$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/0545c8d8-2be5-3872-8fa1-55668d1f1902.roa File: 0545c8d8-2be5-3872-8fa1-55668d1f1902.roa (raw, json) Hash identifier: MIcWhtqt+DpN2Y4zedLtOIs4tu+ZrHSUivoCQoynw7U= Subject key identifier: 6D:53:1C:CD:C4:85:3D:DB:11:C4:B1:A6:04:EC:3F:1F:23:DC:CB:55 Certificate issuer: /CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7 Certificate serial: 010D0C9F4328584D55BA4A873DA185AF7C0D0A00 Authority key identifier: 74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/0545c8d8-2be5-3872-8fa1-55668d1f1902.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 40205 IP address blocks: 23.189.216.0/24 maxlen: 24 2620:cd:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:4a:87:3d:a1:85:af:7c:0d:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=2b25a515-6db3-4ec0-aa2f-5e1bfca7b501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:56:35:37:08:31:d5:45:8a:1a:e5:f6:8c:92: e9:2b:de:68:82:97:b4:c2:b5:62:ee:88:3d:68:8e: 12:3c:6d:08:ed:ad:d3:8b:0a:6d:f8:ec:77:6c:b5: ae:93:b2:32:b6:95:cf:5a:bd:66:c1:da:20:40:8a: c7:18:5a:88:b2:25:38:b6:7e:a3:f1:2e:28:6c:e6: e6:42:f5:6e:1e:0f:2e:d8:34:15:c8:51:48:ee:1e: 17:ce:f2:80:73:a1:4a:ae:92:0a:cb:bc:fc:e5:a1: 36:8f:e3:8d:b5:2a:05:cc:6a:c5:9d:8d:d2:d3:01: bf:44:7a:d9:05:ad:55:a7:3b:3d:5c:d8:f8:9a:a2: 3c:f8:e9:14:31:88:07:07:76:f1:27:b8:93:c0:b9: bb:76:9e:e6:ea:b1:bb:69:94:3d:40:f7:80:33:d4: a2:13:14:27:48:3e:a6:92:1a:4a:7d:8f:93:f2:c1: 22:e6:e6:0d:63:c2:eb:f7:32:0f:1b:b5:b4:87:6d: b7:b5:e5:ba:50:94:5e:d1:08:7f:84:09:ae:f6:b1: a2:e2:20:b0:b2:b3:79:91:16:40:68:c1:0b:78:9c: c0:38:8e:bd:59:46:d3:20:43:01:ef:ad:50:50:d1: 9c:62:ac:66:52:e3:c0:02:42:76:4c:b7:1a:c4:8b: 94:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:53:1C:CD:C4:85:3D:DB:11:C4:B1:A6:04:EC:3F:1F:23:DC:CB:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/0545c8d8-2be5-3872-8fa1-55668d1f1902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl X509v3 Authority Key Identifier: keyid:74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer sbgp-ipAddrBlock: critical IPv4: 23.189.216.0/24 IPv6: 2620:cd:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:2a:a2:67:a6:07:41:17:1c:ac:ed:1a:a5:ba:40:24:1b:2d: 62:4b:7d:a1:bb:4b:89:83:43:78:6b:64:fe:df:45:31:ec:95: d7:4a:8c:4a:46:ee:04:4f:30:b1:de:1d:20:b3:13:a2:ed:52: df:21:07:17:3b:79:17:ae:f2:b0:20:4b:96:5b:94:91:2b:7b: 7d:83:94:10:48:93:5f:98:74:eb:b8:85:b5:d6:26:60:d4:ac: ce:0a:83:c0:57:87:9b:1a:de:26:b9:8a:86:c5:d9:22:21:89: 57:bc:9e:26:29:23:ee:be:fe:13:2d:4e:89:42:0a:54:3c:88: bf:91:8c:d2:1b:29:a7:92:29:90:e4:c6:01:66:20:14:e3:84: 94:a1:6f:09:57:48:2a:2e:ba:41:bc:49:ff:23:80:41:de:d1: 08:e1:ff:f4:30:a6:84:4d:ff:b1:f8:01:da:29:19:d7:2b:f6: bc:88:8f:1b:fa:2a:87:68:80:ce:5e:51:fe:07:14:cf:6f:40: 04:54:5d:5f:7c:49:26:54:ac:dd:59:ad:3b:68:0d:6c:ea:fa: 2c:b7:de:ae:ee:15:74:d9:c7:2f:c1:de:c0:1c:71:41:54:d9: e7:3e:35:2b:d3:81:eb:01:bd:ed:5d:1d:99:3d:b4:39:81:44: bf:63:df:df -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1VukqHPaGFr3wNCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmOWU1NmEtNWNjMy00N2EyLWE5NmQtMzY1MGM0ZGU0 NWE3MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MmIyNWE1MTUtNmRiMy00ZWMwLWFhMmYtNWUxYmZjYTdiNTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1Y1Nwgx1UWKGuX2jJLpK95ogpe0wrVi7og9 aI4SPG0I7a3Tiwpt+Ox3bLWuk7IytpXPWr1mwdogQIrHGFqIsiU4tn6j8S4obObm QvVuHg8u2DQVyFFI7h4XzvKAc6FKrpIKy7z85aE2j+ONtSoFzGrFnY3S0wG/RHrZ Ba1Vpzs9XNj4mqI8+OkUMYgHB3bxJ7iTwLm7dp7m6rG7aZQ9QPeAM9SiExQnSD6m khpKfY+T8sEi5uYNY8Lr9zIPG7W0h223teW6UJRe0Qh/hAmu9rGi4iCwsrN5kRZA aMELeJzAOI69WUbTIEMB761QUNGcYqxmUuPAAkJ2TLcaxIuUxQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFG1THM3EhT3bEcSxpgTsPx8j3MtVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Y5 ZTU2YS01Y2MzLTQ3YTItYTk2ZC0zNjUwYzRkZTQ1YTcvMDU0NWM4ZDgtMmJlNS0z ODcyLThmYTEtNTU2NjhkMWYxOTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWNmOWU1NmEtNWNjMy00N2EyLWE5 NmQtMzY1MGM0ZGU0NWE3LzFjZjllNTZhLTVjYzMtNDdhMi1hOTZkLTM2NTBjNGRl NDVhNy5jcmwwHwYDVR0jBBgwFoAUdCIf5u1DcqxfhOgMWFa4SidWtfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Y5ZTU2YS01Y2MzLTQ3YTItYTk2ZC0zNjUw YzRkZTQ1YTcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF73YMA8E AgACMAkDBwAmIADNoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKCqiZ6YHQRccrO0apbpAJBstYkt9obtL iYNDeGtk/t9FMeyV10qMSkbuBE8wsd4dILMTou1S3yEHFzt5F67ysCBLlluUkSt7 fYOUEEiTX5h067iFtdYmYNSszgqDwFeHmxreJrmKhsXZIiGJV7yeJikj7r7+Ey1O iUIKVDyIv5GM0hspp5IpkOTGAWYgFOOElKFvCVdIKi66QbxJ/yOAQd7RCOH/9DCm hE3/sfgB2ikZ1yv2vIiPG/oqh2iAzl5R/gcUz29ABFRdX3xJJlSs3VmtO2gNbOr6 LLferu4VdNnHL8HewBxxQVTZ5z41K9OB6wG97V0dmT20OYFEv2Pf3w== -----END CERTIFICATE-----Generated at Fri Apr 17 12:55:01 2026 by rpki-client