$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2c58ba9-3393-4f4c-abe1-b231a3ea2700/b38d1175-13aa-3117-97b6-7b37c05e8a88.roa File: b38d1175-13aa-3117-97b6-7b37c05e8a88.roa (raw, json) Hash identifier: MVlhYbAtO70dfFPYSYf0zMZxOEvg3kvEjiXKx2OI2+s= Subject key identifier: 49:5C:C2:54:43:45:D4:B4:12:14:26:0F:96:A1:6F:B2:68:53:F7:76 Certificate issuer: /CN=b2c58ba9-3393-4f4c-abe1-b231a3ea2700 Certificate serial: 010D0C9F4328584D5A8ADB63483D5410ABF59C80 Authority key identifier: AE:12:28:05:FD:B0:9B:F5:B1:DF:DC:14:98:5A:C4:0F:07:F4:3E:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2c58ba9-3393-4f4c-abe1-b231a3ea2700.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2c58ba9-3393-4f4c-abe1-b231a3ea2700/b38d1175-13aa-3117-97b6-7b37c05e8a88.roa Signing time: Tue 31 Mar 2026 18:24:06 +0000 ROA not before: Tue 31 Mar 2026 18:24:06 +0000 ROA not after: Mon 29 Jun 2026 18:24:06 +0000 asID: 33387 IP address blocks: 23.148.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2c58ba9-3393-4f4c-abe1-b231a3ea2700/b2c58ba9-3393-4f4c-abe1-b231a3ea2700.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2c58ba9-3393-4f4c-abe1-b231a3ea2700/b2c58ba9-3393-4f4c-abe1-b231a3ea2700.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2c58ba9-3393-4f4c-abe1-b231a3ea2700.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5a:8a:db:63:48:3d:54:10:ab:f5:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2c58ba9-3393-4f4c-abe1-b231a3ea2700 Validity Not Before: Mar 31 18:24:06 2026 GMT Not After : Jun 29 18:24:06 2026 GMT Subject: CN=579a8dc8-0184-4a63-a275-8f3ef17c5e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b9:2b:cf:df:ea:20:cf:10:38:cf:bb:ef:b3: f0:f4:ae:93:6b:c6:c7:9b:a3:cc:57:41:8b:8c:f2: bd:80:f4:de:52:73:08:41:20:3d:64:e3:45:fc:8e: 78:41:6c:01:bb:8b:c8:8a:41:40:53:d6:09:99:de: be:d5:9d:0b:67:ad:71:27:53:da:7f:18:2e:81:0b: 0a:fe:46:57:ec:c3:cb:6f:c9:02:6f:f4:09:63:38: ce:26:60:4c:fa:ff:5f:2a:c8:d7:37:fb:3a:ac:cf: f4:e8:8e:55:c1:0c:be:a5:9f:1a:b9:87:61:1d:58: ae:e8:b6:6c:52:f9:e0:2c:a2:8d:9e:69:bf:47:a7: 44:a9:66:2e:76:e3:82:dd:f0:6e:a7:54:45:cd:93: c2:29:aa:ad:54:2f:f4:4c:2a:e6:69:dd:f6:aa:b4: ad:6e:c9:2a:0e:f4:ec:82:2d:94:04:0f:09:8f:1c: 87:c9:86:4f:e5:c1:e7:2c:8f:4e:fc:d9:1d:5a:0e: 0b:68:48:b9:6b:f7:15:c6:a0:03:b8:4d:a5:d8:15: 52:22:d2:b1:f4:1b:96:92:11:ed:50:89:66:09:55: 99:7d:93:32:15:1c:9c:d4:4b:fa:9b:ce:4a:90:e4: 27:3d:eb:b6:20:78:f7:d7:48:4f:dd:f1:ed:a5:60: 09:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5C:C2:54:43:45:D4:B4:12:14:26:0F:96:A1:6F:B2:68:53:F7:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2c58ba9-3393-4f4c-abe1-b231a3ea2700/b38d1175-13aa-3117-97b6-7b37c05e8a88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2c58ba9-3393-4f4c-abe1-b231a3ea2700/b2c58ba9-3393-4f4c-abe1-b231a3ea2700.crl X509v3 Authority Key Identifier: keyid:AE:12:28:05:FD:B0:9B:F5:B1:DF:DC:14:98:5A:C4:0F:07:F4:3E:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2c58ba9-3393-4f4c-abe1-b231a3ea2700.cer sbgp-ipAddrBlock: critical IPv4: 23.148.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:cc:fa:6a:ad:1f:21:e1:de:a2:ff:ec:94:e1:59:01:02:31: 00:05:22:bf:c8:c7:97:17:0a:d0:b0:cc:63:e1:e2:82:78:a3: 68:53:f8:19:0d:38:be:15:a8:d9:62:7c:3f:9d:46:7e:65:b4: 77:cd:63:09:57:69:19:1a:6d:7a:d4:da:ae:9c:ad:12:6c:cf: 9e:91:62:e0:9a:0f:bd:50:d9:d6:45:3d:50:00:3b:5f:2f:05: 14:5a:4e:2d:52:64:87:e1:77:75:9e:4c:f3:6a:15:93:ad:49: fd:f1:59:69:8a:7c:e9:e7:1e:bd:76:80:06:11:a4:68:a1:4e: 40:00:fd:06:13:9b:8b:4a:2d:84:01:1d:ba:d7:35:f4:bb:e5: 44:44:5e:3f:9e:1c:79:27:94:5c:1d:c0:1c:bc:0d:8e:50:d1: f1:c5:5f:be:1d:29:f5:1c:bd:56:56:2c:29:58:f3:66:2f:92: 43:22:0a:bb:af:ee:47:6c:22:f7:2e:12:3e:7f:3c:12:7f:75: af:28:f5:a9:64:58:dd:07:13:ee:69:e9:7e:9e:1e:b2:ee:ea: 38:ab:98:c6:2b:18:f5:0e:28:7d:38:60:0f:56:e0:73:31:06: c5:61:a7:29:06:26:d9:c9:00:eb:b1:91:6f:4c:c6:2f:8a:0f: de:bc:a1:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1aittjSD1UEKv1nIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJjNThiYTktMzM5My00ZjRjLWFiZTEtYjIzMWEzZWEy NzAwMB4XDTI2MDMzMTE4MjQwNloXDTI2MDYyOTE4MjQwNlowLzEtMCsGA1UEAxMk NTc5YThkYzgtMDE4NC00YTYzLWEyNzUtOGYzZWYxN2M1ZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbkrz9/qIM8QOM+777Pw9K6Ta8bHm6PMV0GL jPK9gPTeUnMIQSA9ZONF/I54QWwBu4vIikFAU9YJmd6+1Z0LZ61xJ1PafxgugQsK /kZX7MPLb8kCb/QJYzjOJmBM+v9fKsjXN/s6rM/06I5VwQy+pZ8auYdhHViu6LZs UvngLKKNnmm/R6dEqWYuduOC3fBup1RFzZPCKaqtVC/0TCrmad32qrStbskqDvTs gi2UBA8JjxyHyYZP5cHnLI9O/NkdWg4LaEi5a/cVxqADuE2l2BVSItKx9BuWkhHt UIlmCVWZfZMyFRyc1Ev6m85KkOQnPeu2IHj310hP3fHtpWAJEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElcwlRDRdS0EhQmD5ahb7JoU/d2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iMmM1 OGJhOS0zMzkzLTRmNGMtYWJlMS1iMjMxYTNlYTI3MDAvYjM4ZDExNzUtMTNhYS0z MTE3LTk3YjYtN2IzN2MwNWU4YTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjJjNThiYTktMzM5My00ZjRjLWFi ZTEtYjIzMWEzZWEyNzAwL2IyYzU4YmE5LTMzOTMtNGY0Yy1hYmUxLWIyMzFhM2Vh MjcwMC5jcmwwHwYDVR0jBBgwFoAUrhIoBf2wm/Wx39wUmFrEDwf0PoUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iMmM1OGJhOS0zMzkzLTRmNGMtYWJlMS1iMjMx YTNlYTI3MDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5QUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTM+mqtHyHh3qL/7JThWQECMQAFIr/Ix5cXCtCwzGPh4oJ4o2hT+BkN OL4VqNlifD+dRn5ltHfNYwlXaRkabXrU2q6crRJsz56RYuCaD71Q2dZFPVAAO18v BRRaTi1SZIfhd3WeTPNqFZOtSf3xWWmKfOnnHr12gAYRpGihTkAA/QYTm4tKLYQB HbrXNfS75UREXj+eHHknlFwdwBy8DY5Q0fHFX74dKfUcvVZWLClY82YvkkMiCruv 7kdsIvcuEj5/PBJ/da8o9alkWN0HE+5p6X6eHrLu6jirmMYrGPUOKH04YA9W4HMx BsVhpykGJtnJAOuxkW9Mxi+KD968ofE= -----END CERTIFICATE-----Generated at Mon Apr 13 12:23:31 2026 by rpki-client