$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/7ca41dda-e456-3247-b2ab-cfdb860809e0.roa File: 7ca41dda-e456-3247-b2ab-cfdb860809e0.roa (raw, json) Hash identifier: JwGI22d4grAN7E7rjRy3cj9c77Jr/FVlfgGTRTlr4WY= Subject key identifier: 13:5B:61:8A:CC:C7:BC:C7:50:D2:F2:85:83:E5:D1:01:42:8E:4C:56 Certificate issuer: /CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Certificate serial: 010D0C9F4328584CA32CFA46169654987766C000 Authority key identifier: 1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/7ca41dda-e456-3247-b2ab-cfdb860809e0.roa Signing time: Sun 25 Jan 2026 02:00:31 +0000 ROA not before: Sun 25 Jan 2026 02:00:31 +0000 ROA not after: Sat 25 Apr 2026 01:00:31 +0000 asID: 213622 IP address blocks: 23.130.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a3:2c:fa:46:16:96:54:98:77:66:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Validity Not Before: Jan 25 02:00:31 2026 GMT Not After : Apr 25 01:00:31 2026 GMT Subject: CN=09230b7c-62b1-4935-98cc-f3b3307c4965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:00:6c:b4:ec:81:06:ae:ed:b7:7e:02:85:41: 81:fe:d4:fa:f6:64:d5:06:5b:57:d7:83:06:c1:7d: 73:83:b7:35:07:8e:a4:d4:31:6a:73:ae:41:d5:77: 27:46:42:d5:27:42:5e:29:d5:98:fc:38:4b:4c:5e: 77:5c:4f:09:c0:d0:8f:4a:ab:72:3d:05:d6:ba:ea: 98:3c:14:74:ce:64:bb:8d:09:4b:34:6a:20:fd:2c: 04:9b:e8:8f:f9:9d:32:67:25:9a:65:fa:0a:f9:a3: 28:e0:54:40:7c:26:53:74:b7:7f:f6:46:d5:b5:81: bf:d9:f7:16:d7:82:9d:7e:3d:b0:4c:87:3a:73:6c: a1:e8:2a:d3:90:40:f2:5f:8e:aa:37:30:48:7f:bb: 10:d2:16:21:1f:d7:29:cd:2d:a2:cd:44:79:1e:0d: bd:82:11:3f:46:1f:43:35:36:1d:41:3d:c2:1e:e9: f8:ae:93:6f:4e:5f:8f:cd:ae:08:f6:26:a2:cf:67: ca:fe:2c:70:c2:09:7e:72:20:c1:cb:7f:ae:9f:86: c9:83:72:c8:cf:5a:7b:87:b5:cd:95:4f:15:2e:42: 95:bf:f6:60:c5:2e:0f:c0:6e:a6:79:c4:8d:e2:e1: 19:e1:52:5e:c6:97:43:7d:e1:7c:2d:07:05:e1:66: 8b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5B:61:8A:CC:C7:BC:C7:50:D2:F2:85:83:E5:D1:01:42:8E:4C:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/7ca41dda-e456-3247-b2ab-cfdb860809e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl X509v3 Authority Key Identifier: keyid:1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer sbgp-ipAddrBlock: critical IPv4: 23.130.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:24:6a:3a:27:15:c3:d0:22:db:cc:61:f2:30:24:cf:97:58: 09:ca:89:6b:7b:67:45:6a:4a:af:3c:1c:0e:6f:a2:b1:7d:2a: 7c:2a:b7:e3:6e:fd:d9:41:e0:fa:d5:60:7c:cd:54:b0:ef:00: 14:4e:c4:46:16:07:39:1c:b4:74:67:93:2a:63:fd:47:a4:1c: 06:ca:4e:b6:8b:4f:89:e8:a6:4a:a9:af:54:4b:2d:a9:d3:3c: 57:8f:b6:60:ea:2c:b0:fe:c0:39:a7:f3:c8:a2:a2:47:58:b2: 10:d5:44:20:3f:69:85:e3:52:2b:32:da:b3:43:65:97:b5:ed: 19:50:85:1c:83:bd:e6:18:39:e5:3a:11:f6:20:ba:bb:bb:e9: 51:7b:f9:12:70:49:22:98:9d:98:87:f8:12:42:c3:36:bb:79: ed:80:6e:4d:47:2d:48:6a:5b:20:5f:0b:90:d7:ea:b4:7f:da: e6:7f:8e:c4:f5:6c:f6:23:8c:4e:9e:e1:37:17:86:03:ab:51: 7a:0a:64:a4:50:22:74:fe:e1:09:e3:dc:f5:48:60:07:30:fc: 75:ca:73:2f:fc:1f:05:0d:ac:05:01:1d:ba:8a:7a:0f:31:19: ad:11:87:47:b2:8d:f9:e7:eb:8f:a6:3e:64:4d:81:65:fb:06: 37:a3:0e:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyjLPpGFpZUmHdmwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E5NTlhYmEtZWY2OS00YTU2LWFhNmItMWNhMWZhNWFm M2EwMB4XDTI2MDEyNTAyMDAzMVoXDTI2MDQyNTAxMDAzMVowLzEtMCsGA1UEAxMk MDkyMzBiN2MtNjJiMS00OTM1LTk4Y2MtZjNiMzMwN2M0OTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogBstOyBBq7tt34ChUGB/tT69mTVBltX14MG wX1zg7c1B46k1DFqc65B1XcnRkLVJ0JeKdWY/DhLTF53XE8JwNCPSqtyPQXWuuqY PBR0zmS7jQlLNGog/SwEm+iP+Z0yZyWaZfoK+aMo4FRAfCZTdLd/9kbVtYG/2fcW 14Kdfj2wTIc6c2yh6CrTkEDyX46qNzBIf7sQ0hYhH9cpzS2izUR5Hg29ghE/Rh9D NTYdQT3CHun4rpNvTl+Pza4I9iaiz2fK/ixwwgl+ciDBy3+un4bJg3LIz1p7h7XN lU8VLkKVv/ZgxS4PwG6mecSN4uEZ4VJexpdDfeF8LQcF4WaL5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNbYYrMx7zHUNLyhYPl0QFCjkxWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1 OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2ExZmE1YWYzYTAvN2NhNDFkZGEtZTQ1Ni0z MjQ3LWIyYWItY2ZkYjg2MDgwOWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2E5NTlhYmEtZWY2OS00YTU2LWFh NmItMWNhMWZhNWFmM2EwLzNhOTU5YWJhLWVmNjktNGE1Ni1hYTZiLTFjYTFmYTVh ZjNhMC5jcmwwHwYDVR0jBBgwFoAUGh9aapRds4UKQVOCNFyUClT0Oi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2Ex ZmE1YWYzYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4IcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUkajonFcPQItvMYfIwJM+XWAnKiWt7Z0VqSq88HA5vorF9Knwqt+Nu /dlB4PrVYHzNVLDvABROxEYWBzkctHRnkypj/UekHAbKTraLT4nopkqpr1RLLanT PFePtmDqLLD+wDmn88iiokdYshDVRCA/aYXjUisy2rNDZZe17RlQhRyDveYYOeU6 EfYguru76VF7+RJwSSKYnZiH+BJCwza7ee2Abk1HLUhqWyBfC5DX6rR/2uZ/jsT1 bPYjjE6e4TcXhgOrUXoKZKRQInT+4Qnj3PVIYAcw/HXKcy/8HwUNrAUBHbqKeg8x Ga0Rh0eyjfnn64+mPmRNgWX7BjejDg8= -----END CERTIFICATE-----Generated at Sun Mar 1 23:22:25 2026 by rpki-client