$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/f7be30ae-9b02-37fa-aa90-5e7cd984adb9.roa File: f7be30ae-9b02-37fa-aa90-5e7cd984adb9.roa (raw, json) Hash identifier: eJ/8ewi2htbhZh5QkB5kqe1isfXDmqaSYK81eh9Kg6k= Subject key identifier: 0E:BC:63:7B:45:7A:1F:DE:9F:39:8B:4D:D9:F9:94:55:C3:9A:22:F1 Certificate issuer: /CN=e9dd70a7-a6f5-4975-9c23-0ab1236e602b Certificate serial: 010D0C9F4328584D0523ABFD20E75C9874ADD280 Authority key identifier: D1:12:47:E1:FF:51:0E:1A:5E:E5:B2:FC:0F:3D:9D:FB:2E:80:95:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/f7be30ae-9b02-37fa-aa90-5e7cd984adb9.roa Signing time: Sat 31 Jan 2026 02:00:32 +0000 ROA not before: Sat 31 Jan 2026 02:00:32 +0000 ROA not after: Fri 01 May 2026 01:00:32 +0000 asID: 399003 IP address blocks: 23.148.252.0/24 maxlen: 24 70.40.190.0/23 maxlen: 24 2602:f4df::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:05:23:ab:fd:20:e7:5c:98:74:ad:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9dd70a7-a6f5-4975-9c23-0ab1236e602b Validity Not Before: Jan 31 02:00:32 2026 GMT Not After : May 1 01:00:32 2026 GMT Subject: CN=1af67052-896d-43e5-bb87-91a35c23a5b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f8:72:77:0e:40:fc:bc:1c:26:5e:f7:e2:04: 51:99:ac:7f:68:ec:e2:31:43:78:87:84:54:24:eb: 93:a0:b9:86:85:9f:ca:a1:37:9f:ca:da:7a:52:30: 8f:6c:3d:47:04:d7:a0:9e:89:b7:fd:f8:00:28:2f: 58:cd:e6:91:dd:31:25:dd:dd:32:1e:a8:8e:4d:69: 10:69:f5:a2:b5:e1:c5:0e:1a:12:a9:a6:f0:dd:14: 19:33:fd:96:e3:82:ce:17:5c:b5:74:b2:d1:85:fb: 46:ea:2a:00:4a:a0:36:b6:10:ed:c0:3c:88:1c:a6: a1:2d:6b:1f:6a:95:33:ed:61:2f:03:ef:79:72:0b: 21:6d:c7:b0:0c:00:d2:8c:78:bd:2a:d7:3f:e9:e4: 67:95:9d:c6:0e:36:a6:9f:2d:2f:49:35:05:0a:77: 17:5f:9c:27:7f:28:83:01:b2:f2:7a:04:84:21:24: 04:f2:23:3d:2f:63:e2:9a:f5:93:7f:12:25:e1:a2: 85:e3:f6:44:e8:ba:8d:9d:33:e9:ab:ac:84:05:a7: 01:65:f2:95:5b:da:0c:00:78:8d:79:db:54:29:8a: 4d:90:c4:e6:1c:8b:49:7f:39:64:71:7f:bd:a9:ff: 7d:52:75:8d:2d:15:c0:ba:83:fd:62:54:7d:da:98: b7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BC:63:7B:45:7A:1F:DE:9F:39:8B:4D:D9:F9:94:55:C3:9A:22:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/f7be30ae-9b02-37fa-aa90-5e7cd984adb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.crl X509v3 Authority Key Identifier: keyid:D1:12:47:E1:FF:51:0E:1A:5E:E5:B2:FC:0F:3D:9D:FB:2E:80:95:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer sbgp-ipAddrBlock: critical IPv4: 23.148.252.0/24 70.40.190.0/23 IPv6: 2602:f4df::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:28:73:16:55:a7:bf:f3:0e:10:dc:6f:9a:71:49:fb:3b:d5: b2:bb:73:9e:05:3a:95:96:63:25:c1:58:54:9a:77:46:97:2f: f9:d1:87:13:f9:d5:b0:30:a7:b4:85:78:01:a6:9d:0b:89:cb: ff:3c:18:fe:1a:a4:da:f4:7d:f2:88:80:63:46:6f:4b:2f:bd: c8:d6:d8:12:0c:19:10:69:fd:70:dd:56:e6:06:41:bc:e5:77: 46:cd:45:50:69:fc:84:3b:eb:d8:24:87:ef:54:d6:7f:3d:92: 81:66:b0:ef:91:37:47:ed:f5:20:01:c0:88:b6:4c:e5:5f:06: 74:79:1f:80:2b:f3:6c:ff:8c:17:9a:fc:57:c2:eb:ad:8f:1c: d6:87:d6:e4:c9:45:ac:a8:36:e5:b4:d3:6c:29:c9:1f:6a:b9: 60:72:42:b5:89:b7:03:3e:53:a8:7c:8e:4e:15:4a:98:b5:21: 88:1f:f8:7f:09:f3:9a:13:d4:fd:c4:1d:3e:d7:ce:81:25:9e: a6:54:9f:0a:ef:fe:40:65:40:80:b7:e3:26:1c:a5:c4:ff:d2: 49:b8:8d:d0:1d:68:72:27:d2:9a:9c:3f:db:c9:d0:f5:77:2b: dd:78:9a:61:26:90:55:cd:66:c9:6e:93:36:96:06:1a:7f:98: 89:43:5a:eb -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE0FI6v9IOdcmHSt0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTlkZDcwYTctYTZmNS00OTc1LTljMjMtMGFiMTIzNmU2 MDJiMB4XDTI2MDEzMTAyMDAzMloXDTI2MDUwMTAxMDAzMlowLzEtMCsGA1UEAxMk MWFmNjcwNTItODk2ZC00M2U1LWJiODctOTFhMzVjMjNhNWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/hydw5A/LwcJl734gRRmax/aOziMUN4h4RU JOuToLmGhZ/KoTefytp6UjCPbD1HBNegnom3/fgAKC9YzeaR3TEl3d0yHqiOTWkQ afWiteHFDhoSqabw3RQZM/2W44LOF1y1dLLRhftG6ioASqA2thDtwDyIHKahLWsf apUz7WEvA+95cgshbcewDADSjHi9Ktc/6eRnlZ3GDjamny0vSTUFCncXX5wnfyiD AbLyegSEISQE8iM9L2PimvWTfxIl4aKF4/ZE6LqNnTPpq6yEBacBZfKVW9oMAHiN edtUKYpNkMTmHItJfzlkcX+9qf99UnWNLRXAuoP9YlR92pi3dwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFA68Y3tFeh/enzmLTdn5lFXDmiLxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lOWRk NzBhNy1hNmY1LTQ5NzUtOWMyMy0wYWIxMjM2ZTYwMmIvZjdiZTMwYWUtOWIwMi0z N2ZhLWFhOTAtNWU3Y2Q5ODRhZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTlkZDcwYTctYTZmNS00OTc1LTlj MjMtMGFiMTIzNmU2MDJiL2U5ZGQ3MGE3LWE2ZjUtNDk3NS05YzIzLTBhYjEyMzZl NjAyYi5jcmwwHwYDVR0jBBgwFoAU0RJH4f9RDhpe5bL8Dz2d+y6AlYkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lOWRkNzBhNy1hNmY1LTQ5NzUtOWMyMy0wYWIx MjM2ZTYwMmIuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5T8AwQB Rii+MA4EAgACMAgDBgAmAvTfADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCaKHMWVae/8w4Q3G+acUn7O9Wy u3OeBTqVlmMlwVhUmndGly/50YcT+dWwMKe0hXgBpp0Licv/PBj+GqTa9H3yiIBj Rm9LL73I1tgSDBkQaf1w3VbmBkG85XdGzUVQafyEO+vYJIfvVNZ/PZKBZrDvkTdH 7fUgAcCItkzlXwZ0eR+AK/Ns/4wXmvxXwuutjxzWh9bkyUWsqDbltNNsKckfarlg ckK1ibcDPlOofI5OFUqYtSGIH/h/CfOaE9T9xB0+186BJZ6mVJ8K7/5AZUCAt+Mm HKXE/9JJuI3QHWhyJ9KanD/bydD1dyvdeJphJpBVzWbJbpM2lgYaf5iJQ1rr -----END CERTIFICATE-----Generated at Sun Mar 1 18:10:17 2026 by rpki-client