$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/d34dc38a-07ce-3e37-9cd0-a31173f32136.roa File: d34dc38a-07ce-3e37-9cd0-a31173f32136.roa (raw, json) Hash identifier: Xa2YBFEMFNBDPJACaSYDDb2YRZygr9SOMCkLoJy9j6U= Subject key identifier: 33:21:EC:8F:B9:04:48:B8:AD:82:C1:CA:A2:DD:B0:8E:C8:0D:D1:6B Certificate issuer: /CN=f5f37851-5580-4893-8a07-8693f2521f18 Certificate serial: 010D0C9F4328584D571FC21889D287FAF2EC65C0 Authority key identifier: 67:1F:8C:A5:35:19:41:56:92:F6:96:DF:FA:31:37:A8:8C:0B:DB:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/d34dc38a-07ce-3e37-9cd0-a31173f32136.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 401897 IP address blocks: 23.143.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/f5f37851-5580-4893-8a07-8693f2521f18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/f5f37851-5580-4893-8a07-8693f2521f18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:c2:18:89:d2:87:fa:f2:ec:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f37851-5580-4893-8a07-8693f2521f18 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=192f2300-510d-4c19-bc56-e497796f2ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fc:f3:c4:05:5c:1b:b9:05:c8:f2:56:5d:b2: 90:52:0f:87:d6:8b:19:24:76:bf:1a:b1:6b:b0:c7: b9:b1:21:ba:54:57:44:89:59:c3:25:d7:33:d1:eb: 2b:be:34:35:53:35:e7:3d:98:9b:c7:13:76:45:ff: 9f:25:ee:2a:3f:0d:91:2b:8f:fd:a5:d0:92:8f:ce: fb:e2:c3:5d:bf:7f:26:20:3c:6d:d1:14:a7:97:a6: 94:32:1d:de:d3:ad:28:43:98:de:5b:08:db:d7:af: 55:cf:a3:91:df:bb:e8:41:53:39:d7:18:68:64:d2: fe:f1:c2:24:e5:f0:68:a4:33:8d:9f:95:44:41:55: 55:26:4f:c1:cd:6b:38:b6:c5:c2:86:9d:f2:11:b2: 79:75:74:1f:b7:5d:49:69:7e:90:35:12:5f:26:f4: 2a:88:bb:9a:9c:34:49:96:4d:0f:e3:9d:6a:a9:af: cb:81:a5:65:aa:d3:6d:8f:66:3d:45:6b:ae:ff:b8: ed:4d:99:37:55:fa:bc:e6:73:1f:92:e3:60:29:e4: 75:40:18:d5:3a:ed:90:1c:2c:93:fa:e8:68:76:45: 84:ca:75:6b:d9:46:6d:20:b1:fe:60:cd:7b:e7:8b: ab:0a:09:b3:2f:47:e3:21:bc:87:8c:51:92:62:de: 1c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:21:EC:8F:B9:04:48:B8:AD:82:C1:CA:A2:DD:B0:8E:C8:0D:D1:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/d34dc38a-07ce-3e37-9cd0-a31173f32136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/f5f37851-5580-4893-8a07-8693f2521f18.crl X509v3 Authority Key Identifier: keyid:67:1F:8C:A5:35:19:41:56:92:F6:96:DF:FA:31:37:A8:8C:0B:DB:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18.cer sbgp-ipAddrBlock: critical IPv4: 23.143.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:31:9a:a9:f2:59:07:06:6d:95:50:6c:6b:6c:89:da:3d:b1: 6b:7f:ff:21:e1:c3:0e:16:67:7b:7d:0b:a9:10:c5:f4:7e:da: 9c:3d:8f:6a:cc:4a:1d:2b:9e:e5:4a:5a:cf:ed:ad:a6:bb:f3: 1a:da:44:9a:50:2b:71:80:87:15:65:d3:e4:9e:04:9d:1f:e3: b1:60:df:12:7a:ac:0e:f4:30:7d:18:43:73:7c:b0:cf:7f:3b: 53:aa:4a:1d:2f:25:01:a4:9b:f9:3e:34:73:34:c2:c5:52:c6: 3c:5e:73:34:d4:b6:1b:02:cf:14:6e:85:c5:88:0a:21:61:83: d1:cd:06:e8:20:b7:cc:6d:1c:3d:fb:63:d0:53:85:e5:58:72: 72:76:e8:78:84:aa:43:81:38:a1:01:bf:ce:ad:e5:6a:88:06: cd:38:f1:1c:e1:f0:93:b5:cb:4f:94:b4:45:72:31:51:bb:b9: 85:b6:bf:24:3f:35:da:df:95:40:64:1f:26:bb:7f:9a:2c:dd: 79:2f:e9:54:93:97:37:1c:70:13:46:d0:3a:5a:f0:82:48:fc: 0e:e9:64:dc:07:5e:1d:82:5d:19:53:5c:ca:fe:bf:8b:d6:24: 59:c5:f5:8b:8a:ae:70:09:45:8d:5d:5b:f5:6d:ce:de:17:58: 44:88:38:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH8IYidKH+vLsZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMzc4NTEtNTU4MC00ODkzLThhMDctODY5M2YyNTIx ZjE4MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk MTkyZjIzMDAtNTEwZC00YzE5LWJjNTYtZTQ5Nzc5NmYyZWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PzzxAVcG7kFyPJWXbKQUg+H1osZJHa/GrFr sMe5sSG6VFdEiVnDJdcz0esrvjQ1UzXnPZibxxN2Rf+fJe4qPw2RK4/9pdCSj877 4sNdv38mIDxt0RSnl6aUMh3e060oQ5jeWwjb169Vz6OR37voQVM51xhoZNL+8cIk 5fBopDONn5VEQVVVJk/BzWs4tsXChp3yEbJ5dXQft11JaX6QNRJfJvQqiLuanDRJ lk0P451qqa/LgaVlqtNtj2Y9RWuu/7jtTZk3Vfq85nMfkuNgKeR1QBjVOu2QHCyT +uhodkWEynVr2UZtILH+YM1754urCgmzL0fjIbyHjFGSYt4cgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMh7I+5BEi4rYLByqLdsI7IDdFrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mNWYz Nzg1MS01NTgwLTQ4OTMtOGEwNy04NjkzZjI1MjFmMTgvZDM0ZGMzOGEtMDdjZS0z ZTM3LTljZDAtYTMxMTczZjMyMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjVmMzc4NTEtNTU4MC00ODkzLThh MDctODY5M2YyNTIxZjE4L2Y1ZjM3ODUxLTU1ODAtNDg5My04YTA3LTg2OTNmMjUy MWYxOC5jcmwwHwYDVR0jBBgwFoAUZx+MpTUZQVaS9pbf+jE3qIwL2zgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mNWYzNzg1MS01NTgwLTQ4OTMtOGEwNy04Njkz ZjI1MjFmMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF48UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQxmqnyWQcGbZVQbGtsido9sWt//yHhww4WZ3t9C6kQxfR+2pw9j2rM Sh0rnuVKWs/traa78xraRJpQK3GAhxVl0+SeBJ0f47Fg3xJ6rA70MH0YQ3N8sM9/ O1OqSh0vJQGkm/k+NHM0wsVSxjxeczTUthsCzxRuhcWICiFhg9HNBuggt8xtHD37 Y9BTheVYcnJ26HiEqkOBOKEBv86t5WqIBs048Rzh8JO1y0+UtEVyMVG7uYW2vyQ/ NdrflUBkHya7f5os3Xkv6VSTlzcccBNG0Dpa8IJI/A7pZNwHXh2CXRlTXMr+v4vW JFnF9YuKrnAJRY1dW/Vtzt4XWESIOHY= -----END CERTIFICATE-----Generated at Tue Apr 7 16:34:20 2026 by rpki-client