$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/3eb42a5a-0fa5-3564-a10d-1674d389315c.roa File: 3eb42a5a-0fa5-3564-a10d-1674d389315c.roa (raw, json) Hash identifier: 3t6nsKDRsjVDdKPINqVOLB0Oq2gF8RHoHNuoi3GrhOI= Subject key identifier: 49:C0:A3:9B:26:EB:12:E8:37:90:A2:87:52:40:EC:78:D8:C8:46:13 Certificate issuer: /CN=b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7 Certificate serial: 010D0C9F4328584D571FB2EB4B6770BAF35C6100 Authority key identifier: 6C:59:DF:4F:1E:39:6F:89:97:D1:38:C1:0D:8B:81:BC:54:BC:EB:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/3eb42a5a-0fa5-3564-a10d-1674d389315c.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 40343 IP address blocks: 23.168.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b2:eb:4b:67:70:ba:f3:5c:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=03ce5f6e-4bf8-44c4-941d-fd916481dc5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1c:9b:74:60:65:33:36:38:b7:9a:f8:66:ac: 66:a4:31:6d:9b:ef:d6:07:20:ef:ca:50:91:23:0b: 91:3c:ff:6d:fe:73:15:b6:0f:d7:42:a1:12:1c:3e: d5:30:f2:ef:47:83:95:3d:2c:20:74:3b:57:bb:bd: d2:a6:77:ad:ca:01:f0:b4:f2:85:13:65:f1:f6:39: 8b:f4:1a:ff:e5:0f:81:1e:2c:fa:9c:b9:e9:59:73: 26:6b:b6:9f:bd:3b:f0:85:13:de:d3:8c:54:6e:76: f1:69:cb:b7:0e:a3:f5:94:e6:b3:47:8e:bc:fb:b4: 41:16:de:e5:1b:cc:02:75:ef:9a:f1:b5:da:45:0f: 5b:6c:33:47:f5:b5:6d:ff:18:3d:82:ce:0c:f6:9d: ba:a1:83:0d:e9:65:6c:7e:87:cc:1b:66:10:af:43: 40:74:fa:a2:36:ce:80:5d:05:f7:58:71:9d:a0:1b: 26:70:6e:f6:a0:e2:cf:de:f3:a2:7b:a6:2c:f4:b4: 8f:95:42:f1:c3:95:d7:74:2c:19:f7:f7:8a:88:cb: 15:58:9a:f4:c8:d5:08:5e:64:b2:00:ad:9d:69:bc: d5:86:03:4e:6f:e4:ce:9d:2b:a7:2b:f5:e0:3a:9f: d0:15:70:65:19:2e:28:60:ae:21:41:1b:ad:80:0d: e4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C0:A3:9B:26:EB:12:E8:37:90:A2:87:52:40:EC:78:D8:C8:46:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/3eb42a5a-0fa5-3564-a10d-1674d389315c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.crl X509v3 Authority Key Identifier: keyid:6C:59:DF:4F:1E:39:6F:89:97:D1:38:C1:0D:8B:81:BC:54:BC:EB:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer sbgp-ipAddrBlock: critical IPv4: 23.168.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:24:b0:78:02:4c:17:bb:75:5e:0c:6d:be:0a:54:b7:ed:97: db:87:72:0c:54:c9:70:ad:bf:4f:37:2e:8f:48:bd:cf:2d:0e: ed:42:06:61:ca:78:6f:16:87:22:20:71:94:bc:15:e8:82:02: 51:43:3a:cb:9f:90:2c:11:6c:66:14:30:19:15:11:a6:98:a0: 38:a9:f0:f0:50:8e:40:6b:a4:bd:9c:33:11:68:1b:d4:c9:a4: 4c:46:df:a7:67:7c:54:e4:6a:a3:04:d8:d6:0b:a9:2c:ea:92: 95:e0:f0:dd:10:0e:43:f0:c6:a3:7c:f7:ed:35:32:4c:df:ce: 45:e3:f5:d3:ca:58:f4:a7:2b:37:da:48:e8:a0:61:85:3a:30: 85:e4:cd:c9:c6:09:11:63:63:d6:16:de:93:75:4e:dc:57:5d: 31:06:6b:05:c7:15:64:89:17:97:c1:02:52:10:fc:58:07:89: ad:6d:ec:2b:6a:17:b8:3e:14:50:27:16:25:58:90:97:6d:d5: 83:fc:60:82:bf:c7:d4:54:6b:19:77:6c:8b:e4:33:9f:5c:be: 64:95:ab:e5:a3:23:ac:83:b2:a1:c1:93:69:a5:00:51:ae:29: 0b:32:b5:c8:2c:18:29:b5:1d:eb:88:73:5d:3b:19:94:27:76: 89:0e:eb:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7LrS2dwuvNcYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjY1NGViNjMtMWJiYi00N2NjLThmYzMtZjQ1YTliMmE2 OWE3MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk MDNjZTVmNmUtNGJmOC00NGM0LTk0MWQtZmQ5MTY0ODFkYzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRybdGBlMzY4t5r4ZqxmpDFtm+/WByDvylCR IwuRPP9t/nMVtg/XQqESHD7VMPLvR4OVPSwgdDtXu73SpnetygHwtPKFE2Xx9jmL 9Br/5Q+BHiz6nLnpWXMma7afvTvwhRPe04xUbnbxacu3DqP1lOazR468+7RBFt7l G8wCde+a8bXaRQ9bbDNH9bVt/xg9gs4M9p26oYMN6WVsfofMG2YQr0NAdPqiNs6A XQX3WHGdoBsmcG72oOLP3vOie6Ys9LSPlULxw5XXdCwZ9/eKiMsVWJr0yNUIXmSy AK2dabzVhgNOb+TOnSunK/XgOp/QFXBlGS4oYK4hQRutgA3kdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnAo5sm6xLoN5Cih1JA7HjYyEYTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNjU0 ZWI2My0xYmJiLTQ3Y2MtOGZjMy1mNDVhOWIyYTY5YTcvM2ViNDJhNWEtMGZhNS0z NTY0LWExMGQtMTY3NGQzODkzMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjY1NGViNjMtMWJiYi00N2NjLThm YzMtZjQ1YTliMmE2OWE3L2I2NTRlYjYzLTFiYmItNDdjYy04ZmMzLWY0NWE5YjJh NjlhNy5jcmwwHwYDVR0jBBgwFoAUbFnfTx45b4mX0TjBDYuBvFS868MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNjU0ZWI2My0xYmJiLTQ3Y2MtOGZjMy1mNDVh OWIyYTY5YTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6hAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgksHgCTBe7dV4Mbb4KVLftl9uHcgxUyXCtv083Lo9Ivc8tDu1CBmHK eG8WhyIgcZS8FeiCAlFDOsufkCwRbGYUMBkVEaaYoDip8PBQjkBrpL2cMxFoG9TJ pExG36dnfFTkaqME2NYLqSzqkpXg8N0QDkPwxqN89+01MkzfzkXj9dPKWPSnKzfa SOigYYU6MIXkzcnGCRFjY9YW3pN1TtxXXTEGawXHFWSJF5fBAlIQ/FgHia1t7Ctq F7g+FFAnFiVYkJdt1YP8YIK/x9RUaxl3bIvkM59cvmSVq+WjI6yDsqHBk2mlAFGu KQsytcgsGCm1HeuIc107GZQndokO6wU= -----END CERTIFICATE-----Generated at Mon Apr 13 12:28:42 2026 by rpki-client