$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/6023380f-81e1-3c23-9a93-5a2487cd3da3.roa File: 6023380f-81e1-3c23-9a93-5a2487cd3da3.roa (raw, json) Hash identifier: 0XvQjmI+7ak1H/p4b2dMsmJRqAFajP5jy2rkS3qAwPM= Subject key identifier: 49:47:B8:25:9C:1E:7D:55:F4:75:B9:8B:FA:5C:11:18:85:70:79:68 Certificate issuer: /CN=4ee37184-86de-48c9-af35-5d102d140fa6 Certificate serial: 010D0C9F4328584D04E243FDE93CEE7281944300 Authority key identifier: CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/6023380f-81e1-3c23-9a93-5a2487cd3da3.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 54416 IP address blocks: 23.130.156.0/24 maxlen: 24 208.70.216.0/22 maxlen: 24 2602:f766::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:43:fd:e9:3c:ee:72:81:94:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee37184-86de-48c9-af35-5d102d140fa6 Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=b947193b-6a23-4daf-8fa9-456b4a900130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:81:bb:69:2d:38:d7:87:f9:89:04:36:77:f7: 28:54:0f:49:d9:7c:df:5e:18:b8:e2:06:d3:b9:a2: ad:69:fc:b0:72:51:26:be:41:5e:5f:da:47:c2:e2: 05:ab:ef:f5:05:91:8a:2f:dd:36:84:a6:b3:df:86: 1f:3d:c5:72:aa:18:04:fd:e9:38:74:8b:fe:92:ab: 26:b1:86:d6:4d:31:b3:3b:81:a4:06:b0:87:fc:a2: 79:6b:9f:a6:28:14:fe:01:fb:3c:24:a5:fb:d7:45: 50:b4:df:24:3b:d9:39:64:22:d4:95:10:90:57:26: 5c:3f:83:e7:62:c8:de:a9:c8:49:43:a8:ee:88:bc: 8b:c4:9f:50:2e:41:0c:dc:fe:a9:e6:b2:7f:19:f3: db:9b:d5:47:bc:7a:03:05:6b:99:00:10:46:2b:6a: a6:f8:fb:ab:26:bd:e8:7f:81:a8:96:76:05:78:18: 72:22:6a:db:71:72:02:c4:8e:45:1c:c4:cf:71:96: 30:ef:25:ba:ef:95:d5:f2:b6:66:5b:38:8c:6b:5e: 1b:52:64:b5:43:76:fc:ed:66:54:41:68:0c:f4:88: bc:9c:28:3d:fc:c4:52:07:ea:4e:93:fc:77:0d:96: 7f:cb:5c:fe:e1:eb:e8:da:84:2a:54:7c:45:e8:2e: de:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:47:B8:25:9C:1E:7D:55:F4:75:B9:8B:FA:5C:11:18:85:70:79:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/6023380f-81e1-3c23-9a93-5a2487cd3da3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl X509v3 Authority Key Identifier: keyid:CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer sbgp-ipAddrBlock: critical IPv4: 23.130.156.0/24 208.70.216.0/22 IPv6: 2602:f766::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:f7:5a:e0:b5:e2:f9:86:1a:ff:46:04:50:f3:65:e5:bc:96: 34:b3:10:ef:4d:a9:b9:5d:5f:a1:ea:8f:5c:41:53:10:f5:fc: 67:7b:d4:74:da:1b:e5:f9:f9:78:3c:5c:31:8f:5a:33:4f:ba: 8b:d2:be:ba:9f:b8:f8:3c:b6:3b:2f:6b:f7:30:78:7a:2d:d1: 43:42:cf:0d:a8:73:4b:85:e4:82:7e:cf:1d:f9:8a:49:5e:5c: 12:aa:2f:84:0c:8e:ee:44:90:dc:ed:89:e9:c7:70:60:bc:9d: 43:37:bf:d2:93:7b:77:8a:21:ef:12:56:64:86:5e:ae:d5:ac: a5:78:fd:83:2c:da:c2:4f:a2:ad:f2:f5:00:15:0d:32:06:30: 96:84:08:35:75:22:fe:44:5d:c4:0b:b7:e0:ac:b9:d6:09:b9: 26:2c:ad:89:d0:21:8b:5a:b8:01:c5:38:79:39:dd:c1:18:ad: 78:96:6d:d2:9a:f5:07:e9:bd:0e:db:c6:c2:ae:50:3b:7b:07: d2:76:f0:cf:53:5a:1c:8b:4c:1b:9f:b2:30:be:ba:90:0d:58: a6:53:35:9f:a9:80:ba:1f:be:ef:ae:bc:54:6a:17:52:19:c8: aa:9b:2d:24:b8:15:89:a2:e3:a7:df:b2:ad:be:3e:52:5c:7e: 23:d4:ae:d5 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE0E4kP96TzucoGUQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVlMzcxODQtODZkZS00OGM5LWFmMzUtNWQxMDJkMTQw ZmE2MB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk Yjk0NzE5M2ItNmEyMy00ZGFmLThmYTktNDU2YjRhOTAwMTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYG7aS0414f5iQQ2d/coVA9J2XzfXhi44gbT uaKtafywclEmvkFeX9pHwuIFq+/1BZGKL902hKaz34YfPcVyqhgE/ek4dIv+kqsm sYbWTTGzO4GkBrCH/KJ5a5+mKBT+Afs8JKX710VQtN8kO9k5ZCLUlRCQVyZcP4Pn YsjeqchJQ6juiLyLxJ9QLkEM3P6p5rJ/GfPbm9VHvHoDBWuZABBGK2qm+PurJr3o f4GolnYFeBhyImrbcXICxI5FHMTPcZYw7yW675XV8rZmWziMa14bUmS1Q3b87WZU QWgM9Ii8nCg9/MRSB+pOk/x3DZZ/y1z+4evo2oQqVHxF6C7e5QIDAQABo4IDazCC A2cwHQYDVR0OBBYEFElHuCWcHn1V9HW5i/pcERiFcHloMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ZWUz NzE4NC04NmRlLTQ4YzktYWYzNS01ZDEwMmQxNDBmYTYvNjAyMzM4MGYtODFlMS0z YzIzLTlhOTMtNWEyNDg3Y2QzZGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGVlMzcxODQtODZkZS00OGM5LWFm MzUtNWQxMDJkMTQwZmE2LzRlZTM3MTg0LTg2ZGUtNDhjOS1hZjM1LTVkMTAyZDE0 MGZhNi5jcmwwHwYDVR0jBBgwFoAUzO2fuO7Sl7dYq+gKqtPIy9hM0Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80ZWUzNzE4NC04NmRlLTQ4YzktYWYzNS01ZDEw MmQxNDBmYTYuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4KcAwQC 0EbYMA4EAgACMAgDBgQmAvdmADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/91rgteL5hhr/RgRQ82XlvJY0 sxDvTam5XV+h6o9cQVMQ9fxne9R02hvl+fl4PFwxj1ozT7qL0r66n7j4PLY7L2v3 MHh6LdFDQs8NqHNLheSCfs8d+YpJXlwSqi+EDI7uRJDc7Ynpx3BgvJ1DN7/Sk3t3 iiHvElZkhl6u1ayleP2DLNrCT6Kt8vUAFQ0yBjCWhAg1dSL+RF3EC7fgrLnWCbkm LK2J0CGLWrgBxTh5Od3BGK14lm3SmvUH6b0O28bCrlA7ewfSdvDPU1oci0wbn7Iw vrqQDVimUzWfqYC6H77vrrxUahdSGciqmy0kuBWJouOn37Ktvj5SXH4j1K7V -----END CERTIFICATE-----Generated at Sun Mar 1 18:31:34 2026 by rpki-client