$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa File: 509d5bf3-4c6a-3407-89d3-119b86f42934.roa (raw, json) Hash identifier: cqRkRa2rGimK0an/dPSg2q4hitl6/xg8X1x+t8+ts58= Subject key identifier: EA:64:DC:16:A6:8C:B3:3D:BC:29:C3:78:AB:95:92:ED:2E:8D:44:15 Certificate issuer: /CN=38d6b993-a8bd-44a2-8e04-89483e698a23 Certificate serial: 010D0C9F4328584D07ACEDCB1A72D90F777E9F80 Authority key identifier: 6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 57406 IP address blocks: 23.145.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:ed:cb:1a:72:d9:0f:77:7e:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38d6b993-a8bd-44a2-8e04-89483e698a23 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=399f1d4e-d78f-45d6-abdb-8879eb7db8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2c:b2:d9:43:57:00:98:63:5e:b5:4d:2e:08: 67:d4:26:0f:d6:dc:ae:ce:13:1a:34:43:1d:6a:b6: 72:c7:5f:f7:68:e6:14:a2:47:e3:60:bf:e5:fc:bd: f4:f9:34:b8:1b:53:9e:7e:34:f1:74:b3:8e:eb:2f: af:17:1e:cf:5c:d8:2f:01:aa:32:5b:57:23:72:f5: 57:1a:0d:9a:1e:f4:60:e6:02:1e:f8:a2:2b:91:84: 17:d7:03:2c:b1:26:87:3e:24:44:0b:66:88:ed:61: 61:85:2c:16:5a:93:5b:50:ea:26:ea:e4:ef:cc:10: 3f:5e:93:27:32:e0:27:06:7a:25:1d:78:78:8b:b8: 3e:14:98:8d:89:f4:b3:b7:4e:93:98:15:ee:99:7a: 19:56:37:bc:4a:f2:7f:61:15:e2:02:a7:45:75:22: 7b:03:ad:b9:39:f1:e8:62:43:47:1b:c4:25:b2:4f: 48:0c:93:97:62:d7:d2:c0:43:2a:27:01:d1:f6:52: 83:4c:58:5c:6e:29:26:59:16:84:37:f0:ee:08:16: 23:9a:7b:19:02:57:ca:45:ed:5f:13:b6:a9:80:32: 9a:44:81:35:2a:85:2d:6d:45:53:4c:8b:58:5d:0e: c0:a2:50:a7:0b:e2:f5:fc:a3:e5:b0:71:aa:5f:ba: 07:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:64:DC:16:A6:8C:B3:3D:BC:29:C3:78:AB:95:92:ED:2E:8D:44:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl X509v3 Authority Key Identifier: keyid:6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer sbgp-ipAddrBlock: critical IPv4: 23.145.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:36:19:26:9a:b4:ea:2d:6c:c6:6d:be:f6:48:3b:c3:69:ab: ed:4d:15:e4:e5:80:94:d6:85:5d:a0:3b:7f:67:4b:96:b5:7a: 1e:ed:21:01:8a:c3:9e:28:19:e2:a0:7b:64:30:96:e5:f1:df: 72:f3:a2:a2:57:09:ca:b3:3d:8c:8a:88:f9:1e:7d:b1:e6:1e: 93:28:dc:34:52:0d:ed:08:0d:de:37:76:00:f7:34:08:6a:ba: 8e:f6:17:92:4d:1c:f9:92:82:4d:7e:75:1c:61:69:fb:48:39: 04:86:34:e4:3d:4c:9c:90:84:ee:70:58:6b:06:69:a6:dd:79: 2e:fa:ec:aa:19:d8:a3:85:3c:b8:00:0f:0e:c6:88:6b:c2:dd: fe:46:5d:b8:08:84:d7:6b:82:01:d2:c1:54:70:3d:5f:0c:83: f1:22:09:7d:09:ea:26:f0:cd:77:56:d0:38:56:23:19:b8:1a: 5d:ee:5a:2d:e2:c3:d9:24:16:99:de:c9:d7:ff:b8:e1:61:88: 1d:93:85:06:76:a3:93:af:d9:70:a7:41:56:f3:12:a3:06:d9: 2e:fb:31:af:8b:1e:65:c0:62:66:af:aa:30:79:8c:68:85:f1: 3f:df:96:3a:47:3b:c2:2c:c5:aa:b9:10:d6:e7:22:47:36:3e: 92:e8:61:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrO3LGnLZD3d+n4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhkNmI5OTMtYThiZC00NGEyLThlMDQtODk0ODNlNjk4 YTIzMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk Mzk5ZjFkNGUtZDc4Zi00NWQ2LWFiZGItODg3OWViN2RiOGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCyy2UNXAJhjXrVNLghn1CYP1tyuzhMaNEMd arZyx1/3aOYUokfjYL/l/L30+TS4G1OefjTxdLOO6y+vFx7PXNgvAaoyW1cjcvVX Gg2aHvRg5gIe+KIrkYQX1wMssSaHPiREC2aI7WFhhSwWWpNbUOom6uTvzBA/XpMn MuAnBnolHXh4i7g+FJiNifSzt06TmBXumXoZVje8SvJ/YRXiAqdFdSJ7A625OfHo YkNHG8Qlsk9IDJOXYtfSwEMqJwHR9lKDTFhcbikmWRaEN/DuCBYjmnsZAlfKRe1f E7apgDKaRIE1KoUtbUVTTItYXQ7AolCnC+L1/KPlsHGqX7oHkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpk3BamjLM9vCnDeKuVku0ujUQVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGQ2 Yjk5My1hOGJkLTQ0YTItOGUwNC04OTQ4M2U2OThhMjMvNTA5ZDViZjMtNGM2YS0z NDA3LTg5ZDMtMTE5Yjg2ZjQyOTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhkNmI5OTMtYThiZC00NGEyLThl MDQtODk0ODNlNjk4YTIzLzM4ZDZiOTkzLWE4YmQtNDRhMi04ZTA0LTg5NDgzZTY5 OGEyMy5jcmwwHwYDVR0jBBgwFoAUbkSnmZUUo47HjKF4cBdzXF0ApswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGQ2Yjk5My1hOGJkLTQ0YTItOGUwNC04OTQ4 M2U2OThhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD82GSaatOotbMZtvvZIO8Npq+1NFeTlgJTWhV2gO39nS5a1eh7tIQGK w54oGeKge2QwluXx33LzoqJXCcqzPYyKiPkefbHmHpMo3DRSDe0IDd43dgD3NAhq uo72F5JNHPmSgk1+dRxhaftIOQSGNOQ9TJyQhO5wWGsGaabdeS767KoZ2KOFPLgA Dw7GiGvC3f5GXbgIhNdrggHSwVRwPV8Mg/EiCX0J6ibwzXdW0DhWIxm4Gl3uWi3i w9kkFpneydf/uOFhiB2ThQZ2o5Ov2XCnQVbzEqMG2S77Ma+LHmXAYmavqjB5jGiF 8T/fljpHO8Isxaq5ENbnIkc2PpLoYQo= -----END CERTIFICATE-----Generated at Mon Mar 2 10:02:48 2026 by rpki-client