$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/fbaf479f-b8aa-3eff-854f-a497ff4e0df3.roa File: fbaf479f-b8aa-3eff-854f-a497ff4e0df3.roa (raw, json) Hash identifier: qFTrCB4FzVgG0JfCFEA+Sfr8hZ2FBwQF4+UbPObtmOI= Subject key identifier: D2:4B:6E:F4:1B:AC:F5:3E:88:2C:FC:70:16:67:F0:16:DA:31:B7:C5 Certificate issuer: /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a Certificate serial: 010D0C9F4328584D703FD8573A3BBCA3BB945380 Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/fbaf479f-b8aa-3eff-854f-a497ff4e0df3.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 396982 IP address blocks: 23.141.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:d8:57:3a:3b:bc:a3:bb:94:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=f85697eb-8271-4919-9738-858d36f05650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:65:77:2c:fd:f8:78:db:91:e6:bf:98:51:92: f9:b6:e7:03:38:5a:e5:a9:ab:db:49:9a:c0:b1:e7: 78:06:3f:68:68:e9:19:e0:e4:d6:9e:6c:10:cf:cb: 6c:be:15:8e:67:1f:c1:db:83:95:80:f2:24:ac:6b: e8:61:c0:13:f5:83:9a:21:fe:19:84:af:7a:b5:85: 1d:cf:83:1e:2b:26:09:98:e2:8e:91:20:58:30:19: 74:47:f1:d0:c0:c3:df:84:97:d5:b8:cf:71:8f:31: bd:4c:38:7d:14:1d:cb:05:cf:97:09:88:9e:59:c2: 32:f4:66:a1:04:51:37:5c:9d:ef:2a:0e:d8:d4:38: d8:68:fd:23:bc:51:7a:f7:4b:3b:a7:b8:45:46:9e: ad:ff:bd:37:33:d6:74:3e:e1:63:d0:49:36:c7:bb: 47:4c:cc:34:6c:50:37:83:8f:fa:28:4f:9e:d0:02: f3:5f:8a:35:7f:f5:7b:9a:24:3c:15:23:e2:0f:a8: 2e:c4:26:9c:1d:28:95:d8:48:81:88:59:a2:4a:d4: 63:3b:2e:23:1c:39:02:56:ff:6a:9c:62:09:96:7b: ae:5e:75:35:27:2a:95:41:90:54:af:95:a9:32:d5: dc:a2:ee:7a:d0:9e:a3:cb:76:67:ee:f0:2e:3c:b2: 6e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4B:6E:F4:1B:AC:F5:3E:88:2C:FC:70:16:67:F0:16:DA:31:B7:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/fbaf479f-b8aa-3eff-854f-a497ff4e0df3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl X509v3 Authority Key Identifier: keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer sbgp-ipAddrBlock: critical IPv4: 23.141.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e9:eb:ea:a1:ef:74:72:4a:01:4f:bb:7a:2a:ff:bf:f0:fc: ec:03:88:6d:bb:66:a7:d1:56:de:fe:53:d0:d1:e4:9b:fb:a3: 26:b8:ed:65:16:7d:1c:9f:47:f0:d6:02:29:99:24:ab:38:0a: f4:3b:67:9b:24:b8:d8:3f:31:b2:ab:0c:d2:4f:e4:b4:80:78: 2c:b8:ae:56:b9:a1:90:b9:f2:84:23:3c:c9:3a:37:a0:78:2e: 07:61:9a:9d:9b:19:3d:a2:06:c2:c3:cd:b1:34:79:5c:64:14: bc:d5:4d:4c:e0:8e:59:ae:c2:68:d2:b8:8b:5d:a4:fb:a0:32: 95:62:6c:85:f6:da:d8:cc:e6:b0:45:b9:84:01:02:09:64:64: b3:0b:68:4e:3c:5d:aa:bd:62:9e:1a:02:d2:10:db:fa:b1:dc: 06:f8:dc:f7:d1:8e:54:60:f9:3c:57:c0:c5:cd:3c:d1:90:2d: 42:52:cb:56:6e:ed:3d:97:85:d0:5d:ae:34:a7:96:78:b5:8f: 2f:41:d5:bf:a0:d3:de:a8:5f:e6:09:88:8a:38:fc:09:84:b9: 44:26:57:51:d0:d6:8a:f4:99:7a:e3:0f:ac:72:4f:d1:08:18: d4:71:df:ec:7b:db:0a:fc:1b:71:f4:aa:dd:f9:e2:3e:41:01: 9b:de:bf:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP9hXOju8o7uUU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA4MzBhNDEtNWI2ZS00Y2JkLWE1NGItYTMzNTBhYTAy ZTBhMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk Zjg1Njk3ZWItODI3MS00OTE5LTk3MzgtODU4ZDM2ZjA1NjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmV3LP34eNuR5r+YUZL5tucDOFrlqavbSZrA sed4Bj9oaOkZ4OTWnmwQz8tsvhWOZx/B24OVgPIkrGvoYcAT9YOaIf4ZhK96tYUd z4MeKyYJmOKOkSBYMBl0R/HQwMPfhJfVuM9xjzG9TDh9FB3LBc+XCYieWcIy9Gah BFE3XJ3vKg7Y1DjYaP0jvFF690s7p7hFRp6t/703M9Z0PuFj0Ek2x7tHTMw0bFA3 g4/6KE+e0ALzX4o1f/V7miQ8FSPiD6guxCacHSiV2EiBiFmiStRjOy4jHDkCVv9q nGIJlnuuXnU1JyqVQZBUr5WpMtXcou560J6jy3Zn7vAuPLJuTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJLbvQbrPU+iCz8cBZn8BbaMbfFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMDgz MGE0MS01YjZlLTRjYmQtYTU0Yi1hMzM1MGFhMDJlMGEvZmJhZjQ3OWYtYjhhYS0z ZWZmLTg1NGYtYTQ5N2ZmNGUwZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjA4MzBhNDEtNWI2ZS00Y2JkLWE1 NGItYTMzNTBhYTAyZTBhL2YwODMwYTQxLTViNmUtNGNiZC1hNTRiLWEzMzUwYWEw MmUwYS5jcmwwHwYDVR0jBBgwFoAUvVKaIf1PkT7UKBeOvFvMzzV7WuEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mMDgzMGE0MS01YjZlLTRjYmQtYTU0Yi1hMzM1 MGFhMDJlMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF42oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHp6+qh73RySgFPu3oq/7/w/OwDiG27ZqfRVt7+U9DR5Jv7oya47WUW fRyfR/DWAimZJKs4CvQ7Z5skuNg/MbKrDNJP5LSAeCy4rla5oZC58oQjPMk6N6B4 Lgdhmp2bGT2iBsLDzbE0eVxkFLzVTUzgjlmuwmjSuItdpPugMpVibIX22tjM5rBF uYQBAglkZLMLaE48Xaq9Yp4aAtIQ2/qx3Ab43PfRjlRg+TxXwMXNPNGQLUJSy1Zu 7T2XhdBdrjSnlni1jy9B1b+g096oX+YJiIo4/AmEuUQmV1HQ1or0mXrjD6xyT9EI GNRx3+x72wr8G3H0qt354j5BAZvev0k= -----END CERTIFICATE-----Generated at Fri Apr 17 11:33:37 2026 by rpki-client