$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/a0becca9-b236-3cc9-8944-0ddc143cdcb7.roa File: a0becca9-b236-3cc9-8944-0ddc143cdcb7.roa (raw, json) Hash identifier: swcrocNccHkrsuFu1G7GrFGjYSEVObGJHohsrI5jP4k= Subject key identifier: 4F:ED:BE:08:3F:8C:6F:6F:C8:7A:D6:FB:74:C7:AF:B2:1B:46:A3:2C Certificate issuer: /CN=5abd481c-a75f-4f76-a08e-be7629dc5c9d Certificate serial: 010D0C9F4328584D0D425D1B6159AF1B6EF71180 Authority key identifier: 9E:F1:29:BA:15:89:35:A6:0D:BE:AC:19:3D:61:1E:86:19:E5:D8:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/a0becca9-b236-3cc9-8944-0ddc143cdcb7.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 401997 IP address blocks: 23.145.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/5abd481c-a75f-4f76-a08e-be7629dc5c9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/5abd481c-a75f-4f76-a08e-be7629dc5c9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:5d:1b:61:59:af:1b:6e:f7:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abd481c-a75f-4f76-a08e-be7629dc5c9d Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=bd49d88a-e903-4d73-8800-90dc0e5aa8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:44:f4:7d:8e:58:01:14:a6:c3:36:4b:c6:9e: 95:c8:b7:ac:44:91:d5:a2:19:3e:67:23:61:18:c4: 16:4a:6d:62:9c:90:03:67:d7:1c:81:ec:38:f4:0a: 6a:48:44:60:04:25:1a:a8:69:55:e0:ab:0a:62:b5: fe:96:22:69:00:80:ed:72:87:55:23:4c:74:be:6f: c0:84:25:17:6f:20:53:75:97:ee:45:76:f3:18:b8: aa:e5:2a:4b:85:01:91:a6:fd:b3:e9:67:55:2f:a8: 79:f1:27:67:1d:26:05:e6:cf:28:2c:63:4a:ed:af: 3b:40:c0:96:cb:09:dd:10:79:40:b7:0b:3b:4a:aa: 4f:07:62:a2:4c:d0:8f:0f:1e:1c:ca:85:4e:51:6e: 02:81:aa:4e:26:1b:cd:43:96:32:7d:f9:d0:39:59: 00:42:52:1d:32:69:68:d0:35:0a:17:f5:c6:c1:4a: 1f:04:e4:e1:36:44:2f:79:27:fd:c0:61:21:60:35: 55:f1:2b:19:55:98:b2:e3:07:af:2e:9f:8f:2b:b5: 80:2b:99:86:20:ce:ac:a7:64:33:23:5f:12:02:87: 49:c5:78:3d:14:99:e8:0f:b6:7d:7e:0c:86:38:c9: bd:0d:f0:b3:9a:3f:eb:62:be:b5:d1:86:af:7e:64: 3f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:ED:BE:08:3F:8C:6F:6F:C8:7A:D6:FB:74:C7:AF:B2:1B:46:A3:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/a0becca9-b236-3cc9-8944-0ddc143cdcb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/5abd481c-a75f-4f76-a08e-be7629dc5c9d.crl X509v3 Authority Key Identifier: keyid:9E:F1:29:BA:15:89:35:A6:0D:BE:AC:19:3D:61:1E:86:19:E5:D8:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d.cer sbgp-ipAddrBlock: critical IPv4: 23.145.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:74:32:5a:db:7c:31:59:c9:51:e5:5e:d0:98:4a:b0:5c:ff: 4b:c1:81:6e:44:5b:02:0d:24:e0:51:f6:f4:18:92:96:46:4f: 2c:fa:f7:fb:3d:d1:d7:62:6a:f5:51:a7:3f:ac:df:ce:e3:f8: 91:9f:1d:f4:55:fb:e4:59:79:26:26:27:e9:89:b9:83:f6:03: cf:51:2e:45:0f:9a:b3:04:6d:a2:e2:6f:e2:2a:68:2c:ea:70: 8d:a6:7a:19:3c:81:cb:d3:e6:d6:9c:55:b2:84:c1:ad:13:36: 40:bb:4f:93:90:0b:2a:c6:1c:29:6c:6e:0e:1a:15:fe:f7:36: cf:e2:7d:06:7f:b1:70:bd:51:47:a6:01:fb:43:29:2e:06:22: 12:ea:a6:73:0a:dc:13:80:a3:4a:73:1d:01:2f:57:e9:57:46: 9c:be:ae:fd:96:15:3f:8f:b9:9a:71:e2:2f:71:ef:bc:cd:86: d6:44:f6:58:30:ae:b2:f7:84:b4:17:5c:cd:a9:11:83:77:17: 95:9d:23:4f:fc:08:46:83:77:7b:02:b7:4a:40:d1:3b:f2:f1: 86:e5:23:bc:ee:de:35:fd:29:a0:aa:74:b8:51:c3:c8:54:77: b4:e3:49:9c:6a:9f:17:91:52:4b:5a:ea:f2:b3:aa:50:53:ac: cd:43:dc:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQl0bYVmvG273EYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiZDQ4MWMtYTc1Zi00Zjc2LWEwOGUtYmU3NjI5ZGM1 YzlkMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk YmQ0OWQ4OGEtZTkwMy00ZDczLTg4MDAtOTBkYzBlNWFhOGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkT0fY5YARSmwzZLxp6VyLesRJHVohk+ZyNh GMQWSm1inJADZ9ccgew49ApqSERgBCUaqGlV4KsKYrX+liJpAIDtcodVI0x0vm/A hCUXbyBTdZfuRXbzGLiq5SpLhQGRpv2z6WdVL6h58SdnHSYF5s8oLGNK7a87QMCW ywndEHlAtws7SqpPB2KiTNCPDx4cyoVOUW4CgapOJhvNQ5YyffnQOVkAQlIdMmlo 0DUKF/XGwUofBOThNkQveSf9wGEhYDVV8SsZVZiy4wevLp+PK7WAK5mGIM6sp2Qz I18SAodJxXg9FJnoD7Z9fgyGOMm9DfCzmj/rYr610YavfmQ/IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/tvgg/jG9vyHrW+3THr7IbRqMsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81YWJk NDgxYy1hNzVmLTRmNzYtYTA4ZS1iZTc2MjlkYzVjOWQvYTBiZWNjYTktYjIzNi0z Y2M5LTg5NDQtMGRkYzE0M2NkY2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWFiZDQ4MWMtYTc1Zi00Zjc2LWEw OGUtYmU3NjI5ZGM1YzlkLzVhYmQ0ODFjLWE3NWYtNGY3Ni1hMDhlLWJlNzYyOWRj NWM5ZC5jcmwwHwYDVR0jBBgwFoAUnvEpuhWJNaYNvqwZPWEehhnl2OwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81YWJkNDgxYy1hNzVmLTRmNzYtYTA4ZS1iZTc2 MjlkYzVjOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5HcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHF0MlrbfDFZyVHlXtCYSrBc/0vBgW5EWwINJOBR9vQYkpZGTyz69/s9 0ddiavVRpz+s387j+JGfHfRV++RZeSYmJ+mJuYP2A89RLkUPmrMEbaLib+IqaCzq cI2mehk8gcvT5tacVbKEwa0TNkC7T5OQCyrGHClsbg4aFf73Ns/ifQZ/sXC9UUem AftDKS4GIhLqpnMK3BOAo0pzHQEvV+lXRpy+rv2WFT+PuZpx4i9x77zNhtZE9lgw rrL3hLQXXM2pEYN3F5WdI0/8CEaDd3sCt0pA0Tvy8YblI7zu3jX9KaCqdLhRw8hU d7TjSZxqnxeRUkta6vKzqlBTrM1D3K8= -----END CERTIFICATE-----Generated at Thu Mar 26 09:09:36 2026 by rpki-client