$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/802bfd1a-4325-38af-be6f-64950728b155.roa File: 802bfd1a-4325-38af-be6f-64950728b155.roa (raw, json) Hash identifier: C5a1lL/enA7xzXNwpR/uosTdCTbRB5fdRRMSu3YRbis= Subject key identifier: 19:8C:44:A5:A0:96:76:38:00:1C:9B:10:89:29:8E:5B:34:7D:8E:51 Certificate issuer: /CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b Certificate serial: 010D0C9F4328584D5243599BA53943205E5FF580 Authority key identifier: 3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/802bfd1a-4325-38af-be6f-64950728b155.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 13737 IP address blocks: 23.189.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:59:9b:a5:39:43:20:5e:5f:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=d22a567e-3a1d-4fe3-987a-3a8f6e6f3565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f0:7d:50:eb:b8:ad:e5:57:d7:df:cf:9d:d9: fe:e1:13:61:e5:3c:c2:18:c4:d8:75:f7:e7:0f:b2: ea:c6:9a:ef:dc:49:c3:35:ab:aa:cb:83:7d:5d:8b: 5c:32:91:b0:b6:56:e9:b5:b1:b3:e4:22:46:4c:69: 02:d0:4b:06:45:f7:f9:3f:ee:f3:b3:ce:34:d2:ad: 2c:ea:a9:c5:c6:72:0c:a4:cb:6e:5b:06:fe:b0:30: c3:75:4b:96:ab:02:60:4a:d2:e1:e6:c2:03:e9:71: e6:2a:b3:39:7b:10:b9:1b:ad:63:67:8c:c5:d1:3f: b0:e3:db:50:67:ed:cb:f6:91:2e:ac:ee:77:9d:92: 9a:65:f6:4d:39:84:4d:81:b1:72:d5:02:44:46:41: f0:47:ad:ed:00:8b:ae:aa:1e:d9:1d:33:d4:05:c2: 39:b4:68:07:77:d0:a2:05:de:a3:75:ea:d7:ed:c0: 50:19:9b:86:a8:74:79:1d:34:b3:a8:9c:ae:9d:d8: 72:25:f5:87:16:d1:e1:f1:c5:7d:c3:6f:d4:03:23: 94:0c:19:b7:58:ce:56:12:a9:97:3b:b5:3c:1b:f2: 44:e2:cb:71:fe:4f:92:80:84:85:03:e6:d7:b7:91: 07:ff:c2:65:68:58:33:7c:8c:ff:ea:7a:ef:14:ad: 07:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8C:44:A5:A0:96:76:38:00:1C:9B:10:89:29:8E:5B:34:7D:8E:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/802bfd1a-4325-38af-be6f-64950728b155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl X509v3 Authority Key Identifier: keyid:3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer sbgp-ipAddrBlock: critical IPv4: 23.189.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a7:af:57:8f:f4:e8:72:fa:f2:bb:c1:a7:3b:59:ff:03:79: 8a:03:96:37:41:95:3d:1d:3d:a2:9d:1b:b5:ba:18:73:2e:59: 26:20:ae:06:e6:28:2a:ef:a4:28:1e:33:2f:58:58:39:00:ff: 84:6d:e3:5d:33:1f:ca:20:ef:54:08:01:ad:e7:be:91:de:76: 05:83:9f:13:12:8a:bb:23:e2:89:41:8f:50:29:e5:e6:35:fc: 90:83:87:a9:14:aa:9a:28:1a:f6:59:37:b1:7d:c5:3f:8a:5d: 93:8d:a4:e2:9b:df:42:90:e8:32:52:31:7c:b5:46:c4:71:28: aa:fb:3c:15:bd:ba:61:c0:33:af:92:29:b0:0a:de:c8:85:ac: 4e:14:f4:97:13:54:e5:80:9d:9b:09:3b:8f:55:68:44:8e:b0: 8a:33:69:5d:08:d1:70:b6:72:ef:22:9b:b6:a4:03:ba:b3:be: 14:20:60:2f:2c:6c:96:bd:36:e1:f7:71:82:29:0a:b3:7a:f9: db:46:12:ed:11:c5:74:82:3a:ba:01:93:90:74:92:d0:a4:d3: 95:4c:9d:77:95:de:77:7d:4d:b2:77:d7:54:93:39:09:24:2b: 4a:83:af:ca:3c:54:81:de:b3:5c:56:98:6a:31:53:40:8b:48: c7:ce:c1:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1mbpTlDIF5f9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWY0ZGMyYWItMWU2ZS00MTQzLTk1ZjUtZDYzZGIwYTc2 MjRiMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZDIyYTU2N2UtM2ExZC00ZmUzLTk4N2EtM2E4ZjZlNmYzNTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPB9UOu4reVX19/Pndn+4RNh5TzCGMTYdffn D7Lqxprv3EnDNauqy4N9XYtcMpGwtlbptbGz5CJGTGkC0EsGRff5P+7zs8400q0s 6qnFxnIMpMtuWwb+sDDDdUuWqwJgStLh5sID6XHmKrM5exC5G61jZ4zF0T+w49tQ Z+3L9pEurO53nZKaZfZNOYRNgbFy1QJERkHwR63tAIuuqh7ZHTPUBcI5tGgHd9Ci Bd6jderX7cBQGZuGqHR5HTSzqJyundhyJfWHFtHh8cV9w2/UAyOUDBm3WM5WEqmX O7U8G/JE4stx/k+SgISFA+bXt5EH/8JlaFgzfIz/6nrvFK0HOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmMRKWglnY4ABybEIkpjls0fY5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZjRk YzJhYi0xZTZlLTQxNDMtOTVmNS1kNjNkYjBhNzYyNGIvODAyYmZkMWEtNDMyNS0z OGFmLWJlNmYtNjQ5NTA3MjhiMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWY0ZGMyYWItMWU2ZS00MTQzLTk1 ZjUtZDYzZGIwYTc2MjRiLzVmNGRjMmFiLTFlNmUtNDE0My05NWY1LWQ2M2RiMGE3 NjI0Yi5jcmwwHwYDVR0jBBgwFoAUP2kd3H3TxnZMU00rUA9X6WR08p4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81ZjRkYzJhYi0xZTZlLTQxNDMtOTVmNS1kNjNk YjBhNzYyNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF72oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6nr1eP9Ohy+vK7wac7Wf8DeYoDljdBlT0dPaKdG7W6GHMuWSYgrgbm KCrvpCgeMy9YWDkA/4Rt410zH8og71QIAa3nvpHedgWDnxMSirsj4olBj1Ap5eY1 /JCDh6kUqpooGvZZN7F9xT+KXZONpOKb30KQ6DJSMXy1RsRxKKr7PBW9umHAM6+S KbAK3siFrE4U9JcTVOWAnZsJO49VaESOsIozaV0I0XC2cu8im7akA7qzvhQgYC8s bJa9NuH3cYIpCrN6+dtGEu0RxXSCOroBk5B0ktCk05VMnXeV3nd9TbJ311STOQkk K0qDr8o8VIHes1xWmGoxU0CLSMfOwcQ= -----END CERTIFICATE-----Generated at Fri Apr 17 16:22:00 2026 by rpki-client