$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/dcadadd9-2962-3056-9744-0e8f860cd2f2.roa File: dcadadd9-2962-3056-9744-0e8f860cd2f2.roa (raw, json) Hash identifier: qN4Of4c1eJWxbDelKDZ7ryeGKIXOyRYF4C1e1KwqHSY= Subject key identifier: 93:5A:A6:8C:7A:D0:F4:B6:68:7B:E8:81:A2:F4:67:BD:3B:10:4A:8B Certificate issuer: /CN=761d4038-2e12-4354-ba44-f50a79f7d209 Certificate serial: 010D0C9F4328584D20AF7B46134893280FDF8B40 Authority key identifier: 42:D5:52:37:D1:E1:55:24:91:88:61:70:62:AB:06:B5:00:42:83:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/dcadadd9-2962-3056-9744-0e8f860cd2f2.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 21807 IP address blocks: 23.143.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/761d4038-2e12-4354-ba44-f50a79f7d209.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/761d4038-2e12-4354-ba44-f50a79f7d209.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:7b:46:13:48:93:28:0f:df:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=761d4038-2e12-4354-ba44-f50a79f7d209 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=a7c8bdd5-ad38-4296-9503-1f02a8b40ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:37:91:a6:5f:9e:f3:8f:04:d7:7e:09:b3:0d: 8e:7e:17:f9:78:ff:47:37:c5:bb:3f:99:8d:b9:ba: 80:98:7b:e7:57:5a:fe:74:96:9f:0b:ee:6b:aa:57: 84:d8:08:e1:23:36:cd:77:e4:8b:a2:fd:ac:b9:b3: 6d:7a:80:e4:4e:99:02:73:95:37:07:ba:08:d2:94: 77:c5:d5:0c:dc:58:51:3c:66:fd:2f:8a:ad:51:a6: ea:26:aa:4d:ac:2d:e8:21:5c:b1:f9:4e:a9:04:3b: 7c:e9:bc:42:0d:af:1c:d2:6e:87:98:56:c7:e7:c6: 56:67:d3:ec:35:4f:f8:9b:c0:d9:d3:f4:d5:1e:1b: 43:18:84:b8:11:2a:79:86:f8:52:f1:24:cb:1b:32: 67:e1:24:d8:8d:60:66:d5:9b:38:de:47:17:c7:fe: 6f:a5:09:25:f5:59:08:87:2e:22:df:e1:7b:65:bf: 54:a0:74:ee:01:e2:6d:b0:5a:33:b5:88:da:47:22: ab:94:41:67:a7:55:34:aa:60:4f:60:b1:8e:a3:41: 1c:d7:93:23:b5:c3:6e:59:27:4b:22:d1:5c:45:86: 1f:5f:18:0a:83:ab:60:e3:74:00:85:29:2b:d2:e0: d6:62:a0:b7:46:eb:0f:c0:c0:37:ac:da:38:ea:aa: 9e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5A:A6:8C:7A:D0:F4:B6:68:7B:E8:81:A2:F4:67:BD:3B:10:4A:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/dcadadd9-2962-3056-9744-0e8f860cd2f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/761d4038-2e12-4354-ba44-f50a79f7d209.crl X509v3 Authority Key Identifier: keyid:42:D5:52:37:D1:E1:55:24:91:88:61:70:62:AB:06:B5:00:42:83:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209.cer sbgp-ipAddrBlock: critical IPv4: 23.143.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:89:25:c0:1d:ae:4d:43:a5:ba:97:1a:66:19:73:36:e4:63: 80:2e:40:8c:48:8a:9f:22:4d:b5:64:64:ca:6a:96:f3:0c:cb: 23:8d:fa:00:ec:2c:0f:e9:8d:d6:8c:e6:a0:90:0e:32:d3:f4: 56:5b:72:0a:2a:25:98:71:00:fb:fc:e2:84:30:d5:da:29:4c: ae:3d:06:88:4e:9c:8f:26:47:74:64:be:7f:20:bf:aa:62:aa: 67:c0:02:10:ee:b3:52:3f:f9:24:cb:3e:df:43:12:37:40:d8: f7:5f:2d:48:5b:07:2f:f3:95:cb:be:f0:14:3a:95:88:11:f2: 07:f1:b7:b1:eb:32:3f:4d:6e:02:7a:01:d2:03:14:40:30:f7: e4:0a:6a:6c:cf:e7:57:d8:92:eb:86:78:f0:7d:ad:ed:66:d9: 1d:e0:cf:b6:26:9e:8a:59:13:57:7f:64:09:30:22:84:62:29: 4d:1d:ce:09:bc:56:df:a4:b2:6a:3e:43:b3:1b:5d:63:94:43: e0:c0:9e:b8:c0:4c:bc:b1:33:92:ee:4b:dc:22:d4:63:87:55: 57:c6:c3:69:e1:a1:60:ed:8b:b2:75:fd:48:9d:70:31:c5:b0: d3:a5:54:bc:eb:91:f9:de:9d:66:80:f5:b3:e3:cf:47:52:7e: ca:dc:d7:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr3tGE0iTKA/fi0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzYxZDQwMzgtMmUxMi00MzU0LWJhNDQtZjUwYTc5Zjdk MjA5MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk YTdjOGJkZDUtYWQzOC00Mjk2LTk1MDMtMWYwMmE4YjQwZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjeRpl+e848E134Jsw2Ofhf5eP9HN8W7P5mN ubqAmHvnV1r+dJafC+5rqleE2AjhIzbNd+SLov2subNteoDkTpkCc5U3B7oI0pR3 xdUM3FhRPGb9L4qtUabqJqpNrC3oIVyx+U6pBDt86bxCDa8c0m6HmFbH58ZWZ9Ps NU/4m8DZ0/TVHhtDGIS4ESp5hvhS8STLGzJn4STYjWBm1Zs43kcXx/5vpQkl9VkI hy4i3+F7Zb9UoHTuAeJtsFoztYjaRyKrlEFnp1U0qmBPYLGOo0Ec15MjtcNuWSdL ItFcRYYfXxgKg6tg43QAhSkr0uDWYqC3RusPwMA3rNo46qqeJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNapox60PS2aHvogaL0Z707EEqLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83NjFk NDAzOC0yZTEyLTQzNTQtYmE0NC1mNTBhNzlmN2QyMDkvZGNhZGFkZDktMjk2Mi0z MDU2LTk3NDQtMGU4Zjg2MGNkMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNzYxZDQwMzgtMmUxMi00MzU0LWJh NDQtZjUwYTc5ZjdkMjA5Lzc2MWQ0MDM4LTJlMTItNDM1NC1iYTQ0LWY1MGE3OWY3 ZDIwOS5jcmwwHwYDVR0jBBgwFoAUQtVSN9HhVSSRiGFwYqsGtQBCgy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83NjFkNDAzOC0yZTEyLTQzNTQtYmE0NC1mNTBh NzlmN2QyMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCJJcAdrk1DpbqXGmYZczbkY4AuQIxIip8iTbVkZMpqlvMMyyON+gDs LA/pjdaM5qCQDjLT9FZbcgoqJZhxAPv84oQw1dopTK49BohOnI8mR3Rkvn8gv6pi qmfAAhDus1I/+STLPt9DEjdA2PdfLUhbBy/zlcu+8BQ6lYgR8gfxt7HrMj9NbgJ6 AdIDFEAw9+QKamzP51fYkuuGePB9re1m2R3gz7YmnopZE1d/ZAkwIoRiKU0dzgm8 Vt+ksmo+Q7MbXWOUQ+DAnrjATLyxM5LuS9wi1GOHVVfGw2nhoWDti7J1/UidcDHF sNOlVLzrkfnenWaA9bPjz0dSfsrc15M= -----END CERTIFICATE-----Generated at Thu Mar 26 19:30:02 2026 by rpki-client