$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/f7be30ae-9b02-37fa-aa90-5e7cd984adb9.roa File: f7be30ae-9b02-37fa-aa90-5e7cd984adb9.roa (raw, json) Hash identifier: E/sYFgBhQqNUaYjCi1xM7Ps9l74a9yDUdEWekMj1r7k= Subject key identifier: D8:99:DA:85:18:8D:45:78:67:0C:AE:70:EE:51:39:FA:28:8A:BC:7E Certificate issuer: /CN=e9dd70a7-a6f5-4975-9c23-0ab1236e602b Certificate serial: 010D0C9F4328584D5234FF3225EA90AE46AA05E0 Authority key identifier: D1:12:47:E1:FF:51:0E:1A:5E:E5:B2:FC:0F:3D:9D:FB:2E:80:95:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/f7be30ae-9b02-37fa-aa90-5e7cd984adb9.roa Signing time: Sat 28 Mar 2026 18:44:38 +0000 ROA not before: Sat 28 Mar 2026 18:44:38 +0000 ROA not after: Fri 01 May 2026 01:00:32 +0000 asID: 399003 IP address blocks: 23.148.252.0/24 maxlen: 24 70.40.190.0/23 maxlen: 24 2602:f4df::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:ff:32:25:ea:90:ae:46:aa:05:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9dd70a7-a6f5-4975-9c23-0ab1236e602b Validity Not Before: Mar 28 18:44:38 2026 GMT Not After : May 1 01:00:32 2026 GMT Subject: CN=ba1deb9c-535b-4246-b6a4-eb3c0945c6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a8:ae:73:df:80:3f:a4:a1:b8:13:46:9b:e5: 5c:0f:9b:78:a9:b8:55:bf:99:91:fc:ed:2d:dd:b8: 00:21:32:da:d6:f0:12:a0:2c:a6:31:fc:f3:5d:37: 8f:40:86:c5:9b:d7:ba:5c:e2:27:f3:0e:f1:93:b6: e2:40:fe:b4:dd:19:d3:ef:af:22:08:4a:70:76:e3: 7a:e5:fe:dd:da:4a:1c:b0:c7:eb:af:89:b6:f2:f8: 2f:7f:88:fe:96:4c:5e:35:14:02:b9:65:eb:d1:f6: 3d:7c:bd:31:66:60:3b:45:28:68:5b:20:f2:ba:38: 08:37:63:5b:9c:5e:c6:73:8e:55:e2:fb:00:9e:d2: 18:29:c1:3b:41:9f:0b:54:0a:ba:32:72:04:de:c9: c3:44:4f:68:d8:0e:0d:61:18:76:94:70:a8:81:55: 06:98:fd:47:c3:0f:f4:67:89:61:ee:5b:5c:c2:69: b8:e0:59:2b:0b:29:07:f2:87:18:3b:a1:6e:4c:e5: 91:03:d5:e2:13:11:da:52:e8:2f:5b:22:ca:75:09: b7:27:18:e3:ba:33:a2:0d:4c:f9:29:70:94:fd:1b: 5a:82:1d:af:b8:cf:18:4b:5c:2a:44:eb:f4:9e:6d: c2:e4:5a:f0:d3:fa:31:61:e4:04:ff:11:7a:8c:db: b7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:99:DA:85:18:8D:45:78:67:0C:AE:70:EE:51:39:FA:28:8A:BC:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/f7be30ae-9b02-37fa-aa90-5e7cd984adb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.crl X509v3 Authority Key Identifier: keyid:D1:12:47:E1:FF:51:0E:1A:5E:E5:B2:FC:0F:3D:9D:FB:2E:80:95:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer sbgp-ipAddrBlock: critical IPv4: 23.148.252.0/24 70.40.190.0/23 IPv6: 2602:f4df::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c5:4a:80:fc:8d:74:7b:40:a0:78:82:c1:d3:fb:4e:c1:f8: 18:86:9d:83:bc:93:9f:c7:9a:6e:4f:37:ea:57:6f:8d:36:0c: 48:a3:1b:e9:ec:9f:4f:e4:ac:75:bb:bc:b0:f8:d5:1b:4f:f5: c5:48:89:df:93:41:a5:b4:5d:b0:63:60:d3:67:a8:52:11:65: f9:79:12:c1:40:bf:93:83:ea:19:ad:6e:e2:40:0a:97:50:72: 7d:00:af:37:bd:90:cc:6d:56:88:03:07:e2:8f:a3:40:8b:d2: fa:ca:7f:68:bc:bb:a0:df:80:61:02:f2:5a:87:11:33:5c:6c: 32:c7:ee:df:e4:85:b4:66:51:4e:b4:8a:e9:da:75:30:67:2c: 07:9d:1a:0e:65:f4:75:56:82:e4:12:36:59:f9:f1:00:8e:4d: 04:1b:64:dd:79:bf:e5:66:35:0c:5a:3f:d9:a1:9f:c8:0a:3d: 67:51:be:53:d8:3c:3c:66:f8:63:28:19:e9:fa:bd:54:e2:f5: 86:05:11:3c:b5:11:79:2b:95:0e:86:81:7b:90:85:35:ba:29: 4e:27:bf:7e:bb:8d:4d:1c:ec:f8:eb:2b:39:94:2c:ff:ba:80: c6:f4:dd:13:5b:38:ff:3a:99:73:9e:1b:8b:72:26:5e:a4:f0: 03:d2:a6:72 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE1SNP8yJeqQrkaqBeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTlkZDcwYTctYTZmNS00OTc1LTljMjMtMGFiMTIzNmU2 MDJiMB4XDTI2MDMyODE4NDQzOFoXDTI2MDUwMTAxMDAzMlowLzEtMCsGA1UEAxMk YmExZGViOWMtNTM1Yi00MjQ2LWI2YTQtZWIzYzA5NDVjNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6iuc9+AP6ShuBNGm+VcD5t4qbhVv5mR/O0t 3bgAITLa1vASoCymMfzzXTePQIbFm9e6XOIn8w7xk7biQP603RnT768iCEpwduN6 5f7d2kocsMfrr4m28vgvf4j+lkxeNRQCuWXr0fY9fL0xZmA7RShoWyDyujgIN2Nb nF7Gc45V4vsAntIYKcE7QZ8LVAq6MnIE3snDRE9o2A4NYRh2lHCogVUGmP1Hww/0 Z4lh7ltcwmm44FkrCykH8ocYO6FuTOWRA9XiExHaUugvWyLKdQm3JxjjujOiDUz5 KXCU/Rtagh2vuM8YS1wqROv0nm3C5Frw0/oxYeQE/xF6jNu3eQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFNiZ2oUYjUV4ZwyucO5ROfooirx+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lOWRk NzBhNy1hNmY1LTQ5NzUtOWMyMy0wYWIxMjM2ZTYwMmIvZjdiZTMwYWUtOWIwMi0z N2ZhLWFhOTAtNWU3Y2Q5ODRhZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTlkZDcwYTctYTZmNS00OTc1LTlj MjMtMGFiMTIzNmU2MDJiL2U5ZGQ3MGE3LWE2ZjUtNDk3NS05YzIzLTBhYjEyMzZl NjAyYi5jcmwwHwYDVR0jBBgwFoAU0RJH4f9RDhpe5bL8Dz2d+y6AlYkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lOWRkNzBhNy1hNmY1LTQ5NzUtOWMyMy0wYWIx MjM2ZTYwMmIuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5T8AwQB Rii+MA4EAgACMAgDBgAmAvTfADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5xUqA/I10e0CgeILB0/tOwfgY hp2DvJOfx5puTzfqV2+NNgxIoxvp7J9P5Kx1u7yw+NUbT/XFSInfk0GltF2wY2DT Z6hSEWX5eRLBQL+Tg+oZrW7iQAqXUHJ9AK83vZDMbVaIAwfij6NAi9L6yn9ovLug 34BhAvJahxEzXGwyx+7f5IW0ZlFOtIrp2nUwZywHnRoOZfR1VoLkEjZZ+fEAjk0E G2Tdeb/lZjUMWj/ZoZ/ICj1nUb5T2Dw8ZvhjKBnp+r1U4vWGBRE8tRF5K5UOhoF7 kIU1uilOJ79+u41NHOz46ys5lCz/uoDG9N0TWzj/OplznhuLciZepPAD0qZy -----END CERTIFICATE-----Generated at Sat Apr 18 04:39:10 2026 by rpki-client