$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/f23e2a3a-a075-31c5-a07e-1d43dac01650.roa File: f23e2a3a-a075-31c5-a07e-1d43dac01650.roa (raw, json) Hash identifier: P32Glau882oeN1P+sWR2X1U7HFMopb9a7AkUC6RHfE4= Subject key identifier: 30:32:E4:CA:3E:79:E0:FA:EE:27:5B:31:33:4F:9B:B0:97:3A:14:8A Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F4328584D1B1A14095B6D23DC4D9436C0 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/f23e2a3a-a075-31c5-a07e-1d43dac01650.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 23528 IP address blocks: 168.203.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:14:09:5b:6d:23:dc:4d:94:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=283e9005-e47a-48f6-bee6-92656fcd4596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:ca:34:3b:8b:a0:40:14:cf:6a:71:6a:b5: 40:ba:6d:77:ba:18:a7:aa:ce:06:31:4e:04:85:f7: 26:fb:fc:ca:b2:b7:0a:a5:06:10:4c:b1:c2:7d:df: e4:10:33:b9:a6:be:99:a5:41:dd:0d:aa:f1:dc:3b: c6:07:7d:a6:45:7b:fe:5d:e5:5d:88:df:7f:e6:a1: 3c:4b:80:d0:af:35:5c:5a:cd:f5:b5:2b:1b:d3:de: e2:49:64:45:40:25:02:34:44:17:1f:b6:9d:68:25: 9f:65:be:58:e3:7c:00:18:d5:d9:b1:a7:f0:34:08: ad:cc:b5:60:b1:cd:10:55:e4:55:10:43:29:b0:db: 50:73:03:e3:f5:c0:7b:49:d2:1a:e2:72:da:40:7d: 9f:73:cf:84:21:e3:eb:5a:bc:a5:1f:ee:20:14:48: ff:a9:41:88:03:94:ae:b3:aa:f7:34:74:d1:79:35: 1e:ff:45:b4:70:f8:63:a9:d2:61:cf:fd:ee:c5:b4: 6d:96:fc:b6:5e:e6:ea:ef:cd:9c:3f:e8:f2:5d:5b: f5:a9:2e:55:28:85:f5:bd:73:52:1c:54:41:12:a1: 5c:57:49:f8:15:22:18:ef:86:bf:e3:ed:7d:c4:66: ed:bb:5e:bd:b8:24:f2:8d:02:0a:0d:79:23:82:c0: fa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:32:E4:CA:3E:79:E0:FA:EE:27:5B:31:33:4F:9B:B0:97:3A:14:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/f23e2a3a-a075-31c5-a07e-1d43dac01650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 168.203.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:b6:77:d8:fc:15:39:a6:7e:f3:c6:ae:b7:a8:6e:e1:13:09: 0c:e9:78:a5:fd:38:02:f0:38:ae:28:da:cb:4d:f9:45:39:30: 98:3a:07:c6:69:cd:aa:96:30:db:d7:d1:58:97:de:bf:ac:1f: 3b:13:43:9e:33:13:9f:ca:12:97:4a:89:b4:87:ed:24:b9:7a: 35:e2:3a:5f:04:df:1b:8a:4d:17:c7:60:60:f1:d5:ca:c8:da: 1b:0c:06:96:1f:17:b0:4f:1d:17:5a:0a:04:8d:96:6e:14:9b: a0:c3:c2:d0:63:ed:c5:6d:07:3e:34:76:34:fc:73:a7:e3:dc: 96:ef:14:cf:2c:47:95:f2:e1:c4:82:23:19:86:c9:5b:a5:77: 55:de:aa:9e:90:64:c1:14:6d:b6:40:7c:6c:b2:1e:f2:13:32: 09:3f:15:be:23:b6:95:13:fb:59:50:dd:9d:c6:1f:53:d5:76: 52:03:54:e4:5f:de:a6:0c:ee:2e:01:33:d7:3b:ee:5b:70:da: 60:be:56:7d:bb:a7:3a:51:c0:11:e1:88:2a:64:7f:58:af:19: 7f:4e:f5:cf:d7:52:5e:aa:d9:e4:5e:6f:0d:7b:d3:cb:a6:59: b7:ca:61:dd:bd:df:a7:f1:9d:24:d0:51:41:46:75:0f:22:10: 4b:50:68:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGhQJW20j3E2UNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MjgzZTkwMDUtZTQ3YS00OGY2LWJlZTYtOTI2NTZmY2Q0NTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9PKNDuLoEAUz2pxarVAum13uhinqs4GMU4E hfcm+/zKsrcKpQYQTLHCfd/kEDO5pr6ZpUHdDarx3DvGB32mRXv+XeVdiN9/5qE8 S4DQrzVcWs31tSsb097iSWRFQCUCNEQXH7adaCWfZb5Y43wAGNXZsafwNAitzLVg sc0QVeRVEEMpsNtQcwPj9cB7SdIa4nLaQH2fc8+EIePrWrylH+4gFEj/qUGIA5Su s6r3NHTReTUe/0W0cPhjqdJhz/3uxbRtlvy2Xubq782cP+jyXVv1qS5VKIX1vXNS HFRBEqFcV0n4FSIY74a/4+19xGbtu169uCTyjQIKDXkjgsD6SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAy5Mo+eeD67idbMTNPm7CXOhSKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvZjIzZTJhM2EtYTA3NS0z MWM1LWEwN2UtMWQ0M2RhYzAxNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqMs/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJe2d9j8FTmmfvPGrreobuETCQzpeKX9OALwOK4o2stN+UU5MJg6B8Zp zaqWMNvX0ViX3r+sHzsTQ54zE5/KEpdKibSH7SS5ejXiOl8E3xuKTRfHYGDx1crI 2hsMBpYfF7BPHRdaCgSNlm4Um6DDwtBj7cVtBz40djT8c6fj3JbvFM8sR5Xy4cSC IxmGyVuld1Xeqp6QZMEUbbZAfGyyHvITMgk/Fb4jtpUT+1lQ3Z3GH1PVdlIDVORf 3qYM7i4BM9c77ltw2mC+Vn27pzpRwBHhiCpkf1ivGX9O9c/XUl6q2eRebw1708um WbfKYd2936fxnSTQUUFGdQ8iEEtQaJw= -----END CERTIFICATE-----Generated at Tue Mar 24 16:48:17 2026 by rpki-client