$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/fe41638a-4f33-349f-8340-5b6a4e8e22a7.roa File: fe41638a-4f33-349f-8340-5b6a4e8e22a7.roa (raw, json) Hash identifier: rHWDtFpHzpuE5TzAteE2LFcuUoLtpKM2rb/knU6FgIg= Subject key identifier: 01:DB:D7:3B:02:ED:8E:51:9E:1F:4B:FD:EB:40:D9:6C:93:B3:35:C9 Certificate issuer: /CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd Certificate serial: 010D0C9F4328584D71A50D78237FD72C0B253100 Authority key identifier: EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/fe41638a-4f33-349f-8340-5b6a4e8e22a7.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 14490 IP address blocks: 23.165.168.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:0d:78:23:7f:d7:2c:0b:25:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=f6e17ccf-39a1-4b4d-b65f-576fb915ea86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fa:30:60:e8:5c:70:d0:21:0b:b2:d7:31:82: 1c:ec:bf:8a:4c:1d:79:2d:b1:54:d3:58:73:63:11: 67:ca:22:bf:f4:45:30:6b:08:40:77:ec:61:a4:56: 80:79:ae:84:1a:ff:9e:32:87:a1:0e:f9:fc:fe:47: 5f:09:55:0f:0e:72:b8:a7:01:f6:4a:81:f9:e8:0e: 38:c7:15:9a:8c:51:e5:45:1d:10:7e:f9:59:76:3e: 6d:64:bd:2e:a7:f7:46:bb:a7:27:ae:d5:d7:01:70: c1:86:b6:3e:d5:4b:3c:47:8b:5d:00:4b:37:99:e8: 79:d7:66:f2:87:72:65:8a:53:fc:0f:f6:df:4f:aa: 57:3e:17:65:dc:c7:ed:67:03:c4:0a:0f:7e:83:2d: 77:05:0f:6f:97:d7:0b:51:84:3c:44:ec:7e:9a:0f: dd:5d:13:1e:5f:ed:a7:da:88:88:6b:b2:1e:9e:07: 71:aa:c7:5c:9c:51:ac:56:ed:12:de:17:1e:eb:33: 06:de:69:26:12:4a:04:5f:3e:01:9c:3d:3f:4e:60: 61:a5:6c:87:e2:f2:6b:0c:61:a3:97:9e:09:54:13: b5:a6:f4:93:b8:50:85:8e:9c:8a:87:35:b9:19:c8: 6b:c4:c4:ab:b8:85:cd:e2:28:3b:eb:fb:3c:45:4e: 08:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DB:D7:3B:02:ED:8E:51:9E:1F:4B:FD:EB:40:D9:6C:93:B3:35:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/fe41638a-4f33-349f-8340-5b6a4e8e22a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl X509v3 Authority Key Identifier: keyid:EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer sbgp-ipAddrBlock: critical IPv4: 23.165.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:91:9a:35:a9:67:21:48:96:df:ae:d2:a5:ba:f7:b2:dc:99: 48:05:5a:bf:d2:e5:f0:dd:a1:2e:00:a3:92:b2:e2:09:89:e2: 48:b7:2e:45:f0:1b:b9:91:ec:e2:b1:5b:af:e2:95:2e:46:47: aa:73:ba:9a:13:99:86:61:c7:01:67:de:aa:ac:de:e2:6b:dd: 56:1e:a9:35:cb:81:b9:7d:2b:9b:17:32:e9:35:ed:0a:5a:7e: e0:eb:c4:47:c7:11:89:8b:9c:5a:eb:d9:86:28:f3:e9:96:1c: e1:c3:81:01:1a:c6:47:2b:85:a2:2e:a5:d6:39:5a:50:ec:99: 54:80:77:93:ec:4f:2c:e9:ef:bf:81:46:69:7a:f2:9f:94:6a: 11:bd:bf:61:45:d2:80:81:aa:ab:d8:ac:ce:53:94:97:98:d1: 6d:3e:0f:51:99:1b:46:6e:d1:96:33:60:66:d9:29:91:ae:9a: 82:cd:52:37:02:67:b1:d1:83:96:01:78:a0:f3:fb:a0:38:5b: b6:96:ac:3d:13:b1:82:cf:1c:f9:fa:14:f9:84:87:6e:8e:7c: 1b:ba:2a:35:66:f7:ba:a1:32:43:ed:16:69:31:af:7e:cd:28: 6f:20:45:78:5e:e4:58:bb:09:a4:3d:19:c1:e6:c0:a8:c2:4a: 92:c9:c9:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpQ14I3/XLAslMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU3YjliMjgtNzkzNC00NTRhLThiMmYtMjQ2ZDg4ODlm ZGJkMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk ZjZlMTdjY2YtMzlhMS00YjRkLWI2NWYtNTc2ZmI5MTVlYTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPowYOhccNAhC7LXMYIc7L+KTB15LbFU01hz YxFnyiK/9EUwawhAd+xhpFaAea6EGv+eMoehDvn8/kdfCVUPDnK4pwH2SoH56A44 xxWajFHlRR0QfvlZdj5tZL0up/dGu6cnrtXXAXDBhrY+1Us8R4tdAEs3meh512by h3JlilP8D/bfT6pXPhdl3MftZwPECg9+gy13BQ9vl9cLUYQ8ROx+mg/dXRMeX+2n 2oiIa7IengdxqsdcnFGsVu0S3hce6zMG3mkmEkoEXz4BnD0/TmBhpWyH4vJrDGGj l54JVBO1pvSTuFCFjpyKhzW5GchrxMSruIXN4ig76/s8RU4IsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHb1zsC7Y5Rnh9L/etA2WyTszXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdi OWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZkODg4OWZkYmQvZmU0MTYzOGEtNGYzMy0z NDlmLTgzNDAtNWI2YTRlOGUyMmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWU3YjliMjgtNzkzNC00NTRhLThi MmYtMjQ2ZDg4ODlmZGJkLzFlN2I5YjI4LTc5MzQtNDU0YS04YjJmLTI0NmQ4ODg5 ZmRiZC5jcmwwHwYDVR0jBBgwFoAU7CTbIeW+m2u6JkrzwmZOds7dmxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdiOWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZk ODg4OWZkYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6WoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaRmjWpZyFIlt+u0qW697LcmUgFWr/S5fDdoS4Ao5Ky4gmJ4ki3LkXw G7mR7OKxW6/ilS5GR6pzupoTmYZhxwFn3qqs3uJr3VYeqTXLgbl9K5sXMuk17Qpa fuDrxEfHEYmLnFrr2YYo8+mWHOHDgQEaxkcrhaIupdY5WlDsmVSAd5PsTyzp77+B Rml68p+UahG9v2FF0oCBqqvYrM5TlJeY0W0+D1GZG0Zu0ZYzYGbZKZGumoLNUjcC Z7HRg5YBeKDz+6A4W7aWrD0TsYLPHPn6FPmEh26OfBu6KjVm97qhMkPtFmkxr37N KG8gRXhe5Fi7CaQ9GcHmwKjCSpLJyec= -----END CERTIFICATE-----Generated at Fri Apr 17 09:50:25 2026 by rpki-client