$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/bedc2541-9f1d-3098-ad90-8907351a956b.roa File: bedc2541-9f1d-3098-ad90-8907351a956b.roa (raw, json) Hash identifier: bvzNafPTOjQ4nZZDkWE/26SFhjcai5aqjviOVHBZBqc= Subject key identifier: 2D:6E:C3:A6:28:84:D5:03:FF:03:13:0C:E3:3E:F1:EE:A3:58:75:71 Certificate issuer: /CN=f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d Certificate serial: 010D0C9F4328584D237A645C869DEF2659AD3980 Authority key identifier: 26:96:45:A4:79:6C:86:91:3C:0B:3D:35:A2:3B:A2:35:7F:81:18:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/bedc2541-9f1d-3098-ad90-8907351a956b.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 8095 IP address blocks: 23.154.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:64:5c:86:9d:ef:26:59:ad:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=6a3d3ce7-65b4-469c-bb7a-31a8810c376c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:67:9d:05:4a:56:d0:11:5c:9a:14:a7:92:77: 34:f5:29:8d:40:b0:41:2b:55:5d:fc:0b:12:d6:3a: 1d:9f:0f:65:6d:8b:d1:ad:fd:77:f4:e1:cd:8a:a7: ce:3c:10:2b:21:c4:81:4c:21:84:bf:a2:77:58:96: e8:4c:b4:52:aa:22:97:5d:02:05:99:eb:03:d4:e9: 0e:57:b1:7f:ce:78:ea:b6:0d:a1:8f:3a:09:1a:4b: 44:49:bc:f1:6e:fa:0e:9b:fb:c4:96:4d:9b:01:56: 86:f7:f6:78:5f:be:67:22:83:87:9e:1c:a4:75:11: e8:32:00:d7:35:ad:89:1e:27:92:75:aa:53:ea:7c: 75:e1:43:9d:92:5f:74:12:d8:52:20:a7:83:5f:ff: dc:99:2b:bb:d6:77:f6:dd:24:e8:a5:d8:18:33:41: 19:61:25:32:99:f2:4f:c1:ac:46:3a:40:c6:c8:eb: fa:a7:b1:46:31:94:64:65:d0:4a:36:2b:75:3a:d7: 73:69:65:eb:52:47:cf:79:34:11:3c:43:a6:c7:e3: 23:3f:e1:f6:b1:2e:36:7c:22:a7:42:41:31:48:34: 83:f0:20:68:e8:4c:9a:83:39:a8:3b:4a:f0:eb:f4: 20:fb:a2:36:89:de:81:e7:7f:2a:32:e1:4d:f3:80: 4b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6E:C3:A6:28:84:D5:03:FF:03:13:0C:E3:3E:F1:EE:A3:58:75:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/bedc2541-9f1d-3098-ad90-8907351a956b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.crl X509v3 Authority Key Identifier: keyid:26:96:45:A4:79:6C:86:91:3C:0B:3D:35:A2:3B:A2:35:7F:81:18:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer sbgp-ipAddrBlock: critical IPv4: 23.154.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:53:c1:e0:92:ff:55:69:e7:6a:35:63:4c:27:da:aa:52:73: d8:58:9e:0f:9b:1b:45:30:1c:33:32:4b:cc:1b:d5:46:18:2f: 8d:14:ad:2a:42:2f:48:bc:37:05:7a:1e:79:73:04:ff:54:bb: 3e:89:0f:40:94:d2:9c:97:3f:8f:37:07:2d:8c:a7:64:be:5b: b7:0c:4d:0b:fc:0b:5b:8c:2d:61:b2:14:d8:24:c7:52:6e:ec: 0f:ef:55:15:c5:fe:fe:0f:7b:d7:e9:b5:fb:fb:d5:5b:36:ac: 75:73:4c:ef:63:62:18:90:bf:58:7b:a0:1b:7e:99:fb:75:42: fc:e2:f7:bd:33:cd:c8:a7:4b:4a:11:f0:bf:0d:7a:45:4e:67: 02:9b:7a:e6:11:3c:fa:42:fe:e1:02:1c:53:eb:72:60:87:47: 5a:58:63:03:51:c3:be:ac:f3:c0:a0:c8:b9:53:6a:a7:0f:b6: e7:3a:9e:02:9c:94:c4:57:0d:a9:88:23:a4:96:d2:f2:45:e1: 65:31:bb:0d:35:0d:5d:0b:8c:82:19:cd:96:4b:89:cc:86:e2: a9:39:97:5f:a5:2f:7a:7e:59:81:ed:77:cd:6f:94:10:0a:0c: 90:73:07:3b:87:3d:f5:45:0d:80:a3:c6:1e:f0:b1:4d:c6:b2: 5e:25:56:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jemRchp3vJlmtOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhkZTg5YWItY2E4Yy00ZWE1LWI4YjktYjc5MzEzZjBk NDhkMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NmEzZDNjZTctNjViNC00NjljLWJiN2EtMzFhODgxMGMzNzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWedBUpW0BFcmhSnknc09SmNQLBBK1Vd/AsS 1jodnw9lbYvRrf139OHNiqfOPBArIcSBTCGEv6J3WJboTLRSqiKXXQIFmesD1OkO V7F/znjqtg2hjzoJGktESbzxbvoOm/vElk2bAVaG9/Z4X75nIoOHnhykdRHoMgDX Na2JHieSdapT6nx14UOdkl90EthSIKeDX//cmSu71nf23STopdgYM0EZYSUymfJP waxGOkDGyOv6p7FGMZRkZdBKNit1OtdzaWXrUkfPeTQRPEOmx+MjP+H2sS42fCKn QkExSDSD8CBo6EyagzmoO0rw6/Qg+6I2id6B538qMuFN84BLUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1uw6YohNUD/wMTDOM+8e6jWHVxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOGRl ODlhYi1jYThjLTRlYTUtYjhiOS1iNzkzMTNmMGQ0OGQvYmVkYzI1NDEtOWYxZC0z MDk4LWFkOTAtODkwNzM1MWE5NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjhkZTg5YWItY2E4Yy00ZWE1LWI4 YjktYjc5MzEzZjBkNDhkL2Y4ZGU4OWFiLWNhOGMtNGVhNS1iOGI5LWI3OTMxM2Yw ZDQ4ZC5jcmwwHwYDVR0jBBgwFoAUJpZFpHlshpE8Cz01ojuiNX+BGMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mOGRlODlhYi1jYThjLTRlYTUtYjhiOS1iNzkz MTNmMGQ0OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5rIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1TweCS/1Vp52o1Y0wn2qpSc9hYng+bG0UwHDMyS8wb1UYYL40UrSpC L0i8NwV6HnlzBP9Uuz6JD0CU0pyXP483By2Mp2S+W7cMTQv8C1uMLWGyFNgkx1Ju 7A/vVRXF/v4Pe9fptfv71Vs2rHVzTO9jYhiQv1h7oBt+mft1Qvzi970zzcinS0oR 8L8NekVOZwKbeuYRPPpC/uECHFPrcmCHR1pYYwNRw76s88CgyLlTaqcPtuc6ngKc lMRXDamII6SW0vJF4WUxuw01DV0LjIIZzZZLicyG4qk5l1+lL3p+WYHtd81vlBAK DJBzBzuHPfVFDYCjxh7wsU3Gsl4lViE= -----END CERTIFICATE-----Generated at Sun Mar 22 04:26:30 2026 by rpki-client