$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/bf924dbd-34bc-3c73-9911-e6e933405f1e.roa File: bf924dbd-34bc-3c73-9911-e6e933405f1e.roa (raw, json) Hash identifier: gw3jBwYSwMv/9OveKJ2rv25brxTsIZKfBDRiq5xA9l4= Subject key identifier: 1C:A4:78:27:0F:B5:08:4B:AF:2D:CA:43:12:6E:B4:0F:88:61:0A:5D Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Certificate serial: 010D0C9F4328584D7F9A8AC6C84ABB0D9B8CA180 Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/bf924dbd-34bc-3c73-9911-e6e933405f1e.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 26904 IP address blocks: 23.247.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:8a:c6:c8:4a:bb:0d:9b:8c:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=f257fa88-9950-4f26-ae76-0d65746b01c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b8:d5:d4:41:fd:bb:3d:de:ef:23:e5:4d:ca: 51:19:a0:37:8f:12:2d:f1:40:28:3a:2c:ff:a4:65: b9:2e:a9:35:81:e2:1c:84:53:c3:9a:27:96:ab:d8: 1f:a2:e4:ed:d7:9d:90:c8:20:ea:1a:bf:c7:37:44: db:a4:7c:71:31:c6:29:06:3f:1e:60:99:98:f1:54: 22:fc:c1:c5:8f:85:31:a4:9a:a3:c0:72:af:7e:4f: e4:89:0f:74:28:54:d8:67:9a:a1:61:d1:51:c3:fa: 69:fd:24:11:ef:87:bd:1e:c2:76:43:cd:7e:a5:18: 7a:3a:f2:0e:e5:ba:20:40:8c:a0:67:50:90:4f:10: d3:1f:01:e0:37:89:e5:23:e9:a7:17:9e:3b:58:3c: 1a:db:63:79:85:ec:5c:1c:c0:2c:ae:09:c0:4c:c5: 58:5c:d2:45:61:9a:e2:2d:96:f6:02:f5:95:25:60: 67:d4:99:63:fb:cf:f3:a9:d2:c4:d1:14:b8:9b:3d: 6e:ab:5b:71:65:97:24:49:33:af:fe:91:19:1a:96: 46:c9:81:20:bc:f7:a5:48:e3:11:04:bc:25:a0:a7: 6c:7a:63:ab:2a:13:8c:ae:26:a4:a7:74:1f:c6:77: da:0c:51:70:26:1b:4f:8b:42:83:eb:69:d4:5d:d4: f0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A4:78:27:0F:B5:08:4B:AF:2D:CA:43:12:6E:B4:0F:88:61:0A:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/bf924dbd-34bc-3c73-9911-e6e933405f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl X509v3 Authority Key Identifier: keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer sbgp-ipAddrBlock: critical IPv4: 23.247.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:00:9d:5b:6f:6d:32:4f:fd:f1:0f:59:f3:e4:9f:9a:e2:08: b0:92:5b:40:a2:34:df:98:fa:9a:49:0c:b4:47:1c:78:8a:87: c1:b8:59:ee:c9:19:3b:5f:48:66:49:fa:c6:97:6b:56:28:7a: 76:07:3c:13:81:0b:c5:9d:f9:3c:f6:31:2c:df:13:59:e6:2c: 33:1f:a9:96:2c:65:fc:9b:c2:f3:6c:5d:ac:72:e0:64:ed:a0: d4:61:79:ae:84:f7:ef:40:10:61:38:6b:44:14:9a:97:64:d7: 51:8e:34:25:27:b9:d1:15:55:40:3d:f7:6a:35:c5:86:6d:ed: 3c:39:9a:ab:14:63:e9:52:1d:bc:21:ac:fe:82:d3:b7:47:f0: d9:70:8b:b0:7d:0c:15:cd:21:cd:35:e3:d5:27:ee:44:1a:27: 08:5d:dc:79:43:c4:a4:18:98:8b:d8:dc:c0:58:f8:6f:3d:17: 96:82:e9:e7:28:de:18:7e:de:a0:1b:df:39:63:85:d6:8a:71: 63:85:5c:ce:88:fe:f2:29:65:07:58:e6:7e:38:28:ee:2b:3f: 69:ed:d8:5a:fb:a4:c2:04:43:48:51:c9:52:ff:43:2b:8f:d3: 6e:3e:ac:0a:e6:f1:dd:53:61:41:5f:0d:18:cf:eb:8e:22:e1: 10:09:19:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/morGyEq7DZuMoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VlNzIwZGUtYzMyMi00YmI1LWI4Y2QtYzdhM2YyM2I5 MmQ3MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZjI1N2ZhODgtOTk1MC00ZjI2LWFlNzYtMGQ2NTc0NmIwMWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7jV1EH9uz3e7yPlTcpRGaA3jxIt8UAoOiz/ pGW5Lqk1geIchFPDmieWq9gfouTt152QyCDqGr/HN0TbpHxxMcYpBj8eYJmY8VQi /MHFj4UxpJqjwHKvfk/kiQ90KFTYZ5qhYdFRw/pp/SQR74e9HsJ2Q81+pRh6OvIO 5bogQIygZ1CQTxDTHwHgN4nlI+mnF547WDwa22N5hexcHMAsrgnATMVYXNJFYZri LZb2AvWVJWBn1Jlj+8/zqdLE0RS4mz1uq1txZZckSTOv/pEZGpZGyYEgvPelSOMR BLwloKdsemOrKhOMriakp3QfxnfaDFFwJhtPi0KD62nUXdTwhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBykeCcPtQhLry3KQxJutA+IYQpdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3 MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2EzZjIzYjkyZDcvYmY5MjRkYmQtMzRiYy0z YzczLTk5MTEtZTZlOTMzNDA1ZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2VlNzIwZGUtYzMyMi00YmI1LWI4 Y2QtYzdhM2YyM2I5MmQ3LzNlZTcyMGRlLWMzMjItNGJiNS1iOGNkLWM3YTNmMjNi OTJkNy5jcmwwHwYDVR0jBBgwFoAUCeWmFW+MnUDiNV/P2g31BT5Sb+gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2Ez ZjIzYjkyZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/eqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQAnVtvbTJP/fEPWfPkn5riCLCSW0CiNN+Y+ppJDLRHHHiKh8G4We7J GTtfSGZJ+saXa1YoenYHPBOBC8Wd+Tz2MSzfE1nmLDMfqZYsZfybwvNsXaxy4GTt oNRhea6E9+9AEGE4a0QUmpdk11GONCUnudEVVUA992o1xYZt7Tw5mqsUY+lSHbwh rP6C07dH8Nlwi7B9DBXNIc0149Un7kQaJwhd3HlDxKQYmIvY3MBY+G89F5aC6eco 3hh+3qAb3zljhdaKcWOFXM6I/vIpZQdY5n44KO4rP2nt2Fr7pMIEQ0hRyVL/QyuP 024+rArm8d1TYUFfDRjP644i4RAJGZw= -----END CERTIFICATE-----Generated at Fri Apr 17 12:37:12 2026 by rpki-client