$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/fca970f0-c6bb-3cc0-86c9-062c585e335e.roa File: fca970f0-c6bb-3cc0-86c9-062c585e335e.roa (raw, json) Hash identifier: jKwkBOdrRJ7Eh8r0j8IyP+J68VpXp29PZuW6M3pRR58= Subject key identifier: 57:D5:EE:63:2C:1D:48:6D:E1:38:7D:D3:B2:5B:B6:31:B8:E9:F2:39 Certificate issuer: /CN=8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e Certificate serial: 010D0C9F4328584D5234EF3C5C2EDEC2A4787680 Authority key identifier: 0C:7F:51:3A:CA:E6:89:01:EF:B6:04:40:C6:22:EB:65:05:EC:5B:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/fca970f0-c6bb-3cc0-86c9-062c585e335e.roa Signing time: Sat 28 Mar 2026 18:44:31 +0000 ROA not before: Sat 28 Mar 2026 18:44:31 +0000 ROA not after: Wed 13 May 2026 03:16:51 +0000 asID: 402163 IP address blocks: 23.153.212.0/24 maxlen: 24 2602:f464::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:ef:3c:5c:2e:de:c2:a4:78:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e Validity Not Before: Mar 28 18:44:31 2026 GMT Not After : May 13 03:16:51 2026 GMT Subject: CN=de986fee-2cec-47fc-9ee0-36a9c56b4eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:58:a7:0b:1c:0f:a2:f4:91:88:7d:51:f6:0a: c9:1c:06:55:0b:c0:15:a7:6e:bc:98:5a:f9:ab:7e: ff:9a:bd:ee:d9:aa:0e:65:01:34:d0:56:fb:43:8b: f6:20:99:93:0a:93:52:24:0f:0a:f2:c9:21:ba:1a: 8b:e9:60:63:27:cb:e0:f5:3e:50:5a:65:1c:62:cc: 52:a5:19:1d:c2:5d:1b:4a:2e:54:61:3c:cd:6c:83: e6:fd:fb:2b:6c:69:d5:44:c3:6e:d4:52:58:f5:8d: a2:70:3c:f1:20:d4:f3:95:5a:0a:0b:19:8e:7f:4e: 8b:61:43:0b:a9:52:7c:f1:d9:54:bd:5c:22:40:65: 14:84:c0:25:c5:a1:b5:c5:2b:72:e9:38:b3:9d:f8: 9d:3b:9d:6b:3f:8e:70:da:8a:d1:a5:ee:a5:28:ba: 68:f1:01:40:31:6f:96:74:51:19:66:6d:57:7b:cf: 05:4d:02:51:1b:63:6d:d7:41:83:c1:99:5f:00:22: 4c:ce:7d:cd:e9:28:bc:c6:a4:10:fa:dc:21:ed:8a: d5:a6:74:d7:38:f4:5f:f9:7e:03:cc:c5:85:31:66: cc:b8:f9:03:04:44:98:a0:86:cb:20:79:5d:1f:e1: 26:26:e7:66:a2:7c:30:48:96:ab:9b:74:92:81:55: 8c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D5:EE:63:2C:1D:48:6D:E1:38:7D:D3:B2:5B:B6:31:B8:E9:F2:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/fca970f0-c6bb-3cc0-86c9-062c585e335e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.crl X509v3 Authority Key Identifier: keyid:0C:7F:51:3A:CA:E6:89:01:EF:B6:04:40:C6:22:EB:65:05:EC:5B:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.cer sbgp-ipAddrBlock: critical IPv4: 23.153.212.0/24 IPv6: 2602:f464::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:79:fa:8b:31:80:f1:5a:e4:89:a3:37:11:7d:d3:0d:97:30: 08:f0:b7:5d:fc:12:50:7d:c7:09:f6:90:da:b5:ab:ea:89:04: dc:25:42:98:33:ea:c3:02:e1:21:7d:27:61:6f:1f:b4:b7:43: 69:a2:81:80:bc:f9:6e:72:f2:e4:e1:7e:eb:b9:e4:86:c0:43: b3:7a:8f:0b:8b:b1:3d:b7:0e:3f:d2:e6:12:40:1e:7f:f3:51: 52:ab:d7:93:58:5e:98:82:8d:f4:1c:8f:c2:8c:89:2a:09:20: a6:a8:ff:f1:8a:d0:b9:95:02:39:00:84:ab:b6:ca:a2:60:59: 49:d3:cf:b3:bb:1e:81:3c:1a:74:df:c4:6a:46:6e:47:cd:45: 22:a9:aa:c7:29:92:37:ea:e0:62:73:a2:39:dd:f9:3f:88:5c: 52:4e:e6:d8:11:5b:7a:bc:e7:f7:aa:74:bf:02:2a:db:d8:28: 4b:a9:78:53:3b:6b:87:52:79:55:3f:a0:0a:5e:b4:42:9c:e0: b0:23:ca:12:8b:9d:50:84:7a:68:5e:ee:27:75:2c:48:e8:fd: 53:a4:9d:c3:30:2b:b1:fd:1f:67:79:8a:71:00:18:08:ee:a3: ef:c4:45:63:2d:27:ca:30:ca:b9:b4:56:79:c7:9f:b2:d2:df: d4:27:77:9f -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE1SNO88XC7ewqR4doAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZmZDg2NzktZTljZi00ZmQ0LTgzYjMtZDk3YWE3MGVj YzNlMB4XDTI2MDMyODE4NDQzMVoXDTI2MDUxMzAzMTY1MVowLzEtMCsGA1UEAxMk ZGU5ODZmZWUtMmNlYy00N2ZjLTllZTAtMzZhOWM1NmI0ZWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVinCxwPovSRiH1R9grJHAZVC8AVp268mFr5 q37/mr3u2aoOZQE00Fb7Q4v2IJmTCpNSJA8K8skhuhqL6WBjJ8vg9T5QWmUcYsxS pRkdwl0bSi5UYTzNbIPm/fsrbGnVRMNu1FJY9Y2icDzxINTzlVoKCxmOf06LYUML qVJ88dlUvVwiQGUUhMAlxaG1xSty6TiznfidO51rP45w2orRpe6lKLpo8QFAMW+W dFEZZm1Xe88FTQJRG2Nt10GDwZlfACJMzn3N6Si8xqQQ+twh7YrVpnTXOPRf+X4D zMWFMWbMuPkDBESYoIbLIHldH+EmJudmonwwSJarm3SSgVWMNQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFfV7mMsHUht4Th907JbtjG46fI5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84ZmZk ODY3OS1lOWNmLTRmZDQtODNiMy1kOTdhYTcwZWNjM2UvZmNhOTcwZjAtYzZiYi0z Y2MwLTg2YzktMDYyYzU4NWUzMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGZmZDg2NzktZTljZi00ZmQ0LTgz YjMtZDk3YWE3MGVjYzNlLzhmZmQ4Njc5LWU5Y2YtNGZkNC04M2IzLWQ5N2FhNzBl Y2MzZS5jcmwwHwYDVR0jBBgwFoAUDH9ROsrmiQHvtgRAxiLrZQXsW0owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84ZmZkODY3OS1lOWNmLTRmZDQtODNiMy1kOTdh YTcwZWNjM2UuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5nUMA4E AgACMAgDBgAmAvRkADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmefqLMYDxWuSJozcRfdMNlzAI8Ldd/BJQ fccJ9pDatavqiQTcJUKYM+rDAuEhfSdhbx+0t0NpooGAvPlucvLk4X7rueSGwEOz eo8Li7E9tw4/0uYSQB5/81FSq9eTWF6Ygo30HI/CjIkqCSCmqP/xitC5lQI5AISr tsqiYFlJ08+zux6BPBp038RqRm5HzUUiqarHKZI36uBic6I53fk/iFxSTubYEVt6 vOf3qnS/Airb2ChLqXhTO2uHUnlVP6AKXrRCnOCwI8oSi51QhHpoXu4ndSxI6P1T pJ3DMCux/R9neYpxABgI7qPvxEVjLSfKMMq5tFZ5x5+y0t/UJ3ef -----END CERTIFICATE-----Generated at Fri Apr 17 10:57:42 2026 by rpki-client