$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/681eb164-1fd1-314f-ae1b-15a8eee124ad.roa File: 681eb164-1fd1-314f-ae1b-15a8eee124ad.roa (raw, json) Hash identifier: KiMLy+E6prXH2Up00jHiOGXhcH9kYrl6/59R8l6WGjE= Subject key identifier: 2C:BF:BA:0C:AC:05:6E:AE:C8:24:DB:36:83:72:A6:8E:CA:21:D8:07 Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584D237A34973BB2420DDFCA6340 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/681eb164-1fd1-314f-ae1b-15a8eee124ad.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 6079 IP address blocks: 23.28.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:34:97:3b:b2:42:0d:df:ca:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=1fe98130-4c53-4c40-a2ad-a41ada8cf61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f0:95:92:f6:e2:1c:35:77:b3:e0:a5:c6:17: 7e:1a:4e:7e:3d:6d:c2:c8:81:91:db:38:ce:ba:cb: 5c:1a:af:5c:99:e2:08:66:21:eb:19:ed:8b:5e:df: 9f:a2:4b:66:60:39:5c:a3:b0:77:a5:80:90:b9:98: 92:f5:5f:08:dc:dc:d0:93:9c:72:62:e6:49:19:d8: e4:46:0a:ad:b6:46:82:10:3b:34:18:1c:0d:c3:e6: 68:b4:a3:a1:c3:5c:1a:eb:5c:68:ee:09:f4:77:82: b6:ed:d0:13:ee:74:af:50:d5:b3:06:5f:c5:57:6f: 54:bc:ca:e4:93:64:e0:eb:ea:63:fb:3f:c9:e8:73: 65:16:55:22:cc:09:93:8d:e9:69:3f:f0:0d:b2:17: 52:28:22:18:a6:af:33:76:6d:d2:d7:92:34:8c:2a: b6:29:a2:04:24:b4:17:06:6a:14:53:3e:02:a6:9a: 60:f6:4e:a6:2c:98:5e:10:19:72:56:cc:d4:98:b3: d9:86:18:04:1e:0f:94:17:e8:69:ea:9d:b8:6b:49: aa:7d:97:9b:27:50:d8:18:74:22:db:82:86:43:39: 51:24:37:1d:5d:cd:2b:0f:14:39:19:71:19:72:ee: 60:4a:13:69:de:3d:bb:e5:e4:5f:ad:cf:96:f2:5c: 3d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BF:BA:0C:AC:05:6E:AE:C8:24:DB:36:83:72:A6:8E:CA:21:D8:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/681eb164-1fd1-314f-ae1b-15a8eee124ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 23.28.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e7:8e:b3:af:e9:72:45:6c:8b:d1:36:3f:9e:96:76:3f:d6: 3c:de:b8:34:79:76:d5:34:80:3c:6d:bb:01:a1:00:28:50:74: 0d:45:dc:3f:63:5d:64:7a:6f:5e:d3:4a:ad:ff:83:b5:78:6f: 3a:26:28:91:89:52:e1:2b:c9:4f:f2:4f:b4:31:15:8e:ea:43: 4b:2b:62:66:cd:5a:e7:07:2c:dd:6a:81:e8:b7:2e:6d:fd:b2: 82:2f:48:30:93:30:9c:e4:1c:e4:2d:9a:9e:69:de:35:3d:22: 17:ad:f3:6f:f2:58:50:3c:d1:f9:a2:f1:e6:b9:53:7b:a4:9d: f6:cd:06:73:51:b3:f0:91:85:60:46:64:7e:e0:43:b2:6c:79: d0:e8:da:f5:1d:d0:1a:de:72:a0:24:6d:91:01:ff:19:e6:4e: 5d:e9:52:f1:b1:96:9c:06:cc:60:b9:3c:4c:b8:a3:d7:0c:2f: a3:03:52:0c:4d:d6:24:70:70:39:49:d4:a0:63:17:ed:39:1b: 5f:0f:5a:5f:c2:6a:b8:82:ab:ad:6f:90:a9:5d:8c:bd:d9:be: 26:6b:02:ae:6e:73:02:4f:be:58:61:b1:e0:9f:e2:b7:1d:06: 17:20:a3:5d:4c:86:1a:1e:c8:c5:cf:35:f9:37:2a:2d:c7:38: cf:9c:5c:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jejSXO7JCDd/KY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MWZlOTgxMzAtNGM1My00YzQwLWEyYWQtYTQxYWRhOGNmNjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofCVkvbiHDV3s+Clxhd+Gk5+PW3CyIGR2zjO ustcGq9cmeIIZiHrGe2LXt+foktmYDlco7B3pYCQuZiS9V8I3NzQk5xyYuZJGdjk RgqttkaCEDs0GBwNw+ZotKOhw1wa61xo7gn0d4K27dAT7nSvUNWzBl/FV29UvMrk k2Tg6+pj+z/J6HNlFlUizAmTjelpP/ANshdSKCIYpq8zdm3S15I0jCq2KaIEJLQX BmoUUz4Cpppg9k6mLJheEBlyVszUmLPZhhgEHg+UF+hp6p24a0mqfZebJ1DYGHQi 24KGQzlRJDcdXc0rDxQ5GXEZcu5gShNp3j275eRfrc+W8lw9CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCy/ugysBW6uyCTbNoNypo7KIdgHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvNjgxZWIxNjQtMWZkMS0z MTRmLWFlMWItMTVhOGVlZTEyNGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFxxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLnjrOv6XJFbIvRNj+elnY/1jzeuDR5dtU0gDxtuwGhAChQdA1F3D9j XWR6b17TSq3/g7V4bzomKJGJUuEryU/yT7QxFY7qQ0srYmbNWucHLN1qgei3Lm39 soIvSDCTMJzkHOQtmp5p3jU9Ihet82/yWFA80fmi8ea5U3uknfbNBnNRs/CRhWBG ZH7gQ7JsedDo2vUd0BrecqAkbZEB/xnmTl3pUvGxlpwGzGC5PEy4o9cML6MDUgxN 1iRwcDlJ1KBjF+05G18PWl/CariCq61vkKldjL3ZviZrAq5ucwJPvlhhseCf4rcd Bhcgo11MhhoeyMXPNfk3Ki3HOM+cXIw= -----END CERTIFICATE-----Generated at Fri Mar 13 13:32:49 2026 by rpki-client