$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/2385dbd7-2d77-33fc-8bdd-fb57b1ecda6f.roa File: 2385dbd7-2d77-33fc-8bdd-fb57b1ecda6f.roa (raw, json) Hash identifier: dvENEboooIkKdsZu7YPGb4YlSRV6q2TXuiSMS/aMQ8I= Subject key identifier: 13:7D:37:81:BE:52:65:E8:A4:84:8B:4C:BB:3C:F5:0E:7F:D2:CE:6D Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db Certificate serial: 010D0C9F4328584D571FA87B4397B60FAEC7CD88 Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/2385dbd7-2d77-33fc-8bdd-fb57b1ecda6f.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 16584 IP address blocks: 23.140.96.0/24 maxlen: 24 23.140.97.0/24 maxlen: 24 204.9.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:a8:7b:43:97:b6:0f:ae:c7:cd:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=538588ba-bfee-409d-9535-955da3be1c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bf:db:97:7d:88:a1:2e:0e:82:a0:9d:17:ff: fd:31:c4:92:4c:58:12:21:25:28:cd:0c:ec:f2:a5: 16:c6:58:e8:7a:f0:5c:71:a6:50:d4:41:ef:19:f8: f9:ee:e2:16:7c:3e:9d:f7:f1:05:f5:db:d4:92:c5: 80:ce:9c:fb:c7:c8:35:f2:40:66:7b:89:f5:7a:94: e5:5e:a8:3c:16:28:16:52:d2:79:d1:18:af:47:3d: 97:30:59:a3:37:53:36:1e:7c:f5:58:49:28:92:c0: 61:a3:bb:53:ce:9e:0a:d5:e6:02:34:0a:74:92:7b: 9f:ac:e9:96:a9:ac:91:ef:b5:36:42:05:7c:18:46: aa:4b:03:a2:01:27:8d:3d:22:fa:a2:68:8e:19:86: 69:d6:c5:d0:27:52:9e:c2:20:b7:75:21:cd:5f:2b: a4:c4:1e:28:43:f1:15:27:0d:0b:f7:51:0a:23:0d: 41:f5:95:6b:62:b8:65:7f:fb:8a:b5:87:62:84:03: 74:40:47:c2:3d:14:29:32:85:cc:a9:90:3c:cb:96: 38:c4:d1:37:86:83:a1:8c:17:0e:ec:ce:06:c3:e8: 30:e3:90:48:ce:94:77:b3:ec:14:5a:b7:9e:6b:78: 11:75:02:72:f1:78:a6:82:c4:4e:4c:d6:4e:3c:e7: 50:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7D:37:81:BE:52:65:E8:A4:84:8B:4C:BB:3C:F5:0E:7F:D2:CE:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/2385dbd7-2d77-33fc-8bdd-fb57b1ecda6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl X509v3 Authority Key Identifier: keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer sbgp-ipAddrBlock: critical IPv4: 23.140.96.0/23 204.9.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:00:f6:76:c1:97:74:c8:83:2c:46:c1:be:e5:8e:15:6a:ab: 02:e6:f7:b2:2f:e9:8f:56:c4:44:9f:f2:be:c4:9f:29:9f:dd: f0:ab:ec:31:34:d7:09:f8:9b:98:83:65:8e:9a:85:49:c8:e8: d9:6a:64:93:49:d9:4b:a6:f9:a5:36:7b:8d:0b:1f:45:78:9b: a7:1c:eb:eb:a2:22:f5:73:a1:6a:96:40:41:7e:89:b0:fb:00: 14:ba:9c:d3:e5:c8:ea:3e:86:e1:83:44:05:17:00:8f:0d:24: dd:0f:99:67:89:bf:e8:64:7f:78:c0:9e:23:35:30:ab:d7:eb: a6:1a:b7:78:e3:16:11:38:c1:ef:08:e6:f2:49:fb:1c:2b:52: ae:95:f2:66:6e:8a:8d:ba:b4:19:96:53:66:c4:2f:53:38:66: 69:3a:0a:17:79:be:02:89:f8:f4:ea:b9:02:09:6d:15:27:28: 44:7a:9d:dc:98:5b:f9:2b:24:7b:91:04:94:f6:08:87:3e:3f: e3:1b:91:24:f6:45:25:e3:f4:3e:2b:ff:9e:d2:fa:2b:04:3e: f1:bf:ec:96:9c:4b:88:14:24:ca:c0:b2:61:19:bd:9e:6b:17: 54:c3:86:9a:fd:1d:6d:dc:78:f4:43:52:45:92:81:e7:b3:33: ed:30:2d:02 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1XH6h7Q5e2D67HzYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1 NmRiMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk NTM4NTg4YmEtYmZlZS00MDlkLTk1MzUtOTU1ZGEzYmUxYzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb/bl32IoS4OgqCdF//9McSSTFgSISUozQzs 8qUWxljoevBccaZQ1EHvGfj57uIWfD6d9/EF9dvUksWAzpz7x8g18kBme4n1epTl Xqg8FigWUtJ50RivRz2XMFmjN1M2Hnz1WEkoksBho7tTzp4K1eYCNAp0knufrOmW qayR77U2QgV8GEaqSwOiASeNPSL6omiOGYZp1sXQJ1KewiC3dSHNXyukxB4oQ/EV Jw0L91EKIw1B9ZVrYrhlf/uKtYdihAN0QEfCPRQpMoXMqZA8y5Y4xNE3hoOhjBcO 7M4Gw+gw45BIzpR3s+wUWreea3gRdQJy8XimgsROTNZOPOdQbQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBN9N4G+UmXopISLTLs89Q5/0s5tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4 NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvMjM4NWRiZDctMmQ3Ny0z M2ZjLThiZGQtZmI1N2IxZWNkYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj NzZmMjU2ZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBF4xgAwQC zAkkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABMA9nbBl3TIgyxGwb7ljhVqqwLm97Iv6Y9WxESf8r7Enymf 3fCr7DE01wn4m5iDZY6ahUnI6NlqZJNJ2Uum+aU2e40LH0V4m6cc6+uiIvVzoWqW QEF+ibD7ABS6nNPlyOo+huGDRAUXAI8NJN0PmWeJv+hkf3jAniM1MKvX66Yat3jj FhE4we8I5vJJ+xwrUq6V8mZuio26tBmWU2bEL1M4Zmk6Chd5vgKJ+PTquQIJbRUn KER6ndyYW/krJHuRBJT2CIc+P+MbkST2RSXj9D4r/57S+isEPvG/7JacS4gUJMrA smEZvZ5rF1TDhpr9HW3cePRDUkWSgeezM+0wLQI= -----END CERTIFICATE-----Generated at Fri Apr 17 18:58:46 2026 by rpki-client