$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/09568afc-1b7f-31a0-b7ef-b103efdcc17b.roa File: 09568afc-1b7f-31a0-b7ef-b103efdcc17b.roa (raw, json) Hash identifier: iajALywgfqb4dmBmw1lvR/636kjdyT9CdGpP37HGP3o= Subject key identifier: 6D:FA:D5:87:1D:44:39:3B:E9:9E:76:D4:C8:4F:57:8C:86:50:F5:47 Certificate issuer: /CN=8ce08935-bd58-4f80-acf9-a66a5d74f52e Certificate serial: 010D0C9F4328584D55BCB434B4E0EDAC0971F980 Authority key identifier: C8:4D:73:7E:51:D3:53:E1:F1:31:98:28:AE:D9:CB:65:C2:B3:89:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/09568afc-1b7f-31a0-b7ef-b103efdcc17b.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 23.143.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b4:34:b4:e0:ed:ac:09:71:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ce08935-bd58-4f80-acf9-a66a5d74f52e Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=f31757b4-d2ff-4c12-8d30-371fa3c64f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:42:ac:dc:f0:fc:62:4d:82:2b:d6:6d:95:42: 2f:27:77:5e:17:b4:74:16:21:58:f0:a8:79:c6:61: d3:e2:18:bc:f5:3d:9f:97:42:9f:01:b5:13:ca:b6: 53:a5:63:c0:af:4a:66:1d:d7:8a:d1:cb:9d:4f:5c: fd:69:fe:ca:73:83:80:22:f6:43:2c:4f:82:57:ad: c4:e8:6e:d8:8f:ba:c9:ef:ad:fb:9d:2a:4b:5d:36: 26:0e:4d:96:cc:10:11:8e:e3:a8:32:ff:18:ab:1d: 87:e7:e2:60:46:3d:22:28:cd:10:2f:5b:f5:32:fa: 47:14:24:c0:64:ef:bd:0b:7a:9e:1f:ff:81:34:49: 7c:b3:21:a2:73:21:2e:68:d5:45:13:90:52:50:78: 55:aa:70:a4:a8:94:ec:d2:1e:c2:06:1e:1c:4a:96: 1c:5f:be:0b:4b:42:71:ba:91:99:b1:b2:16:72:7b: f6:c8:9e:07:34:33:56:2c:0f:a2:3b:fa:fd:91:48: 19:92:71:ad:4d:de:eb:d7:e1:b5:df:13:15:ee:08: fa:b2:08:86:2c:07:02:64:d0:e6:af:4c:4c:60:dd: 96:61:bc:38:bb:fe:46:59:52:df:10:85:ac:d9:28: 2a:b3:69:c1:6b:87:31:2f:83:77:07:7a:aa:d7:59: e3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FA:D5:87:1D:44:39:3B:E9:9E:76:D4:C8:4F:57:8C:86:50:F5:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/09568afc-1b7f-31a0-b7ef-b103efdcc17b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl X509v3 Authority Key Identifier: keyid:C8:4D:73:7E:51:D3:53:E1:F1:31:98:28:AE:D9:CB:65:C2:B3:89:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer sbgp-ipAddrBlock: critical IPv4: 23.143.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:f3:de:f9:c9:71:6d:35:f7:bb:6d:48:61:42:20:8f:ac:b3: eb:6e:cc:c0:ff:90:44:6b:b6:0c:7e:7d:83:bd:19:f2:8f:e3: 39:05:4f:e9:23:54:86:95:ab:9b:37:40:79:55:e6:a7:cc:11: a9:2e:1b:a2:5b:14:86:ba:b3:a3:3e:15:4e:fd:19:7a:b6:21: 10:c6:1f:17:05:e8:b8:2c:50:3a:db:ea:02:e3:d6:4c:6c:a8: 1b:41:2d:ef:a4:02:c8:aa:a1:d6:15:0b:a0:ba:87:c7:4b:e4: 8b:72:ed:d3:3d:31:ec:87:cc:67:49:89:e9:b7:6f:a2:9f:ef: 98:03:4b:39:e4:06:c5:83:16:e8:8c:dc:ae:00:ca:09:77:e2: e5:d9:c8:5d:a3:d2:ef:c9:0f:a4:51:17:1f:a9:a9:43:e4:8d: c3:c5:22:96:c2:e2:9c:70:75:5e:48:fd:03:e5:78:9f:56:f4: 4f:23:fe:4e:3e:15:c1:60:3a:18:8a:fc:47:b5:50:e5:fa:60: 6e:52:b9:ee:ea:e0:33:b5:9b:18:0d:62:09:85:98:f0:29:a7: 06:25:c9:87:93:b8:18:b6:e6:e6:54:a4:df:99:26:a9:c7:80: ee:77:22:9e:09:1b:51:0b:25:ee:cc:35:bf:20:88:e4:80:4b: ac:15:da:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLQ0tODtrAlx+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNlMDg5MzUtYmQ1OC00ZjgwLWFjZjktYTY2YTVkNzRm NTJlMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZjMxNzU3YjQtZDJmZi00YzEyLThkMzAtMzcxZmEzYzY0ZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EKs3PD8Yk2CK9ZtlUIvJ3deF7R0FiFY8Kh5 xmHT4hi89T2fl0KfAbUTyrZTpWPAr0pmHdeK0cudT1z9af7Kc4OAIvZDLE+CV63E 6G7Yj7rJ7637nSpLXTYmDk2WzBARjuOoMv8Yqx2H5+JgRj0iKM0QL1v1MvpHFCTA ZO+9C3qeH/+BNEl8syGicyEuaNVFE5BSUHhVqnCkqJTs0h7CBh4cSpYcX74LS0Jx upGZsbIWcnv2yJ4HNDNWLA+iO/r9kUgZknGtTd7r1+G13xMV7gj6sgiGLAcCZNDm r0xMYN2WYbw4u/5GWVLfEIWs2Sgqs2nBa4cxL4N3B3qq11njWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG361YcdRDk76Z521MhPV4yGUPVHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84Y2Uw ODkzNS1iZDU4LTRmODAtYWNmOS1hNjZhNWQ3NGY1MmUvMDk1NjhhZmMtMWI3Zi0z MWEwLWI3ZWYtYjEwM2VmZGNjMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOGNlMDg5MzUtYmQ1OC00ZjgwLWFj ZjktYTY2YTVkNzRmNTJlLzhjZTA4OTM1LWJkNTgtNGY4MC1hY2Y5LWE2NmE1ZDc0 ZjUyZS5jcmwwHwYDVR0jBBgwFoAUyE1zflHTU+HxMZgortnLZcKziQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84Y2UwODkzNS1iZDU4LTRmODAtYWNmOS1hNjZh NWQ3NGY1MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF48MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrz3vnJcW0197ttSGFCII+ss+tuzMD/kERrtgx+fYO9GfKP4zkFT+kj VIaVq5s3QHlV5qfMEakuG6JbFIa6s6M+FU79GXq2IRDGHxcF6LgsUDrb6gLj1kxs qBtBLe+kAsiqodYVC6C6h8dL5Ity7dM9MeyHzGdJiem3b6Kf75gDSznkBsWDFuiM 3K4Aygl34uXZyF2j0u/JD6RRFx+pqUPkjcPFIpbC4pxwdV5I/QPleJ9W9E8j/k4+ FcFgOhiK/Ee1UOX6YG5Sue7q4DO1mxgNYgmFmPAppwYlyYeTuBi25uZUpN+ZJqnH gO53Ip4JG1ELJe7MNb8giOSAS6wV2vA= -----END CERTIFICATE-----Generated at Fri Apr 17 11:57:05 2026 by rpki-client