$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/a3443ba9-a5c1-3f58-bf37-a3b0549e1245.roa File: a3443ba9-a5c1-3f58-bf37-a3b0549e1245.roa (raw, json) Hash identifier: Edoae2Rkg5jlSSSRWXyiFuadBo5qJ+N6eaSpq4fp1gM= Subject key identifier: EE:1A:A6:B6:60:3B:B0:83:0B:8F:9F:68:E9:34:42:0C:ED:35:2E:02 Certificate issuer: /CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51 Certificate serial: 010D0C9F4328584D59EA50BD45C33B0820D11100 Authority key identifier: 1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/a3443ba9-a5c1-3f58-bf37-a3b0549e1245.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 395823 IP address blocks: 23.169.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:50:bd:45:c3:3b:08:20:d1:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=daf42f27-fa84-4c5f-b56d-019b71ed8e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:22:f2:37:a3:ce:2a:25:41:fc:77:8d:34:23: 21:67:bd:bb:80:31:39:e9:b3:4b:95:0e:a1:d3:da: 2a:a7:cd:54:36:93:b5:09:52:a5:da:29:62:4a:76: a0:4b:a4:93:00:bb:84:06:95:4e:fa:04:bd:63:62: c6:c5:87:1e:5c:e2:b3:09:99:9f:81:b2:74:37:55: dc:d1:06:48:5c:8a:06:2e:eb:97:2c:5b:f7:23:b0: bc:ac:51:4e:a1:1d:5e:4f:4f:52:cc:f5:2d:38:31: 8d:ef:e4:3c:70:ee:6b:81:ab:b1:24:e6:1c:52:5c: 22:de:9c:78:5e:9b:6c:f5:22:d1:cb:bc:6c:e0:cb: 19:54:df:c0:f3:54:c7:05:d0:8d:0b:01:7c:62:4b: 86:88:e1:67:26:3c:cc:b3:a3:86:64:7a:ad:cc:34: c6:f1:80:30:b0:0e:73:06:ab:51:30:68:62:25:e1: 09:c1:2d:1a:e0:2a:e4:b7:86:dc:6f:f4:aa:38:b1: d5:20:b8:bd:c6:ae:7a:d1:aa:12:18:bc:ab:e7:c5: 43:3b:7c:7f:e7:6a:6a:20:dc:df:c0:41:c4:8e:af: 8e:b7:57:39:ea:ad:d2:b9:79:2f:72:ce:6c:39:6f: c7:01:e7:da:e5:4f:2b:fd:9b:76:14:87:05:9d:04: 34:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1A:A6:B6:60:3B:B0:83:0B:8F:9F:68:E9:34:42:0C:ED:35:2E:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/a3443ba9-a5c1-3f58-bf37-a3b0549e1245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl X509v3 Authority Key Identifier: keyid:1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer sbgp-ipAddrBlock: critical IPv4: 23.169.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:36:73:2c:dd:8e:9e:8a:48:67:c9:25:67:80:95:7b:41:4d: ef:d3:db:cf:af:0a:9b:94:37:28:1c:fc:5d:82:33:1b:fc:f2: 12:33:53:22:4d:c8:db:b1:94:6e:b3:52:51:0b:e9:7b:90:1c: 7f:8b:b9:39:c5:b7:1d:33:81:74:d2:78:73:34:10:fb:5b:b8: 2a:b4:ef:f1:44:f1:d9:40:7a:54:05:b1:22:f6:4e:5a:66:75: a3:2a:ca:77:9b:8d:ef:c6:82:07:a3:40:01:e7:d7:0c:c1:69: 11:5c:0f:af:86:7f:7a:26:36:62:9e:1a:d2:df:7d:fb:ed:02: bc:9a:20:cc:a7:d0:30:b2:ae:f4:4e:03:03:90:75:30:25:85: 4f:88:e1:1d:ff:6d:4a:a6:88:84:69:f5:e9:69:83:3a:45:db: 40:e0:f9:3f:c5:3c:de:32:d6:e9:1a:27:ed:a9:08:17:1f:2c: 9b:ec:69:8f:56:18:45:75:33:f6:07:76:90:2e:bd:b6:89:c9: 30:56:d1:01:8a:22:25:aa:f1:09:dd:17:5c:4e:c6:6d:2d:80: c3:7d:44:f8:62:24:d6:a9:96:cd:3b:bb:be:81:71:cb:9f:b7: a8:87:34:64:47:ec:3e:0a:af:86:91:6d:de:ad:15:64:4a:81: 3c:df:35:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6lC9RcM7CCDREQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE0ZTVlNjctNDE2MS00YTJkLWJkNzMtMmRlYjVmMWQ4 ZjUxMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZGFmNDJmMjctZmE4NC00YzVmLWI1NmQtMDE5YjcxZWQ4ZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyLyN6POKiVB/HeNNCMhZ727gDE56bNLlQ6h 09oqp81UNpO1CVKl2iliSnagS6STALuEBpVO+gS9Y2LGxYceXOKzCZmfgbJ0N1Xc 0QZIXIoGLuuXLFv3I7C8rFFOoR1eT09SzPUtODGN7+Q8cO5rgauxJOYcUlwi3px4 Xpts9SLRy7xs4MsZVN/A81THBdCNCwF8YkuGiOFnJjzMs6OGZHqtzDTG8YAwsA5z BqtRMGhiJeEJwS0a4Crkt4bcb/SqOLHVILi9xq560aoSGLyr58VDO3x/52pqINzf wEHEjq+Ot1c56q3SuXkvcs5sOW/HAefa5U8r/Zt2FIcFnQQ0VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4aprZgO7CDC4+faOk0QgztNS4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMTRl NWU2Ny00MTYxLTRhMmQtYmQ3My0yZGViNWYxZDhmNTEvYTM0NDNiYTktYTVjMS0z ZjU4LWJmMzctYTNiMDU0OWUxMjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE0ZTVlNjctNDE2MS00YTJkLWJk NzMtMmRlYjVmMWQ4ZjUxL2UxNGU1ZTY3LTQxNjEtNGEyZC1iZDczLTJkZWI1ZjFk OGY1MS5jcmwwHwYDVR0jBBgwFoAUG9dxIb6YBpSp8yztchxJVEi+aecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMTRlNWU2Ny00MTYxLTRhMmQtYmQ3My0yZGVi NWYxZDhmNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6mwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGc2cyzdjp6KSGfJJWeAlXtBTe/T28+vCpuUNygc/F2CMxv88hIzUyJN yNuxlG6zUlEL6XuQHH+LuTnFtx0zgXTSeHM0EPtbuCq07/FE8dlAelQFsSL2Tlpm daMqynebje/GggejQAHn1wzBaRFcD6+Gf3omNmKeGtLfffvtAryaIMyn0DCyrvRO AwOQdTAlhU+I4R3/bUqmiIRp9elpgzpF20Dg+T/FPN4y1ukaJ+2pCBcfLJvsaY9W GEV1M/YHdpAuvbaJyTBW0QGKIiWq8QndF1xOxm0tgMN9RPhiJNapls07u76Bccuf t6iHNGRH7D4Kr4aRbd6tFWRKgTzfNSs= -----END CERTIFICATE-----Generated at Tue Apr 14 23:45:54 2026 by rpki-client