$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/4fa2c668-4824-3485-a970-ba019a4f4f2f.roa File: 4fa2c668-4824-3485-a970-ba019a4f4f2f.roa (raw, json) Hash identifier: 8xQuD4cskK+PM8IK7+8PMS/qF48wWMGG8pKIPLFqA5k= Subject key identifier: 3C:64:FD:84:89:2B:31:F3:BF:25:EC:3D:93:FB:F8:72:10:7C:AA:C2 Certificate issuer: /CN=e1c66f08-5c7f-40e3-8548-bff01ed700d5 Certificate serial: 010D0C9F4328584D300AB19020059C8AA94DB900 Authority key identifier: 2B:01:3A:6A:59:99:92:D2:4B:EF:36:05:2F:65:6B:EC:D2:D7:1E:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/4fa2c668-4824-3485-a970-ba019a4f4f2f.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 3257 IP address blocks: 23.140.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/e1c66f08-5c7f-40e3-8548-bff01ed700d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/e1c66f08-5c7f-40e3-8548-bff01ed700d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:b1:90:20:05:9c:8a:a9:4d:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1c66f08-5c7f-40e3-8548-bff01ed700d5 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=d9596e8b-1d6c-48c2-8fc7-cfd0a0d401d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:20:11:f8:0c:cc:82:e8:65:f4:e4:05:2c: 72:00:f8:0d:10:c7:25:72:50:ff:f9:b3:d8:9b:da: e3:57:53:9f:cd:d3:bf:de:e6:56:1a:7b:ed:2f:b7: 3a:8d:c2:78:c5:2d:7e:b3:cf:f2:a2:c3:b0:9b:79: 4d:b6:0a:89:e9:f4:81:cd:f2:e0:53:4c:ed:06:59: 8a:2a:5e:c8:2b:ba:f6:2b:0e:d1:87:81:06:1d:b7: 5b:20:57:83:07:a0:36:d8:df:a2:30:52:85:39:02: 84:e8:8f:9f:76:05:c4:c1:8d:9c:97:71:c7:d1:e7: 08:a5:dd:9e:bd:d0:7d:fe:3f:7f:b0:f3:ca:6c:1a: 16:37:bf:87:69:39:75:ce:8f:ad:8b:13:e1:05:68: 53:82:4d:7f:69:a7:6e:52:e0:af:42:9a:fe:1d:7c: 8c:ac:ba:bc:27:74:8d:c8:90:56:e1:c4:d8:b6:e0: df:08:5b:01:12:31:a2:a2:37:06:23:a8:df:57:f9: 85:9b:65:ca:a2:8f:98:98:aa:93:7b:1f:69:ff:00: 25:3a:14:7c:97:ad:b9:38:1e:13:81:e3:98:82:57: e6:00:b3:c2:1b:25:2c:fb:ec:28:5d:ab:ed:ed:44: bb:95:36:05:21:ce:db:10:bc:7c:3d:6e:d3:0d:82: df:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:64:FD:84:89:2B:31:F3:BF:25:EC:3D:93:FB:F8:72:10:7C:AA:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/4fa2c668-4824-3485-a970-ba019a4f4f2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/e1c66f08-5c7f-40e3-8548-bff01ed700d5.crl X509v3 Authority Key Identifier: keyid:2B:01:3A:6A:59:99:92:D2:4B:EF:36:05:2F:65:6B:EC:D2:D7:1E:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5.cer sbgp-ipAddrBlock: critical IPv4: 23.140.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:95:70:ff:3d:5b:31:74:55:37:55:27:1c:53:91:ae:f6:07: 4b:76:1c:88:dc:bc:5d:1c:21:6e:cb:b0:de:0b:42:55:99:af: 24:18:ed:7b:ed:6a:4a:71:cb:b8:3d:e4:70:3e:72:22:df:77: b2:90:6e:b2:4d:98:aa:30:45:48:85:16:92:64:a4:9f:5c:83: d0:4a:de:02:47:d7:fb:f6:3d:02:2e:22:a3:bc:dd:67:9e:78: e9:b3:a2:bf:d9:fa:b2:e0:70:fb:01:9a:1c:3a:e2:3e:20:2c: 93:a2:4d:f6:ae:07:51:82:c7:3c:8d:6f:f6:ff:75:dc:29:84: f9:ed:b9:8e:c0:f0:7e:b2:92:b1:7d:70:f3:e9:ad:b3:d8:8d: 59:34:6d:40:01:cf:bf:79:2a:f0:3d:1b:0a:0b:78:bb:f8:2c: 46:c4:c0:c5:ec:3a:8a:e5:fa:06:bc:39:40:9a:1e:45:6b:08: 26:a2:e1:02:43:e0:33:2d:fb:f2:37:83:4a:8a:df:85:8e:9c: 25:f5:a9:cc:1c:0e:03:15:40:7e:f5:8e:9c:0b:2b:d3:95:b5: 5c:4f:57:b4:96:5a:0a:ab:40:5d:68:64:da:3b:7a:62:b1:2d: 86:9a:14:3b:8a:f8:c4:a9:b0:73:e0:b1:a2:8e:f6:dd:a5:89: f2:bb:c9:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCrGQIAWciqlNuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTFjNjZmMDgtNWM3Zi00MGUzLTg1NDgtYmZmMDFlZDcw MGQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZDk1OTZlOGItMWQ2Yy00OGMyLThmYzctY2ZkMGEwZDQwMWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM8gEfgMzILoZfTkBSxyAPgNEMclclD/+bPY m9rjV1OfzdO/3uZWGnvtL7c6jcJ4xS1+s8/yosOwm3lNtgqJ6fSBzfLgU0ztBlmK Kl7IK7r2Kw7Rh4EGHbdbIFeDB6A22N+iMFKFOQKE6I+fdgXEwY2cl3HH0ecIpd2e vdB9/j9/sPPKbBoWN7+HaTl1zo+tixPhBWhTgk1/aaduUuCvQpr+HXyMrLq8J3SN yJBW4cTYtuDfCFsBEjGiojcGI6jfV/mFm2XKoo+YmKqTex9p/wAlOhR8l625OB4T geOYglfmALPCGyUs++woXavt7US7lTYFIc7bELx8PW7TDYLfFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxk/YSJKzHzvyXsPZP7+HIQfKrCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMWM2 NmYwOC01YzdmLTQwZTMtODU0OC1iZmYwMWVkNzAwZDUvNGZhMmM2NjgtNDgyNC0z NDg1LWE5NzAtYmEwMTlhNGY0ZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTFjNjZmMDgtNWM3Zi00MGUzLTg1 NDgtYmZmMDFlZDcwMGQ1L2UxYzY2ZjA4LTVjN2YtNDBlMy04NTQ4LWJmZjAxZWQ3 MDBkNS5jcmwwHwYDVR0jBBgwFoAUKwE6almZktJL7zYFL2Vr7NLXHvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lMWM2NmYwOC01YzdmLTQwZTMtODU0OC1iZmYw MWVkNzAwZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4zMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWVcP89WzF0VTdVJxxTka72B0t2HIjcvF0cIW7LsN4LQlWZryQY7Xvt akpxy7g95HA+ciLfd7KQbrJNmKowRUiFFpJkpJ9cg9BK3gJH1/v2PQIuIqO83Wee eOmzor/Z+rLgcPsBmhw64j4gLJOiTfauB1GCxzyNb/b/ddwphPntuY7A8H6ykrF9 cPPprbPYjVk0bUABz795KvA9GwoLeLv4LEbEwMXsOorl+ga8OUCaHkVrCCai4QJD 4DMt+/I3g0qK34WOnCX1qcwcDgMVQH71jpwLK9OVtVxPV7SWWgqrQF1oZNo7emKx LYaaFDuK+MSpsHPgsaKO9t2lifK7yao= -----END CERTIFICATE-----Generated at Thu Mar 26 13:55:51 2026 by rpki-client