$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/db1c5ced-133b-3fa2-85a3-ec9c6ede35d1.roa File: db1c5ced-133b-3fa2-85a3-ec9c6ede35d1.roa (raw, json) Hash identifier: xnkXbf491j0gUWkeIG8/H2/R1euqJ7S/rxdDm3szhFw= Subject key identifier: BF:ED:2E:61:1C:83:11:F9:69:7F:34:9B:33:9A:8C:C4:76:2E:66:35 Certificate issuer: /CN=b25db122-9955-42d2-8413-be2d15a44347 Certificate serial: 010D0C9F4328584D3F64D94AED8471B15840CA00 Authority key identifier: 6E:4C:48:6C:3B:E6:A0:EC:D5:78:BA:4A:C2:97:8B:D8:17:90:AF:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/db1c5ced-133b-3fa2-85a3-ec9c6ede35d1.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 401859 IP address blocks: 23.142.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/b25db122-9955-42d2-8413-be2d15a44347.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/b25db122-9955-42d2-8413-be2d15a44347.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d9:4a:ed:84:71:b1:58:40:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b25db122-9955-42d2-8413-be2d15a44347 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=20dde8b5-39a1-44e0-bad5-48cf3109c89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:11:96:06:88:4d:8d:ba:24:09:6b:b0:76:c5: b6:1c:66:5f:5d:2b:43:eb:04:de:92:89:0c:82:b2: 47:16:fb:d6:9a:d1:a0:b2:24:97:6a:25:76:da:2d: 3e:4c:57:ee:21:6c:85:b5:40:3b:79:5c:93:3f:0e: 4d:5d:3c:84:da:75:ba:45:dc:b5:09:ce:ce:c9:13: d1:83:13:7a:ed:a7:b6:3c:70:1a:9f:79:7e:33:3f: ad:d2:03:47:9c:12:53:b5:ea:d1:d6:a2:7b:9b:90: 6d:06:1e:63:d4:95:79:c8:43:a7:4f:3b:22:27:15: eb:ea:23:37:c4:e7:af:1b:e3:9c:28:02:b2:f6:2d: a0:14:37:92:bd:ce:50:74:ce:4e:58:e7:94:86:41: dd:a7:e7:79:d7:9f:fb:84:7a:9f:9f:05:dd:54:12: e9:cf:fa:64:7e:14:fe:6e:91:62:2b:a3:19:82:d9: 1c:b3:5b:6a:74:8a:24:1f:4b:61:07:73:50:fe:48: ca:cc:48:2b:1e:4c:eb:c3:9a:65:94:77:1f:b0:ef: 5b:c9:1c:bc:fc:cc:1c:99:fd:53:bc:d6:bf:10:46: b2:0b:25:7f:24:e3:88:92:5e:a9:76:a5:89:b8:db: 91:c9:9a:87:ae:e1:f6:8b:99:2d:65:fc:94:c9:f8: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:ED:2E:61:1C:83:11:F9:69:7F:34:9B:33:9A:8C:C4:76:2E:66:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/db1c5ced-133b-3fa2-85a3-ec9c6ede35d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/b25db122-9955-42d2-8413-be2d15a44347.crl X509v3 Authority Key Identifier: keyid:6E:4C:48:6C:3B:E6:A0:EC:D5:78:BA:4A:C2:97:8B:D8:17:90:AF:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347.cer sbgp-ipAddrBlock: critical IPv4: 23.142.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b1:53:12:af:8e:8a:a4:ab:c9:f1:c8:86:3d:02:2d:1c:93: fa:95:eb:3e:7f:e3:4e:7c:67:da:25:84:d9:a7:a0:2a:75:68: b2:48:f6:a1:ab:06:52:40:11:59:25:e6:18:dd:4f:a8:a0:6f: 23:22:93:8b:02:a9:d4:ed:91:1f:ea:6f:e0:de:df:a6:88:fa: f2:66:88:c3:fd:00:f2:01:bd:56:01:e9:15:f0:c9:0f:a2:fc: f2:56:56:3d:39:54:16:05:bb:09:dc:85:7c:c4:4e:59:a5:ca: 59:3d:42:d7:ff:bb:28:dd:86:37:a5:d5:32:86:ac:7b:3a:00: 44:33:88:90:68:3b:fc:d0:ab:52:02:15:4c:20:52:09:06:c7: fd:75:93:4d:42:29:35:f8:a5:51:85:82:c7:f7:82:8e:d3:97: d4:d9:a5:b9:c2:e8:14:8f:70:40:00:98:cf:24:6d:4f:17:2b: b4:49:62:65:5a:89:6f:d7:60:ce:1d:87:a0:99:4c:78:de:5d: 48:27:ac:b2:f6:28:a4:6f:e3:ab:3f:40:97:b1:3b:bc:1c:57: 2f:4e:59:fd:24:f5:e5:64:84:51:f4:f9:dd:6e:9d:42:2d:e7: c0:4a:71:23:fd:b4:a6:3e:84:92:c3:56:b9:bb:db:04:45:28: 07:fc:44:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNlK7YRxsVhAygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI1ZGIxMjItOTk1NS00MmQyLTg0MTMtYmUyZDE1YTQ0 MzQ3MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk MjBkZGU4YjUtMzlhMS00NGUwLWJhZDUtNDhjZjMxMDljODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBGWBohNjbokCWuwdsW2HGZfXStD6wTekokM grJHFvvWmtGgsiSXaiV22i0+TFfuIWyFtUA7eVyTPw5NXTyE2nW6Rdy1Cc7OyRPR gxN67ae2PHAan3l+Mz+t0gNHnBJTterR1qJ7m5BtBh5j1JV5yEOnTzsiJxXr6iM3 xOevG+OcKAKy9i2gFDeSvc5QdM5OWOeUhkHdp+d515/7hHqfnwXdVBLpz/pkfhT+ bpFiK6MZgtkcs1tqdIokH0thB3NQ/kjKzEgrHkzrw5pllHcfsO9byRy8/Mwcmf1T vNa/EEayCyV/JOOIkl6pdqWJuNuRyZqHruH2i5ktZfyUyfiNswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/tLmEcgxH5aX80mzOajMR2LmY1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iMjVk YjEyMi05OTU1LTQyZDItODQxMy1iZTJkMTVhNDQzNDcvZGIxYzVjZWQtMTMzYi0z ZmEyLTg1YTMtZWM5YzZlZGUzNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjI1ZGIxMjItOTk1NS00MmQyLTg0 MTMtYmUyZDE1YTQ0MzQ3L2IyNWRiMTIyLTk5NTUtNDJkMi04NDEzLWJlMmQxNWE0 NDM0Ny5jcmwwHwYDVR0jBBgwFoAUbkxIbDvmoOzVeLpKwpeL2BeQr+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iMjVkYjEyMi05OTU1LTQyZDItODQxMy1iZTJk MTVhNDQzNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF46cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKxUxKvjoqkq8nxyIY9Ai0ck/qV6z5/4058Z9olhNmnoCp1aLJI9qGr BlJAEVkl5hjdT6igbyMik4sCqdTtkR/qb+De36aI+vJmiMP9APIBvVYB6RXwyQ+i /PJWVj05VBYFuwnchXzETlmlylk9Qtf/uyjdhjel1TKGrHs6AEQziJBoO/zQq1IC FUwgUgkGx/11k01CKTX4pVGFgsf3go7Tl9TZpbnC6BSPcEAAmM8kbU8XK7RJYmVa iW/XYM4dh6CZTHjeXUgnrLL2KKRv46s/QJexO7wcVy9OWf0k9eVkhFH0+d1unUIt 58BKcSP9tKY+hJLDVrm72wRFKAf8RGU= -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:40 2026 by rpki-client