$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/96843a9b-b93d-31fd-b277-b52148f2ca4f.roa File: 96843a9b-b93d-31fd-b277-b52148f2ca4f.roa (raw, json) Hash identifier: glAXmFiBufLzBT8K5HWDQkkw3H9UZgpzWWspaTs7/cY= Subject key identifier: 79:12:8F:30:F7:FC:CC:55:57:2E:78:F3:25:30:69:83:85:36:FA:DE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D571FABF56B377FED48F02580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/96843a9b-b93d-31fd-b277-b52148f2ca4f.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 396982 IP address blocks: 23.251.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:ab:f5:6b:37:7f:ed:48:f0:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=d0b7d726-90df-4d77-97a3-50b489bf8d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:45:6d:5a:e5:45:a1:09:9b:fc:00:95:39:32: cd:80:61:5f:2b:c3:67:dd:1a:84:4e:a1:c1:2a:f2: be:0a:0c:60:40:e0:40:d5:39:e6:10:86:c5:0d:ff: 19:31:63:8d:3d:b6:33:8c:fc:53:cd:66:4c:75:2f: 4a:fa:b4:99:48:98:c1:a9:70:de:3d:9d:1e:fe:86: a0:ab:60:bd:c5:41:2b:b3:20:95:b6:86:95:67:54: 56:91:55:bc:0e:9b:c1:58:fc:54:53:be:2e:51:1d: 9d:98:e8:56:05:35:55:fa:5b:d4:f0:9f:22:d1:18: bc:51:02:06:5b:e5:9d:f7:05:4b:9c:71:80:fd:63: 1d:9e:00:30:8d:a0:b8:10:64:91:57:73:1b:ea:f7: 91:fb:24:a1:54:a8:8b:38:d7:d8:8e:23:a3:3f:57: 1b:37:3d:ee:11:b7:a3:08:66:b5:1f:89:16:5b:91: a2:2c:10:02:e7:c1:41:a1:45:e9:50:03:2c:47:3e: ba:87:37:42:67:9f:d0:ea:f1:d2:29:41:29:1d:a0: 84:ba:6a:fd:14:ba:17:d9:94:67:b2:c0:73:8e:3d: 5f:4d:a9:5a:fc:2c:c1:f2:1f:bd:90:a7:dd:b8:b5: 78:f4:d7:93:79:25:b9:7d:c5:b6:b1:73:83:6f:3f: e3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:12:8F:30:F7:FC:CC:55:57:2E:78:F3:25:30:69:83:85:36:FA:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/96843a9b-b93d-31fd-b277-b52148f2ca4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.251.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:64:32:34:1f:05:56:ed:e4:27:87:2c:9c:a8:63:2d:64:45: b0:a2:4e:6a:f0:e0:a1:6c:4a:36:d1:b2:62:bd:03:84:dd:38: 95:79:0b:a5:ad:61:05:4f:4e:96:1c:da:12:1a:81:be:ae:2c: e6:fc:e2:0c:72:10:f0:e2:eb:27:7e:91:05:3d:77:f7:81:4d: 4c:a0:31:87:3b:e5:b1:fb:ea:8f:6f:27:d6:bd:81:83:d1:20: a3:cb:3a:6e:24:c5:9c:3d:97:c8:8e:3c:24:d7:84:d8:05:f6: 6c:a7:45:86:7c:32:f3:33:18:27:f1:18:96:ad:4c:35:11:d0: ae:7c:1f:3e:28:35:87:6c:7c:28:8c:04:62:d0:7f:c7:d6:99: 23:03:05:67:c1:fc:bb:97:ef:fc:34:42:c1:1a:bb:6a:38:ff: fd:a6:5e:a3:12:e9:98:fd:ec:8c:7e:9d:61:9c:54:22:5b:fa: 7d:3e:58:b6:94:50:7d:c1:e6:6e:8c:15:10:24:b3:91:ee:8a: a8:34:75:6a:49:54:c3:84:84:8e:10:a9:97:03:86:23:7c:69: c2:7a:11:ae:c8:57:4d:e6:68:cf:2b:da:8d:1b:bf:f0:70:79: c9:e8:32:1f:1d:2b:92:6d:e6:ba:65:eb:8a:1a:ae:8c:47:da: 53:25:5d:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH6v1azd/7UjwJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk ZDBiN2Q3MjYtOTBkZi00ZDc3LTk3YTMtNTBiNDg5YmY4ZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEVtWuVFoQmb/ACVOTLNgGFfK8Nn3RqETqHB KvK+CgxgQOBA1TnmEIbFDf8ZMWONPbYzjPxTzWZMdS9K+rSZSJjBqXDePZ0e/oag q2C9xUErsyCVtoaVZ1RWkVW8DpvBWPxUU74uUR2dmOhWBTVV+lvU8J8i0Ri8UQIG W+Wd9wVLnHGA/WMdngAwjaC4EGSRV3Mb6veR+yShVKiLONfYjiOjP1cbNz3uEbej CGa1H4kWW5GiLBAC58FBoUXpUAMsRz66hzdCZ5/Q6vHSKUEpHaCEumr9FLoX2ZRn ssBzjj1fTala/CzB8h+9kKfduLV49NeTeSW5fcW2sXODbz/j8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkSjzD3/MxVVy548yUwaYOFNvreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTY4NDNhOWItYjkzZC0z MWZkLWIyNzctYjUyMTQ4ZjJjYTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF/uAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZkMjQfBVbt5CeHLJyoYy1kRbCiTmrw4KFsSjbRsmK9A4TdOJV5C6Wt YQVPTpYc2hIagb6uLOb84gxyEPDi6yd+kQU9d/eBTUygMYc75bH76o9vJ9a9gYPR IKPLOm4kxZw9l8iOPCTXhNgF9mynRYZ8MvMzGCfxGJatTDUR0K58Hz4oNYdsfCiM BGLQf8fWmSMDBWfB/LuX7/w0QsEau2o4//2mXqMS6Zj97Ix+nWGcVCJb+n0+WLaU UH3B5m6MFRAks5Huiqg0dWpJVMOEhI4QqZcDhiN8acJ6Ea7IV03maM8r2o0bv/Bw ecnoMh8dK5Jt5rpl64oaroxH2lMlXQk= -----END CERTIFICATE-----Generated at Sun Apr 19 12:19:35 2026 by rpki-client