$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/5e1fab74-1778-30f0-833e-7e9606d6d74e.roa File: 5e1fab74-1778-30f0-833e-7e9606d6d74e.roa (raw, json) Hash identifier: 1xOqAJzf3ZowFMzdhQVXi7RQkTj/MxX5FwbGIDx1Ptc= Subject key identifier: D6:27:A3:6C:37:C8:17:F1:52:53:F8:42:5C:47:DE:1A:8F:8C:A7:E3 Certificate issuer: /CN=4ee37184-86de-48c9-af35-5d102d140fa6 Certificate serial: 010D0C9F4328584D5E1A75DCEF0BB7B209423E80 Authority key identifier: CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/5e1fab74-1778-30f0-833e-7e9606d6d74e.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 401538 IP address blocks: 23.130.156.0/24 maxlen: 32 208.70.216.0/22 maxlen: 32 2602:f766::/36 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:75:dc:ef:0b:b7:b2:09:42:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee37184-86de-48c9-af35-5d102d140fa6 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=8be29782-1c47-48f4-bee6-35e0b19689e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:63:07:eb:56:c8:50:97:2f:65:31:ac:32:f3: 49:e6:13:34:21:2e:bb:78:98:18:05:6e:f7:cf:1c: 16:d5:83:01:e1:30:56:f0:7a:b8:61:f9:11:61:8a: e2:ad:74:2a:f0:bd:28:14:45:95:0e:99:7a:e0:01: fd:87:d3:f1:95:53:17:4f:97:97:b3:dd:90:b9:b2: e3:bd:6f:81:d2:84:7e:11:b8:d2:17:06:4e:4a:97: a5:b3:7c:a5:bb:9a:3e:c3:18:45:db:59:1c:68:a3: 3b:ef:07:ee:aa:0d:15:e9:67:06:2c:da:bb:3a:3a: 92:b1:c6:c7:74:55:f9:16:8a:83:1d:38:92:a2:4e: cc:1d:62:f7:89:0c:0f:9d:ec:84:66:a6:9e:bc:44: ae:f0:de:1c:be:ef:e7:30:79:93:eb:a7:43:85:cc: 66:bf:03:6a:d7:af:25:fe:f6:24:8e:72:cb:d3:28: c5:c0:37:d5:f9:55:eb:f9:39:8f:f2:0c:04:ad:3b: 2f:2c:11:d4:77:d3:44:d5:e5:55:42:b2:f9:51:46: 23:b8:d1:91:f9:6a:8f:18:6c:98:55:a1:03:c4:7f: 02:ea:31:fd:2c:0b:a2:06:e4:c4:52:2e:5c:37:b7: 5a:a9:10:98:88:b0:08:2f:5f:e2:12:bd:b0:95:39: 77:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:27:A3:6C:37:C8:17:F1:52:53:F8:42:5C:47:DE:1A:8F:8C:A7:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/5e1fab74-1778-30f0-833e-7e9606d6d74e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl X509v3 Authority Key Identifier: keyid:CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer sbgp-ipAddrBlock: critical IPv4: 23.130.156.0/24 208.70.216.0/22 IPv6: 2602:f766::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:13:66:81:89:e1:da:64:0f:e3:24:0a:61:0e:27:08:c9:92: 3a:7b:bc:90:4d:2a:42:a1:2b:00:13:51:01:ea:d6:af:83:da: 93:5b:e9:47:8c:43:35:47:20:21:eb:f6:e1:d4:9d:8d:86:e4: f3:62:04:cb:84:75:ef:98:dd:0c:6a:a4:ad:e5:87:f1:a4:c2: f0:c1:07:9f:fb:e1:dd:d8:ef:d6:d5:0a:56:a6:eb:6e:86:f6: 87:65:e3:2b:f3:d7:6f:82:fc:ec:b8:86:ba:d9:37:74:14:76: 09:4f:21:28:62:e7:58:cd:2d:f3:e4:b2:04:e4:d1:e6:c3:10: c8:ca:78:df:c6:79:30:29:51:9d:df:3e:d0:4c:ec:28:8c:52: 0f:9f:70:4d:bf:31:9d:26:34:96:7e:ba:c6:7a:6a:a7:19:c0: 47:fd:f6:02:44:19:06:37:bf:2a:0e:52:fa:68:47:6e:6f:ce: 13:1e:e9:07:f9:1b:62:19:86:db:96:3d:6d:3f:59:44:c4:21: 43:9d:13:11:11:ce:41:c8:d5:5a:b1:30:4c:96:b4:14:33:28: 04:0e:26:a9:bc:38:23:b1:e0:eb:72:af:70:ba:be:6a:3c:85: 7a:2d:ca:47:79:5e:59:b1:8d:23:02:96:eb:83:af:07:22:47: e6:fb:72:cb -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE1eGnXc7wu3sglCPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVlMzcxODQtODZkZS00OGM5LWFmMzUtNWQxMDJkMTQw ZmE2MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk OGJlMjk3ODItMWM0Ny00OGY0LWJlZTYtMzVlMGIxOTY4OWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGMH61bIUJcvZTGsMvNJ5hM0IS67eJgYBW73 zxwW1YMB4TBW8Hq4YfkRYYrirXQq8L0oFEWVDpl64AH9h9PxlVMXT5eXs92QubLj vW+B0oR+EbjSFwZOSpels3ylu5o+wxhF21kcaKM77wfuqg0V6WcGLNq7OjqSscbH dFX5FoqDHTiSok7MHWL3iQwPneyEZqaevESu8N4cvu/nMHmT66dDhcxmvwNq168l /vYkjnLL0yjFwDfV+VXr+TmP8gwErTsvLBHUd9NE1eVVQrL5UUYjuNGR+WqPGGyY VaEDxH8C6jH9LAuiBuTEUi5cN7daqRCYiLAIL1/iEr2wlTl3GwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFNYno2w3yBfxUlP4QlxH3hqPjKfjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ZWUz NzE4NC04NmRlLTQ4YzktYWYzNS01ZDEwMmQxNDBmYTYvNWUxZmFiNzQtMTc3OC0z MGYwLTgzM2UtN2U5NjA2ZDZkNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGVlMzcxODQtODZkZS00OGM5LWFm MzUtNWQxMDJkMTQwZmE2LzRlZTM3MTg0LTg2ZGUtNDhjOS1hZjM1LTVkMTAyZDE0 MGZhNi5jcmwwHwYDVR0jBBgwFoAUzO2fuO7Sl7dYq+gKqtPIy9hM0Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80ZWUzNzE4NC04NmRlLTQ4YzktYWYzNS01ZDEw MmQxNDBmYTYuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4KcAwQC 0EbYMA4EAgACMAgDBgQmAvdmADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9E2aBieHaZA/jJAphDicIyZI6 e7yQTSpCoSsAE1EB6tavg9qTW+lHjEM1RyAh6/bh1J2NhuTzYgTLhHXvmN0MaqSt 5YfxpMLwwQef++Hd2O/W1QpWputuhvaHZeMr89dvgvzsuIa62Td0FHYJTyEoYudY zS3z5LIE5NHmwxDIynjfxnkwKVGd3z7QTOwojFIPn3BNvzGdJjSWfrrGemqnGcBH /fYCRBkGN78qDlL6aEdub84THukH+RtiGYbblj1tP1lExCFDnRMREc5ByNVasTBM lrQUMygEDiapvDgjseDrcq9wur5qPIV6LcpHeV5ZsY0jApbrg68HIkfm+3LL -----END CERTIFICATE-----Generated at Fri Apr 17 15:49:33 2026 by rpki-client