$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/ea53e097-aa5e-3666-96a2-1268be35db5c.roa File: ea53e097-aa5e-3666-96a2-1268be35db5c.roa (raw, json) Hash identifier: owuUWhrqP9x121mAYVmJWTXLkCiuQ/CA4vk5KYNIRls= Subject key identifier: 5D:98:FF:BF:83:08:2F:14:E0:A2:E9:FE:EF:12:DF:71:A1:AB:64:41 Certificate issuer: /CN=f9a80165-8f31-4fb3-9144-bcb45cfd2754 Certificate serial: 010D0C9F4328584D24DFA5122B02CFA58AACF580 Authority key identifier: B0:02:F4:EA:50:CC:0D:5C:A2:A3:07:89:E3:7B:9B:52:A6:EF:74:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/ea53e097-aa5e-3666-96a2-1268be35db5c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 399693 IP address blocks: 23.174.24.0/24 maxlen: 24 165.140.232.0/22 maxlen: 24 2602:fe87::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/f9a80165-8f31-4fb3-9144-bcb45cfd2754.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/f9a80165-8f31-4fb3-9144-bcb45cfd2754.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:a5:12:2b:02:cf:a5:8a:ac:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9a80165-8f31-4fb3-9144-bcb45cfd2754 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5b8c7356-1c6a-44b3-90a5-17c580f6b49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:55:d5:c7:41:75:44:fd:d5:e4:2d:37:80:c6: c9:19:48:37:ab:c8:ef:ab:6c:9e:46:a3:a5:d2:23: 32:39:06:2c:10:08:30:17:dc:7e:d2:9d:66:9c:8a: ea:dd:ed:d6:fd:2e:7f:ee:c7:53:06:98:b2:57:1b: 7c:37:ba:d5:3e:9a:b1:a4:b2:f2:3a:3f:13:f0:ed: da:d1:54:3a:bf:de:5b:eb:65:5a:4b:ef:67:82:43: 2c:5c:e8:45:3c:17:16:62:e4:6c:8e:fd:a0:86:23: ef:3d:0c:36:c7:79:ae:f5:09:03:d5:b7:14:6c:1d: 17:dc:14:27:f7:df:4b:51:7b:a8:47:f1:31:d1:96: ac:b2:10:0a:07:c0:5c:62:16:c6:54:9d:20:1f:ef: a6:09:09:7d:c3:11:d3:6e:ca:7f:36:03:20:a0:5e: 95:65:7b:ba:2f:4c:8c:91:2d:30:5c:f1:6a:85:43: d5:0c:2e:6e:de:0a:f2:cd:d4:0f:65:95:2b:31:3b: 03:6c:48:94:15:fa:29:8d:36:a6:3e:8e:b8:82:9d: cf:c7:af:9c:a5:73:d5:70:d2:8c:55:5d:e3:a3:89: 66:32:34:bf:5c:85:45:eb:69:b0:81:a6:21:20:c1: 2b:97:97:43:7a:80:d7:04:80:a5:01:e6:6c:4e:ca: a6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:98:FF:BF:83:08:2F:14:E0:A2:E9:FE:EF:12:DF:71:A1:AB:64:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/ea53e097-aa5e-3666-96a2-1268be35db5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/f9a80165-8f31-4fb3-9144-bcb45cfd2754.crl X509v3 Authority Key Identifier: keyid:B0:02:F4:EA:50:CC:0D:5C:A2:A3:07:89:E3:7B:9B:52:A6:EF:74:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754.cer sbgp-ipAddrBlock: critical IPv4: 23.174.24.0/24 165.140.232.0/22 IPv6: 2602:fe87::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:09:d2:a1:bc:79:fb:1d:5c:2c:11:d6:4a:58:87:c4:07:cb: ee:f4:06:a6:3b:66:87:67:02:7b:4a:b6:c5:b1:66:27:a8:55: 6d:eb:9f:0c:c7:6c:34:d8:b8:96:04:27:7c:50:d2:da:38:d5: db:b4:d9:5a:ef:7f:30:ae:53:0a:e0:aa:48:eb:59:0c:6d:63: ab:46:b8:3f:51:66:6f:82:b1:e4:1d:d4:fe:f7:6a:0e:e6:ff: 3d:ba:1a:c0:c8:7c:a7:f7:76:11:9d:ea:60:5f:67:02:32:a7: 1f:81:04:75:61:21:97:ee:0f:54:26:6e:b4:1b:28:7d:c1:6b: d2:ba:02:e7:e8:ba:4a:9d:4e:58:a0:93:86:81:11:46:c8:68: 69:2c:15:84:49:83:53:49:9e:d1:34:c1:37:ca:22:a9:ef:4f: f5:ed:40:6a:f0:b2:83:9d:ec:99:71:6a:71:ff:77:ba:7a:c0: c7:c8:50:03:24:d1:29:e8:ce:09:f0:c4:1a:0e:97:b9:08:20: a6:f4:4a:5f:24:e0:66:ed:f9:ee:a8:43:33:12:b6:5d:60:4a: 33:18:6e:9a:8e:11:30:ba:aa:42:bf:86:7d:9c:24:c0:b1:97: 04:4c:9d:66:67:31:74:66:19:72:2c:96:c9:ce:b4:a3:36:4f: 62:e7:0a:a0 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE0k36USKwLPpYqs9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjlhODAxNjUtOGYzMS00ZmIzLTkxNDQtYmNiNDVjZmQy NzU0MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NWI4YzczNTYtMWM2YS00NGIzLTkwYTUtMTdjNTgwZjZiNDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1XVx0F1RP3V5C03gMbJGUg3q8jvq2yeRqOl 0iMyOQYsEAgwF9x+0p1mnIrq3e3W/S5/7sdTBpiyVxt8N7rVPpqxpLLyOj8T8O3a 0VQ6v95b62VaS+9ngkMsXOhFPBcWYuRsjv2ghiPvPQw2x3mu9QkD1bcUbB0X3BQn 999LUXuoR/Ex0ZasshAKB8BcYhbGVJ0gH++mCQl9wxHTbsp/NgMgoF6VZXu6L0yM kS0wXPFqhUPVDC5u3gryzdQPZZUrMTsDbEiUFfopjTamPo64gp3Px6+cpXPVcNKM VV3jo4lmMjS/XIVF62mwgaYhIMErl5dDeoDXBIClAeZsTsqmWwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFF2Y/7+DCC8U4KLp/u8S33Ghq2RBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mOWE4 MDE2NS04ZjMxLTRmYjMtOTE0NC1iY2I0NWNmZDI3NTQvZWE1M2UwOTctYWE1ZS0z NjY2LTk2YTItMTI2OGJlMzVkYjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjlhODAxNjUtOGYzMS00ZmIzLTkx NDQtYmNiNDVjZmQyNzU0L2Y5YTgwMTY1LThmMzEtNGZiMy05MTQ0LWJjYjQ1Y2Zk Mjc1NC5jcmwwHwYDVR0jBBgwFoAUsAL06lDMDVyioweJ43ubUqbvdF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mOWE4MDE2NS04ZjMxLTRmYjMtOTE0NC1iY2I0 NWNmZDI3NTQuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF64YAwQC pYzoMA0EAgACMAcDBQAmAv6HMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEMJ0qG8efsdXCwR1kpYh8QHy+70 BqY7ZodnAntKtsWxZieoVW3rnwzHbDTYuJYEJ3xQ0to41du02VrvfzCuUwrgqkjr WQxtY6tGuD9RZm+CseQd1P73ag7m/z26GsDIfKf3dhGd6mBfZwIypx+BBHVhIZfu D1QmbrQbKH3Ba9K6AufoukqdTligk4aBEUbIaGksFYRJg1NJntE0wTfKIqnvT/Xt QGrwsoOd7JlxanH/d7p6wMfIUAMk0SnozgnwxBoOl7kIIKb0Sl8k4Gbt+e6oQzMS tl1gSjMYbpqOETC6qkK/hn2cJMCxlwRMnWZnMXRmGXIslsnOtKM2T2LnCqA= -----END CERTIFICATE-----Generated at Thu Mar 26 21:37:25 2026 by rpki-client