CERTIFICATE-----Generated at Thu Mar 26 10:59:11 2026 by rpki-client