$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa File: f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa (raw, json) Hash identifier: ZU+x2r25IscFERvsyhX6DZEqiaIX/2+GDNhWgdz0d6Y= Subject key identifier: 15:9F:95:9A:33:FC:E9:E7:A7:82:9B:62:29:5D:6B:59:65:4C:8F:BE Certificate issuer: /CN=42eee53c-f373-4efe-aed3-4c501c9dde78 Certificate serial: 010D0C9F4328584D571FB8D08715F5D894980680 Authority key identifier: A0:35:2C:B8:0B:B4:72:AB:EE:B9:9C:1B:4A:68:ED:08:B8:A1:FD:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 401474 IP address blocks: 23.129.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b8:d0:87:15:f5:d8:94:98:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42eee53c-f373-4efe-aed3-4c501c9dde78 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=1f3600ba-6164-4b8b-87e4-3a7553e0b1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:25:b7:03:98:a0:17:2d:f6:03:2d:50:ef:7e: e2:97:01:3b:14:73:f3:7e:e9:55:19:8b:c9:02:da: dc:1b:d7:d0:90:59:f8:c5:60:50:37:a4:ee:b9:9f: 0b:f4:72:86:ad:4a:2d:10:a0:94:bf:c8:4b:eb:9b: 70:18:b4:c6:40:68:91:f8:e1:2d:a2:a9:2f:7c:33: 4d:f0:bd:bc:1d:e2:40:ec:89:4f:af:bd:6e:f5:4a: f1:60:63:6a:7c:46:2f:81:0f:56:59:7d:3f:25:3c: 0e:ca:95:18:d4:5f:d5:03:95:f3:2b:9e:18:60:91: 77:7a:55:5d:f7:3d:f2:ea:54:66:cb:5b:02:ce:54: f3:6f:5b:d4:ac:90:98:51:f7:ad:dc:6b:8a:68:fe: 73:0a:c0:05:0f:33:a1:82:58:f5:f6:53:33:59:16: 67:ac:f0:18:d3:67:5e:cf:3d:cb:dd:bc:88:f9:5d: 54:a1:42:8d:09:ae:f8:72:6e:cf:e6:32:3e:5b:36: 21:7c:c1:9b:3e:f0:2e:df:9a:e7:b2:b7:8e:07:3d: 55:f9:df:ed:43:34:eb:e6:ba:28:b1:35:df:09:3a: 32:8f:44:a6:77:02:74:e4:1c:4d:88:6e:69:15:f1: 69:71:26:2b:ee:8d:a4:b2:dc:23:b6:35:c5:3a:04: 06:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9F:95:9A:33:FC:E9:E7:A7:82:9B:62:29:5D:6B:59:65:4C:8F:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.crl X509v3 Authority Key Identifier: keyid:A0:35:2C:B8:0B:B4:72:AB:EE:B9:9C:1B:4A:68:ED:08:B8:A1:FD:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer sbgp-ipAddrBlock: critical IPv4: 23.129.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:92:e7:3c:f2:11:a1:db:4c:54:71:d1:44:91:39:48:98:65: f7:29:f2:7e:4b:5c:5e:6a:3f:cc:ce:79:b3:d6:21:6d:6e:48: 52:60:7f:cc:94:e5:98:f9:78:be:ff:fe:9c:35:5a:76:ab:be: 07:82:f2:a7:c9:e8:7d:0f:4f:4a:26:2e:40:e1:65:3f:d5:86: f8:bb:6c:a2:73:08:94:e4:7d:af:97:9c:76:93:0b:59:a6:42: 85:85:a4:f7:b6:08:26:e3:35:a5:7b:78:c3:90:e0:fe:93:46: 07:f0:9f:1b:81:7b:e2:b5:4e:35:e7:02:42:9c:08:c2:54:fc: 44:d9:55:a1:6f:1d:03:a8:65:5e:6f:80:71:92:09:25:e3:ef: e5:51:32:eb:54:e7:45:4d:68:3b:91:c5:d3:6d:11:30:84:1b: 63:86:a0:04:be:c1:9a:ee:f5:c4:90:51:1f:ab:0f:b8:9c:62: ed:72:e1:92:91:27:79:f5:2f:ce:43:5a:e1:4b:cd:e7:0c:6f: d8:ff:c0:5b:b2:71:1b:50:b0:25:cc:81:5e:7a:38:97:30:cc: 46:95:89:04:5a:b2:36:93:7b:87:5d:8d:04:1a:82:dc:a2:b8: 1b:8c:65:f9:25:02:f8:2d:b7:2b:6d:4e:82:f4:ff:e9:8e:bf: b4:0a:43:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7jQhxX12JSYBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJlZWU1M2MtZjM3My00ZWZlLWFlZDMtNGM1MDFjOWRk ZTc4MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk MWYzNjAwYmEtNjE2NC00YjhiLTg3ZTQtM2E3NTUzZTBiMWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyW3A5igFy32Ay1Q737ilwE7FHPzfulVGYvJ AtrcG9fQkFn4xWBQN6TuuZ8L9HKGrUotEKCUv8hL65twGLTGQGiR+OEtoqkvfDNN 8L28HeJA7IlPr71u9UrxYGNqfEYvgQ9WWX0/JTwOypUY1F/VA5XzK54YYJF3elVd 9z3y6lRmy1sCzlTzb1vUrJCYUfet3GuKaP5zCsAFDzOhglj19lMzWRZnrPAY02de zz3L3byI+V1UoUKNCa74cm7P5jI+WzYhfMGbPvAu35rnsreOBz1V+d/tQzTr5roo sTXfCToyj0SmdwJ05BxNiG5pFfFpcSYr7o2kstwjtjXFOgQGIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWflZoz/Onnp4KbYilda1llTI++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MmVl ZTUzYy1mMzczLTRlZmUtYWVkMy00YzUwMWM5ZGRlNzgvZjJiMmVmNWUtZTE5Ny0z MjczLTk3MjEtYjlhNTc1ZTFhZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDJlZWU1M2MtZjM3My00ZWZlLWFl ZDMtNGM1MDFjOWRkZTc4LzQyZWVlNTNjLWYzNzMtNGVmZS1hZWQzLTRjNTAxYzlk ZGU3OC5jcmwwHwYDVR0jBBgwFoAUoDUsuAu0cqvuuZwbSmjtCLih/ccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MmVlZTUzYy1mMzczLTRlZmUtYWVkMy00YzUw MWM5ZGRlNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4EMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSS5zzyEaHbTFRx0USROUiYZfcp8n5LXF5qP8zOebPWIW1uSFJgf8yU 5Zj5eL7//pw1WnarvgeC8qfJ6H0PT0omLkDhZT/Vhvi7bKJzCJTkfa+XnHaTC1mm QoWFpPe2CCbjNaV7eMOQ4P6TRgfwnxuBe+K1TjXnAkKcCMJU/ETZVaFvHQOoZV5v gHGSCSXj7+VRMutU50VNaDuRxdNtETCEG2OGoAS+wZru9cSQUR+rD7icYu1y4ZKR J3n1L85DWuFLzecMb9j/wFuycRtQsCXMgV56OJcwzEaViQRasjaTe4ddjQQagtyi uBuMZfklAvgttyttToL0/+mOv7QKQ1Q= -----END CERTIFICATE-----Generated at Fri Apr 17 16:35:52 2026 by rpki-client