$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/371dfc1e-c17f-3b08-9640-2c4cce59d6c6.roa File: 371dfc1e-c17f-3b08-9640-2c4cce59d6c6.roa (raw, json) Hash identifier: wxlUFpnTBgl/7O3dJr71K8fAHT5nMnwDfP9aAoRu8R0= Subject key identifier: 1D:4D:DA:CC:CC:24:B1:4A:D4:3A:CE:71:72:BA:60:84:72:47:82:BB Certificate issuer: /CN=e39e30b0-0750-4b85-a454-b97ac36b3e14 Certificate serial: 010D0C9F4328584D0A77A90EF246B2EF4DB520D0 Authority key identifier: 31:5C:74:54:FD:BC:2B:B4:93:F9:4D:0E:FE:C8:B0:5E:F6:62:51:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/371dfc1e-c17f-3b08-9640-2c4cce59d6c6.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 401443 IP address blocks: 23.128.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/e39e30b0-0750-4b85-a454-b97ac36b3e14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/e39e30b0-0750-4b85-a454-b97ac36b3e14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:a9:0e:f2:46:b2:ef:4d:b5:20:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39e30b0-0750-4b85-a454-b97ac36b3e14 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=99e1c7b0-9a75-4ee7-89a4-a4fcb4f8bcfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6c:02:7f:67:38:89:44:fb:b6:7f:c4:bf:fc: 60:77:78:70:8b:0e:99:45:63:65:ab:30:e0:e2:71: 7f:96:8a:b6:57:1f:25:69:b8:36:70:dc:33:c7:2d: b8:0c:b5:f1:f1:94:51:fb:46:ad:73:ff:bb:80:3e: 8f:5d:37:11:eb:23:ab:6e:36:02:82:1a:10:73:55: c4:cb:6a:ce:e0:90:78:6b:38:e9:bf:c9:93:b7:37: 09:fe:d3:7a:86:16:24:6d:87:86:88:01:35:47:8c: 14:36:0a:49:d9:08:c5:5c:37:0f:46:68:6f:18:8c: 75:7f:57:2e:9e:af:7d:8f:32:c3:b6:e4:84:04:43: 94:cd:40:4e:a3:03:a9:dd:58:a9:ed:54:ac:9d:0d: a4:48:ab:a1:21:1e:19:fa:2f:da:ea:e5:02:98:46: cf:52:70:9d:7e:11:0d:d6:27:21:5c:f9:02:38:a0: a5:a3:63:a2:fd:b6:1e:e6:74:63:9e:79:22:85:dc: 06:1e:6b:aa:e3:4c:f6:81:85:a6:32:f3:04:70:d4: aa:f8:6e:17:20:e4:db:a5:ac:c5:9c:26:1b:49:59: 7a:aa:1a:2c:c8:d5:0f:df:1b:d6:12:89:8e:df:77: cd:48:15:75:4b:9f:4e:ca:f1:78:bf:25:88:66:d6: 9e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4D:DA:CC:CC:24:B1:4A:D4:3A:CE:71:72:BA:60:84:72:47:82:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/371dfc1e-c17f-3b08-9640-2c4cce59d6c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/e39e30b0-0750-4b85-a454-b97ac36b3e14.crl X509v3 Authority Key Identifier: keyid:31:5C:74:54:FD:BC:2B:B4:93:F9:4D:0E:FE:C8:B0:5E:F6:62:51:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14.cer sbgp-ipAddrBlock: critical IPv4: 23.128.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:d8:8b:57:1f:b0:3f:e6:3b:0b:7b:d2:a4:c7:24:6e:7e:06: 22:57:de:7d:5b:2b:4f:57:e6:22:6e:2d:b5:6f:25:33:a2:e0: b8:b0:ec:58:03:9b:d7:7a:52:3b:4b:83:7e:1d:95:32:15:06: 1c:60:4e:d5:0e:f3:b2:22:de:19:d5:c2:28:87:5c:26:0d:f0: bc:97:38:ac:ce:e1:3e:f9:77:9b:ee:6c:cb:68:2a:ac:f3:5b: 84:56:2c:8c:e0:ad:87:3b:e7:59:1e:55:f6:b6:76:69:b1:f0: 1b:e2:8a:3d:b8:81:95:5d:4f:a7:60:77:c3:36:d4:79:3f:5b: 13:b5:bd:20:f9:42:9f:e7:41:33:de:6d:43:f9:4d:63:3a:13: 99:89:08:e7:8e:a2:54:63:4e:23:40:70:8d:86:65:4c:3f:c2: 45:9f:23:5c:76:79:b4:93:8a:d7:82:b0:5e:d6:f6:53:ad:49: 5e:94:10:38:61:86:7a:1e:12:c8:6f:69:65:65:25:e0:15:88: ec:51:fe:3d:84:93:3a:13:ec:8a:fb:71:62:42:c3:c0:cc:55: 57:e3:00:f8:79:89:d4:6d:14:95:18:15:d9:90:0f:71:85:24: d3:21:e6:67:20:9b:a1:34:4a:9e:5c:08:47:45:9c:b9:46:8b: b4:b1:95:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6kO8kay7021INAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5ZTMwYjAtMDc1MC00Yjg1LWE0NTQtYjk3YWMzNmIz ZTE0MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk OTllMWM3YjAtOWE3NS00ZWU3LTg5YTQtYTRmY2I0ZjhiY2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWwCf2c4iUT7tn/Ev/xgd3hwiw6ZRWNlqzDg 4nF/loq2Vx8labg2cNwzxy24DLXx8ZRR+0atc/+7gD6PXTcR6yOrbjYCghoQc1XE y2rO4JB4azjpv8mTtzcJ/tN6hhYkbYeGiAE1R4wUNgpJ2QjFXDcPRmhvGIx1f1cu nq99jzLDtuSEBEOUzUBOowOp3Vip7VSsnQ2kSKuhIR4Z+i/a6uUCmEbPUnCdfhEN 1ichXPkCOKClo2Oi/bYe5nRjnnkihdwGHmuq40z2gYWmMvMEcNSq+G4XIOTbpazF nCYbSVl6qhosyNUP3xvWEomO33fNSBV1S59OyvF4vyWIZtaehwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1N2szMJLFK1DrOcXK6YIRyR4K7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lMzll MzBiMC0wNzUwLTRiODUtYTQ1NC1iOTdhYzM2YjNlMTQvMzcxZGZjMWUtYzE3Zi0z YjA4LTk2NDAtMmM0Y2NlNTlkNmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTM5ZTMwYjAtMDc1MC00Yjg1LWE0 NTQtYjk3YWMzNmIzZTE0L2UzOWUzMGIwLTA3NTAtNGI4NS1hNDU0LWI5N2FjMzZi M2UxNC5jcmwwHwYDVR0jBBgwFoAUMVx0VP28K7ST+U0O/siwXvZiUVswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lMzllMzBiMC0wNzUwLTRiODUtYTQ1NC1iOTdh YzM2YjNlMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4CkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDYi1cfsD/mOwt70qTHJG5+BiJX3n1bK09X5iJuLbVvJTOi4Liw7FgD m9d6UjtLg34dlTIVBhxgTtUO87Ii3hnVwiiHXCYN8LyXOKzO4T75d5vubMtoKqzz W4RWLIzgrYc751keVfa2dmmx8Bviij24gZVdT6dgd8M21Hk/WxO1vSD5Qp/nQTPe bUP5TWM6E5mJCOeOolRjTiNAcI2GZUw/wkWfI1x2ebSTiteCsF7W9lOtSV6UEDhh hnoeEshvaWVlJeAViOxR/j2EkzoT7Ir7cWJCw8DMVVfjAPh5idRtFJUYFdmQD3GF JNMh5mcgm6E0Sp5cCEdFnLlGi7SxlZA= -----END CERTIFICATE-----Generated at Wed Mar 4 19:20:14 2026 by rpki-client