$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7/23ec6e2b-6198-3033-bd15-0ad399284ab4.roa File: 23ec6e2b-6198-3033-bd15-0ad399284ab4.roa (raw, json) Hash identifier: zQE45QnfnKHRjYNEHtOPInJsQ4oqJNhoOggkF82yLGc= Subject key identifier: 27:35:1C:0B:90:06:54:9D:1C:84:36:00:93:FD:75:F2:3B:FA:C9:69 Certificate issuer: /CN=17608350-923c-49ac-ba58-98403754acd7 Certificate serial: 010D0C9F4328584CACF1D3D508033B3D006F05C0 Authority key identifier: 8F:3C:E9:B8:51:DF:CA:32:5F:0E:74:F2:FC:15:09:BF:64:E8:81:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7/23ec6e2b-6198-3033-bd15-0ad399284ab4.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 29979 IP address blocks: 64.89.240.0/20 maxlen: 20 74.221.64.0/20 maxlen: 20 198.100.176.0/20 maxlen: 20 199.193.84.0/22 maxlen: 22 2605:3080::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7/17608350-923c-49ac-ba58-98403754acd7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7/17608350-923c-49ac-ba58-98403754acd7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:d3:d5:08:03:3b:3d:00:6f:05:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17608350-923c-49ac-ba58-98403754acd7 Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=23caf56d-8e0b-4a7f-a4e0-c9aa3e439299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0a:d4:49:7b:83:19:fd:9a:60:46:76:bb:e6: 49:0c:f3:02:ef:38:7e:17:af:4e:57:fe:ea:35:6a: c9:37:4b:0e:66:49:0c:36:e0:20:c9:8f:12:25:36: c4:56:e5:65:b6:3e:2e:77:82:68:75:95:bc:35:72: 10:ab:0d:d6:b7:aa:e7:bc:81:64:71:88:88:c7:0a: 2b:30:7e:cc:7c:cc:94:ef:8e:e5:f0:66:d5:4a:31: ec:75:65:b0:48:85:16:50:ca:03:c5:55:54:2f:d8: aa:d4:7e:f3:ec:9e:c2:29:ce:9e:62:82:f2:0b:78: bb:51:e3:c6:6c:b8:8a:c3:43:25:b6:78:cc:d8:79: b1:3d:00:4c:a3:90:4a:6a:e9:94:37:62:6e:cf:df: c0:df:7f:8f:29:5d:bd:d1:16:f1:8c:2b:35:15:10: bb:2f:e4:b0:d8:11:5a:ec:36:15:fa:8c:08:8b:54: 72:85:7b:ed:cf:7b:8b:31:67:88:ab:1c:14:10:a4: df:f9:84:4c:c2:82:6e:57:fd:8d:fe:cf:07:21:2e: 44:ad:47:09:68:8d:54:fa:f0:b4:e9:66:9f:96:a7: d9:08:1a:1a:3b:3a:03:27:c7:3b:33:70:ae:9f:cd: 23:b4:83:d7:96:85:8e:1e:6f:a8:bb:43:cf:50:55: ba:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:35:1C:0B:90:06:54:9D:1C:84:36:00:93:FD:75:F2:3B:FA:C9:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7/23ec6e2b-6198-3033-bd15-0ad399284ab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7/17608350-923c-49ac-ba58-98403754acd7.crl X509v3 Authority Key Identifier: keyid:8F:3C:E9:B8:51:DF:CA:32:5F:0E:74:F2:FC:15:09:BF:64:E8:81:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/17608350-923c-49ac-ba58-98403754acd7.cer sbgp-ipAddrBlock: critical IPv4: 64.89.240.0/20 74.221.64.0/20 198.100.176.0/20 199.193.84.0/22 IPv6: 2605:3080::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:8a:65:34:66:a9:c0:2b:12:0e:94:2b:01:22:b5:ee:9d:d1: 73:14:b8:42:48:ab:2a:43:1c:0f:71:fd:ed:f8:e1:40:db:db: 12:2f:b3:a4:27:f9:0a:b5:63:d4:ed:83:a1:93:e5:75:c5:d9: 96:ef:5c:d6:95:e1:f3:ca:34:e6:96:f4:c7:f7:25:d8:93:d6: 44:e1:0a:61:85:9c:ab:b3:60:7b:67:35:fe:10:89:9c:fa:25: c5:32:fd:da:0c:bf:b9:c9:dd:6d:d5:88:8e:10:7b:17:f7:b5: 94:84:c5:16:20:a1:8d:c8:f4:02:22:db:96:8b:cf:d0:f0:17: 1c:d5:6b:de:de:f8:98:83:10:c7:06:25:0b:00:0b:70:02:cf: 10:0c:e0:ca:0a:d7:b3:5c:1e:24:41:4e:08:2e:6a:66:6b:8f: a4:f5:2a:e1:69:8b:3b:f5:a0:90:0c:47:01:69:67:b3:7a:78: 91:5d:b0:21:b7:ec:5f:f8:29:52:1b:41:14:ee:1c:d6:4c:c7: 8c:ff:c9:80:6a:2f:ed:a4:62:d4:d1:e6:95:b1:76:1a:75:ff: 06:91:7c:d4:84:4b:f9:f4:b1:14:ac:4a:dd:01:d7:bb:04:b0: 95:49:27:1e:fd:f4:ef:f5:c0:05:5e:6a:eb:e1:1a:1f:63:56: d5:fd:04:97 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEys8dPVCAM7PQBvBcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc2MDgzNTAtOTIzYy00OWFjLWJhNTgtOTg0MDM3NTRh Y2Q3MB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk MjNjYWY1NmQtOGUwYi00YTdmLWE0ZTAtYzlhYTNlNDM5Mjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsArUSXuDGf2aYEZ2u+ZJDPMC7zh+F69OV/7q NWrJN0sOZkkMNuAgyY8SJTbEVuVltj4ud4JodZW8NXIQqw3Wt6rnvIFkcYiIxwor MH7MfMyU747l8GbVSjHsdWWwSIUWUMoDxVVUL9iq1H7z7J7CKc6eYoLyC3i7UePG bLiKw0MltnjM2HmxPQBMo5BKaumUN2Juz9/A33+PKV290RbxjCs1FRC7L+Sw2BFa 7DYV+owIi1RyhXvtz3uLMWeIqxwUEKTf+YRMwoJuV/2N/s8HIS5ErUcJaI1U+vC0 6WaflqfZCBoaOzoDJ8c7M3Cun80jtIPXloWOHm+ou0PPUFW6TwIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFCc1HAuQBlSdHIQ2AJP9dfI7+slpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xNzYw ODM1MC05MjNjLTQ5YWMtYmE1OC05ODQwMzc1NGFjZDcvMjNlYzZlMmItNjE5OC0z MDMzLWJkMTUtMGFkMzk5Mjg0YWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMTc2MDgzNTAtOTIzYy00OWFjLWJh NTgtOTg0MDM3NTRhY2Q3LzE3NjA4MzUwLTkyM2MtNDlhYy1iYTU4LTk4NDAzNzU0 YWNkNy5jcmwwHwYDVR0jBBgwFoAUjzzpuFHfyjJfDnTy/BUJv2TogbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xNzYwODM1MC05MjNjLTQ5YWMtYmE1OC05ODQw Mzc1NGFjZDcuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEQFnwAwQE St1AAwQExmSwAwQCx8FUMA0EAgACMAcDBQAmBTCAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAL+KZTRmqcAr Eg6UKwEite6d0XMUuEJIqypDHA9x/e344UDb2xIvs6Qn+Qq1Y9Ttg6GT5XXF2Zbv XNaV4fPKNOaW9Mf3JdiT1kThCmGFnKuzYHtnNf4QiZz6JcUy/doMv7nJ3W3ViI4Q exf3tZSExRYgoY3I9AIi25aLz9DwFxzVa97e+JiDEMcGJQsAC3ACzxAM4MoK17Nc HiRBTgguamZrj6T1KuFpizv1oJAMRwFpZ7N6eJFdsCG37F/4KVIbQRTuHNZMx4z/ yYBqL+2kYtTR5pWxdhp1/waRfNSES/n0sRSsSt0B17sEsJVJJx799O/1wAVeauvh Gh9jVtX9BJc= -----END CERTIFICATE-----Generated at Mon Mar 2 22:54:57 2026 by rpki-client