$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/24658353-d279-3e25-8ea7-7775ea5a1004.roa File: 24658353-d279-3e25-8ea7-7775ea5a1004.roa (raw, json) Hash identifier: fEtnUEg/6eyeyji5WOYx9xS8nA7aCIAwLKz0MZr6YyA= Subject key identifier: 23:89:68:E3:F1:DF:66:EA:88:78:65:7D:22:CB:8F:34:5A:5B:DD:0A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D5E1A5D460F0AA1D8CC0DFE00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/24658353-d279-3e25-8ea7-7775ea5a1004.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 30036 IP address blocks: 63.142.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:5d:46:0f:0a:a1:d8:cc:0d:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=dc4f627a-d80f-4c09-9b94-5524da492322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ff:a0:06:56:1b:dd:ff:88:b6:b5:76:e6:5b: bf:91:d9:85:e9:a3:69:6b:15:1f:6f:49:21:5a:95: 45:a0:48:b3:fe:01:08:de:0b:01:ad:47:79:1a:e5: c8:6d:a9:ae:4f:9d:5f:d9:0d:87:34:f1:1d:86:cf: 2a:42:3f:61:6a:7e:fc:98:32:61:62:78:cd:1f:58: 9b:58:4e:3e:c4:3a:f2:f3:e0:f4:21:6c:2a:55:a0: 40:61:cc:e2:8f:ff:eb:57:45:ad:73:3e:d4:75:e9: dc:a4:7e:8f:fc:44:a1:af:98:a0:ed:f5:d5:ad:5d: 1c:88:5d:e8:de:81:c6:0a:be:8e:80:79:c0:92:f8: f0:24:65:ac:b3:c9:cd:19:19:6c:c3:82:1e:9a:e6: f5:9a:b3:b6:ad:cd:c5:bf:0a:b2:15:58:e7:b7:83: c3:97:43:67:9f:65:f6:e1:b5:84:cc:a4:8c:35:35: a2:4a:28:5f:7d:e7:33:61:41:d7:2e:1b:ed:f0:b3: 8e:1c:32:0d:e0:dc:9c:8a:3a:bb:fd:8c:02:61:99: 47:7b:ba:a4:1c:74:56:96:c0:a4:db:07:77:13:0a: c8:3e:07:9a:82:4a:37:81:74:bd:84:12:6e:04:a1: b8:44:3a:49:14:cf:98:66:3e:fe:aa:24:58:5f:dc: 0a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:89:68:E3:F1:DF:66:EA:88:78:65:7D:22:CB:8F:34:5A:5B:DD:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/24658353-d279-3e25-8ea7-7775ea5a1004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 63.142.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:9f:e9:69:06:eb:31:22:e5:8d:58:a3:96:5f:92:92:32:ae: 03:83:fb:56:ce:40:d6:92:5f:cb:25:f4:d5:e3:43:4f:aa:d6: 46:94:43:a3:2d:0e:39:ab:c1:90:0c:26:75:0c:bf:3d:4d:6b: ca:83:27:13:8b:e9:50:2c:4d:e1:95:25:a0:ca:11:22:3f:44: 53:72:aa:06:0f:b9:b8:57:95:48:83:75:2b:a5:35:b1:34:fe: e1:99:b7:96:ca:94:d5:37:21:21:11:47:0f:29:70:80:cd:83: d6:33:63:7b:e9:9e:22:c8:95:8e:50:bd:f5:8c:41:2d:ee:81: 70:4c:1d:05:99:c3:f2:ff:2b:95:87:82:44:4c:03:3c:ec:5a: 78:2a:99:30:7a:ef:db:2f:64:44:4c:bb:64:0b:82:43:e6:b0: 2b:50:e5:53:34:d4:aa:b5:d9:87:42:f9:37:43:51:2d:62:01: a0:82:e6:a9:f7:08:bc:9e:9d:1d:20:c2:dc:bd:cc:48:44:32: e6:84:0d:e2:2f:96:d0:21:17:06:53:8f:3a:4d:88:60:86:16: 8f:7e:b9:6c:c2:ea:8b:03:c0:5a:d7:40:1f:41:6c:6f:4b:7e: 83:ac:93:40:fa:df:34:4b:70:6f:6d:73:76:e0:28:49:0a:22: 07:2d:9b:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGl1GDwqh2MwN/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZGM0ZjYyN2EtZDgwZi00YzA5LTliOTQtNTUyNGRhNDkyMzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv+gBlYb3f+ItrV25lu/kdmF6aNpaxUfb0kh WpVFoEiz/gEI3gsBrUd5GuXIbamuT51f2Q2HNPEdhs8qQj9han78mDJhYnjNH1ib WE4+xDry8+D0IWwqVaBAYczij//rV0Wtcz7UdencpH6P/EShr5ig7fXVrV0ciF3o 3oHGCr6OgHnAkvjwJGWss8nNGRlsw4Iemub1mrO2rc3FvwqyFVjnt4PDl0Nnn2X2 4bWEzKSMNTWiSihffeczYUHXLhvt8LOOHDIN4Nycijq7/YwCYZlHe7qkHHRWlsCk 2wd3EwrIPgeagko3gXS9hBJuBKG4RDpJFM+YZj7+qiRYX9wKVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOJaOPx32bqiHhlfSLLjzRaW90KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjQ2NTgzNTMtZDI3OS0z ZTI1LThlYTctNzc3NWVhNWExMDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP44mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+f6WkG6zEi5Y1Yo5ZfkpIyrgOD+1bOQNaSX8sl9NXjQ0+q1kaUQ6Mt DjmrwZAMJnUMvz1Na8qDJxOL6VAsTeGVJaDKESI/RFNyqgYPubhXlUiDdSulNbE0 /uGZt5bKlNU3ISERRw8pcIDNg9YzY3vpniLIlY5QvfWMQS3ugXBMHQWZw/L/K5WH gkRMAzzsWngqmTB679svZERMu2QLgkPmsCtQ5VM01Kq12YdC+TdDUS1iAaCC5qn3 CLyenR0gwty9zEhEMuaEDeIvltAhFwZTjzpNiGCGFo9+uWzC6osDwFrXQB9BbG9L foOsk0D63zRLcG9tc3bgKEkKIgctm0s= -----END CERTIFICATE-----Generated at Fri Apr 17 15:59:35 2026 by rpki-client