$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/50295063-44b9-3f73-8e63-136553fdd8cc.roa File: 50295063-44b9-3f73-8e63-136553fdd8cc.roa (raw, json) Hash identifier: s2vnOyqNetJKiqHyocCBfis/zGO8Ej4cmYfpeH/3aVs= Subject key identifier: 5D:C1:A4:9D:48:75:72:4C:06:FE:33:2C:C2:0D:B7:55:D1:7F:0E:EB Certificate issuer: /CN=670b9f4e-c369-4f4c-aa24-27f3fc851bc5 Certificate serial: 010D0C9F4328584D2A74DDDAC9100DFCA05E5120 Authority key identifier: C2:9F:A9:B8:BA:42:7E:3C:F3:9D:6B:BB:28:14:8A:E9:03:51:9B:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/50295063-44b9-3f73-8e63-136553fdd8cc.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 54004 IP address blocks: 23.141.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:dd:da:c9:10:0d:fc:a0:5e:51:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=670b9f4e-c369-4f4c-aa24-27f3fc851bc5 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=c33d9237-1bb0-41ea-a2b9-b3e3a076bb2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:96:8d:fd:55:7b:07:b4:9e:2d:9a:e3:3f:a4: 70:98:72:14:85:26:17:ab:3a:7b:77:60:26:35:4f: 74:b6:c7:64:81:d8:8d:1f:05:30:9f:8b:90:96:25: 99:f4:bc:12:f2:18:f6:84:08:4e:4c:fe:02:60:db: 80:78:48:39:e2:ee:04:cd:06:8b:04:32:c3:f5:4d: 8a:a7:86:51:ff:33:36:06:f6:98:a3:e0:ad:81:9b: 8c:02:32:c1:62:8b:cf:a8:6f:c6:e1:a8:e3:1c:07: 8b:d1:29:db:c9:a7:22:1f:35:c3:42:ed:89:50:d6: 02:02:b1:15:23:5d:71:8d:03:7d:d6:bb:d1:75:e5: b9:68:af:2b:85:5d:79:06:56:00:7b:15:93:f5:6f: 36:31:90:dd:fc:c4:cf:7a:b8:88:8a:10:f2:23:7c: d8:15:75:df:29:fb:74:4a:45:88:23:52:43:6f:54: 27:e1:34:dc:75:84:68:3d:73:ce:d3:ff:ed:5c:81: 6a:99:b5:68:1c:b8:88:76:fe:f3:ce:24:f3:4c:8a: 63:d3:41:96:55:f4:22:bf:04:59:4a:71:2f:93:ef: 26:e0:0c:3e:c2:5f:0a:36:69:ce:f7:5d:11:58:49: f8:6e:f9:41:7f:ce:38:87:40:50:44:42:90:1d:60: cd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C1:A4:9D:48:75:72:4C:06:FE:33:2C:C2:0D:B7:55:D1:7F:0E:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/50295063-44b9-3f73-8e63-136553fdd8cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.crl X509v3 Authority Key Identifier: keyid:C2:9F:A9:B8:BA:42:7E:3C:F3:9D:6B:BB:28:14:8A:E9:03:51:9B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.cer sbgp-ipAddrBlock: critical IPv4: 23.141.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:50:ea:dd:81:93:8c:7c:96:ef:94:dc:6a:de:5f:3b:9c:e3: 70:24:8a:cc:d1:75:19:18:b0:32:2a:73:1b:ae:00:c7:8f:38: 9c:1e:bf:09:96:aa:bc:94:4e:4f:76:aa:d9:ba:55:f4:2e:a1: f0:92:4a:af:67:b3:34:78:08:1f:b0:1e:e8:58:33:02:67:f8: dd:93:60:9d:4a:ce:39:21:2b:d5:34:38:6c:c8:70:9c:ef:8e: d6:4c:b7:c9:fd:17:12:4d:f1:9e:f4:20:bf:02:39:fb:76:3d: 2b:02:dc:40:0d:94:f3:04:c5:35:58:fb:6f:ea:21:7e:0b:6b: 4c:20:63:d9:bf:62:43:1a:21:0e:da:16:7a:92:f7:3b:63:51: 7e:4b:dc:5f:6a:01:09:64:e1:10:9c:c4:71:72:68:43:30:6a: 3e:72:9e:b8:c8:99:0c:2b:ad:35:5d:2a:e4:5b:60:5b:19:f2: b9:ed:d7:4f:bd:bb:93:d4:9d:87:df:17:c7:ca:0f:ac:5b:a8: d3:be:ea:9b:5f:9b:8b:3b:0f:04:75:e8:8c:2a:21:4e:45:40: b5:aa:28:83:02:05:38:49:b4:e3:4d:5d:6b:f5:a7:c5:ad:cd: bf:b1:79:71:5d:2c:97:79:c3:96:d1:e3:65:b1:c0:d8:58:e4: 61:6a:46:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdN3ayRAN/KBeUSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjcwYjlmNGUtYzM2OS00ZjRjLWFhMjQtMjdmM2ZjODUx YmM1MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk YzMzZDkyMzctMWJiMC00MWVhLWEyYjktYjNlM2EwNzZiYjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZaN/VV7B7SeLZrjP6RwmHIUhSYXqzp7d2Am NU90tsdkgdiNHwUwn4uQliWZ9LwS8hj2hAhOTP4CYNuAeEg54u4EzQaLBDLD9U2K p4ZR/zM2BvaYo+CtgZuMAjLBYovPqG/G4ajjHAeL0SnbyaciHzXDQu2JUNYCArEV I11xjQN91rvRdeW5aK8rhV15BlYAexWT9W82MZDd/MTPeriIihDyI3zYFXXfKft0 SkWII1JDb1Qn4TTcdYRoPXPO0//tXIFqmbVoHLiIdv7zziTzTIpj00GWVfQivwRZ SnEvk+8m4Aw+wl8KNmnO910RWEn4bvlBf844h0BQREKQHWDNGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3BpJ1IdXJMBv4zLMINt1XRfw7rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82NzBi OWY0ZS1jMzY5LTRmNGMtYWEyNC0yN2YzZmM4NTFiYzUvNTAyOTUwNjMtNDRiOS0z ZjczLThlNjMtMTM2NTUzZmRkOGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjcwYjlmNGUtYzM2OS00ZjRjLWFh MjQtMjdmM2ZjODUxYmM1LzY3MGI5ZjRlLWMzNjktNGY0Yy1hYTI0LTI3ZjNmYzg1 MWJjNS5jcmwwHwYDVR0jBBgwFoAUwp+puLpCfjzznWu7KBSK6QNRm/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82NzBiOWY0ZS1jMzY5LTRmNGMtYWEyNC0yN2Yz ZmM4NTFiYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF418MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpQ6t2Bk4x8lu+U3GreXzuc43AkiszRdRkYsDIqcxuuAMePOJwevwmW qryUTk92qtm6VfQuofCSSq9nszR4CB+wHuhYMwJn+N2TYJ1KzjkhK9U0OGzIcJzv jtZMt8n9FxJN8Z70IL8COft2PSsC3EANlPMExTVY+2/qIX4La0wgY9m/YkMaIQ7a FnqS9ztjUX5L3F9qAQlk4RCcxHFyaEMwaj5ynrjImQwrrTVdKuRbYFsZ8rnt10+9 u5PUnYffF8fKD6xbqNO+6ptfm4s7DwR16IwqIU5FQLWqKIMCBThJtONNXWv1p8Wt zb+xeXFdLJd5w5bR42WxwNhY5GFqRn4= -----END CERTIFICATE-----Generated at Thu Mar 26 19:43:37 2026 by rpki-client