$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/0b36fcb9-b653-36ae-9ecc-b180208a1e68.roa File: 0b36fcb9-b653-36ae-9ecc-b180208a1e68.roa (raw, json) Hash identifier: xYlsKNTD3a3GPMP8qo1rIQJevs2wRvKDk6bQIySfLcY= Subject key identifier: 04:82:53:AA:94:90:BD:51:C8:57:7B:03:EA:F1:D7:5F:5E:97:AC:62 Certificate issuer: /CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b Certificate serial: 010D0C9F4328584D5243C6E82F2E5639049D3080 Authority key identifier: F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/0b36fcb9-b653-36ae-9ecc-b180208a1e68.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 401160 IP address blocks: 23.167.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:c6:e8:2f:2e:56:39:04:9d:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=221620f4-4465-4b7a-83c1-49afd4eb8ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:28:f2:13:7e:48:8e:a1:4a:03:52:fd:d7:6d: ba:76:53:51:70:99:df:ce:71:4d:81:9c:9d:30:17: 92:c2:7b:9c:29:85:22:62:88:7f:c2:a8:4e:27:40: bf:ae:65:86:1c:97:a5:87:da:c0:8a:f0:84:36:af: 05:70:ed:ea:30:68:a8:e6:a8:60:c0:63:0d:15:40: 23:db:56:c0:b7:bf:7c:0f:44:45:67:6c:e0:25:61: c7:56:d5:fe:c7:6c:9a:65:62:27:07:0d:2e:a0:fd: 76:28:cf:0f:d8:ce:cb:47:b5:83:f2:b6:27:37:0e: 9d:2d:48:69:9c:2d:c5:e2:e6:7a:66:6f:b6:8e:08: 14:da:80:96:88:13:ad:19:a1:33:d1:ed:00:d5:63: 75:81:4f:b5:36:ca:9d:f1:1f:49:01:db:98:73:f2: 5d:eb:f3:4f:c2:e9:65:0f:20:25:1e:4e:b3:0a:f8: 56:0a:0e:d2:e5:ba:cd:0d:22:03:c8:ad:93:68:6d: 33:2d:71:80:46:39:84:7a:e0:dd:bb:21:4e:f5:47: 41:d4:ec:b7:29:64:9a:2e:7a:32:bf:ae:20:74:46: d1:b9:ed:66:c7:2e:f8:7f:05:46:f9:45:f2:18:e7: 23:33:06:8f:bd:fd:a8:27:81:da:eb:22:0c:5f:d1: a6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:82:53:AA:94:90:BD:51:C8:57:7B:03:EA:F1:D7:5F:5E:97:AC:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/0b36fcb9-b653-36ae-9ecc-b180208a1e68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl X509v3 Authority Key Identifier: keyid:F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer sbgp-ipAddrBlock: critical IPv4: 23.167.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:42:3c:2a:b5:be:57:97:ca:e3:93:7d:aa:2f:d5:7e:61:d3: 9b:93:87:58:59:16:14:9d:4c:af:bb:d6:2c:53:b6:db:b5:36: 1b:fb:1e:c1:f3:5b:57:d2:ba:0c:3e:25:6f:c8:c2:76:d5:6e: 25:fe:83:27:79:88:36:6a:14:4d:fa:45:64:6d:33:8f:fc:6d: 00:b7:87:c7:fb:d8:dd:0a:85:32:53:a1:d1:e6:46:bb:3e:8a: 1a:ab:a6:57:d4:0b:8f:ca:03:c6:72:e4:19:d9:fb:d6:c6:fe: 8b:84:94:a0:e7:da:ec:7f:64:24:18:ef:0d:f7:6c:64:e5:93: fa:93:04:15:8b:6b:16:46:73:b1:fb:79:19:be:cb:a4:1b:06: b1:04:0f:96:cd:f3:bd:7b:f5:e3:84:51:00:61:e3:f3:26:9c: 9a:4c:93:c2:37:e8:35:a7:0d:3b:f6:d4:2a:fc:12:d6:43:7a: 44:8a:dd:0c:f9:32:43:a5:ad:52:99:e8:ec:42:8a:af:9e:fa: 91:0a:72:19:73:d8:c9:2e:d8:7c:85:6e:8a:a2:f4:99:41:76: 9f:0d:54:70:ba:6e:fe:8d:c9:61:00:30:45:3c:6b:37:75:62: 3a:f1:3b:94:02:5c:b4:cc:e6:76:b8:88:40:66:67:f9:5a:55: 7c:e1:5d:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ8boLy5WOQSdMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQyMWM3NGMtYWQwYi00M2I5LTllYTMtYmRhYzRiZjZi YzdiMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk MjIxNjIwZjQtNDQ2NS00YjdhLTgzYzEtNDlhZmQ0ZWI4ZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ijyE35IjqFKA1L91226dlNRcJnfznFNgZyd MBeSwnucKYUiYoh/wqhOJ0C/rmWGHJelh9rAivCENq8FcO3qMGio5qhgwGMNFUAj 21bAt798D0RFZ2zgJWHHVtX+x2yaZWInBw0uoP12KM8P2M7LR7WD8rYnNw6dLUhp nC3F4uZ6Zm+2jggU2oCWiBOtGaEz0e0A1WN1gU+1Nsqd8R9JAduYc/Jd6/NPwull DyAlHk6zCvhWCg7S5brNDSIDyK2TaG0zLXGARjmEeuDduyFO9UdB1Oy3KWSaLnoy v64gdEbRue1mxy74fwVG+UXyGOcjMwaPvf2oJ4Ha6yIMX9Gm6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASCU6qUkL1RyFd7A+rx119el6xiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNDIx Yzc0Yy1hZDBiLTQzYjktOWVhMy1iZGFjNGJmNmJjN2IvMGIzNmZjYjktYjY1My0z NmFlLTllY2MtYjE4MDIwOGExZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzQyMWM3NGMtYWQwYi00M2I5LTll YTMtYmRhYzRiZjZiYzdiLzM0MjFjNzRjLWFkMGItNDNiOS05ZWEzLWJkYWM0YmY2 YmM3Yi5jcmwwHwYDVR0jBBgwFoAU8Py5nS1n03RsdNT9KVvXSB5soqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNDIxYzc0Yy1hZDBiLTQzYjktOWVhMy1iZGFj NGJmNmJjN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6eYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9CPCq1vleXyuOTfaov1X5h05uTh1hZFhSdTK+71ixTttu1Nhv7HsHz W1fSugw+JW/IwnbVbiX+gyd5iDZqFE36RWRtM4/8bQC3h8f72N0KhTJTodHmRrs+ ihqrplfUC4/KA8Zy5BnZ+9bG/ouElKDn2ux/ZCQY7w33bGTlk/qTBBWLaxZGc7H7 eRm+y6QbBrEED5bN87179eOEUQBh4/MmnJpMk8I36DWnDTv21Cr8EtZDekSK3Qz5 MkOlrVKZ6OxCiq+e+pEKchlz2Mku2HyFboqi9JlBdp8NVHC6bv6NyWEAMEU8azd1 YjrxO5QCXLTM5na4iEBmZ/laVXzhXec= -----END CERTIFICATE-----Generated at Fri Apr 17 15:48:17 2026 by rpki-client