$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/973479d0-5172-3d77-b14f-43290390a046.roa File: 973479d0-5172-3d77-b14f-43290390a046.roa (raw, json) Hash identifier: q3Od64DazxA27aZtB0UdCDlDlnyvXftZDrCaHchp6u8= Subject key identifier: 3E:4D:26:8F:FF:E2:AC:60:AD:ED:A1:2B:EC:43:D4:EB:A6:B3:D1:2D Certificate issuer: /CN=dac5cea7-cd25-4a27-9b63-bd82366932b1 Certificate serial: 010D0C9F4328584CAB056B2B5645D4A61E2CDB80 Authority key identifier: F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/973479d0-5172-3d77-b14f-43290390a046.roa Signing time: Tue 27 Jan 2026 21:28:47 +0000 ROA not before: Tue 27 Jan 2026 21:28:47 +0000 ROA not after: Mon 27 Apr 2026 20:28:47 +0000 asID: 396502 IP address blocks: 23.172.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:05:6b:2b:56:45:d4:a6:1e:2c:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac5cea7-cd25-4a27-9b63-bd82366932b1 Validity Not Before: Jan 27 21:28:47 2026 GMT Not After : Apr 27 20:28:47 2026 GMT Subject: CN=0c7b8c7b-4b3a-49af-8b09-a58ba1328815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3d:1f:3e:18:d8:58:a4:d1:61:4c:c3:67:ee: 12:3b:e7:97:a3:d7:40:ca:5b:93:33:20:21:25:f3: 7c:1d:17:02:ba:cf:35:7f:89:cb:63:77:68:77:88: 75:37:dc:3e:de:34:50:e4:16:ed:2a:b7:9c:26:2b: 9f:8d:52:04:b6:e4:97:de:48:57:99:40:14:0a:c8: c9:74:9e:12:2a:ac:66:e8:77:64:bf:12:94:b8:ea: 54:89:72:3e:ed:05:c5:54:a5:52:9d:c8:c9:6f:f7: 16:e1:ef:a1:7c:c1:c5:5f:06:b3:74:82:d4:b8:7e: d6:69:c3:fb:b1:c7:61:a7:03:c4:cf:44:ca:ca:e3: 24:22:07:dd:f4:3a:ce:9e:28:aa:1b:81:4b:50:b2: d3:90:63:91:c4:87:76:ba:70:8b:dd:e1:c1:ad:ac: 42:ac:1a:95:01:c4:b7:d0:7e:d5:68:62:c0:cd:b6: 51:4e:04:37:bb:f7:24:8c:51:d2:8c:3d:50:dd:cd: cc:97:ca:f6:fa:b2:7d:cd:38:65:b3:06:81:ab:42: 19:2e:bd:bf:e0:fc:a7:77:3a:43:13:b3:5a:32:e2: 7f:6e:b2:fd:6a:f5:64:8b:83:fa:d3:7c:37:eb:5e: bd:51:23:32:8e:04:8f:cf:cc:89:ae:2c:1e:3f:a2: f5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4D:26:8F:FF:E2:AC:60:AD:ED:A1:2B:EC:43:D4:EB:A6:B3:D1:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/973479d0-5172-3d77-b14f-43290390a046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl X509v3 Authority Key Identifier: keyid:F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer sbgp-ipAddrBlock: critical IPv4: 23.172.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:db:6a:61:86:a8:79:21:49:39:a4:3c:2b:b2:df:72:4b:e8: c4:47:d0:b1:27:23:78:1b:7c:00:f3:e3:57:ed:df:1e:7c:aa: a4:bd:4c:2e:72:4b:87:b8:6e:c2:a6:b2:01:0c:80:f4:b6:5b: c8:54:cf:85:cf:bb:7a:0e:e2:99:e1:e4:d7:b9:cc:74:81:8d: bf:47:8f:38:98:76:61:b8:c3:da:8d:6a:64:e1:93:f0:8c:9e: 84:68:69:32:4b:f8:50:d4:e2:50:bf:7b:3b:d5:60:39:d6:54: dc:9a:6b:d4:9e:13:0d:49:76:ce:4d:e0:80:b5:6b:b9:11:25: 65:54:76:f5:c9:fc:e0:a2:53:1a:29:83:e0:23:07:e1:1e:12: 1e:a9:21:90:a1:67:36:d0:56:f0:3b:fb:d2:5f:85:24:f8:46: b2:be:11:e2:31:3e:76:5c:6d:27:4c:08:08:7c:72:fa:39:18: de:cb:78:a2:f9:eb:b5:a5:3c:78:5c:f5:2a:10:c8:5a:05:e5: c9:00:ac:7f:52:ee:18:98:a6:1f:78:ff:29:a6:4f:87:14:cd: 8e:3a:6e:4f:2b:cb:5b:8e:b7:ed:f9:2b:01:e0:6b:d2:a1:0a: ef:78:81:0a:ad:0f:f0:10:00:75:9a:fb:27:3b:03:fd:b6:56: 8e:ae:78:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyrBWsrVkXUph4s24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFjNWNlYTctY2QyNS00YTI3LTliNjMtYmQ4MjM2Njkz MmIxMB4XDTI2MDEyNzIxMjg0N1oXDTI2MDQyNzIwMjg0N1owLzEtMCsGA1UEAxMk MGM3YjhjN2ItNGIzYS00OWFmLThiMDktYTU4YmExMzI4ODE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD0fPhjYWKTRYUzDZ+4SO+eXo9dAyluTMyAh JfN8HRcCus81f4nLY3dod4h1N9w+3jRQ5BbtKrecJiufjVIEtuSX3khXmUAUCsjJ dJ4SKqxm6HdkvxKUuOpUiXI+7QXFVKVSncjJb/cW4e+hfMHFXwazdILUuH7WacP7 scdhpwPEz0TKyuMkIgfd9DrOniiqG4FLULLTkGORxId2unCL3eHBraxCrBqVAcS3 0H7VaGLAzbZRTgQ3u/ckjFHSjD1Q3c3Ml8r2+rJ9zThlswaBq0IZLr2/4PyndzpD E7NaMuJ/brL9avVki4P603w36169USMyjgSPz8yJriweP6L1hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5NJo//4qxgre2hK+xD1Oums9EtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1 Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgyMzY2OTMyYjEvOTczNDc5ZDAtNTE3Mi0z ZDc3LWIxNGYtNDMyOTAzOTBhMDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGFjNWNlYTctY2QyNS00YTI3LTli NjMtYmQ4MjM2NjkzMmIxL2RhYzVjZWE3LWNkMjUtNGEyNy05YjYzLWJkODIzNjY5 MzJiMS5jcmwwHwYDVR0jBBgwFoAU+JBSGwgPViIKwWgKRaFYd8tXPl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgy MzY2OTMyYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHbamGGqHkhSTmkPCuy33JL6MRH0LEnI3gbfADz41ft3x58qqS9TC5y S4e4bsKmsgEMgPS2W8hUz4XPu3oO4pnh5Ne5zHSBjb9HjziYdmG4w9qNamThk/CM noRoaTJL+FDU4lC/ezvVYDnWVNyaa9SeEw1Jds5N4IC1a7kRJWVUdvXJ/OCiUxop g+AjB+EeEh6pIZChZzbQVvA7+9JfhST4RrK+EeIxPnZcbSdMCAh8cvo5GN7LeKL5 67WlPHhc9SoQyFoF5ckArH9S7hiYph94/ymmT4cUzY46bk8ry1uOt+35KwHga9Kh Cu94gQqtD/AQAHWa+yc7A/22Vo6ueMI= -----END CERTIFICATE-----Generated at Mon Mar 2 15:46:50 2026 by rpki-client