$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/cf03c4bd-eb7c-3cee-9900-d3cc9c4d11a9.roa File: cf03c4bd-eb7c-3cee-9900-d3cc9c4d11a9.roa (raw, json) Hash identifier: qyccTVNdgfhUgRbuue1z7m880IYcOSkAjpLPPWOfYe8= Subject key identifier: 11:00:4E:D7:B7:03:69:D7:98:37:9C:A2:03:C2:1D:AF:2B:1D:C3:F4 Certificate issuer: /CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61 Certificate serial: 010D0C9F4328584C8476ED875EC17ECB1328E880 Authority key identifier: A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/cf03c4bd-eb7c-3cee-9900-d3cc9c4d11a9.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 39937 IP address blocks: 23.160.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:ed:87:5e:c1:7e:cb:13:28:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=23b46c54-90a6-458a-bb26-b398a2d3a154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8e:1c:f5:00:02:60:cd:a2:06:14:8d:be:5e: a3:85:83:26:cc:9c:55:74:49:a0:db:c9:1d:7d:ba: 44:48:f0:8a:2a:31:b3:2e:03:b8:fc:36:b0:27:40: d0:d0:79:1f:01:07:f2:6a:d3:3e:1a:aa:ce:62:af: f5:f7:62:76:25:58:48:60:68:2d:64:ec:96:3b:5f: c4:ed:89:3d:ee:1e:fa:c7:a8:72:57:20:65:5a:79: f7:49:84:db:be:f5:d8:4c:41:38:d8:96:6a:1d:34: 28:50:35:7d:10:a5:14:eb:5a:59:5f:58:e0:ea:da: 49:02:07:b4:29:72:84:d6:2e:d8:66:01:f0:4c:5c: 15:c6:fe:0e:ed:a7:6e:4b:ec:21:36:c5:a4:6d:c7: c5:0b:09:ac:7a:84:6b:b1:3e:62:1a:ca:56:5b:0b: 3f:b4:37:1e:9e:0e:f6:eb:65:a0:77:d7:19:b0:79: ef:31:bf:b9:0a:9f:97:de:2f:b9:58:d4:0c:33:ca: 47:0e:af:b8:b9:aa:a5:10:e1:3b:1b:14:4d:a2:56: ac:15:7a:5e:8b:40:07:86:0e:1e:f7:c4:90:91:12: 79:e9:d5:97:17:99:45:15:2a:ad:16:24:49:e4:b1: 3d:0f:ed:bc:09:84:ec:50:2b:9a:72:86:bd:70:65: 64:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:00:4E:D7:B7:03:69:D7:98:37:9C:A2:03:C2:1D:AF:2B:1D:C3:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/cf03c4bd-eb7c-3cee-9900-d3cc9c4d11a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl X509v3 Authority Key Identifier: keyid:A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer sbgp-ipAddrBlock: critical IPv4: 23.160.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:db:af:8c:21:d4:0f:7c:17:5a:da:11:b2:62:e4:3e:36:81: f6:d9:13:fe:e4:04:8d:32:16:17:74:6e:5c:38:15:15:0e:d7: 57:f4:91:dc:49:88:45:d2:38:12:eb:91:1c:9b:11:e1:3a:92: 2d:ba:08:86:c4:28:2f:f8:75:61:32:18:81:83:9d:da:42:36: 87:8f:ac:f9:34:64:c1:87:ba:1f:f8:3b:1b:91:57:58:c0:c1: ba:65:62:10:ef:99:32:26:54:f6:a5:a8:73:7d:9a:66:0e:bf: f7:fb:20:e1:ef:d4:fe:9b:b6:c7:76:d9:15:46:2b:0c:f5:4f: 78:a3:a7:e8:7a:e8:6e:c9:66:16:78:4c:15:6d:f6:9b:a5:bd: e0:c2:8f:91:f5:86:f8:6e:78:0a:00:1e:2c:0f:7b:98:91:7c: f2:c6:81:11:e4:28:8a:b9:92:f4:1e:f7:06:fa:ad:21:9e:d7: 4d:fc:a6:8c:85:de:9f:64:a9:91:0c:3a:9a:63:a3:99:6f:5d: 8e:64:d3:56:37:cf:fe:ce:0c:0e:3e:cb:d0:10:2a:08:9d:34: 09:6f:00:45:69:26:54:a2:7a:f3:43:fc:16:b4:65:20:8d:50: 65:ce:52:5e:07:4f:85:71:ed:4d:66:87:09:28:8f:ce:6b:64: 35:fb:82:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdu2HXsF+yxMo6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTlkODcxNWYtNmQ0YS00YjlmLTkzZmYtOGViMjUxNTg4 ZjYxMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk MjNiNDZjNTQtOTBhNi00NThhLWJiMjYtYjM5OGEyZDNhMTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq44c9QACYM2iBhSNvl6jhYMmzJxVdEmg28kd fbpESPCKKjGzLgO4/DawJ0DQ0HkfAQfyatM+GqrOYq/192J2JVhIYGgtZOyWO1/E 7Yk97h76x6hyVyBlWnn3SYTbvvXYTEE42JZqHTQoUDV9EKUU61pZX1jg6tpJAge0 KXKE1i7YZgHwTFwVxv4O7aduS+whNsWkbcfFCwmseoRrsT5iGspWWws/tDceng72 62Wgd9cZsHnvMb+5Cp+X3i+5WNQMM8pHDq+4uaqlEOE7GxRNolasFXpei0AHhg4e 98SQkRJ56dWXF5lFFSqtFiRJ5LE9D+28CYTsUCuacoa9cGVktQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEATte3A2nXmDecogPCHa8rHcP0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hOWQ4 NzE1Zi02ZDRhLTRiOWYtOTNmZi04ZWIyNTE1ODhmNjEvY2YwM2M0YmQtZWI3Yy0z Y2VlLTk5MDAtZDNjYzljNGQxMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTlkODcxNWYtNmQ0YS00YjlmLTkz ZmYtOGViMjUxNTg4ZjYxL2E5ZDg3MTVmLTZkNGEtNGI5Zi05M2ZmLThlYjI1MTU4 OGY2MS5jcmwwHwYDVR0jBBgwFoAUpiXWfjyryXpYmjCju/XhvKZbD3owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hOWQ4NzE1Zi02ZDRhLTRiOWYtOTNmZi04ZWIy NTE1ODhmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6B4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADbr4wh1A98F1raEbJi5D42gfbZE/7kBI0yFhd0blw4FRUO11f0kdxJ iEXSOBLrkRybEeE6ki26CIbEKC/4dWEyGIGDndpCNoePrPk0ZMGHuh/4OxuRV1jA wbplYhDvmTImVPalqHN9mmYOv/f7IOHv1P6btsd22RVGKwz1T3ijp+h66G7JZhZ4 TBVt9pulveDCj5H1hvhueAoAHiwPe5iRfPLGgRHkKIq5kvQe9wb6rSGe1038poyF 3p9kqZEMOppjo5lvXY5k01Y3z/7ODA4+y9AQKgidNAlvAEVpJlSievND/Ba0ZSCN UGXOUl4HT4Vx7U1mhwkoj85rZDX7ggs= -----END CERTIFICATE-----Generated at Mon Mar 2 12:38:57 2026 by rpki-client