$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa File: d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa (raw, json) Hash identifier: EHwtbTVe4/S50wcLubajN244qJqSLx1Drd1BECSrVVw= Subject key identifier: F9:61:CF:9E:0B:96:71:4A:73:7E:C3:EA:B5:75:14:AA:50:7A:BD:00 Certificate issuer: /CN=3789343d-8560-48b0-9530-d2a1129fefe7 Certificate serial: 010D0C9F4328584D55BA47209967350EBF989400 Authority key identifier: 42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 401228 IP address blocks: 23.183.216.0/24 maxlen: 24 2602:f87c::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:47:20:99:67:35:0e:bf:98:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3789343d-8560-48b0-9530-d2a1129fefe7 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=9db5473b-c98c-41ff-9ab8-9b995d66fe05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:78:fa:92:18:2a:04:46:e2:34:37:18:6b:54: e0:2f:da:17:a2:7d:69:82:b6:da:b8:7e:d4:a6:d0: ce:af:66:1f:ff:c1:ec:3f:74:15:48:c1:26:1d:84: e4:56:4c:9d:57:1e:4c:98:b4:92:61:27:f1:52:ed: 21:a4:36:da:ec:78:f1:f9:e7:e8:70:ba:f0:46:cd: 5b:0b:51:a3:49:34:dd:3f:98:bd:ec:91:5b:84:34: 52:30:05:da:a5:f9:23:35:60:5f:95:20:8a:b0:b1: dc:b7:f9:e3:fb:52:bc:2d:ba:b8:b4:cf:d7:83:d9: 06:a2:8e:eb:45:23:10:e4:fa:25:42:ea:48:22:51: fc:cc:da:81:aa:5f:5b:8c:bb:97:a0:a5:29:f4:47: a4:a4:16:d8:46:cc:e2:4b:18:77:12:38:44:1f:55: 33:4a:83:83:7e:6b:48:ee:4f:ac:0e:df:84:cd:e9: fe:96:78:57:e7:e9:a9:92:2c:4c:a8:24:4a:98:a3: 3a:b2:ab:fa:4e:e3:b7:ed:56:88:dc:47:c3:ad:5e: e2:0f:bc:84:57:6c:80:6f:43:b8:79:bd:cc:53:c7: cc:da:f0:90:dc:0d:18:34:ca:b1:39:68:33:5f:8b: 65:0b:c9:c7:b4:f7:96:15:3e:a3:db:eb:21:84:7f: bd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:61:CF:9E:0B:96:71:4A:73:7E:C3:EA:B5:75:14:AA:50:7A:BD:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.crl X509v3 Authority Key Identifier: keyid:42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer sbgp-ipAddrBlock: critical IPv4: 23.183.216.0/24 IPv6: 2602:f87c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ab:03:50:a1:1c:c4:5a:02:ad:a8:98:ed:f6:06:da:18:8d: 67:7a:fa:4a:95:b6:32:12:ec:c2:f7:d2:1d:70:a6:03:27:ab: 89:e2:95:18:2c:b0:d9:cd:ec:49:af:31:28:66:6c:c1:a8:a4: 9b:25:13:6e:3a:31:d4:76:ed:52:e9:b7:3b:0c:4b:b2:73:2e: 2a:28:a3:9d:e2:cd:dd:29:e0:1d:99:5c:75:83:05:55:d3:ce: 05:15:e4:94:b4:13:01:92:41:ae:b3:bb:81:6e:17:59:53:1a: a4:a9:90:2c:e5:9c:8e:c3:3d:2f:28:03:8e:1d:e3:d8:c3:0f: 4c:a4:70:89:44:6f:8c:de:33:0d:d1:1c:02:a4:82:6c:71:fe: c6:97:20:81:08:35:48:3f:e3:a1:f8:47:fb:0f:a5:ab:f9:4d: ce:67:50:bb:c6:78:b0:c4:c0:98:cc:3c:d7:47:14:c9:bf:2e: 88:13:4a:56:aa:f9:b7:22:c3:4a:96:8c:0e:87:ff:2b:04:a0: 38:32:6a:6c:c3:51:e5:b1:79:fd:1d:3b:b0:09:20:ed:e7:50: 46:93:12:f8:26:be:8b:62:06:80:8d:3c:6a:c4:b8:93:9a:2b: 75:61:60:d2:3f:86:ce:86:54:6c:70:d7:c3:7d:b4:3a:00:bf: c2:bf:0b:a9 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE1VukcgmWc1Dr+YlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc4OTM0M2QtODU2MC00OGIwLTk1MzAtZDJhMTEyOWZl ZmU3MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk OWRiNTQ3M2ItYzk4Yy00MWZmLTlhYjgtOWI5OTVkNjZmZTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXj6khgqBEbiNDcYa1TgL9oXon1pgrbauH7U ptDOr2Yf/8HsP3QVSMEmHYTkVkydVx5MmLSSYSfxUu0hpDba7Hjx+efocLrwRs1b C1GjSTTdP5i97JFbhDRSMAXapfkjNWBflSCKsLHct/nj+1K8Lbq4tM/Xg9kGoo7r RSMQ5PolQupIIlH8zNqBql9bjLuXoKUp9EekpBbYRsziSxh3EjhEH1UzSoODfmtI 7k+sDt+Ezen+lnhX5+mpkixMqCRKmKM6sqv6TuO37VaI3EfDrV7iD7yEV2yAb0O4 eb3MU8fM2vCQ3A0YNMqxOWgzX4tlC8nHtPeWFT6j2+shhH+9nQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPlhz54LlnFKc37D6rV1FKpQer0AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zNzg5 MzQzZC04NTYwLTQ4YjAtOTUzMC1kMmExMTI5ZmVmZTcvZDYwM2JjNDgtMGU3Yy0z ZjljLWFjMzAtYWEyZGRkN2FmMmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzc4OTM0M2QtODU2MC00OGIwLTk1 MzAtZDJhMTEyOWZlZmU3LzM3ODkzNDNkLTg1NjAtNDhiMC05NTMwLWQyYTExMjlm ZWZlNy5jcmwwHwYDVR0jBBgwFoAUQv3n+tIDobxgBxZrF7G6QrnBmlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zNzg5MzQzZC04NTYwLTQ4YjAtOTUzMC1kMmEx MTI5ZmVmZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7fYMA4E AgACMAgDBgAmAvh8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhqwNQoRzEWgKtqJjt9gbaGI1nevpKlbYy EuzC99IdcKYDJ6uJ4pUYLLDZzexJrzEoZmzBqKSbJRNuOjHUdu1S6bc7DEuycy4q KKOd4s3dKeAdmVx1gwVV084FFeSUtBMBkkGus7uBbhdZUxqkqZAs5ZyOwz0vKAOO HePYww9MpHCJRG+M3jMN0RwCpIJscf7GlyCBCDVIP+Oh+Ef7D6Wr+U3OZ1C7xniw xMCYzDzXRxTJvy6IE0pWqvm3IsNKlowOh/8rBKA4Mmpsw1HlsXn9HTuwCSDt51BG kxL4Jr6LYgaAjTxqxLiTmit1YWDSP4bOhlRscNfDfbQ6AL/Cvwup -----END CERTIFICATE-----Generated at Fri Apr 17 21:24:00 2026 by rpki-client