$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/8dc01aba-8488-342f-9f78-243bba3be1b2.roa File: 8dc01aba-8488-342f-9f78-243bba3be1b2.roa (raw, json) Hash identifier: JzbMCAtR57d9D+DFH8k0clavqqyh0oXWAE1IKN76TJU= Subject key identifier: 37:B1:D8:93:3C:D6:C9:DB:38:62:A7:85:69:79:B0:8B:31:A7:77:28 Certificate issuer: /CN=e9967e8f-a4c2-4d89-82dd-95d9c3feb83f Certificate serial: 010D0C9F4328584D06479B7EC1EEA71B8B7B7B80 Authority key identifier: 68:E5:E5:13:2F:23:6D:BC:3B:1C:7C:0A:61:E4:CD:D0:B0:0F:E1:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/8dc01aba-8488-342f-9f78-243bba3be1b2.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 400735 IP address blocks: 23.162.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:9b:7e:c1:ee:a7:1b:8b:7b:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9967e8f-a4c2-4d89-82dd-95d9c3feb83f Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=7c2ea1d5-bf67-4a1c-a2f6-02d9324a6f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4f:ed:ac:91:19:86:81:4d:3d:d7:62:00:b0: 56:57:c3:84:be:9a:c0:3e:06:64:c0:e2:65:9c:61: e3:e4:9f:52:b0:fb:64:90:8e:d8:10:56:a4:c0:57: 83:75:4c:01:60:69:3e:fb:a7:a3:5b:67:eb:74:1b: 96:5f:a3:3b:9f:ed:cd:4a:af:3a:81:cb:0d:ed:01: 7e:eb:5d:be:de:7c:0d:78:a0:c8:21:0c:d0:7f:a8: ad:5e:9b:35:0f:75:f4:1a:76:83:52:29:4d:dc:63: 94:a7:5a:f7:e0:dc:a8:fa:c7:4c:68:cc:18:cf:4e: 8f:79:b0:fb:25:10:21:f9:93:c6:ce:76:f5:61:31: b6:35:69:86:16:09:a8:a2:ec:0c:2d:0d:cd:49:7b: 17:38:bb:88:27:9f:7a:fa:5b:8c:78:e6:f0:b6:04: a0:bb:e8:20:f8:66:f7:77:14:cd:e3:fb:a1:41:24: e1:29:31:b4:36:57:01:35:77:b1:e9:dd:88:43:2f: d2:e5:49:b1:b0:5c:d6:4e:bf:ae:e8:b8:4e:4f:47: 13:bd:d6:dc:f5:9f:0c:41:63:b9:2d:8a:56:c3:5a: 14:5d:37:9f:9f:50:c8:f2:25:83:9e:29:af:31:54: 34:44:ac:1d:14:73:4b:15:4f:c6:1d:39:9d:d3:dc: aa:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B1:D8:93:3C:D6:C9:DB:38:62:A7:85:69:79:B0:8B:31:A7:77:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/8dc01aba-8488-342f-9f78-243bba3be1b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.crl X509v3 Authority Key Identifier: keyid:68:E5:E5:13:2F:23:6D:BC:3B:1C:7C:0A:61:E4:CD:D0:B0:0F:E1:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.cer sbgp-ipAddrBlock: critical IPv4: 23.162.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:28:c8:e8:de:cb:6c:c8:ea:75:12:44:11:ca:1b:ff:72:a9: 9b:31:38:a8:12:e0:ec:5a:ac:e4:23:cb:a0:ff:0e:8c:4e:c2: 51:0c:14:1d:fc:90:b6:1f:bf:40:a0:08:4b:b4:4b:37:ec:82: 31:29:e2:c8:3e:57:67:0b:92:db:27:8d:66:02:91:e8:95:75: ff:65:68:65:31:c2:20:e0:91:e1:3e:b9:2f:df:d2:7c:94:e4: fb:bc:7f:38:53:39:66:8e:13:95:8c:da:23:a4:bb:c9:11:77: 22:17:d2:6b:0a:a6:ca:4d:3d:16:a7:fc:42:78:0c:94:60:36: 61:d4:53:67:0e:0d:e1:f4:68:db:9f:61:19:ed:90:6f:bf:c7: 5c:6b:67:4f:37:9f:df:38:3a:93:2f:99:e6:25:1b:b9:c0:73: 29:8d:10:56:46:d1:2e:61:b6:a1:6f:89:13:26:b8:45:52:fd: 05:2a:c7:07:ab:3a:2a:f1:78:f1:1f:13:f2:e5:f5:98:1a:ed: 8c:75:dd:83:4c:92:93:2a:5b:ea:b9:e8:03:8a:83:0a:7e:36: 2f:c8:40:7c:9e:10:8d:c9:9d:01:b3:ff:ca:40:d0:1b:b8:d8: 22:97:71:dc:1a:3d:93:5f:11:d3:5f:9d:00:aa:38:74:4d:2b: 44:e5:94:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0GR5t+we6nG4t7e4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk5NjdlOGYtYTRjMi00ZDg5LTgyZGQtOTVkOWMzZmVi ODNmMB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk N2MyZWExZDUtYmY2Ny00YTFjLWEyZjYtMDJkOTMyNGE2ZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U/trJEZhoFNPddiALBWV8OEvprAPgZkwOJl nGHj5J9SsPtkkI7YEFakwFeDdUwBYGk++6ejW2frdBuWX6M7n+3NSq86gcsN7QF+ 612+3nwNeKDIIQzQf6itXps1D3X0GnaDUilN3GOUp1r34Nyo+sdMaMwYz06PebD7 JRAh+ZPGznb1YTG2NWmGFgmoouwMLQ3NSXsXOLuIJ596+luMeObwtgSgu+gg+Gb3 dxTN4/uhQSThKTG0NlcBNXex6d2IQy/S5UmxsFzWTr+u6LhOT0cTvdbc9Z8MQWO5 LYpWw1oUXTefn1DI8iWDnimvMVQ0RKwdFHNLFU/GHTmd09yqEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDex2JM81snbOGKnhWl5sIsxp3coMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOTk2 N2U4Zi1hNGMyLTRkODktODJkZC05NWQ5YzNmZWI4M2YvOGRjMDFhYmEtODQ4OC0z NDJmLTlmNzgtMjQzYmJhM2JlMWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTk5NjdlOGYtYTRjMi00ZDg5LTgy ZGQtOTVkOWMzZmViODNmL2U5OTY3ZThmLWE0YzItNGQ4OS04MmRkLTk1ZDljM2Zl YjgzZi5jcmwwHwYDVR0jBBgwFoAUaOXlEy8jbbw7HHwKYeTN0LAP4bIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOTk2N2U4Zi1hNGMyLTRkODktODJkZC05NWQ5 YzNmZWI4M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6LQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4oyOjey2zI6nUSRBHKG/9yqZsxOKgS4OxarOQjy6D/DoxOwlEMFB38 kLYfv0CgCEu0SzfsgjEp4sg+V2cLktsnjWYCkeiVdf9laGUxwiDgkeE+uS/f0nyU 5Pu8fzhTOWaOE5WM2iOku8kRdyIX0msKpspNPRan/EJ4DJRgNmHUU2cODeH0aNuf YRntkG+/x1xrZ083n984OpMvmeYlG7nAcymNEFZG0S5htqFviRMmuEVS/QUqxwer OirxePEfE/Ll9Zga7Yx13YNMkpMqW+q56AOKgwp+Ni/IQHyeEI3JnQGz/8pA0Bu4 2CKXcdwaPZNfEdNfnQCqOHRNK0TllOY= -----END CERTIFICATE-----Generated at Mon Mar 2 14:26:33 2026 by rpki-client