$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/c0003f88-1259-3a4d-9728-816cbaf9272b.roa File: c0003f88-1259-3a4d-9728-816cbaf9272b.roa (raw, json) Hash identifier: 1jifxhBR4OUMYWx+irholWNqcAmdXSKBdm3FLlgZiXw= Subject key identifier: 3D:32:68:14:16:1F:08:C4:45:1A:FD:D3:03:E2:8F:A5:9D:06:54:AE Certificate issuer: /CN=dc563dc9-6b87-4d82-8a58-6b8b7917092c Certificate serial: 010D0C9F4328584D0A7795B6DAD1FEDA3C8F46C0 Authority key identifier: A0:36:F8:0B:C8:AD:05:3F:44:8C:B8:A2:AB:AA:39:66:57:E0:D3:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/c0003f88-1259-3a4d-9728-816cbaf9272b.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 18450 IP address blocks: 23.159.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/dc563dc9-6b87-4d82-8a58-6b8b7917092c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/dc563dc9-6b87-4d82-8a58-6b8b7917092c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:95:b6:da:d1:fe:da:3c:8f:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc563dc9-6b87-4d82-8a58-6b8b7917092c Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=437e478b-186b-462f-a0e7-1410a484183c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e6:81:bc:45:3a:87:19:51:5d:69:00:1c:f0: 84:0a:bb:01:d8:12:79:64:68:03:81:42:18:62:a3: 80:d3:f3:6d:7d:0e:ae:1d:0e:70:d5:a1:11:d3:fd: 90:c6:1e:9c:e9:9e:eb:f7:41:af:3d:20:52:93:7d: bf:20:36:e1:c5:96:94:26:8d:27:fc:dd:21:d3:07: ff:b8:bf:33:db:4d:e6:e8:08:f2:cc:fd:de:32:61: 42:c5:35:69:f6:28:6d:08:f0:4c:86:68:b3:e1:ec: 76:bd:65:20:02:ce:54:ab:ab:1d:2f:6f:a9:32:81: 57:ac:18:af:cc:1c:b0:9c:8b:ca:bc:d4:94:4a:70: 05:85:5b:2f:70:2f:e3:75:a0:44:6e:ae:d1:dc:dd: 3c:91:00:97:db:5b:45:b6:f9:8e:99:be:c5:bb:ab: 0d:15:37:e7:ff:73:d1:05:7b:01:62:5e:cd:a5:d7: 83:bf:0c:2b:95:cf:b9:e2:27:99:a5:02:f0:6c:8d: dd:db:26:9a:20:80:98:da:8e:47:05:a0:0d:a8:30: 33:80:48:96:36:28:55:04:84:02:fb:67:ca:2c:23: 27:7e:06:60:20:89:ed:10:cb:17:f0:dd:f5:bd:01: 9b:58:da:fd:05:d0:27:3f:8e:94:e9:71:72:48:27: c5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:32:68:14:16:1F:08:C4:45:1A:FD:D3:03:E2:8F:A5:9D:06:54:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/c0003f88-1259-3a4d-9728-816cbaf9272b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/dc563dc9-6b87-4d82-8a58-6b8b7917092c.crl X509v3 Authority Key Identifier: keyid:A0:36:F8:0B:C8:AD:05:3F:44:8C:B8:A2:AB:AA:39:66:57:E0:D3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c.cer sbgp-ipAddrBlock: critical IPv4: 23.159.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:c0:b9:f3:99:cf:2f:33:b8:a5:85:5c:b0:a2:e4:55:4d:70: 8e:b4:74:a1:e4:39:44:f4:2b:8f:b5:ed:7c:18:12:cd:5c:50: 47:49:e7:29:69:75:a4:8e:4c:4e:30:8a:8b:47:7a:8a:81:cf: 95:62:39:28:d8:ae:a0:08:84:e9:71:a8:18:e5:e9:3b:ff:76: 4e:75:7c:5e:39:95:bd:5f:52:42:63:1a:7c:d0:fa:4b:83:92: aa:a3:cf:5e:0f:05:09:6c:c0:0b:c6:3e:ec:9a:fd:c9:25:65: b2:f4:ab:40:a4:06:b1:b8:87:69:1c:34:98:38:77:d2:f8:96: be:fd:d9:30:99:f8:d8:f7:3f:7a:f6:17:f0:ad:40:f4:65:77: 37:a3:ea:05:6a:65:80:99:3a:1f:2b:d3:36:b6:8d:8b:eb:9f: 03:d8:97:e7:7e:64:a6:33:c8:80:ec:c2:fc:59:ef:f8:48:32: e4:06:6e:57:81:ad:d8:8b:89:6d:f8:46:d1:9e:20:18:95:ec: ac:38:65:30:45:09:4a:c0:c1:5e:de:7a:c1:ba:44:ca:c5:86: 75:c8:55:64:b2:b6:1b:fd:63:d8:34:c3:77:e7:6b:ff:36:5e: e3:e9:04:6c:94:c7:bf:aa:ec:ec:36:68:a7:76:d3:65:dd:0d: 22:b6:c5:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd5W22tH+2jyPRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM1NjNkYzktNmI4Ny00ZDgyLThhNTgtNmI4Yjc5MTcw OTJjMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk NDM3ZTQ3OGItMTg2Yi00NjJmLWEwZTctMTQxMGE0ODQxODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOaBvEU6hxlRXWkAHPCECrsB2BJ5ZGgDgUIY YqOA0/NtfQ6uHQ5w1aER0/2Qxh6c6Z7r90GvPSBSk32/IDbhxZaUJo0n/N0h0wf/ uL8z203m6AjyzP3eMmFCxTVp9ihtCPBMhmiz4ex2vWUgAs5Uq6sdL2+pMoFXrBiv zBywnIvKvNSUSnAFhVsvcC/jdaBEbq7R3N08kQCX21tFtvmOmb7Fu6sNFTfn/3PR BXsBYl7NpdeDvwwrlc+54ieZpQLwbI3d2yaaIICY2o5HBaANqDAzgEiWNihVBIQC +2fKLCMnfgZgIIntEMsX8N31vQGbWNr9BdAnP46U6XFySCfFNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0yaBQWHwjERRr90wPij6WdBlSuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYzU2 M2RjOS02Yjg3LTRkODItOGE1OC02YjhiNzkxNzA5MmMvYzAwMDNmODgtMTI1OS0z YTRkLTk3MjgtODE2Y2JhZjkyNzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGM1NjNkYzktNmI4Ny00ZDgyLThh NTgtNmI4Yjc5MTcwOTJjL2RjNTYzZGM5LTZiODctNGQ4Mi04YTU4LTZiOGI3OTE3 MDkyYy5jcmwwHwYDVR0jBBgwFoAUoDb4C8itBT9EjLiiq6o5Zlfg040wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYzU2M2RjOS02Yjg3LTRkODItOGE1OC02Yjhi NzkxNzA5MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF58IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTAufOZzy8zuKWFXLCi5FVNcI60dKHkOUT0K4+17XwYEs1cUEdJ5ylp daSOTE4wiotHeoqBz5ViOSjYrqAIhOlxqBjl6Tv/dk51fF45lb1fUkJjGnzQ+kuD kqqjz14PBQlswAvGPuya/cklZbL0q0CkBrG4h2kcNJg4d9L4lr792TCZ+Nj3P3r2 F/CtQPRldzej6gVqZYCZOh8r0za2jYvrnwPYl+d+ZKYzyIDswvxZ7/hIMuQGbleB rdiLiW34RtGeIBiV7Kw4ZTBFCUrAwV7eesG6RMrFhnXIVWSythv9Y9g0w3fna/82 XuPpBGyUx7+q7Ow2aKd202XdDSK2xYg= -----END CERTIFICATE-----Generated at Sat Mar 21 20:09:04 2026 by rpki-client