$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/657a3a89-cae6-3d0f-8216-8429aef9560e.roa File: 657a3a89-cae6-3d0f-8216-8429aef9560e.roa (raw, json) Hash identifier: WyKJzCNpO5HlnkXL6oMBAT/0XX7ZH7pRzgMzduCO9nA= Subject key identifier: B5:39:60:94:0D:63:BE:16:70:8F:3F:78:9F:9A:D4:2F:43:92:34:C1 Certificate issuer: /CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Certificate serial: 010D0C9F4328584D5243C75045B9EE82434C3B80 Authority key identifier: 30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/657a3a89-cae6-3d0f-8216-8429aef9560e.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 401160 IP address blocks: 23.170.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:c7:50:45:b9:ee:82:43:4c:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=6166c338-2366-46e5-8d9d-eb80a98a1e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b7:7b:35:ea:bd:83:28:72:d7:b9:c6:e6:14: 1a:8a:58:5b:89:c0:34:b4:2f:d7:28:8b:01:de:4e: 64:53:3b:2a:3c:f8:90:42:1f:c7:43:56:87:d8:e2: 57:5e:48:03:bf:9a:72:8d:82:34:ac:57:b2:14:51: 98:10:7b:67:7a:3d:bc:af:58:cc:3d:d4:e0:54:04: 71:05:0d:a0:77:d8:57:22:e9:cd:25:ac:9f:3d:68: 8e:09:e0:75:38:fc:de:75:c0:21:84:65:bb:7b:e0: fc:d6:db:b0:71:de:12:f5:14:6f:f1:9f:ff:28:18: c6:26:42:53:ce:8b:b1:42:48:3f:d1:eb:6d:0e:a0: 52:d4:10:81:24:e5:1f:93:d2:67:37:b2:e1:e6:9b: 37:45:de:98:4c:f7:34:e7:80:f0:ae:3e:cf:45:df: 02:0f:48:1f:a1:40:bc:bd:af:01:2d:1f:cd:ab:08: 08:1f:ce:b7:1b:7d:0a:34:70:ea:83:12:a7:c1:a0: 2e:00:42:77:7c:36:06:0e:03:2a:18:0c:d0:4c:d7: f1:1c:89:3d:29:da:3a:fb:6e:1c:bc:e3:bd:5f:f5: 04:55:0e:c4:62:ed:d3:b3:76:63:37:55:f5:5d:62: 85:f1:cb:fb:5c:df:e4:94:6a:e6:c0:41:ba:9f:1b: 6b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:39:60:94:0D:63:BE:16:70:8F:3F:78:9F:9A:D4:2F:43:92:34:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/657a3a89-cae6-3d0f-8216-8429aef9560e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl X509v3 Authority Key Identifier: keyid:30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer sbgp-ipAddrBlock: critical IPv4: 23.170.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:76:67:ff:1b:b1:f4:60:d7:c5:83:58:90:60:24:4f:6a:49: a6:7f:71:2f:f0:5c:24:d7:fa:14:41:05:82:d9:40:b4:68:6f: 4c:6d:fb:57:39:52:a3:ba:b7:b3:ea:84:27:66:13:a1:cf:74: 5e:74:27:26:f1:7c:f4:d1:d4:c1:8c:db:01:f8:fa:e6:29:3f: a2:8c:9b:1a:7c:ce:87:12:f8:78:0a:a6:bb:44:60:74:a4:eb: 96:09:2b:d4:3a:e7:73:e0:13:16:95:65:7f:db:16:64:59:9e: a3:10:ff:c8:95:2b:ba:c7:80:5d:fd:0c:30:ef:e8:0e:80:a7: 5a:ce:66:68:1a:70:15:65:71:aa:70:99:32:a8:99:8f:0d:b6: 32:d4:c9:4d:60:57:5d:58:0e:d2:e6:97:b9:19:00:33:b3:3d: 2c:97:30:d9:e9:ec:d1:eb:6b:68:3c:78:25:95:72:80:99:ea: 4b:a5:76:33:5e:b7:d3:b5:9c:a9:28:16:e4:e5:b6:4a:c4:33: 5a:7a:91:f9:37:7c:92:f6:31:6f:39:25:bf:44:a6:0a:35:ac: f6:1b:49:b8:7e:47:06:f6:62:64:50:4d:3f:22:00:a9:2e:3b: 25:22:09:61:30:fe:75:e8:5e:5b:e0:12:45:1c:5e:c5:60:50: 3a:5f:38:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ8dQRbnugkNMO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NjdmOGItZTdiNy00YzM0LWFhYTAtMDBmZGRiZWVm NDhkMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NjE2NmMzMzgtMjM2Ni00NmU1LThkOWQtZWI4MGE5OGExZTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrd7Neq9gyhy17nG5hQailhbicA0tC/XKIsB 3k5kUzsqPPiQQh/HQ1aH2OJXXkgDv5pyjYI0rFeyFFGYEHtnej28r1jMPdTgVARx BQ2gd9hXIunNJayfPWiOCeB1OPzedcAhhGW7e+D81tuwcd4S9RRv8Z//KBjGJkJT zouxQkg/0ettDqBS1BCBJOUfk9JnN7Lh5ps3Rd6YTPc054Dwrj7PRd8CD0gfoUC8 va8BLR/NqwgIH863G30KNHDqgxKnwaAuAEJ3fDYGDgMqGAzQTNfxHIk9Kdo6+24c vOO9X/UEVQ7EYu3Ts3ZjN1X1XWKF8cv7XN/klGrmwEG6nxtrEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLU5YJQNY74WcI8/eJ+a1C9DkjTBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOTY2 N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZkZGJlZWY0OGQvNjU3YTNhODktY2FlNi0z ZDBmLTgyMTYtODQyOWFlZjk1NjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzk2NjdmOGItZTdiNy00YzM0LWFh YTAtMDBmZGRiZWVmNDhkLzM5NjY3ZjhiLWU3YjctNGMzNC1hYWEwLTAwZmRkYmVl ZjQ4ZC5jcmwwHwYDVR0jBBgwFoAUMN8a5EPYVgbeIdFXPxgyY3q5bw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zOTY2N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZk ZGJlZWY0OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6o4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF12Z/8bsfRg18WDWJBgJE9qSaZ/cS/wXCTX+hRBBYLZQLRob0xt+1c5 UqO6t7PqhCdmE6HPdF50JybxfPTR1MGM2wH4+uYpP6KMmxp8zocS+HgKprtEYHSk 65YJK9Q653PgExaVZX/bFmRZnqMQ/8iVK7rHgF39DDDv6A6Ap1rOZmgacBVlcapw mTKomY8NtjLUyU1gV11YDtLml7kZADOzPSyXMNnp7NHra2g8eCWVcoCZ6kuldjNe t9O1nKkoFuTltkrEM1p6kfk3fJL2MW85Jb9Epgo1rPYbSbh+Rwb2YmRQTT8iAKku OyUiCWEw/nXoXlvgEkUcXsVgUDpfOEo= -----END CERTIFICATE-----Generated at Fri Apr 17 14:22:49 2026 by rpki-client