$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4/9af58f17-83cc-3766-a979-125c6f81440a.roa File: 9af58f17-83cc-3766-a979-125c6f81440a.roa (raw, json) Hash identifier: dO3FJD56mBXpU8nw/C27rYsMWBsXKRXR2WH+34CeNIQ= Subject key identifier: 3A:9D:1B:C6:FA:A9:BF:F9:AF:1B:F6:A9:66:16:CF:F7:BE:6F:91:B9 Certificate issuer: /CN=54814827-de65-4311-9f42-994fb992b2c4 Certificate serial: 010D0C9F4328584D39CF8F1D789253CFFC7D7980 Authority key identifier: EF:B4:17:4D:6E:B9:ED:D7:41:6F:BA:98:CC:02:5B:1F:28:E7:A0:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4/9af58f17-83cc-3766-a979-125c6f81440a.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 400211 IP address blocks: 23.188.200.0/24 maxlen: 24 2607:d240::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4/54814827-de65-4311-9f42-994fb992b2c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4/54814827-de65-4311-9f42-994fb992b2c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:8f:1d:78:92:53:cf:fc:7d:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54814827-de65-4311-9f42-994fb992b2c4 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=d719da44-c660-40c9-85ce-0eaa4756cb06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:65:3b:63:c8:1b:5b:1f:69:02:21:81:41:35: aa:7c:b1:c0:b1:c2:f3:e9:bb:2e:fc:3a:fb:00:e7: a7:74:7f:1d:44:9e:72:50:68:cf:3d:23:00:4b:e2: 78:d5:2f:53:a5:2c:f7:4a:98:70:59:aa:d5:79:94: e6:aa:be:81:a9:0a:f0:19:de:5d:5d:37:8a:ed:95: a5:b3:1c:0f:94:aa:ad:e2:9c:bc:58:0b:d2:99:21: 0b:dd:9d:51:39:25:a7:64:73:01:f1:42:db:9f:fa: 33:1e:4e:03:dd:38:3e:74:17:b3:e9:5b:a9:74:10: 63:e2:27:4b:b3:d8:c2:46:fc:4e:01:24:d9:d5:08: d7:86:d9:01:fa:9c:75:d2:56:cd:80:7c:0a:c3:a6: 11:cf:28:5f:74:23:17:23:2c:e6:ff:d1:77:a8:a0: fa:87:63:37:08:31:08:97:77:53:52:59:c3:32:15: 1a:e8:ff:de:3c:67:b0:a6:86:63:1a:b5:7c:52:47: bc:fe:f1:d4:24:f8:78:40:e6:6c:4b:eb:36:fb:58: 5c:0e:8e:70:ec:a1:ae:4b:71:17:ba:50:a5:9c:31: 6f:4c:28:1b:72:a1:be:87:15:39:28:fe:16:6d:dc: b4:21:a5:09:2e:fe:34:eb:25:86:73:c9:15:49:3e: 29:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9D:1B:C6:FA:A9:BF:F9:AF:1B:F6:A9:66:16:CF:F7:BE:6F:91:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4/9af58f17-83cc-3766-a979-125c6f81440a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4/54814827-de65-4311-9f42-994fb992b2c4.crl X509v3 Authority Key Identifier: keyid:EF:B4:17:4D:6E:B9:ED:D7:41:6F:BA:98:CC:02:5B:1F:28:E7:A0:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4.cer sbgp-ipAddrBlock: critical IPv4: 23.188.200.0/24 IPv6: 2607:d240::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:d3:ee:a9:d1:3d:93:ef:de:4a:6b:59:25:3a:ac:97:d3:57: 07:5f:9e:c9:df:0f:b1:34:27:f9:95:b6:48:67:e9:6a:de:c5: a5:75:6f:f8:52:65:3f:10:c8:25:0e:45:4b:ee:73:58:0f:b1: 1b:3c:e4:df:c8:a5:81:04:94:82:70:c3:ff:ab:d4:22:42:70: 95:b7:03:3f:0a:a9:89:39:93:f3:70:dc:c8:2b:f2:1c:09:f3: 72:9f:b7:e5:d6:29:33:52:c0:a9:4a:17:66:dd:b0:e2:68:00: a7:63:cc:e0:ce:6a:ac:ce:0c:ed:f8:65:c8:8f:a2:8a:71:13: 66:17:27:1b:b5:2c:e8:8f:d2:b8:d2:c2:f8:06:d5:9b:c8:ad: 60:5f:b8:ed:dc:e4:23:6f:64:dc:ce:d0:d5:e0:d4:89:37:f9: 3b:bc:a8:03:08:f1:e0:ae:2e:79:9d:c0:c8:db:bc:8c:26:b7: 5f:61:e5:d9:55:a9:0c:bd:a4:41:f0:ec:52:f2:b8:e2:c8:05: 68:13:c9:fa:36:bd:a8:38:1d:a2:d0:ad:bc:a5:70:00:5c:ff: 6f:18:a5:04:67:25:dd:56:4d:44:e1:30:9c:44:92:9c:00:f1: aa:95:cc:dd:fc:d1:9c:43:ca:e6:d1:07:a5:f1:27:4f:f8:a3: e9:64:26:bc -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE05z48deJJTz/x9eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQ4MTQ4MjctZGU2NS00MzExLTlmNDItOTk0ZmI5OTJi MmM0MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk ZDcxOWRhNDQtYzY2MC00MGM5LTg1Y2UtMGVhYTQ3NTZjYjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumU7Y8gbWx9pAiGBQTWqfLHAscLz6bsu/Dr7 AOendH8dRJ5yUGjPPSMAS+J41S9TpSz3SphwWarVeZTmqr6BqQrwGd5dXTeK7ZWl sxwPlKqt4py8WAvSmSEL3Z1ROSWnZHMB8ULbn/ozHk4D3Tg+dBez6VupdBBj4idL s9jCRvxOASTZ1QjXhtkB+px10lbNgHwKw6YRzyhfdCMXIyzm/9F3qKD6h2M3CDEI l3dTUlnDMhUa6P/ePGewpoZjGrV8Uke8/vHUJPh4QOZsS+s2+1hcDo5w7KGuS3EX ulClnDFvTCgbcqG+hxU5KP4Wbdy0IaUJLv406yWGc8kVST4p/QIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFDqdG8b6qb/5rxv2qWYWz/e+b5G5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81NDgx NDgyNy1kZTY1LTQzMTEtOWY0Mi05OTRmYjk5MmIyYzQvOWFmNThmMTctODNjYy0z NzY2LWE5NzktMTI1YzZmODE0NDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTQ4MTQ4MjctZGU2NS00MzExLTlm NDItOTk0ZmI5OTJiMmM0LzU0ODE0ODI3LWRlNjUtNDMxMS05ZjQyLTk5NGZiOTky YjJjNC5jcmwwHwYDVR0jBBgwFoAU77QXTW657ddBb7qYzAJbHyjnoPswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81NDgxNDgyNy1kZTY1LTQzMTEtOWY0Mi05OTRm Yjk5MmIyYzQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF7zIMA0E AgACMAcDBQAmB9JAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAKbT7qnRPZPv3kprWSU6rJfTVwdfnsnfD7E0 J/mVtkhn6WrexaV1b/hSZT8QyCUORUvuc1gPsRs85N/IpYEElIJww/+r1CJCcJW3 Az8KqYk5k/Nw3Mgr8hwJ83Kft+XWKTNSwKlKF2bdsOJoAKdjzODOaqzODO34ZciP oopxE2YXJxu1LOiP0rjSwvgG1ZvIrWBfuO3c5CNvZNzO0NXg1Ik3+Tu8qAMI8eCu LnmdwMjbvIwmt19h5dlVqQy9pEHw7FLyuOLIBWgTyfo2vag4HaLQrbylcABc/28Y pQRnJd1WTUThMJxEkpwA8aqVzN380ZxDyubRB6XxJ0/4o+lkJrw= -----END CERTIFICATE-----Generated at Mon Mar 23 18:54:11 2026 by rpki-client