$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/6a7c1fcd-5997-353b-aa88-da1a2d616872.roa File: 6a7c1fcd-5997-353b-aa88-da1a2d616872.roa (raw, json) Hash identifier: oVebPBPhTNA1G8BIBWn1xNhTtKTqeQj4I2ow1/vwgUk= Subject key identifier: 06:80:94:58:B4:B8:4B:CD:DB:85:29:CB:B0:6E:89:58:DB:2B:B0:FB Certificate issuer: /CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11 Certificate serial: 010D0C9F4328584D252DE2F92F76630FA9218C00 Authority key identifier: D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/6a7c1fcd-5997-353b-aa88-da1a2d616872.roa Signing time: Thu 12 Mar 2026 15:38:56 +0000 ROA not before: Thu 12 Mar 2026 15:38:56 +0000 ROA not after: Wed 10 Jun 2026 15:38:56 +0000 asID: 3737 IP address blocks: 23.172.16.0/24 maxlen: 32 68.70.0.0/19 maxlen: 32 72.28.0.0/18 maxlen: 32 199.96.176.0/21 maxlen: 32 199.192.136.0/22 maxlen: 32 199.241.168.0/22 maxlen: 32 2607:3e00::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:2d:e2:f9:2f:76:63:0f:a9:21:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11 Validity Not Before: Mar 12 15:38:56 2026 GMT Not After : Jun 10 15:38:56 2026 GMT Subject: CN=802d8a98-64e5-43e6-8cd3-6c54476f9510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ab:5b:8a:93:33:96:4f:69:9d:9d:ea:57:e6: fc:27:0c:40:4b:32:6c:16:1a:a6:d2:19:3e:a1:b7: 8f:05:8d:77:2c:72:5a:25:5e:2f:66:22:43:60:3b: 01:c0:0b:42:80:dd:61:88:89:bc:57:c7:65:e8:65: 5b:f0:5c:e6:07:6e:45:0a:f4:55:1c:8d:c0:e8:0b: 63:b1:e5:ce:10:dd:f4:a5:cb:41:5b:e7:8b:a1:08: 57:e1:b3:d8:f6:f1:3d:fb:0b:48:eb:da:0b:43:4a: 7b:69:e7:0c:83:aa:4f:a1:1a:26:d8:3b:32:cd:72: 5c:fb:82:b9:f1:ec:1f:14:94:12:5e:d0:a6:6f:1a: 12:df:03:4b:95:fb:4b:02:f6:46:26:0d:81:b5:a9: f1:17:b6:32:ae:f2:9a:bd:ce:67:cf:2b:39:a2:2c: 82:b7:47:ca:cb:22:da:0f:74:8c:ba:dc:af:bc:d6: fd:cc:9f:53:12:11:7a:64:eb:09:80:a9:ef:4b:08: 6a:dd:18:e2:eb:08:01:63:4a:13:03:8b:cf:09:26: 0c:32:36:82:5c:86:40:c1:75:7d:0b:44:57:e4:fe: 22:58:0c:31:ea:29:59:c4:fc:c0:0e:21:88:29:a4: ce:26:39:83:e4:69:12:2f:eb:db:33:16:ca:3a:a8: df:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:80:94:58:B4:B8:4B:CD:DB:85:29:CB:B0:6E:89:58:DB:2B:B0:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/6a7c1fcd-5997-353b-aa88-da1a2d616872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl X509v3 Authority Key Identifier: keyid:D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer sbgp-ipAddrBlock: critical IPv4: 23.172.16.0/24 68.70.0.0/19 72.28.0.0/18 199.96.176.0/21 199.192.136.0/22 199.241.168.0/22 IPv6: 2607:3e00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:93:96:cb:97:4e:b2:f8:eb:b0:8b:ea:6f:c5:af:b2:29:f6: f6:f2:74:60:21:ff:5b:23:58:bf:1d:48:df:4b:71:c5:2f:dc: 51:93:62:c9:0a:87:31:a5:68:7a:d8:5e:d3:9c:de:3b:97:b2: 55:ac:d0:6b:d8:5a:76:5b:35:ff:42:ae:b4:08:12:89:00:a8: 50:15:38:8f:0b:7e:07:af:1a:5c:f0:03:96:f9:57:d5:04:62: c1:af:02:0a:87:16:c3:dd:84:2d:57:38:6e:df:74:d1:c6:b3: ff:b7:ab:27:79:8e:a8:ca:d9:4b:25:2f:46:b2:97:16:11:a1: cd:a7:ec:37:bf:d1:30:a2:e8:c2:6b:35:0f:81:36:79:42:89: 13:ae:ab:83:7a:23:18:83:da:5d:08:d9:d7:58:86:f6:57:b3: 29:7f:b5:0a:93:10:7c:a9:65:68:5d:c6:bd:b0:14:c7:2d:c2: 67:5c:7a:df:de:5b:90:09:59:81:3d:72:e0:ae:40:d5:ec:12: 2d:47:71:64:19:f0:3c:88:f4:69:b2:5c:df:af:53:76:8c:17: 02:2d:15:4f:22:3a:91:84:8f:74:f0:31:32:c2:82:05:9f:97: f9:76:85:f4:03:fb:7b:7d:26:74:e4:42:51:2a:58:88:30:df: 5a:b4:50:b0 -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWE0lLeL5L3ZjD6khjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlYTEwNTEtZDJmNi00OWE2LWE1NTMtYjc1ZWI5Yjgz YjExMB4XDTI2MDMxMjE1Mzg1NloXDTI2MDYxMDE1Mzg1NlowLzEtMCsGA1UEAxMk ODAyZDhhOTgtNjRlNS00M2U2LThjZDMtNmM1NDQ3NmY5NTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86tbipMzlk9pnZ3qV+b8JwxASzJsFhqm0hk+ obePBY13LHJaJV4vZiJDYDsBwAtCgN1hiIm8V8dl6GVb8FzmB25FCvRVHI3A6Atj seXOEN30pctBW+eLoQhX4bPY9vE9+wtI69oLQ0p7aecMg6pPoRom2DsyzXJc+4K5 8ewfFJQSXtCmbxoS3wNLlftLAvZGJg2BtanxF7YyrvKavc5nzys5oiyCt0fKyyLa D3SMutyvvNb9zJ9TEhF6ZOsJgKnvSwhq3Rji6wgBY0oTA4vPCSYMMjaCXIZAwXV9 C0RX5P4iWAwx6ilZxPzADiGIKaTOJjmD5GkSL+vbMxbKOqjfHwIDAQABo4IDgjCC A34wHQYDVR0OBBYEFAaAlFi0uEvN24Upy7BuiVjbK7D7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMWVh MTA1MS1kMmY2LTQ5YTYtYTU1My1iNzVlYjliODNiMTEvNmE3YzFmY2QtNTk5Ny0z NTNiLWFhODgtZGExYTJkNjE2ODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjFlYTEwNTEtZDJmNi00OWE2LWE1 NTMtYjc1ZWI5YjgzYjExLzIxZWExMDUxLWQyZjYtNDlhNi1hNTUzLWI3NWViOWI4 M2IxMS5jcmwwHwYDVR0jBBgwFoAU17/spji01sUwIRm+CadPKvJr4/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMWVhMTA1MS1kMmY2LTQ5YTYtYTU1My1iNzVl YjliODNiMTEuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQAF6wQAwQF REYAAwQGSBwAAwQDx2CwAwQCx8CIAwQCx/GoMA0EAgACMAcDBQAmBz4AMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAFmTlsuXTrL467CL6m/Fr7Ip9vbydGAh/1sjWL8dSN9LccUv3FGTYskKhzGl aHrYXtOc3juXslWs0GvYWnZbNf9CrrQIEokAqFAVOI8LfgevGlzwA5b5V9UEYsGv AgqHFsPdhC1XOG7fdNHGs/+3qyd5jqjK2UslL0aylxYRoc2n7De/0TCi6MJrNQ+B NnlCiROuq4N6IxiD2l0I2ddYhvZXsyl/tQqTEHypZWhdxr2wFMctwmdcet/eW5AJ WYE9cuCuQNXsEi1HcWQZ8DyI9GmyXN+vU3aMFwItFU8iOpGEj3TwMTLCggWfl/l2 hfQD+3t9JnTkQlEqWIgw31q0ULA= -----END CERTIFICATE-----Generated at Thu Mar 26 19:20:01 2026 by rpki-client