$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa File: c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa (raw, json) Hash identifier: oPlc6z2JGFz9OcKffA4Jd1EsoPFGWJTuxlenqPVoHBM= Subject key identifier: 2A:66:41:9B:FF:70:64:14:49:69:5A:97:6C:DF:43:03:7A:A0:E1:83 Certificate issuer: /CN=3e97ddc1-e605-46cf-bcf5-048f8d8eb41a Certificate serial: 010D0C9F4328584CF6ECD710FA20CE7180F87E80 Authority key identifier: 52:1A:57:8E:2A:C7:61:B5:E3:66:CB:74:74:61:80:E0:B1:16:4A:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 11655 IP address blocks: 23.128.92.0/24 maxlen: 24 207.89.50.0/24 maxlen: 24 2602:f979::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:d7:10:fa:20:ce:71:80:f8:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e97ddc1-e605-46cf-bcf5-048f8d8eb41a Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=70d2b4b8-ed0c-4e8d-b8e3-52d4661defbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7b:bc:39:1b:68:50:43:fb:80:2a:ce:a1:65: c4:4a:70:d9:79:1a:16:ff:13:02:c8:e1:2b:1f:b7: 0b:2b:a3:6d:ca:2b:59:f1:32:cd:3b:dc:22:8c:75: 46:d5:57:36:c0:97:7a:d4:74:d5:a4:33:a7:86:77: d3:f0:7b:1d:dd:c6:e2:f2:8a:f4:dc:75:8a:eb:3c: fd:14:cf:a7:ba:4e:01:41:cf:fb:d9:0e:3e:9a:4a: 40:69:ae:27:c4:7f:b9:1b:5f:89:94:b9:a0:12:39: e5:ed:5e:da:89:ca:40:00:54:34:1e:e0:a7:02:b5: 55:6c:02:3e:28:99:c7:7d:0b:f0:32:23:e6:1c:e7: 82:39:11:40:41:b6:c1:5d:03:91:3d:6d:24:65:64: a0:ad:89:d6:d8:21:ca:08:af:6b:25:62:7f:10:15: 10:8f:5e:bc:26:84:ef:bf:c2:71:29:48:a8:16:07: 2e:14:b8:fb:db:c5:22:83:55:b7:aa:1f:da:6a:16: 3b:9e:7c:03:6c:26:02:23:a7:23:4a:a5:3c:97:c1: 4c:b3:68:12:93:ba:c9:6b:a3:d8:bb:0e:f1:34:c5: 5f:eb:4d:09:2f:7f:4b:97:79:f8:fd:b9:a1:7f:63: 83:59:c4:59:f5:32:07:cc:fb:8b:14:64:0a:e1:e9: 70:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:66:41:9B:FF:70:64:14:49:69:5A:97:6C:DF:43:03:7A:A0:E1:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.crl X509v3 Authority Key Identifier: keyid:52:1A:57:8E:2A:C7:61:B5:E3:66:CB:74:74:61:80:E0:B1:16:4A:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.cer sbgp-ipAddrBlock: critical IPv4: 23.128.92.0/24 207.89.50.0/24 IPv6: 2602:f979::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:be:7a:37:44:08:e6:e7:96:04:8e:3c:68:57:71:8e:e7:0e: 55:c4:87:8f:05:41:4e:7f:ca:af:14:76:c9:5c:54:35:4d:f9: b2:76:0d:42:4c:09:df:9b:f1:b3:b6:44:ae:28:f8:fc:57:0d: 4e:12:0d:a1:bb:e8:67:0c:ea:8a:78:2f:36:5d:e9:bd:9d:8d: 9a:d9:6c:6d:a8:19:39:35:35:7a:45:20:f8:c3:9f:0e:90:79: ae:a5:bb:80:5f:2c:b3:2e:d7:96:f8:38:00:b5:b0:23:ec:eb: e9:c1:02:43:4a:3b:18:2e:2e:59:91:2b:31:14:0f:4b:73:63: 4b:10:f4:c2:1d:e8:03:82:1c:9b:ec:21:e8:75:4a:46:90:2a: a4:5d:b2:48:54:eb:74:aa:5c:98:f9:f8:49:6f:8f:4f:13:23: cc:24:b5:ea:db:88:80:77:c0:e4:ad:a5:04:2d:ef:c0:77:a9: cb:e7:2c:5a:2f:d7:70:67:d8:b1:ae:9a:5f:bd:87:76:72:e7: 6d:50:fc:01:07:48:7e:5c:03:ac:7a:a6:ae:4b:ed:16:ec:c7: 94:b8:05:20:0f:43:a0:fb:bb:a5:1c:f7:c2:3a:0a:2f:ec:c6: 66:66:fa:01:17:3a:4a:ad:7e:4a:a0:59:b3:e8:ab:e0:cc:96: 28:bc:a2:32 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEz27NcQ+iDOcYD4foAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U5N2RkYzEtZTYwNS00NmNmLWJjZjUtMDQ4ZjhkOGVi NDFhMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk NzBkMmI0YjgtZWQwYy00ZThkLWI4ZTMtNTJkNDY2MWRlZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3u8ORtoUEP7gCrOoWXESnDZeRoW/xMCyOEr H7cLK6NtyitZ8TLNO9wijHVG1Vc2wJd61HTVpDOnhnfT8Hsd3cbi8or03HWK6zz9 FM+nuk4BQc/72Q4+mkpAaa4nxH+5G1+JlLmgEjnl7V7aicpAAFQ0HuCnArVVbAI+ KJnHfQvwMiPmHOeCORFAQbbBXQORPW0kZWSgrYnW2CHKCK9rJWJ/EBUQj168JoTv v8JxKUioFgcuFLj728Uig1W3qh/aahY7nnwDbCYCI6cjSqU8l8FMs2gSk7rJa6PY uw7xNMVf600JL39Ll3n4/bmhf2ODWcRZ9TIHzPuLFGQK4elwCQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFCpmQZv/cGQUSWlal2zfQwN6oOGDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTk3 ZGRjMS1lNjA1LTQ2Y2YtYmNmNS0wNDhmOGQ4ZWI0MWEvYzZhZmM1OTYtMGI5Yi0z ZTQzLWIzYjMtZjdiODNkZjMxMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2U5N2RkYzEtZTYwNS00NmNmLWJj ZjUtMDQ4ZjhkOGViNDFhLzNlOTdkZGMxLWU2MDUtNDZjZi1iY2Y1LTA0OGY4ZDhl YjQxYS5jcmwwHwYDVR0jBBgwFoAUUhpXjirHYbXjZst0dGGA4LEWSv8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZTk3ZGRjMS1lNjA1LTQ2Y2YtYmNmNS0wNDhm OGQ4ZWI0MWEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4BcAwQA z1kyMA4EAgACMAgDBgAmAvl5ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZvno3RAjm55YEjjxoV3GO5w5V xIePBUFOf8qvFHbJXFQ1Tfmydg1CTAnfm/GztkSuKPj8Vw1OEg2hu+hnDOqKeC82 Xem9nY2a2WxtqBk5NTV6RSD4w58OkHmupbuAXyyzLteW+DgAtbAj7OvpwQJDSjsY Li5ZkSsxFA9Lc2NLEPTCHegDghyb7CHodUpGkCqkXbJIVOt0qlyY+fhJb49PEyPM JLXq24iAd8DkraUELe/Ad6nL5yxaL9dwZ9ixrppfvYd2cudtUPwBB0h+XAOseqau S+0W7MeUuAUgD0Og+7ulHPfCOgov7MZmZvoBFzpKrX5KoFmz6KvgzJYovKIy -----END CERTIFICATE-----Generated at Mon Mar 2 05:40:33 2026 by rpki-client