$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/b8ed32fa-028c-3cfb-950c-51608cf30050.roa File: b8ed32fa-028c-3cfb-950c-51608cf30050.roa (raw, json) Hash identifier: jivxuHwUXIFm08Arqim1GxsSSX6AS4jBb7yDuJyVDWo= Subject key identifier: 4D:F8:16:63:99:63:D9:82:EB:17:C5:38:19:AE:99:D5:43:35:9C:2F Certificate issuer: /CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Certificate serial: 010D0C9F4328584D237A301E4EBB6049E0A09F80 Authority key identifier: FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/b8ed32fa-028c-3cfb-950c-51608cf30050.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 11913 IP address blocks: 23.163.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:30:1e:4e:bb:60:49:e0:a0:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=1ea0120f-982f-4df1-9440-d8a1d2c02dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:58:98:ff:b3:f2:56:6c:16:5e:dc:0a:dc:d1: bb:aa:1f:03:ef:c5:2f:bc:f1:12:c4:43:20:2b:64: 58:42:b2:2f:dc:4f:ae:f8:f3:28:5c:41:60:62:8d: 95:6a:3d:1d:58:63:70:0e:00:ff:20:f9:e3:68:b5: a8:d7:36:94:c0:1e:cd:6d:61:f4:5b:d9:ae:15:78: 7a:e1:92:30:2e:f7:a5:d2:a2:02:42:13:b9:7b:ea: 5c:8d:8a:de:a8:28:21:94:2e:03:37:ac:f0:06:42: 5a:b2:43:f2:9a:ef:6c:f8:87:8c:a5:20:30:16:ba: cf:39:6c:cf:80:d9:dc:95:76:d4:88:bb:d5:01:da: e1:99:7e:7d:9f:38:86:18:8f:24:1c:8f:d4:bf:8f: 0a:98:8e:5c:b2:81:aa:21:bb:34:b1:4c:e8:b2:7d: 79:fc:e3:0b:fc:72:24:f4:91:a8:72:4e:1c:cb:b8: be:b6:59:47:33:47:5b:36:d2:d7:89:03:c8:b3:02: f1:59:b7:bb:6e:ba:ec:dd:69:85:3c:f9:41:3c:d9: 48:3c:95:1b:5a:b7:b2:0d:93:81:0d:b5:8f:24:88: a5:c4:42:9f:03:b0:0f:e6:9d:a6:cd:79:6c:eb:39: 6a:7f:51:5e:70:89:78:7c:72:b3:0f:15:c0:c8:34: e0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F8:16:63:99:63:D9:82:EB:17:C5:38:19:AE:99:D5:43:35:9C:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/b8ed32fa-028c-3cfb-950c-51608cf30050.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl X509v3 Authority Key Identifier: keyid:FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer sbgp-ipAddrBlock: critical IPv4: 23.163.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f5:1b:a0:9d:b5:55:82:40:0d:34:cc:e0:20:12:8c:7c:f0: b6:22:7a:a9:75:7d:5c:62:d5:fc:cd:71:4f:10:c6:e4:b8:6e: 73:ee:cb:23:06:46:cb:2e:1e:aa:d7:73:41:06:7a:4c:70:87: cb:60:e4:8f:76:4c:31:23:e2:76:3c:d8:3a:ef:70:d8:10:51: cb:f8:c0:2b:3b:05:18:17:66:5a:47:39:0c:46:b1:a6:cb:eb: 0b:9e:23:ff:bb:30:12:09:f0:5c:d5:59:ff:50:44:f8:f4:b9: 99:12:99:71:c6:50:94:84:c5:b7:8b:8c:51:6b:c3:72:9e:cc: 66:59:93:f5:21:33:e0:f6:4b:26:c7:eb:60:d2:65:06:0d:92: 72:61:14:65:e9:23:ae:71:ec:4a:f0:f5:fc:e5:8e:8c:a9:da: 39:2f:3a:dc:56:43:63:71:13:b7:68:c7:79:a5:6e:c8:c4:a8: 36:a2:8b:06:b6:0e:9e:9f:9b:07:a1:cb:73:fa:0c:4b:00:e2: 49:c0:e7:dc:a2:4a:59:1a:c8:78:43:73:a2:21:43:07:40:3e: 4c:d6:56:30:dd:8b:5b:3c:63:79:3c:b9:df:83:a2:0c:88:a2: f2:a9:44:c6:67:32:eb:c8:c5:f9:af:7f:e4:6c:31:4e:5a:2d: 8b:da:30:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jejAeTrtgSeCgn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YzMTI5NmYtOGYyZi00MjY4LTg1OTktNGM0N2QyNWNm Y2YwMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MWVhMDEyMGYtOTgyZi00ZGYxLTk0NDAtZDhhMWQyYzAyZGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1iY/7PyVmwWXtwK3NG7qh8D78UvvPESxEMg K2RYQrIv3E+u+PMoXEFgYo2Vaj0dWGNwDgD/IPnjaLWo1zaUwB7NbWH0W9muFXh6 4ZIwLvel0qICQhO5e+pcjYreqCghlC4DN6zwBkJaskPymu9s+IeMpSAwFrrPOWzP gNnclXbUiLvVAdrhmX59nziGGI8kHI/Uv48KmI5csoGqIbs0sUzosn15/OML/HIk 9JGock4cy7i+tllHM0dbNtLXiQPIswLxWbe7brrs3WmFPPlBPNlIPJUbWreyDZOB DbWPJIilxEKfA7AP5p2mzXls6zlqf1FecIl4fHKzDxXAyDTg9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE34FmOZY9mC6xfFOBmumdVDNZwvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMx Mjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3ZDI1Y2ZjZjAvYjhlZDMyZmEtMDI4Yy0z Y2ZiLTk1MGMtNTE2MDhjZjMwMDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2YzMTI5NmYtOGYyZi00MjY4LTg1 OTktNGM0N2QyNWNmY2YwL2NmMzEyOTZmLThmMmYtNDI2OC04NTk5LTRjNDdkMjVj ZmNmMC5jcmwwHwYDVR0jBBgwFoAU+roXSGw1zYqLPBZgxG+fWA4vXmQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMxMjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3 ZDI1Y2ZjZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6N4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACf1G6CdtVWCQA00zOAgEox88LYieql1fVxi1fzNcU8QxuS4bnPuyyMG RssuHqrXc0EGekxwh8tg5I92TDEj4nY82DrvcNgQUcv4wCs7BRgXZlpHOQxGsabL 6wueI/+7MBIJ8FzVWf9QRPj0uZkSmXHGUJSExbeLjFFrw3KezGZZk/UhM+D2SybH 62DSZQYNknJhFGXpI65x7Erw9fzljoyp2jkvOtxWQ2NxE7dox3mlbsjEqDaiiwa2 Dp6fmwehy3P6DEsA4knA59yiSlkayHhDc6IhQwdAPkzWVjDdi1s8Y3k8ud+DogyI ovKpRMZnMuvIxfmvf+RsMU5aLYvaMHw= -----END CERTIFICATE-----Generated at Tue Mar 17 00:42:36 2026 by rpki-client