$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/5974e7e0-66c1-36a0-a072-e5bc9e6bb83f.roa File: 5974e7e0-66c1-36a0-a072-e5bc9e6bb83f.roa (raw, json) Hash identifier: 2Hrmr6eoYmoxzCrvrIq18CynBUK9ey6LjLikEOM78H8= Subject key identifier: C6:46:94:F3:1C:C8:69:F0:48:AD:5E:60:67:21:66:5F:B7:31:6E:1A Certificate issuer: /CN=b12072dc-8b29-49de-800e-2439a1f4bf97 Certificate serial: 010D0C9F4328584CAA271CB4F5B4D9741A6A7780 Authority key identifier: 6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/5974e7e0-66c1-36a0-a072-e5bc9e6bb83f.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 399737 IP address blocks: 23.165.8.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:1c:b4:f5:b4:d9:74:1a:6a:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b12072dc-8b29-49de-800e-2439a1f4bf97 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=6b228fb5-9b63-4942-acf4-42eedf631a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a8:df:63:96:2b:c2:b8:c5:f8:2f:c9:65:08: bc:41:35:6e:27:b6:12:f5:ec:b5:ca:5e:48:e7:80: f4:d2:5c:94:ec:d6:76:c7:b2:84:a1:fb:aa:49:52: aa:df:6b:ae:ab:6e:74:4f:35:14:ed:ec:8a:85:21: 54:71:94:38:97:34:09:c4:8b:20:d0:98:d8:ea:6d: 15:9e:3d:57:c6:d8:44:62:c3:f8:f7:a5:73:bf:95: 2e:bd:cc:cd:94:a9:69:51:59:d5:0e:55:cf:eb:5e: 59:46:bd:4d:34:07:b2:0c:e5:14:bc:13:8d:91:9a: 88:d2:7d:7f:b4:57:a0:08:37:1e:9b:9a:7e:af:da: e6:36:55:9b:d6:16:20:97:09:65:82:c8:38:6e:80: 3e:35:51:98:0c:9c:e0:3b:25:e1:a7:d9:30:a0:d3: 97:b3:68:f4:d6:db:10:6b:04:98:08:a7:da:fd:27: b7:2f:e1:a1:a6:45:71:37:c3:ad:61:7b:90:70:53: 62:b0:c9:6d:09:f5:3b:fc:af:b6:df:c4:e1:f0:b4: 7c:73:0b:ef:3f:ad:3a:64:90:27:95:9f:75:0f:8e: cd:e4:d3:6a:74:a1:15:d8:68:5f:84:61:a7:0a:38: a4:cd:fa:97:68:bc:54:22:6c:de:26:fe:67:4c:05: 91:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:46:94:F3:1C:C8:69:F0:48:AD:5E:60:67:21:66:5F:B7:31:6E:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/5974e7e0-66c1-36a0-a072-e5bc9e6bb83f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.crl X509v3 Authority Key Identifier: keyid:6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer sbgp-ipAddrBlock: critical IPv4: 23.165.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:76:04:a7:9e:4f:f9:99:8d:a8:37:0e:5a:34:38:9d:d9:f6: 38:05:a9:b9:ee:c6:41:d6:cf:e9:3e:6a:b7:f7:75:14:a8:6a: 1d:9f:14:43:85:73:5e:b1:6e:ad:90:6f:c6:fc:95:88:4f:1b: f3:2f:6c:d3:d5:f7:1e:1d:58:31:c5:05:69:f3:dd:30:26:58: 54:1c:7d:91:69:94:cb:ec:47:2b:ef:af:25:3e:83:57:d6:72: 09:99:84:ab:a4:d2:74:e4:c3:6c:ae:6a:c6:ad:11:b8:0b:45: 58:c4:df:2f:ed:13:f6:26:40:ed:c9:5b:8c:d1:b6:b5:dc:6a: 53:f5:1c:55:0e:91:e1:28:4c:95:da:a5:65:ce:ca:ed:71:a8: 46:6d:d1:2e:0d:6d:5f:ba:e3:f6:d5:8a:eb:7f:65:2b:1c:d2: 88:94:6a:f7:c6:74:18:87:6c:2d:6f:11:69:99:c8:b3:c5:a1: 3b:34:0b:26:d3:f1:0d:b4:98:e2:af:da:1a:74:b3:b9:de:20: 00:9e:79:5e:17:f8:f5:89:b9:2d:d9:62:b7:9d:bc:0a:da:05: d6:c0:df:e3:99:d1:24:99:d8:59:d7:81:d2:12:5b:da:9f:b1: 94:2c:a1:a1:85:35:e2:88:4b:17:a6:77:e2:83:b0:e5:d9:b2: e7:79:ab:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJxy09bTZdBpqd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjEyMDcyZGMtOGIyOS00OWRlLTgwMGUtMjQzOWExZjRi Zjk3MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk NmIyMjhmYjUtOWI2My00OTQyLWFjZjQtNDJlZWRmNjMxYTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKjfY5YrwrjF+C/JZQi8QTVuJ7YS9ey1yl5I 54D00lyU7NZ2x7KEofuqSVKq32uuq250TzUU7eyKhSFUcZQ4lzQJxIsg0JjY6m0V nj1XxthEYsP496Vzv5UuvczNlKlpUVnVDlXP615ZRr1NNAeyDOUUvBONkZqI0n1/ tFegCDcem5p+r9rmNlWb1hYglwllgsg4boA+NVGYDJzgOyXhp9kwoNOXs2j01tsQ awSYCKfa/Se3L+GhpkVxN8OtYXuQcFNisMltCfU7/K+238Th8LR8cwvvP606ZJAn lZ91D47N5NNqdKEV2GhfhGGnCjikzfqXaLxUImzeJv5nTAWRAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZGlPMcyGnwSK1eYGchZl+3MW4aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iMTIw NzJkYy04YjI5LTQ5ZGUtODAwZS0yNDM5YTFmNGJmOTcvNTk3NGU3ZTAtNjZjMS0z NmEwLWEwNzItZTViYzllNmJiODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjEyMDcyZGMtOGIyOS00OWRlLTgw MGUtMjQzOWExZjRiZjk3L2IxMjA3MmRjLThiMjktNDlkZS04MDBlLTI0MzlhMWY0 YmY5Ny5jcmwwHwYDVR0jBBgwFoAUbbEzuUq4UQp9SSdwpGFXfTla9GYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iMTIwNzJkYy04YjI5LTQ5ZGUtODAwZS0yNDM5 YTFmNGJmOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6UIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIF2BKeeT/mZjag3Dlo0OJ3Z9jgFqbnuxkHWz+k+arf3dRSoah2fFEOF c16xbq2Qb8b8lYhPG/MvbNPV9x4dWDHFBWnz3TAmWFQcfZFplMvsRyvvryU+g1fW cgmZhKuk0nTkw2yuasatEbgLRVjE3y/tE/YmQO3JW4zRtrXcalP1HFUOkeEoTJXa pWXOyu1xqEZt0S4NbV+64/bViut/ZSsc0oiUavfGdBiHbC1vEWmZyLPFoTs0CybT 8Q20mOKv2hp0s7neIACeeV4X+PWJuS3ZYredvAraBdbA3+OZ0SSZ2FnXgdISW9qf sZQsoaGFNeKISxemd+KDsOXZsud5q3g= -----END CERTIFICATE-----Generated at Mon Mar 2 15:09:13 2026 by rpki-client