$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/66fdfdc5-75c5-341f-bb69-a0dd32a66996.roa File: 66fdfdc5-75c5-341f-bb69-a0dd32a66996.roa (raw, json) Hash identifier: xYQc8naOp0FugAK9jXaBgccYJW9d/YzlzYRcd7TPyuU= Subject key identifier: 34:2B:DC:32:F7:0C:90:0B:A5:10:AC:8C:5C:05:F1:45:6A:EF:F0:5F Certificate issuer: /CN=dfe6dbdd-2611-4405-b156-fd403fa6b530 Certificate serial: 010D0C9F4328584D5884E9A71D31EF22B0033400 Authority key identifier: 31:46:B5:FB:E9:64:97:85:98:29:06:BE:76:9D:22:6E:38:CF:51:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/66fdfdc5-75c5-341f-bb69-a0dd32a66996.roa Signing time: Tue 31 Mar 2026 01:00:23 +0000 ROA not before: Tue 31 Mar 2026 01:00:23 +0000 ROA not after: Mon 29 Jun 2026 01:00:23 +0000 asID: 14054 IP address blocks: 23.152.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:84:e9:a7:1d:31:ef:22:b0:03:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe6dbdd-2611-4405-b156-fd403fa6b530 Validity Not Before: Mar 31 01:00:23 2026 GMT Not After : Jun 29 01:00:23 2026 GMT Subject: CN=cd31499b-8f7f-4e96-a86d-0361531a451b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4c:07:5e:b1:59:80:c4:bb:54:83:54:24:85: c6:78:ff:2d:f5:6f:52:d0:6c:9c:04:5a:06:f1:b7: 63:03:05:c9:d2:73:25:54:f7:a2:1a:bc:f8:d1:dd: 63:59:78:b6:1d:fd:6e:7c:19:c4:ce:e9:27:60:45: 90:98:c5:d9:10:8d:2a:5a:59:c2:60:e9:1c:b5:0d: e8:a1:c7:4f:43:ed:55:a5:44:96:12:2b:62:4a:7a: 4c:75:ce:9c:26:40:60:27:1f:51:81:b8:f5:20:63: 52:73:db:cb:a5:01:31:f0:d0:b6:96:87:f4:2a:81: 0c:b0:7d:9c:58:56:2d:64:29:6d:b3:ba:a9:a9:b4: 8f:fc:4c:c2:0d:a9:39:47:e0:de:a1:1c:01:74:eb: a5:c3:5f:e4:d0:a4:38:01:69:b7:91:95:6e:e1:73: 6c:cc:98:81:05:e9:42:3b:ba:5d:f4:69:83:83:9d: eb:74:61:00:26:7f:e9:e6:83:b0:89:32:fd:92:31: 00:bd:ba:6e:80:84:a4:d8:9b:0a:fa:6c:5f:fa:46: 3e:99:2b:0d:d1:1f:f7:27:43:27:07:50:d9:3c:1e: 6c:8a:f8:5c:bd:11:49:b1:53:8a:b0:08:21:43:fd: 3c:0d:78:da:97:49:22:68:8d:ae:35:1e:9b:24:43: 27:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2B:DC:32:F7:0C:90:0B:A5:10:AC:8C:5C:05:F1:45:6A:EF:F0:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/66fdfdc5-75c5-341f-bb69-a0dd32a66996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.crl X509v3 Authority Key Identifier: keyid:31:46:B5:FB:E9:64:97:85:98:29:06:BE:76:9D:22:6E:38:CF:51:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer sbgp-ipAddrBlock: critical IPv4: 23.152.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:8d:fe:c6:03:7c:07:68:f9:ac:03:43:27:e9:e5:7b:f2:d2: a6:28:6b:48:2f:bf:56:06:af:20:ea:53:ef:af:4c:1f:d5:05: a9:f9:ea:ec:49:d4:dc:2a:70:c9:da:eb:54:5c:2e:3b:56:6c: 6b:55:94:d2:5e:5d:d3:e1:ce:7a:52:3f:ca:b8:1f:d6:40:55: 34:cf:f6:e4:ef:26:f5:38:d5:e9:60:d5:a3:a0:9e:b2:ed:76: 26:36:ba:6d:9c:ad:ac:7b:e9:2a:81:d1:d3:70:b2:43:19:82: 8d:22:ff:5a:51:0a:00:66:48:e1:bb:48:9a:b0:53:e1:2c:61: bc:c7:07:69:2f:4e:72:ca:c7:45:04:4c:a3:1d:28:5a:b2:e2: 6a:61:5e:b5:37:38:b0:aa:9e:b5:b9:b0:02:72:69:e5:1d:78: 9c:a4:8c:95:37:a9:33:40:26:44:48:4f:5a:cc:c3:d3:b8:bb: 94:0a:92:e7:28:63:82:6e:c7:a6:b5:61:e7:4b:0d:c8:52:3f: 1c:d0:e2:2a:a4:e8:32:73:04:eb:b1:65:bc:4f:68:cb:14:f1: f9:5d:79:e7:c2:18:f2:8d:5d:76:37:14:31:8e:f2:5b:26:92: d2:27:fc:da:84:d0:e9:83:d2:ce:69:4e:72:49:6c:5f:49:5f: df:fa:0e:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1YhOmnHTHvIrADNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlNmRiZGQtMjYxMS00NDA1LWIxNTYtZmQ0MDNmYTZi NTMwMB4XDTI2MDMzMTAxMDAyM1oXDTI2MDYyOTAxMDAyM1owLzEtMCsGA1UEAxMk Y2QzMTQ5OWItOGY3Zi00ZTk2LWE4NmQtMDM2MTUzMWE0NTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEwHXrFZgMS7VINUJIXGeP8t9W9S0GycBFoG 8bdjAwXJ0nMlVPeiGrz40d1jWXi2Hf1ufBnEzuknYEWQmMXZEI0qWlnCYOkctQ3o ocdPQ+1VpUSWEitiSnpMdc6cJkBgJx9Rgbj1IGNSc9vLpQEx8NC2lof0KoEMsH2c WFYtZClts7qpqbSP/EzCDak5R+DeoRwBdOulw1/k0KQ4AWm3kZVu4XNszJiBBelC O7pd9GmDg53rdGEAJn/p5oOwiTL9kjEAvbpugISk2JsK+mxf+kY+mSsN0R/3J0Mn B1DZPB5sivhcvRFJsVOKsAghQ/08DXjal0kiaI2uNR6bJEMn5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQr3DL3DJALpRCsjFwF8UVq7/BfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmU2 ZGJkZC0yNjExLTQ0MDUtYjE1Ni1mZDQwM2ZhNmI1MzAvNjZmZGZkYzUtNzVjNS0z NDFmLWJiNjktYTBkZDMyYTY2OTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZlNmRiZGQtMjYxMS00NDA1LWIx NTYtZmQ0MDNmYTZiNTMwL2RmZTZkYmRkLTI2MTEtNDQwNS1iMTU2LWZkNDAzZmE2 YjUzMC5jcmwwHwYDVR0jBBgwFoAUMUa1++lkl4WYKQa+dp0ibjjPURIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmU2ZGJkZC0yNjExLTQ0MDUtYjE1Ni1mZDQw M2ZhNmI1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5h0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyN/sYDfAdo+awDQyfp5Xvy0qYoa0gvv1YGryDqU++vTB/VBan56uxJ 1NwqcMna61RcLjtWbGtVlNJeXdPhznpSP8q4H9ZAVTTP9uTvJvU41elg1aOgnrLt diY2um2crax76SqB0dNwskMZgo0i/1pRCgBmSOG7SJqwU+EsYbzHB2kvTnLKx0UE TKMdKFqy4mphXrU3OLCqnrW5sAJyaeUdeJykjJU3qTNAJkRIT1rMw9O4u5QKkuco Y4Jux6a1YedLDchSPxzQ4iqk6DJzBOuxZbxPaMsU8fldeefCGPKNXXY3FDGO8lsm ktIn/NqE0OmD0s5pTnJJbF9JX9/6Dvw= -----END CERTIFICATE-----Generated at Mon Apr 13 12:10:08 2026 by rpki-client