$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/1364679f-cb1b-3efa-99ba-f498d36e1c01.roa File: 1364679f-cb1b-3efa-99ba-f498d36e1c01.roa (raw, json) Hash identifier: S7rUXm9U4rbqg/SNKBjcgKYZ/DTClS1GycdmBshfK1s= Subject key identifier: 1E:5A:54:18:25:66:66:37:1E:C8:1E:37:1B:55:AB:AE:52:05:9D:2B Certificate issuer: /CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11 Certificate serial: 010D0C9F4328584D250844EB984B0CBDBD0A4DC0 Authority key identifier: D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/1364679f-cb1b-3efa-99ba-f498d36e1c01.roa Signing time: Thu 12 Mar 2026 14:23:09 +0000 ROA not before: Thu 12 Mar 2026 14:23:09 +0000 ROA not after: Wed 10 Jun 2026 14:23:09 +0000 asID: 14928 IP address blocks: 23.172.16.0/24 maxlen: 32 68.70.0.0/19 maxlen: 32 72.28.0.0/18 maxlen: 32 199.96.176.0/21 maxlen: 32 199.192.136.0/22 maxlen: 32 199.241.168.0/22 maxlen: 32 2607:3e00::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:08:44:eb:98:4b:0c:bd:bd:0a:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11 Validity Not Before: Mar 12 14:23:09 2026 GMT Not After : Jun 10 14:23:09 2026 GMT Subject: CN=a9a71c41-4437-4b1e-bd1c-43eb8f9fdba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:50:ae:ee:96:cd:fa:78:43:a6:9f:91:9d:77: 79:95:68:b8:8c:99:f7:57:11:9f:e6:cb:78:ca:c4: 25:0c:db:ed:2a:14:75:a0:0b:d0:8c:3e:21:36:bb: eb:1a:7d:1e:3e:12:5b:50:39:4f:e3:a2:6f:01:f9: 45:c4:a0:0b:a9:2b:15:2d:f1:b0:36:03:c5:0b:22: c4:87:05:0f:1c:51:29:45:f7:eb:32:b4:e3:ea:c4: 44:e6:80:14:2c:9d:2d:09:f4:a3:2e:be:90:d4:55: e8:90:23:26:5e:d9:97:52:bd:3c:aa:81:9c:35:4a: 9d:34:82:c8:34:7c:4a:7d:1c:fd:89:eb:3c:fe:2a: 6f:f1:29:74:74:c7:33:6c:07:34:d5:d9:65:88:e5: 47:f9:d3:e0:77:c0:8d:94:f6:93:99:5c:4e:07:fc: b0:1f:4b:93:6a:b1:2f:88:8f:dd:e0:a3:92:d6:5d: 8c:3e:ec:bf:57:2c:dd:5c:f5:42:6a:73:ee:2c:30: 5c:55:4b:e4:d2:51:e0:c1:a4:fa:7c:82:11:35:36: e6:4b:6c:d7:a8:43:ca:d9:20:8f:f0:84:b1:6e:ca: 1d:90:2e:75:fc:11:40:b6:3e:dc:9b:fc:e3:f6:5f: de:d4:a4:32:f1:01:04:f8:b0:2c:65:2d:43:d1:d5: 7a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5A:54:18:25:66:66:37:1E:C8:1E:37:1B:55:AB:AE:52:05:9D:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/1364679f-cb1b-3efa-99ba-f498d36e1c01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl X509v3 Authority Key Identifier: keyid:D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer sbgp-ipAddrBlock: critical IPv4: 23.172.16.0/24 68.70.0.0/19 72.28.0.0/18 199.96.176.0/21 199.192.136.0/22 199.241.168.0/22 IPv6: 2607:3e00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:bf:32:38:cd:44:63:aa:36:ce:00:b6:a3:b5:86:bf:d5:54: ce:d9:20:62:93:b9:b0:37:7f:e8:8e:2c:2a:44:d4:ed:ae:9a: a4:10:27:31:a3:13:cc:c2:dd:f0:78:72:03:4c:84:cc:c5:9b: f4:8b:67:ce:d5:83:0c:7b:0c:4a:ff:78:c3:60:da:9e:d2:8a: a7:07:8b:56:f7:d4:d6:91:e4:08:b9:f7:7c:cf:46:10:85:53: c5:23:8f:8f:bd:97:75:5a:32:12:ec:8f:3a:3e:29:8f:ce:ce: d3:ca:6d:b0:45:b7:9a:3c:47:b4:1a:b2:a5:71:11:3e:e8:92: cb:2e:75:90:44:1b:e5:17:46:56:b8:69:88:1e:8b:42:b0:b3: 30:72:e7:18:89:09:25:b1:73:9d:ca:2e:6e:ad:60:1c:53:9f: bb:10:e6:f8:e5:7e:f5:0e:07:7b:c4:1d:3e:06:05:42:d3:ee: e3:3e:1e:96:1e:e0:0e:a2:3c:75:73:3e:82:a3:77:f0:33:fe: 93:a3:15:ba:43:f7:96:cc:9b:00:6a:a0:3f:52:bf:b0:54:de: 43:7b:98:73:67:78:41:a5:3d:0a:97:b0:b7:f9:65:14:48:bf: c0:3b:66:ec:10:5d:6c:5f:8b:b0:42:47:f6:06:ac:da:f8:e2: 96:a4:63:f3 -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWE0lCETrmEsMvb0KTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlYTEwNTEtZDJmNi00OWE2LWE1NTMtYjc1ZWI5Yjgz YjExMB4XDTI2MDMxMjE0MjMwOVoXDTI2MDYxMDE0MjMwOVowLzEtMCsGA1UEAxMk YTlhNzFjNDEtNDQzNy00YjFlLWJkMWMtNDNlYjhmOWZkYmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFCu7pbN+nhDpp+RnXd5lWi4jJn3VxGf5st4 ysQlDNvtKhR1oAvQjD4hNrvrGn0ePhJbUDlP46JvAflFxKALqSsVLfGwNgPFCyLE hwUPHFEpRffrMrTj6sRE5oAULJ0tCfSjLr6Q1FXokCMmXtmXUr08qoGcNUqdNILI NHxKfRz9ies8/ipv8Sl0dMczbAc01dlliOVH+dPgd8CNlPaTmVxOB/ywH0uTarEv iI/d4KOS1l2MPuy/VyzdXPVCanPuLDBcVUvk0lHgwaT6fIIRNTbmS2zXqEPK2SCP 8ISxbsodkC51/BFAtj7cm/zj9l/e1KQy8QEE+LAsZS1D0dV6qwIDAQABo4IDgjCC A34wHQYDVR0OBBYEFB5aVBglZmY3HsgeNxtVq65SBZ0rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMWVh MTA1MS1kMmY2LTQ5YTYtYTU1My1iNzVlYjliODNiMTEvMTM2NDY3OWYtY2IxYi0z ZWZhLTk5YmEtZjQ5OGQzNmUxYzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjFlYTEwNTEtZDJmNi00OWE2LWE1 NTMtYjc1ZWI5YjgzYjExLzIxZWExMDUxLWQyZjYtNDlhNi1hNTUzLWI3NWViOWI4 M2IxMS5jcmwwHwYDVR0jBBgwFoAU17/spji01sUwIRm+CadPKvJr4/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMWVhMTA1MS1kMmY2LTQ5YTYtYTU1My1iNzVl YjliODNiMTEuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQAF6wQAwQF REYAAwQGSBwAAwQDx2CwAwQCx8CIAwQCx/GoMA0EAgACMAcDBQAmBz4AMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAIO/MjjNRGOqNs4AtqO1hr/VVM7ZIGKTubA3f+iOLCpE1O2umqQQJzGjE8zC 3fB4cgNMhMzFm/SLZ87Vgwx7DEr/eMNg2p7SiqcHi1b31NaR5Ai593zPRhCFU8Uj j4+9l3VaMhLsjzo+KY/OztPKbbBFt5o8R7QasqVxET7okssudZBEG+UXRla4aYge i0KwszBy5xiJCSWxc53KLm6tYBxTn7sQ5vjlfvUOB3vEHT4GBULT7uM+HpYe4A6i PHVzPoKjd/Az/pOjFbpD95bMmwBqoD9Sv7BU3kN7mHNneEGlPQqXsLf5ZRRIv8A7 ZuwQXWxfi7BCR/YGrNr44pakY/M= -----END CERTIFICATE-----Generated at Thu Mar 26 22:24:34 2026 by rpki-client