$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/9cb53c35-155a-321e-9b30-bc285e3dd43f.roa File: 9cb53c35-155a-321e-9b30-bc285e3dd43f.roa (raw, json) Hash identifier: nQjiA1Dzir1NFlEQJaYXCu5bsGOiH3oikCaAenuAURY= Subject key identifier: 4B:95:1F:AA:D0:ED:64:2F:64:C4:5A:4B:89:3A:70:7B:76:0B:21:F3 Certificate issuer: /CN=89f46e33-a45d-4efe-8e7f-94df4343f1be Certificate serial: 010D0C9F4328584D06479ACBD39E671088C53920 Authority key identifier: BF:D7:76:5C:AE:7C:7E:99:13:39:08:73:6B:FC:47:70:CC:A2:0B:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/9cb53c35-155a-321e-9b30-bc285e3dd43f.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 55236 IP address blocks: 23.141.192.0/24 maxlen: 24 162.252.88.0/22 maxlen: 24 192.139.189.0/24 maxlen: 24 199.26.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:9a:cb:d3:9e:67:10:88:c5:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f46e33-a45d-4efe-8e7f-94df4343f1be Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=cff701e7-785c-46aa-8b9d-b254f69d28cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:df:11:ff:8e:ca:ba:2f:a8:04:95:59:7a:54: a2:2b:5b:23:e8:56:45:8b:42:39:2c:a4:78:81:ec: 5f:e7:29:39:bc:02:db:3f:6b:08:be:7c:64:bb:98: 1d:93:4d:d4:d8:be:04:b5:35:40:52:53:96:9d:dc: a7:7c:79:cc:de:4b:2e:05:76:0b:bc:c5:cf:78:08: 60:5d:b8:40:bf:a1:b3:5d:5a:be:cc:d8:3f:b5:ac: cc:18:35:eb:3b:dc:70:c0:1e:f0:f5:50:06:3f:6f: f7:75:e6:47:32:29:53:2d:fa:8d:51:7f:e7:06:4e: 02:b2:4c:09:8f:1d:07:b4:08:3c:b8:a2:f8:1c:68: bc:5d:8a:6d:fb:27:e3:b7:34:ea:e8:9b:b5:1c:e3: 76:77:2e:09:fe:eb:ff:95:bd:db:5a:60:d0:08:49: e7:70:c3:fd:ec:fc:1f:90:e8:bc:93:00:b0:7c:fc: 16:51:91:8a:c7:64:ff:9b:d3:7d:3d:65:51:db:48: ca:32:d3:14:8e:25:fc:54:7e:f7:5c:57:e5:37:fd: a5:db:5e:76:36:cc:dd:22:13:e2:ea:7b:8b:a2:29: d7:40:90:46:71:30:f5:92:07:05:e9:ef:94:3f:44: c8:f4:38:b3:04:ca:52:5a:4d:a1:7b:d1:64:f1:65: 44:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:95:1F:AA:D0:ED:64:2F:64:C4:5A:4B:89:3A:70:7B:76:0B:21:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/9cb53c35-155a-321e-9b30-bc285e3dd43f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.crl X509v3 Authority Key Identifier: keyid:BF:D7:76:5C:AE:7C:7E:99:13:39:08:73:6B:FC:47:70:CC:A2:0B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be.cer sbgp-ipAddrBlock: critical IPv4: 23.141.192.0/24 162.252.88.0/22 192.139.189.0/24 199.26.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ea:8a:cc:f1:ca:57:08:11:7d:bb:6e:94:9f:ce:48:08:45: 7b:8c:c1:14:05:11:e6:f6:cf:ee:75:f8:82:5f:8f:69:26:43: 14:2a:02:5b:62:89:bb:44:90:9e:e6:21:cd:3c:0a:89:da:c7: 0b:67:b7:20:4b:52:c7:a1:52:f1:12:6c:cf:f1:b5:18:11:7c: 1a:ed:0c:ac:37:1a:72:83:78:9c:25:5d:1d:db:e3:d6:22:1c: 29:5e:c1:3b:79:d0:ba:81:f6:47:b3:3a:f0:5a:45:dc:c4:e3: fb:bb:b9:d9:9d:91:55:3f:01:03:ba:f3:28:2a:f5:c6:49:fd: 5c:d5:98:54:69:80:9d:cb:29:a7:a5:4b:9f:ab:56:38:96:12: d9:a6:6f:38:b4:85:e5:51:e8:ad:54:c9:40:a4:81:5e:17:df: 8a:c3:51:a5:b2:87:ab:a4:80:44:4b:86:56:04:72:84:2c:45: 27:0e:95:88:19:ab:c6:8b:ae:06:51:4f:be:14:66:94:36:93: ae:3a:e2:74:ac:fe:ba:2d:82:e5:8f:10:b5:1f:24:3e:d5:ad: 5f:c5:a4:d1:cf:13:9b:f5:60:66:1a:41:ba:15:09:6b:c6:01: ce:5d:96:fa:54:a0:ef:07:9c:9e:4d:05:0f:e7:b7:e8:84:1a: 4f:53:59:af -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE0GR5rL055nEIjFOSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlmNDZlMzMtYTQ1ZC00ZWZlLThlN2YtOTRkZjQzNDNm MWJlMB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk Y2ZmNzAxZTctNzg1Yy00NmFhLThiOWQtYjI1NGY2OWQyOGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN8R/47Kui+oBJVZelSiK1sj6FZFi0I5LKR4 gexf5yk5vALbP2sIvnxku5gdk03U2L4EtTVAUlOWndynfHnM3ksuBXYLvMXPeAhg XbhAv6GzXVq+zNg/tazMGDXrO9xwwB7w9VAGP2/3deZHMilTLfqNUX/nBk4CskwJ jx0HtAg8uKL4HGi8XYpt+yfjtzTq6Ju1HON2dy4J/uv/lb3bWmDQCEnncMP97Pwf kOi8kwCwfPwWUZGKx2T/m9N9PWVR20jKMtMUjiX8VH73XFflN/2l2152NszdIhPi 6nuLoinXQJBGcTD1kgcF6e+UP0TI9DizBMpSWk2he9Fk8WVErwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFEuVH6rQ7WQvZMRaS4k6cHt2CyHzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWY0 NmUzMy1hNDVkLTRlZmUtOGU3Zi05NGRmNDM0M2YxYmUvOWNiNTNjMzUtMTU1YS0z MjFlLTliMzAtYmMyODVlM2RkNDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlmNDZlMzMtYTQ1ZC00ZWZlLThl N2YtOTRkZjQzNDNmMWJlLzg5ZjQ2ZTMzLWE0NWQtNGVmZS04ZTdmLTk0ZGY0MzQz ZjFiZS5jcmwwHwYDVR0jBBgwFoAUv9d2XK58fpkTOQhza/xHcMyiC9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWY0NmUzMy1hNDVkLTRlZmUtOGU3Zi05NGRm NDM0M2YxYmUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAF43AAwQC ovxYAwQAwIu9AwQAxxq4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBADDqiszxylcIEX27bpSfzkgIRXuMwRQF Eeb2z+51+IJfj2kmQxQqAltiibtEkJ7mIc08ConaxwtntyBLUsehUvESbM/xtRgR fBrtDKw3GnKDeJwlXR3b49YiHClewTt50LqB9kezOvBaRdzE4/u7udmdkVU/AQO6 8ygq9cZJ/VzVmFRpgJ3LKaelS5+rVjiWEtmmbzi0heVR6K1UyUCkgV4X34rDUaWy h6ukgERLhlYEcoQsRScOlYgZq8aLrgZRT74UZpQ2k6464nSs/rotguWPELUfJD7V rV/FpNHPE5v1YGYaQboVCWvGAc5dlvpUoO8HnJ5NBQ/nt+iEGk9TWa8= -----END CERTIFICATE-----Generated at Mon Mar 2 04:35:39 2026 by rpki-client