$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/afe04a10-6d20-3764-bd84-54723556b6bc.roa File: afe04a10-6d20-3764-bd84-54723556b6bc.roa (raw, json) Hash identifier: fiVY1dgnGYuNNrAYoz5WV6QPse6lgsYJwLit7ZIJtZQ= Subject key identifier: 5E:BA:F0:6B:D6:5E:E7:F7:F5:90:88:6E:D6:BC:F9:95:8E:BC:E6:E8 Certificate issuer: /CN=1f1cdae5-b041-4993-963d-6f855f74efa1 Certificate serial: 010D0C9F4328584CA5F705C33EBA86993FE5BC00 Authority key identifier: 3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/afe04a10-6d20-3764-bd84-54723556b6bc.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 54082 IP address blocks: 23.168.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:05:c3:3e:ba:86:99:3f:e5:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1cdae5-b041-4993-963d-6f855f74efa1 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=cae71ce8-144b-4adf-88bf-7832287dbade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:30:84:81:59:7c:76:00:11:04:00:84:da:aa: 20:d2:9f:fa:d7:1d:b7:5b:ed:b5:48:85:e6:fb:87: eb:e4:85:32:27:5f:44:74:bc:ed:45:84:64:c2:3c: b3:94:b1:c4:7c:7d:63:dd:9e:36:96:9b:07:f4:67: 92:89:da:c3:e9:07:05:0a:99:ec:6e:c0:21:27:80: 52:52:60:e8:07:27:82:07:e5:89:5b:bb:5f:0d:7b: f4:16:f2:ad:e2:55:b6:1b:81:15:64:53:b0:2c:25: b0:4c:e7:53:17:f7:d2:84:5a:3c:02:7a:1a:94:c3: c4:52:e1:9c:07:76:20:8d:00:d1:18:be:15:50:4b: e4:41:ec:2b:09:1e:b8:57:8e:6c:9b:93:87:a1:91: ad:b1:66:0e:2c:31:67:f7:70:1a:9d:6d:6d:d3:c6: f1:7a:2f:aa:42:8d:6a:53:ba:86:67:17:d9:5c:2f: 80:a9:5e:d6:bc:a3:76:98:a4:79:3c:ad:af:ba:ae: 46:c9:00:28:be:05:9a:c8:cf:1c:6a:eb:30:bc:f5: eb:13:55:ff:46:df:18:2f:36:a7:37:f0:a5:b4:fe: 86:77:47:0d:78:bc:ef:da:85:aa:0a:a6:2d:50:7e: 37:01:d0:bf:08:2a:be:79:6d:5a:bf:63:4c:d2:db: a4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:BA:F0:6B:D6:5E:E7:F7:F5:90:88:6E:D6:BC:F9:95:8E:BC:E6:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/afe04a10-6d20-3764-bd84-54723556b6bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.crl X509v3 Authority Key Identifier: keyid:3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer sbgp-ipAddrBlock: critical IPv4: 23.168.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:30:9b:8f:68:bc:15:b5:27:cf:a5:ef:bf:c3:ef:c2:f6:72: 51:b8:8b:34:ca:6c:cb:de:ba:d1:fa:19:5b:cf:05:8f:af:2f: 9b:e3:c8:09:c8:c4:96:c5:cf:80:45:a2:2e:29:18:cb:ea:d6: c4:6b:b1:7b:5c:11:e6:92:b9:a1:a8:fc:84:6d:b1:fb:e1:77: 52:da:2c:7d:00:eb:2f:e5:f1:f1:57:da:1e:11:71:59:75:0f: 68:c1:fd:e3:7e:91:c6:f3:7d:d1:c2:a6:88:71:48:1b:7f:e4: 26:37:ff:82:93:ec:e2:25:37:45:f7:3d:b8:e0:3b:3d:7f:6d: 70:8a:04:7a:b8:2c:bc:8a:e4:9b:0a:9a:1c:36:b1:89:47:4f: 66:f0:cc:12:32:3f:94:2e:bd:47:66:28:3b:bb:ae:22:80:07: 75:01:b9:bc:4f:26:e2:8f:8a:bf:66:e4:ad:c3:d8:f0:93:f6: 04:7e:23:cf:54:08:0d:77:49:05:5a:21:e3:93:da:a7:b2:cb: d4:3b:65:c5:4c:2f:9f:ba:54:05:a4:6a:83:76:c0:27:6f:e9: 27:c1:0b:24:cb:bd:a5:f3:09:43:2d:d3:b2:e8:0b:c9:43:ca: 1a:68:08:b1:4d:4b:c2:db:7a:a2:19:4a:5c:0d:25:df:69:c9: 7a:6a:bb:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9wXDPrqGmT/lvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYxY2RhZTUtYjA0MS00OTkzLTk2M2QtNmY4NTVmNzRl ZmExMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk Y2FlNzFjZTgtMTQ0Yi00YWRmLTg4YmYtNzgzMjI4N2RiYWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDCEgVl8dgARBACE2qog0p/61x23W+21SIXm +4fr5IUyJ19EdLztRYRkwjyzlLHEfH1j3Z42lpsH9GeSidrD6QcFCpnsbsAhJ4BS UmDoByeCB+WJW7tfDXv0FvKt4lW2G4EVZFOwLCWwTOdTF/fShFo8AnoalMPEUuGc B3YgjQDRGL4VUEvkQewrCR64V45sm5OHoZGtsWYOLDFn93AanW1t08bxei+qQo1q U7qGZxfZXC+AqV7WvKN2mKR5PK2vuq5GyQAovgWayM8causwvPXrE1X/Rt8YLzan N/CltP6Gd0cNeLzv2oWqCqYtUH43AdC/CCq+eW1av2NM0tukWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF668GvWXuf39ZCIbta8+ZWOvOboMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjFj ZGFlNS1iMDQxLTQ5OTMtOTYzZC02Zjg1NWY3NGVmYTEvYWZlMDRhMTAtNmQyMC0z NzY0LWJkODQtNTQ3MjM1NTZiNmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWYxY2RhZTUtYjA0MS00OTkzLTk2 M2QtNmY4NTVmNzRlZmExLzFmMWNkYWU1LWIwNDEtNDk5My05NjNkLTZmODU1Zjc0 ZWZhMS5jcmwwHwYDVR0jBBgwFoAUPqQNj3LysTdkekv3WOeHd1ylvpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjFjZGFlNS1iMDQxLTQ5OTMtOTYzZC02Zjg1 NWY3NGVmYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6hoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFswm49ovBW1J8+l77/D78L2clG4izTKbMveutH6GVvPBY+vL5vjyAnI xJbFz4BFoi4pGMvq1sRrsXtcEeaSuaGo/IRtsfvhd1LaLH0A6y/l8fFX2h4RcVl1 D2jB/eN+kcbzfdHCpohxSBt/5CY3/4KT7OIlN0X3PbjgOz1/bXCKBHq4LLyK5JsK mhw2sYlHT2bwzBIyP5QuvUdmKDu7riKAB3UBubxPJuKPir9m5K3D2PCT9gR+I89U CA13SQVaIeOT2qeyy9Q7ZcVML5+6VAWkaoN2wCdv6SfBCyTLvaXzCUMt07LoC8lD yhpoCLFNS8LbeqIZSlwNJd9pyXpqu8M= -----END CERTIFICATE-----Generated at Mon Mar 2 17:12:07 2026 by rpki-client