$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/401985a3-82fb-38a4-a3a9-2b894ca2670e.roa File: 401985a3-82fb-38a4-a3a9-2b894ca2670e.roa (raw, json) Hash identifier: AE0O4Ti0Atyiw82DMJyCzPZ8EF0sXpJOpWlYEBEprV8= Subject key identifier: FD:28:83:0A:E9:96:97:97:BE:66:4E:CE:9E:39:42:1B:F6:76:75:0E Certificate issuer: /CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4 Certificate serial: 010D0C9F4328584D5243C2EB636E3926F0E70880 Authority key identifier: B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/401985a3-82fb-38a4-a3a9-2b894ca2670e.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 401833 IP address blocks: 23.141.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:c2:eb:63:6e:39:26:f0:e7:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=44e9223f-8b10-4d15-a604-4b8df48e8a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9a:3f:8c:17:49:33:72:3e:1d:5c:31:e7:5a: 8d:bf:b0:3d:ff:a6:96:8e:ec:88:62:43:80:7a:60: 2e:cd:47:e2:0f:e4:26:49:7b:5b:1e:7a:51:7c:68: 52:75:04:66:de:9a:66:d3:4c:84:25:cd:f5:1a:f2: 97:4d:88:84:53:ae:f1:d3:3b:e3:2e:9b:56:c7:7b: f8:57:b4:ac:2e:6f:57:3d:c5:57:1e:34:0e:76:9b: 36:e4:c3:92:ca:3a:ca:4c:55:42:10:dd:c7:45:53: ff:75:da:3e:99:7c:c8:7e:00:2a:e1:44:ee:f9:1b: 62:65:80:66:8c:18:fd:14:9b:dd:81:0d:68:60:a6: 68:be:7c:d6:5d:2c:32:86:f8:b7:34:ab:fe:37:02: 93:c2:dd:99:35:46:bd:f1:f8:b5:f0:d3:d1:ba:e7: 7c:06:31:a3:85:01:58:97:4b:b1:51:b4:32:26:27: 35:b4:b5:cd:b2:9f:50:6b:a1:ea:68:a0:27:54:d4: 69:35:58:df:81:4c:7a:4f:ba:8d:16:cf:26:90:6c: 1d:66:84:40:3b:31:53:97:7d:89:82:96:74:0d:ae: 8a:40:6d:c2:67:ad:9c:6f:74:d6:43:86:a3:e2:b5: 66:43:76:28:a5:ee:4f:8a:cd:ca:30:23:1d:d6:4e: 3e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:28:83:0A:E9:96:97:97:BE:66:4E:CE:9E:39:42:1B:F6:76:75:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/401985a3-82fb-38a4-a3a9-2b894ca2670e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl X509v3 Authority Key Identifier: keyid:B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer sbgp-ipAddrBlock: critical IPv4: 23.141.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c5:aa:a3:c8:67:84:29:be:90:c1:d2:38:59:69:b8:35:13: 95:bb:e1:c9:f8:fc:da:21:79:51:26:09:03:5b:8d:14:2e:f1: 2c:ae:6c:ca:9b:78:03:91:41:de:d3:62:28:02:27:85:ad:b2: 1f:69:4b:88:c1:da:1e:43:c9:8d:35:b7:f0:b4:83:e2:0b:3e: 00:81:e9:9b:23:91:21:22:ee:75:84:9b:39:d7:3b:f5:f5:0b: 32:ee:41:17:e7:85:7d:80:6b:06:3d:63:63:92:ea:da:ea:73: 9d:3a:11:b6:d1:fc:f7:69:56:52:22:68:90:04:4e:fe:ea:89: b2:cd:cd:bb:b6:70:d0:43:7c:a7:d8:1b:7d:71:43:03:0c:22: ad:c9:04:3f:83:67:bd:af:12:43:fb:2c:ba:10:d1:d5:9a:15: 3c:bb:88:e0:25:c6:e4:ec:94:64:bb:20:8d:b6:52:14:29:a6: 2a:a8:3d:7c:5b:36:5b:26:6d:ba:3a:6b:1a:0c:79:66:e8:b2: 72:5f:81:36:09:d5:61:f8:63:bb:d9:cb:3d:0c:ff:05:58:b8: 3e:8b:51:c3:09:8f:06:14:33:77:03:2b:04:0a:07:29:00:b5: e0:08:70:6e:a7:24:33:53:2a:41:81:37:31:cd:27:de:db:c6: bc:c9:4f:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ8LrY245JvDnCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E4MWUzOTEtMmY5Zi00M2FjLWE3M2UtZTAxOGUyNzlj MmQ0MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NDRlOTIyM2YtOGIxMC00ZDE1LWE2MDQtNGI4ZGY0OGU4YTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZo/jBdJM3I+HVwx51qNv7A9/6aWjuyIYkOA emAuzUfiD+QmSXtbHnpRfGhSdQRm3ppm00yEJc31GvKXTYiEU67x0zvjLptWx3v4 V7SsLm9XPcVXHjQOdps25MOSyjrKTFVCEN3HRVP/ddo+mXzIfgAq4UTu+RtiZYBm jBj9FJvdgQ1oYKZovnzWXSwyhvi3NKv+NwKTwt2ZNUa98fi18NPRuud8BjGjhQFY l0uxUbQyJic1tLXNsp9Qa6HqaKAnVNRpNVjfgUx6T7qNFs8mkGwdZoRAOzFTl32J gpZ0Da6KQG3CZ62cb3TWQ4aj4rVmQ3Yope5Pis3KMCMd1k4++QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0ogwrplpeXvmZOzp45Qhv2dnUOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83YTgx ZTM5MS0yZjlmLTQzYWMtYTczZS1lMDE4ZTI3OWMyZDQvNDAxOTg1YTMtODJmYi0z OGE0LWEzYTktMmI4OTRjYTI2NzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2E4MWUzOTEtMmY5Zi00M2FjLWE3 M2UtZTAxOGUyNzljMmQ0LzdhODFlMzkxLTJmOWYtNDNhYy1hNzNlLWUwMThlMjc5 YzJkNC5jcmwwHwYDVR0jBBgwFoAUs7QcrwOOl+lOWy/V0e9YnCntD0wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83YTgxZTM5MS0yZjlmLTQzYWMtYTczZS1lMDE4 ZTI3OWMyZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF428MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzFqqPIZ4QpvpDB0jhZabg1E5W74cn4/NoheVEmCQNbjRQu8SyubMqb eAORQd7TYigCJ4Wtsh9pS4jB2h5DyY01t/C0g+ILPgCB6ZsjkSEi7nWEmznXO/X1 CzLuQRfnhX2AawY9Y2OS6trqc506EbbR/PdpVlIiaJAETv7qibLNzbu2cNBDfKfY G31xQwMMIq3JBD+DZ72vEkP7LLoQ0dWaFTy7iOAlxuTslGS7II22UhQppiqoPXxb Nlsmbbo6axoMeWbosnJfgTYJ1WH4Y7vZyz0M/wVYuD6LUcMJjwYUM3cDKwQKBykA teAIcG6nJDNTKkGBNzHNJ97bxrzJT5g= -----END CERTIFICATE-----Generated at Fri Apr 17 11:16:49 2026 by rpki-client