$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/2b7d78f8-8948-39c2-ac84-3b976d73fb80.roa File: 2b7d78f8-8948-39c2-ac84-3b976d73fb80.roa (raw, json) Hash identifier: KyzxTubxlzuztMyCWjNm+fncnNDGA+/RF3nwcb01aQI= Subject key identifier: 92:7F:49:B2:E8:49:51:78:E2:1F:99:A8:56:91:52:35:EE:16:D1:25 Certificate issuer: /CN=1fe238c2-2a2c-4f20-9f85-52fb8a42c304 Certificate serial: 010D0C9F4328584D55BA3195D6A25AE10DFB6080 Authority key identifier: 59:9A:CC:25:E2:65:32:75:63:E8:D1:D7:A3:E5:A3:B1:BF:FE:A0:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/2b7d78f8-8948-39c2-ac84-3b976d73fb80.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 203062 IP address blocks: 23.138.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:31:95:d6:a2:5a:e1:0d:fb:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe238c2-2a2c-4f20-9f85-52fb8a42c304 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=1f37225f-462b-4b5c-b320-32fcce0c9782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:aa:c9:22:e9:d5:82:26:03:cb:4d:49:64:db: 43:b3:74:56:31:49:6d:09:26:91:43:70:24:33:e4: ed:29:6b:54:0a:30:59:b1:a9:d2:c7:a8:69:be:4f: 71:44:a1:d1:8d:67:55:81:55:62:17:38:7e:33:9c: 96:3f:19:18:e7:cc:4f:e8:b8:a5:ef:09:ee:45:4f: 9e:13:4d:6c:66:2d:29:ce:59:59:ce:61:fc:05:cb: b2:a6:b7:93:65:ed:b9:ed:a0:cc:40:4a:77:cb:52: 7e:5f:da:2e:33:60:98:b2:1d:03:41:71:48:b0:40: f7:c5:d6:b2:8c:33:3e:81:b5:a8:c2:22:36:72:9f: 6b:64:69:54:29:b3:19:e0:10:cf:d5:13:7c:56:49: 3e:3c:0d:9b:6c:b4:57:0a:ec:ea:f0:33:1e:ef:bb: ee:30:34:2f:48:b4:a1:00:03:fe:78:dd:fb:09:26: a4:de:b9:37:94:94:f8:3c:ac:69:49:20:33:b4:a6: c8:56:33:4d:8b:77:85:a4:2b:9b:70:45:66:ed:14: 4c:f1:f5:cf:7e:29:6d:ea:67:5a:d5:6c:ff:f2:aa: 51:44:f5:d5:34:b0:e1:a7:7a:46:67:23:62:1c:c2: fc:31:80:02:b4:c2:c0:73:7f:b5:35:d0:4f:ba:51: cd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7F:49:B2:E8:49:51:78:E2:1F:99:A8:56:91:52:35:EE:16:D1:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/2b7d78f8-8948-39c2-ac84-3b976d73fb80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.crl X509v3 Authority Key Identifier: keyid:59:9A:CC:25:E2:65:32:75:63:E8:D1:D7:A3:E5:A3:B1:BF:FE:A0:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer sbgp-ipAddrBlock: critical IPv4: 23.138.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:40:c9:f1:5a:3a:67:77:31:31:51:60:03:e0:9a:43:9a:fc: 7f:1d:4f:53:62:e5:36:eb:9e:5f:6c:86:9a:6b:4f:f2:6e:c7: bc:14:7d:de:53:14:b9:69:d1:5c:5b:96:80:ef:18:af:7d:e3: 74:d1:df:b1:2c:82:f1:53:47:8d:35:7b:1d:6b:b4:d7:26:0c: 5a:54:48:6f:6c:18:e2:81:57:9a:8a:1f:f3:c6:4d:33:b2:31: 38:ff:b7:ab:23:4b:59:e6:8e:29:52:d2:a1:ff:e2:62:b5:77: 4f:d5:87:5c:d8:d9:cb:f5:bb:ac:dd:bd:41:30:ee:17:f2:71: c7:82:20:bc:27:89:ae:d1:93:2b:67:31:90:d9:aa:f5:1d:b9: dd:b2:87:61:33:30:62:34:db:37:cf:9d:2b:e8:20:cd:6f:61: 43:37:e2:b3:40:65:25:ff:88:e9:12:75:f7:ae:ec:eb:0d:06: 2d:06:e0:a3:17:81:8c:fe:83:9a:55:59:6e:a9:18:2c:4b:c2: 14:45:89:de:f7:7e:12:de:da:4e:7d:ad:91:8b:62:1c:e7:32: d6:f9:71:6a:9e:44:8c:d6:81:a8:88:05:3c:6d:65:9a:76:49: 38:fc:70:22:e2:a7:76:a1:18:55:ea:02:59:b2:0a:a2:34:d1: 42:b5:b0:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VujGV1qJa4Q37YIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlMjM4YzItMmEyYy00ZjIwLTlmODUtNTJmYjhhNDJj MzA0MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MWYzNzIyNWYtNDYyYi00YjVjLWIzMjAtMzJmY2NlMGM5NzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkarJIunVgiYDy01JZNtDs3RWMUltCSaRQ3Ak M+TtKWtUCjBZsanSx6hpvk9xRKHRjWdVgVViFzh+M5yWPxkY58xP6Lil7wnuRU+e E01sZi0pzllZzmH8BcuypreTZe257aDMQEp3y1J+X9ouM2CYsh0DQXFIsED3xday jDM+gbWowiI2cp9rZGlUKbMZ4BDP1RN8Vkk+PA2bbLRXCuzq8DMe77vuMDQvSLSh AAP+eN37CSak3rk3lJT4PKxpSSAztKbIVjNNi3eFpCubcEVm7RRM8fXPfilt6mda 1Wz/8qpRRPXVNLDhp3pGZyNiHML8MYACtMLAc3+1NdBPulHNAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJ/SbLoSVF44h+ZqFaRUjXuFtElMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmUy MzhjMi0yYTJjLTRmMjAtOWY4NS01MmZiOGE0MmMzMDQvMmI3ZDc4ZjgtODk0OC0z OWMyLWFjODQtM2I5NzZkNzNmYjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZlMjM4YzItMmEyYy00ZjIwLTlm ODUtNTJmYjhhNDJjMzA0LzFmZTIzOGMyLTJhMmMtNGYyMC05Zjg1LTUyZmI4YTQy YzMwNC5jcmwwHwYDVR0jBBgwFoAUWZrMJeJlMnVj6NHXo+Wjsb/+oFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmUyMzhjMi0yYTJjLTRmMjAtOWY4NS01MmZi OGE0MmMzMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4rMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFAyfFaOmd3MTFRYAPgmkOa/H8dT1Ni5Tbrnl9shpprT/Jux7wUfd5T FLlp0VxbloDvGK9943TR37EsgvFTR401ex1rtNcmDFpUSG9sGOKBV5qKH/PGTTOy MTj/t6sjS1nmjilS0qH/4mK1d0/Vh1zY2cv1u6zdvUEw7hfycceCILwnia7Rkytn MZDZqvUdud2yh2EzMGI02zfPnSvoIM1vYUM34rNAZSX/iOkSdfeu7OsNBi0G4KMX gYz+g5pVWW6pGCxLwhRFid73fhLe2k59rZGLYhznMtb5cWqeRIzWgaiIBTxtZZp2 STj8cCLip3ahGFXqAlmyCqI00UK1sEY= -----END CERTIFICATE-----Generated at Fri Apr 17 11:24:26 2026 by rpki-client