$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/074d83dd-a51a-3c16-a128-09c6ae9f2d64.roa File: 074d83dd-a51a-3c16-a128-09c6ae9f2d64.roa (raw, json) Hash identifier: rKwks9zk/kjATT+M3ytMesRo9YKAGhCjI94oSHJgUJs= Subject key identifier: C3:B5:57:54:D7:46:90:D2:D9:AD:5B:E4:0D:7D:62:6E:12:00:51:8F Certificate issuer: /CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b Certificate serial: 010D0C9F4328584D0BDD1D51859CC693AACBEA80 Authority key identifier: F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/074d83dd-a51a-3c16-a128-09c6ae9f2d64.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 135074 IP address blocks: 23.167.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:1d:51:85:9c:c6:93:aa:cb:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=bf3f0958-69fd-4d04-a23c-1872aa7fc1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ab:73:8d:f6:72:b6:20:f4:e9:1c:54:41:ff: aa:f5:7f:6e:61:5a:75:49:d9:69:f2:00:30:a1:2b: 5e:00:cd:82:c1:74:3f:e3:c4:69:c5:34:83:d6:a5: 28:d4:1f:02:17:ea:bc:1f:75:c7:ee:4e:8b:10:71: d9:ff:55:aa:94:a5:75:c9:d7:0e:80:68:77:b1:9b: e1:c4:7b:47:84:f4:fc:a3:c0:19:f0:27:f8:d6:24: 2e:f6:15:0b:47:30:e3:cd:0c:b4:74:9f:a8:73:30: 78:4e:ae:4b:f0:f9:13:01:27:ca:c2:c1:6f:52:19: a0:b9:4e:83:1b:fa:32:cc:5d:1b:78:c9:79:a7:00: 3f:28:14:ca:98:2f:1b:64:01:e7:cb:4a:fb:ec:48: 90:67:c9:29:bd:fc:8f:19:f6:74:54:02:ac:00:a6: 61:c9:3b:e3:45:bb:dd:4b:45:9c:8e:cd:34:7a:84: 5c:36:5c:82:8c:ec:ac:3b:9d:fe:e6:f6:c6:06:27: af:3a:30:48:9e:d5:e6:7e:33:a7:95:4f:37:cd:1f: eb:f1:73:fb:44:97:06:92:35:de:21:b4:e2:35:e0: 16:7c:93:6b:42:46:f2:37:92:95:61:96:35:90:98: a3:e2:fa:b8:d7:af:81:68:0b:71:05:22:06:67:47: fd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B5:57:54:D7:46:90:D2:D9:AD:5B:E4:0D:7D:62:6E:12:00:51:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/074d83dd-a51a-3c16-a128-09c6ae9f2d64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl X509v3 Authority Key Identifier: keyid:F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer sbgp-ipAddrBlock: critical IPv4: 23.167.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:1d:08:76:f0:74:87:07:55:36:4f:b2:ad:a1:b7:2f:dd:97: 0d:1c:f8:7c:74:f8:a4:64:48:6e:ac:20:32:75:d4:5b:9c:3e: 7c:21:0a:5a:ba:a3:e3:f5:74:d8:d3:89:f3:17:79:2d:48:85: 59:47:f3:33:b7:98:37:6d:1f:3a:05:a3:af:f1:4a:3e:8e:e1: 29:6c:67:66:b1:9c:88:6a:ca:10:40:23:d4:24:c3:a5:47:19: 0f:23:3a:4f:31:e4:2e:b9:5e:ec:20:10:80:7e:b2:16:84:ee: c0:1d:7b:42:e7:98:d6:12:60:5c:6d:48:fc:26:df:e8:09:84: a2:d8:54:dc:d1:d9:ca:69:1d:da:1b:e0:e4:f7:3c:3d:ea:cf: e4:1c:9f:c3:fc:bc:11:6e:a6:d8:ad:83:b7:3b:39:c6:90:9d: 9f:6c:be:6a:7b:5e:91:35:e9:28:9a:da:aa:5e:5c:55:6c:d5: ae:57:4a:da:28:ca:83:08:e9:51:8b:3a:7f:f2:ee:85:01:04: 85:e1:7b:7e:b8:ac:89:9f:f8:17:6a:e6:dc:18:a4:97:3a:34: df:b1:ff:00:9b:48:03:73:dc:58:97:5e:e9:56:07:68:b7:eb: d7:b1:a9:d2:ac:c6:d7:18:d6:7c:d9:ee:c2:0d:72:8e:e2:71: 10:c6:13:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L3R1RhZzGk6rL6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQyMWM3NGMtYWQwYi00M2I5LTllYTMtYmRhYzRiZjZi YzdiMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk YmYzZjA5NTgtNjlmZC00ZDA0LWEyM2MtMTg3MmFhN2ZjMWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KtzjfZytiD06RxUQf+q9X9uYVp1Sdlp8gAw oSteAM2CwXQ/48RpxTSD1qUo1B8CF+q8H3XH7k6LEHHZ/1WqlKV1ydcOgGh3sZvh xHtHhPT8o8AZ8Cf41iQu9hULRzDjzQy0dJ+oczB4Tq5L8PkTASfKwsFvUhmguU6D G/oyzF0beMl5pwA/KBTKmC8bZAHny0r77EiQZ8kpvfyPGfZ0VAKsAKZhyTvjRbvd S0Wcjs00eoRcNlyCjOysO53+5vbGBievOjBIntXmfjOnlU83zR/r8XP7RJcGkjXe IbTiNeAWfJNrQkbyN5KVYZY1kJij4vq416+BaAtxBSIGZ0f9xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMO1V1TXRpDS2a1b5A19Ym4SAFGPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNDIx Yzc0Yy1hZDBiLTQzYjktOWVhMy1iZGFjNGJmNmJjN2IvMDc0ZDgzZGQtYTUxYS0z YzE2LWExMjgtMDljNmFlOWYyZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzQyMWM3NGMtYWQwYi00M2I5LTll YTMtYmRhYzRiZjZiYzdiLzM0MjFjNzRjLWFkMGItNDNiOS05ZWEzLWJkYWM0YmY2 YmM3Yi5jcmwwHwYDVR0jBBgwFoAU8Py5nS1n03RsdNT9KVvXSB5soqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNDIxYzc0Yy1hZDBiLTQzYjktOWVhMy1iZGFj NGJmNmJjN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6eYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEdCHbwdIcHVTZPsq2hty/dlw0c+Hx0+KRkSG6sIDJ11FucPnwhClq6 o+P1dNjTifMXeS1IhVlH8zO3mDdtHzoFo6/xSj6O4SlsZ2axnIhqyhBAI9Qkw6VH GQ8jOk8x5C65XuwgEIB+shaE7sAde0LnmNYSYFxtSPwm3+gJhKLYVNzR2cppHdob 4OT3PD3qz+Qcn8P8vBFuptitg7c7OcaQnZ9svmp7XpE16Sia2qpeXFVs1a5XStoo yoMI6VGLOn/y7oUBBIXhe364rImf+Bdq5twYpJc6NN+x/wCbSANz3FiXXulWB2i3 69exqdKsxtcY1nzZ7sINco7icRDGE9s= -----END CERTIFICATE-----Generated at Thu Mar 26 08:42:32 2026 by rpki-client