$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/934ac425-340e-3407-9e69-6e3dc6e57157.roa File: 934ac425-340e-3407-9e69-6e3dc6e57157.roa (raw, json) Hash identifier: zXRUBTHlWGqgLJM1yy0NrBA1d0XybP4Xcb0Wx1JgTR8= Subject key identifier: B4:2C:D9:D1:19:11:50:4A:6D:F1:46:8A:E5:65:6A:82:10:A5:06:AE Certificate issuer: /CN=8698cf1c-6f2f-49f6-9a90-ce88a83b6f37 Certificate serial: 010D0C9F4328584D55BCB708EB4EF061B3E9FC80 Authority key identifier: A9:D4:C6:F9:E8:F9:E4:DB:86:27:DE:A3:E6:31:8B:49:AD:75:EC:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/934ac425-340e-3407-9e69-6e3dc6e57157.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 23.142.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b7:08:eb:4e:f0:61:b3:e9:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8698cf1c-6f2f-49f6-9a90-ce88a83b6f37 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=a33e90c1-1978-4a82-8343-985854188d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6f:ad:5b:ea:eb:50:8a:17:4f:17:fd:70:80: af:83:c8:a5:71:c9:7f:c8:2a:fb:5f:82:bb:8f:3e: b6:57:5e:54:15:de:d4:eb:58:fa:c1:ec:42:b9:65: 51:70:f4:62:a8:29:68:e8:f0:de:13:d4:7d:86:6b: 6f:82:e7:db:32:b2:7e:be:06:f6:99:bf:5b:a3:d2: 3b:98:55:31:d1:8a:f2:40:b2:1e:c0:64:eb:1a:99: b8:af:05:e7:9b:a4:86:1d:98:ee:45:b6:ad:b9:9b: 74:cd:37:8a:01:3a:d3:20:3a:5b:df:66:68:5f:74: 2d:1e:c6:82:3d:fc:0f:42:6f:9f:27:67:d5:27:3b: 70:51:bb:4a:2d:94:ef:fc:24:c2:d2:69:5a:73:5c: 45:dc:71:5d:d1:be:c9:93:8f:ce:e5:7f:8e:64:25: 0b:16:7f:2b:05:07:bc:56:a8:65:7b:8d:41:f4:3a: e4:ce:01:ff:b9:52:74:20:bc:2a:53:c0:90:99:2f: 7e:67:f2:9b:b8:0a:64:b0:36:62:57:94:f8:b7:21: 03:c9:95:53:53:df:da:59:50:b7:71:da:fb:fd:dd: 13:62:6b:9b:3a:68:d7:e9:9b:77:99:78:1d:e2:e8: 03:6d:8a:55:3a:d2:b6:d7:f3:e5:1e:75:d8:26:1d: 01:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2C:D9:D1:19:11:50:4A:6D:F1:46:8A:E5:65:6A:82:10:A5:06:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/934ac425-340e-3407-9e69-6e3dc6e57157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.crl X509v3 Authority Key Identifier: keyid:A9:D4:C6:F9:E8:F9:E4:DB:86:27:DE:A3:E6:31:8B:49:AD:75:EC:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.cer sbgp-ipAddrBlock: critical IPv4: 23.142.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:be:3c:ef:28:16:a0:4a:cc:58:1f:31:a4:f7:26:01:fd:1c: 7f:10:7d:9a:ed:97:c3:a8:b8:9a:18:74:18:31:dd:f0:77:b5: 11:9e:c3:b5:ce:d8:87:50:10:b5:5d:bf:2f:a2:ca:b0:d0:4e: 4d:8a:75:54:ae:1c:dc:78:5e:85:4d:5f:d7:1a:a1:31:3b:6b: 5c:64:ff:d3:73:4e:57:41:35:34:5e:df:aa:a0:58:d5:66:69: 48:d2:60:5f:2e:ae:d5:f4:c3:2d:7f:d6:4c:63:eb:06:e3:89: 62:d5:a5:13:ba:77:f3:08:4d:28:2b:6e:85:d8:1d:1b:3b:34: c6:50:17:8f:5e:95:d6:4f:ed:a6:29:31:6a:f4:cc:20:13:75: 19:12:b3:11:65:96:75:f3:2e:da:12:ed:2f:21:52:ee:0d:be: 69:57:19:ce:87:7d:0c:ca:33:95:87:34:b5:4e:55:f3:74:c6: 4b:69:d2:3f:2c:20:93:38:12:8e:c2:bc:8a:0c:12:80:eb:7e: 2f:07:33:11:37:1c:b9:e8:97:8d:ee:c0:22:6b:10:6f:e3:18: 90:28:ec:6a:b7:c2:62:51:22:39:33:1b:99:8d:b1:06:0a:18: 08:81:9c:e5:8f:9b:3a:24:47:7a:85:a3:8f:a8:70:dd:80:51: 4d:29:b6:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLcI607wYbPp/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY5OGNmMWMtNmYyZi00OWY2LTlhOTAtY2U4OGE4M2I2 ZjM3MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YTMzZTkwYzEtMTk3OC00YTgyLTgzNDMtOTg1ODU0MTg4ZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm+tW+rrUIoXTxf9cICvg8ilccl/yCr7X4K7 jz62V15UFd7U61j6wexCuWVRcPRiqClo6PDeE9R9hmtvgufbMrJ+vgb2mb9bo9I7 mFUx0YryQLIewGTrGpm4rwXnm6SGHZjuRbatuZt0zTeKATrTIDpb32ZoX3QtHsaC PfwPQm+fJ2fVJztwUbtKLZTv/CTC0mlac1xF3HFd0b7Jk4/O5X+OZCULFn8rBQe8 Vqhle41B9DrkzgH/uVJ0ILwqU8CQmS9+Z/KbuApksDZiV5T4tyEDyZVTU9/aWVC3 cdr7/d0TYmubOmjX6Zt3mXgd4ugDbYpVOtK21/PlHnXYJh0B7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQs2dEZEVBKbfFGiuVlaoIQpQauMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84Njk4 Y2YxYy02ZjJmLTQ5ZjYtOWE5MC1jZTg4YTgzYjZmMzcvOTM0YWM0MjUtMzQwZS0z NDA3LTllNjktNmUzZGM2ZTU3MTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODY5OGNmMWMtNmYyZi00OWY2LTlh OTAtY2U4OGE4M2I2ZjM3Lzg2OThjZjFjLTZmMmYtNDlmNi05YTkwLWNlODhhODNi NmYzNy5jcmwwHwYDVR0jBBgwFoAUqdTG+ej55NuGJ96j5jGLSa117OowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84Njk4Y2YxYy02ZjJmLTQ5ZjYtOWE5MC1jZTg4 YTgzYjZmMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF478MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIS+PO8oFqBKzFgfMaT3JgH9HH8QfZrtl8OouJoYdBgx3fB3tRGew7XO 2IdQELVdvy+iyrDQTk2KdVSuHNx4XoVNX9caoTE7a1xk/9NzTldBNTRe36qgWNVm aUjSYF8urtX0wy1/1kxj6wbjiWLVpRO6d/MITSgrboXYHRs7NMZQF49eldZP7aYp MWr0zCATdRkSsxFllnXzLtoS7S8hUu4NvmlXGc6HfQzKM5WHNLVOVfN0xktp0j8s IJM4Eo7CvIoMEoDrfi8HMxE3HLnol43uwCJrEG/jGJAo7Gq3wmJRIjkzG5mNsQYK GAiBnOWPmzokR3qFo4+ocN2AUU0ptgU= -----END CERTIFICATE-----Generated at Fri Apr 17 22:18:35 2026 by rpki-client