$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db4c8a39-6acc-31cf-bfb3-0fa5ea626dc3.roa File: db4c8a39-6acc-31cf-bfb3-0fa5ea626dc3.roa (raw, json) Hash identifier: 5XpFPfaaTlVy8FpnlcyOelYy+bqN3zEygIfhFCLmJXY= Subject key identifier: 47:F6:91:51:28:DC:5A:D4:BE:70:0C:36:AF:7E:3D:40:FA:77:A5:75 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E03861F44A906A8C5263C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db4c8a39-6acc-31cf-bfb3-0fa5ea626dc3.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 23.236.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:38:61:f4:4a:90:6a:8c:52:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=4c0dfbfa-d205-4ac9-b532-0236d39271dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:05:4d:6d:05:19:1e:08:cd:70:77:3d:c8:f9: f2:46:78:1d:a3:f6:cc:46:9e:d7:74:c2:23:1f:59: 6c:a1:87:5f:50:90:d8:97:af:d7:bc:b0:40:50:e5: f9:ed:13:c1:37:05:3b:23:ae:a0:a4:86:97:24:59: bf:a1:89:bd:59:b9:9e:17:d6:07:f6:89:81:55:a8: d0:32:85:e8:85:ba:0e:25:d1:79:bd:e4:65:5b:b3: df:46:05:54:aa:fb:42:1c:80:6a:73:a9:68:41:7e: 5a:7b:a6:7a:d4:b1:2a:b7:fc:45:b9:e6:d3:c4:65: 84:7d:26:66:07:1e:39:cf:41:84:27:21:1f:38:2b: f0:c9:9b:22:18:60:ce:3d:fd:3d:ba:2d:10:ed:43: f1:d7:62:2c:50:98:b0:c6:df:4d:fa:d3:54:11:00: 29:45:81:cf:49:c9:44:61:7b:61:59:84:85:81:bf: d0:d2:c7:4e:83:7c:e0:64:ab:01:9c:31:56:1d:43: 90:2a:73:55:3c:47:49:3f:bb:eb:e1:2e:c7:d0:f2: 15:72:a7:8d:61:45:59:b6:18:25:60:03:59:43:1f: f8:2f:2e:ed:a9:eb:ad:3c:65:11:df:bc:7b:c6:98: a3:aa:73:62:6b:8f:0d:ff:a6:37:e5:6e:05:24:ba: f5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F6:91:51:28:DC:5A:D4:BE:70:0C:36:AF:7E:3D:40:FA:77:A5:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db4c8a39-6acc-31cf-bfb3-0fa5ea626dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.236.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:9d:e8:2a:08:2c:12:4a:e6:45:60:85:32:db:aa:3d:79:21: 26:3f:9b:5a:d6:fa:34:19:9e:8e:b0:9b:42:ec:ae:4f:f4:c5: 3e:4c:d2:2c:c9:41:a6:89:57:c0:83:b4:f1:8b:64:59:e4:57: 04:b6:83:23:40:fa:19:c3:34:18:b5:5c:5e:fc:e8:72:46:58: b0:5c:e3:08:a9:7c:e7:65:77:e6:5a:9f:9f:39:58:41:b6:45: f8:14:1e:9f:82:e8:1f:d2:66:1d:59:0f:f3:41:17:42:a9:77: 06:3b:ce:19:81:02:27:55:ec:ad:6c:d2:56:e0:24:63:ab:32: 40:b4:d6:5f:e5:d9:68:cb:10:3e:55:4d:2c:14:a7:05:b1:18: 62:d0:13:0f:13:e9:42:1d:97:0e:c3:f7:24:21:2e:6f:f4:91: 14:da:8d:a7:fa:7e:3f:ff:6a:8c:65:d2:19:ba:64:54:0e:f9: 20:36:9f:38:42:a4:a5:f7:73:3f:c5:1a:26:5d:c1:a9:81:53: 3f:62:7b:b9:a0:cb:21:08:14:4a:5c:96:c9:4e:49:1a:39:93: b9:5d:49:41:01:e5:ac:c6:8d:f3:ba:50:f8:e4:86:09:94:a3: f9:30:52:4c:06:ce:36:e6:42:57:6a:7f:c5:ce:ca:e3:b7:9f: 6b:87:fa:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Dhh9EqQaoxSY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NGMwZGZiZmEtZDIwNS00YWM5LWI1MzItMDIzNmQzOTI3MWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQVNbQUZHgjNcHc9yPnyRngdo/bMRp7XdMIj H1lsoYdfUJDYl6/XvLBAUOX57RPBNwU7I66gpIaXJFm/oYm9WbmeF9YH9omBVajQ MoXohboOJdF5veRlW7PfRgVUqvtCHIBqc6loQX5ae6Z61LEqt/xFuebTxGWEfSZm Bx45z0GEJyEfOCvwyZsiGGDOPf09ui0Q7UPx12IsUJiwxt9N+tNUEQApRYHPSclE YXthWYSFgb/Q0sdOg3zgZKsBnDFWHUOQKnNVPEdJP7vr4S7H0PIVcqeNYUVZthgl YANZQx/4Ly7tqeutPGUR37x7xpijqnNia48N/6Y35W4FJLr1WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEf2kVEo3FrUvnAMNq9+PUD6d6V1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGI0YzhhMzktNmFjYy0z MWNmLWJmYjMtMGZhNWVhNjI2ZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+wwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJud6CoILBJK5kVghTLbqj15ISY/m1rW+jQZno6wm0Lsrk/0xT5M0izJ QaaJV8CDtPGLZFnkVwS2gyNA+hnDNBi1XF786HJGWLBc4wipfOdld+Zan585WEG2 RfgUHp+C6B/SZh1ZD/NBF0KpdwY7zhmBAidV7K1s0lbgJGOrMkC01l/l2WjLED5V TSwUpwWxGGLQEw8T6UIdlw7D9yQhLm/0kRTajaf6fj//aoxl0hm6ZFQO+SA2nzhC pKX3cz/FGiZdwamBUz9ie7mgyyEIFEpclslOSRo5k7ldSUEB5azGjfO6UPjkhgmU o/kwUkwGzjbmQldqf8XOyuO3n2uH+vU= -----END CERTIFICATE-----Generated at Thu Mar 19 01:47:28 2026 by rpki-client