$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa File: 3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa (raw, json) Hash identifier: 4U2guniQ7UvRkUfxsdJCwes6LI51jHNNilm1bCafNkI= Subject key identifier: F4:A0:2E:8A:B3:C0:55:1A:B5:C6:9A:5E:AC:7B:23:92:FC:A9:85:4C Certificate issuer: /CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Certificate serial: 010D0C9F4328584D86954AB611E939E70D718200 Authority key identifier: 31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 398328 IP address blocks: 23.160.208.0/24 maxlen: 24 174.136.248.0/24 maxlen: 24 2602:fd46::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:4a:b6:11:e9:39:e7:0d:71:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=e56d3a12-22b5-40a8-8a65-f9b3878b5517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8e:58:0b:ec:4b:3f:a3:ce:34:cf:49:87:74: 14:65:db:70:3a:25:c2:72:cf:d6:c8:0f:14:18:e6: b4:36:70:85:f7:c7:81:63:5d:1a:64:36:24:3c:55: 7d:20:dd:a2:b8:ee:de:db:3c:0e:11:3b:a2:03:23: 7f:b7:cd:a1:66:f9:88:ba:b6:22:b4:ed:4d:fd:47: 9a:5f:63:56:37:2f:30:90:8c:93:f4:32:b1:a3:2e: c9:1d:39:50:0f:d4:e2:25:a0:43:3b:ba:35:65:2e: 5a:0f:cb:80:12:7a:26:de:51:2e:2a:49:b3:91:33: a7:a0:7d:25:02:1b:31:31:63:78:e8:a2:82:13:da: e9:be:99:00:ad:72:4e:bd:0e:5e:47:8c:d5:7e:0b: 46:20:4d:8d:d6:28:eb:8c:57:1f:01:76:08:02:12: a3:11:a7:aa:50:7d:6a:53:42:fa:5c:3f:04:83:bf: 2d:a0:a2:80:40:e9:cb:8b:93:b3:0e:3d:80:cd:1f: 95:e6:69:9f:8b:3e:b1:b8:21:d1:1f:9a:8a:17:4f: b0:35:38:4b:8e:3a:c6:01:56:90:d5:c2:14:24:bc: 54:2c:bf:06:ef:dd:41:59:bc:08:57:21:89:01:f3: b1:85:b8:3b:ee:e4:b6:04:32:45:41:0e:da:46:d7: 28:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A0:2E:8A:B3:C0:55:1A:B5:C6:9A:5E:AC:7B:23:92:FC:A9:85:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl X509v3 Authority Key Identifier: keyid:31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer sbgp-ipAddrBlock: critical IPv4: 23.160.208.0/24 174.136.248.0/24 IPv6: 2602:fd46::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:9f:e3:44:0e:6b:80:65:54:11:ac:e7:0b:6c:ce:88:fe:40: 39:ee:ce:65:53:48:b1:0d:7a:49:6b:61:2e:bc:00:fa:10:77: 20:6a:b4:f7:1b:b6:19:4a:df:6e:45:df:af:54:23:63:3d:af: 2d:24:fa:f6:38:02:d0:21:96:28:64:38:70:04:06:ce:ba:49: 06:e8:6f:f4:4a:b3:5d:91:ce:0a:86:c0:8b:01:23:99:63:e5: ae:2c:7f:18:08:7c:c7:23:74:78:26:31:bc:6b:9c:81:19:86: cc:0a:39:e8:82:8b:bb:4f:c5:6f:22:78:cb:8b:8c:e0:09:64: a6:3d:eb:00:77:02:c9:44:0d:75:9f:d8:7a:18:3e:ec:d0:20: 59:5a:97:58:e4:d6:0a:f4:b7:dd:3a:ff:0f:96:32:c7:f2:5a: 9b:d6:4a:fa:2a:75:5a:3a:65:6a:f3:37:c4:c9:ad:cf:6b:3e: 79:08:7a:d7:ff:f3:b7:94:f5:e3:da:d2:5c:97:ec:31:d2:44: fd:b4:f4:b3:c8:1d:66:d3:98:c2:f3:67:41:ef:cf:bc:4b:ed: e8:cc:fe:90:53:c3:0f:f9:3b:86:23:27:e3:db:d8:be:d2:56: 2e:65:d4:ec:8c:3c:7a:38:0e:e8:7f:e4:0d:8c:00:fe:1d:bf: 02:23:65:ee -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE2GlUq2Eek55w1xggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmMWEwNWYtZWZhYy00ZWYzLThiMjMtNWZkYmUzY2I0 ZTg4MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ZTU2ZDNhMTItMjJiNS00MGE4LThhNjUtZjliMzg3OGI1NTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5I5YC+xLP6PONM9Jh3QUZdtwOiXCcs/WyA8U GOa0NnCF98eBY10aZDYkPFV9IN2iuO7e2zwOETuiAyN/t82hZvmIurYitO1N/Uea X2NWNy8wkIyT9DKxoy7JHTlQD9TiJaBDO7o1ZS5aD8uAEnom3lEuKkmzkTOnoH0l AhsxMWN46KKCE9rpvpkArXJOvQ5eR4zVfgtGIE2N1ijrjFcfAXYIAhKjEaeqUH1q U0L6XD8Eg78toKKAQOnLi5OzDj2AzR+V5mmfiz6xuCHRH5qKF0+wNThLjjrGAVaQ 1cIUJLxULL8G791BWbwIVyGJAfOxhbg77uS2BDJFQQ7aRtcoSQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFPSgLoqzwFUatcaaXqx7I5L8qYVMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Yx YTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRiZTNjYjRlODgvM2JkZmViZDMtMTkxYy0z MGU5LWIyMGItNjdiNmYwMGMwMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmMWEwNWYtZWZhYy00ZWYzLThi MjMtNWZkYmUzY2I0ZTg4L2RjZjFhMDVmLWVmYWMtNGVmMy04YjIzLTVmZGJlM2Ni NGU4OC5jcmwwHwYDVR0jBBgwFoAUMR6T8lfYI525l+itPI4ghmPqWe8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2YxYTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRi ZTNjYjRlODguY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6DQAwQA roj4MA4EAgACMAgDBgQmAv1GADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYn+NEDmuAZVQRrOcLbM6I/kA5 7s5lU0ixDXpJa2EuvAD6EHcgarT3G7YZSt9uRd+vVCNjPa8tJPr2OALQIZYoZDhw BAbOukkG6G/0SrNdkc4KhsCLASOZY+WuLH8YCHzHI3R4JjG8a5yBGYbMCjnogou7 T8VvInjLi4zgCWSmPesAdwLJRA11n9h6GD7s0CBZWpdY5NYK9LfdOv8PljLH8lqb 1kr6KnVaOmVq8zfEya3Paz55CHrX//O3lPXj2tJcl+wx0kT9tPSzyB1m05jC82dB 78+8S+3ozP6QU8MP+TuGIyfj29i+0lYuZdTsjDx6OA7of+QNjAD+Hb8CI2Xu -----END CERTIFICATE-----Generated at Fri Apr 17 11:02:44 2026 by rpki-client