$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/0af5f989-aa8c-36d8-9466-953b7bfe27ab.roa File: 0af5f989-aa8c-36d8-9466-953b7bfe27ab.roa (raw, json) Hash identifier: 4mQUSxqadqSehX5WG9J1FPf2IboGPmViMwzMJQEGZlI= Subject key identifier: C8:03:F5:66:2E:61:40:CD:DE:5D:10:07:4D:CE:F4:AE:34:33:58:AA Certificate issuer: /CN=7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770 Certificate serial: 010D0C9F4328584D826524E5B3E77299C8373480 Authority key identifier: 42:3A:B5:4A:C8:C1:10:E5:4F:0C:54:B8:AC:07:47:2E:55:97:6A:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/0af5f989-aa8c-36d8-9466-953b7bfe27ab.roa Signing time: Wed 15 Apr 2026 01:00:24 +0000 ROA not before: Wed 15 Apr 2026 01:00:24 +0000 ROA not after: Tue 14 Jul 2026 01:00:24 +0000 asID: 153391 IP address blocks: 23.128.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:82:65:24:e5:b3:e7:72:99:c8:37:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770 Validity Not Before: Apr 15 01:00:24 2026 GMT Not After : Jul 14 01:00:24 2026 GMT Subject: CN=f896e212-9c27-4349-a1c9-c8bdb8e7b703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5f:37:65:2e:eb:6c:4f:40:56:ae:34:ea:ef: dd:97:02:37:d3:cc:09:db:8f:dc:d8:04:89:bb:9e: 13:78:5c:0b:bb:b1:37:66:e0:f6:35:26:d8:12:48: 7a:67:e5:98:30:8d:02:e5:80:36:c6:cd:3a:dc:da: 66:22:32:c6:b2:28:e9:78:33:12:79:4e:ae:0d:d1: ae:90:64:bd:68:04:4c:39:04:0d:d4:2d:2d:cc:fd: 64:df:36:df:28:09:0e:35:c6:50:5b:20:5c:59:8f: c8:08:d0:7c:dd:7d:a2:c3:7f:92:3c:65:9e:d6:0a: 79:ff:b3:62:2f:98:7f:ab:13:0c:e6:a8:56:6e:c0: f9:58:6b:0a:75:9b:fe:6a:df:39:89:cb:ac:cd:1a: 82:fe:e1:52:ec:87:3f:28:3d:3b:d2:39:86:e5:c2: 3d:ef:cb:23:19:27:8f:48:cc:b1:61:af:ef:c1:86: af:9c:1e:be:93:d6:4c:66:ef:0a:aa:b4:27:5c:f5: b3:93:f4:77:3d:09:69:dd:72:3c:c1:c9:26:ab:db: 8c:65:18:77:e3:14:da:19:4f:9b:0f:92:f5:29:aa: 14:5e:25:6f:20:79:46:1c:9a:1d:fe:28:e7:32:e0: 07:cc:b7:ce:4f:0c:46:dd:65:bc:ca:32:4a:9b:f8: cd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:03:F5:66:2E:61:40:CD:DE:5D:10:07:4D:CE:F4:AE:34:33:58:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/0af5f989-aa8c-36d8-9466-953b7bfe27ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.crl X509v3 Authority Key Identifier: keyid:42:3A:B5:4A:C8:C1:10:E5:4F:0C:54:B8:AC:07:47:2E:55:97:6A:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.cer sbgp-ipAddrBlock: critical IPv4: 23.128.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:15:b1:bc:6a:f7:e1:b6:5e:82:7c:dc:91:80:4c:bf:b3:0e: 60:47:c6:38:f2:37:bf:08:45:cb:43:4e:5d:56:7f:e1:1a:5b: a1:cc:de:cd:d5:96:af:62:06:44:06:d7:d9:10:40:fa:ee:8e: 4c:5f:4a:9c:12:67:7b:72:55:70:81:8d:24:fb:2d:8d:3c:d9: 0d:b7:60:e6:30:ac:95:71:75:2c:3f:52:01:91:76:06:59:5e: 12:94:14:e3:f1:98:08:3e:13:ba:b5:be:f5:fa:c4:2a:7c:fd: 65:eb:9f:e1:41:52:96:00:fe:2f:5e:d6:39:a4:27:b8:79:38: 2a:82:02:29:92:99:e1:57:2c:59:dc:bb:a9:85:94:19:e8:4f: a3:32:14:9a:e7:3a:1a:70:7a:84:d1:77:5d:eb:90:62:db:6e: c8:69:57:34:ce:e1:f2:81:81:b6:5c:6f:e4:6d:ab:6d:8a:33: f0:b7:66:7a:25:46:f4:6c:c5:3c:60:9d:11:1f:cd:fc:72:59: 14:9f:45:9b:0d:98:86:fb:bd:61:f7:d5:02:cc:ef:03:af:3d: e7:f9:7f:c1:0c:ee:95:71:3f:5b:7a:b9:29:a9:30:a9:54:de: 3b:12:67:e2:49:9c:13:1e:83:6a:79:86:dc:75:4a:e8:6c:e5: 3b:19:68:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2CZSTls+dymcg3NIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VjZDZjNzAtMmE0ZS00MGE2LWJkOTQtNGFlMWNhZTRk NzcwMB4XDTI2MDQxNTAxMDAyNFoXDTI2MDcxNDAxMDAyNFowLzEtMCsGA1UEAxMk Zjg5NmUyMTItOWMyNy00MzQ5LWExYzktYzhiZGI4ZTdiNzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv183ZS7rbE9AVq406u/dlwI308wJ24/c2ASJ u54TeFwLu7E3ZuD2NSbYEkh6Z+WYMI0C5YA2xs063NpmIjLGsijpeDMSeU6uDdGu kGS9aARMOQQN1C0tzP1k3zbfKAkONcZQWyBcWY/ICNB83X2iw3+SPGWe1gp5/7Ni L5h/qxMM5qhWbsD5WGsKdZv+at85icuszRqC/uFS7Ic/KD070jmG5cI978sjGSeP SMyxYa/vwYavnB6+k9ZMZu8KqrQnXPWzk/R3PQlp3XI8wckmq9uMZRh34xTaGU+b D5L1KaoUXiVvIHlGHJod/ijnMuAHzLfOTwxG3WW8yjJKm/jNJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgD9WYuYUDN3l0QB03O9K40M1iqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ZWNk NmM3MC0yYTRlLTQwYTYtYmQ5NC00YWUxY2FlNGQ3NzAvMGFmNWY5ODktYWE4Yy0z NmQ4LTk0NjYtOTUzYjdiZmUyN2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2VjZDZjNzAtMmE0ZS00MGE2LWJk OTQtNGFlMWNhZTRkNzcwLzdlY2Q2YzcwLTJhNGUtNDBhNi1iZDk0LTRhZTFjYWU0 ZDc3MC5jcmwwHwYDVR0jBBgwFoAUQjq1SsjBEOVPDFS4rAdHLlWXaqEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83ZWNkNmM3MC0yYTRlLTQwYTYtYmQ5NC00YWUx Y2FlNGQ3NzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4C0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEVsbxq9+G2XoJ83JGATL+zDmBHxjjyN78IRctDTl1Wf+EaW6HM3s3V lq9iBkQG19kQQPrujkxfSpwSZ3tyVXCBjST7LY082Q23YOYwrJVxdSw/UgGRdgZZ XhKUFOPxmAg+E7q1vvX6xCp8/WXrn+FBUpYA/i9e1jmkJ7h5OCqCAimSmeFXLFnc u6mFlBnoT6MyFJrnOhpweoTRd13rkGLbbshpVzTO4fKBgbZcb+Rtq22KM/C3Znol RvRsxTxgnREfzfxyWRSfRZsNmIb7vWH31QLM7wOvPef5f8EM7pVxP1t6uSmpMKlU 3jsSZ+JJnBMeg2p5htx1Suhs5TsZaPE= -----END CERTIFICATE-----Generated at Fri Apr 17 12:32:10 2026 by rpki-client