$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/1c469c0a-d4ca-346c-acf1-814ba866a653.roa File: 1c469c0a-d4ca-346c-acf1-814ba866a653.roa (raw, json) Hash identifier: 9quRXyVDb5uYnJNMYtJvWIP/irlpcNfS3ZNaWzOS0QE= Subject key identifier: EF:A1:35:6C:85:38:4F:8E:9E:C5:29:FE:93:3D:63:58:A5:F0:71:07 Certificate issuer: /CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b Certificate serial: 010D0C9F4328584D143D4854D0BC499BC353A980 Authority key identifier: F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/1c469c0a-d4ca-346c-acf1-814ba866a653.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 209242 IP address blocks: 23.167.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:48:54:d0:bc:49:9b:c3:53:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=4f6011ff-08ef-4a7f-87f7-6bb801381ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e6:a3:3b:73:bb:bc:53:fb:ba:d6:54:92:33: e8:0f:af:9c:4a:a4:d6:5e:93:2b:39:b4:69:df:d1: 6f:46:e2:86:81:df:be:5a:b5:05:45:3e:e8:04:e7: 35:f7:50:b6:27:0d:b2:24:26:42:d9:19:0e:95:a6: d6:4a:42:af:e2:30:4c:b8:09:ff:1e:95:4f:82:b1: c2:13:01:a3:a5:ed:e1:9a:74:ef:b2:e6:29:31:c0: 59:c6:e5:79:3a:d4:5d:a5:0f:72:f6:47:d7:15:d6: 54:48:d2:7a:da:7a:15:79:37:10:03:f6:42:e0:1a: 3c:9a:ae:b8:d6:91:57:57:27:26:3e:43:e6:f0:38: 2b:2d:25:f7:47:9f:90:b2:77:1b:d1:b1:a3:5e:5b: a6:d6:c5:43:9c:54:b2:3b:b6:e3:e6:35:66:5e:d3: fa:a0:a5:80:40:99:dd:d6:93:52:5a:84:2e:51:0f: 59:03:1f:6e:6c:2c:64:d2:89:14:1d:8d:7d:77:00: 66:05:db:27:49:8c:8c:61:ce:f2:d8:80:32:2f:c8: 61:43:7b:83:df:aa:79:b8:f8:e7:03:a3:1e:3e:ae: 88:c7:ae:d0:ff:1b:b9:a8:6e:98:39:74:fd:94:53: 68:99:f5:1f:64:97:56:33:77:d6:a2:4d:b6:64:6e: 59:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A1:35:6C:85:38:4F:8E:9E:C5:29:FE:93:3D:63:58:A5:F0:71:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/1c469c0a-d4ca-346c-acf1-814ba866a653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl X509v3 Authority Key Identifier: keyid:F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer sbgp-ipAddrBlock: critical IPv4: 23.167.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:e0:fe:dd:f6:a2:e0:5b:7c:d4:13:20:4a:81:60:d9:52:8d: 2b:00:24:36:ba:eb:15:c0:b8:d4:e1:32:0c:26:b6:b3:30:d7: 0d:82:7f:90:82:ea:39:16:24:5a:f5:05:d1:e7:ca:aa:60:1a: 7e:29:46:3e:03:5a:f7:a3:51:f0:a3:fb:8c:34:32:16:c1:c3: 17:ab:7c:c0:49:ca:70:45:75:ce:fe:d5:6d:a7:96:ac:22:f8: 28:b3:26:f9:b0:3f:69:ff:04:74:7c:d9:84:c0:a2:55:d0:09: 9c:80:0b:0e:96:99:0f:e3:83:d4:e1:d5:e5:ee:3e:80:27:05: c8:ef:eb:e2:69:52:1b:3c:ac:3e:05:84:9d:17:7b:d3:04:93: c8:7d:8f:e2:07:89:12:49:4f:7d:19:64:8c:cf:ae:96:1e:ec: 6f:71:86:7c:a3:06:87:56:07:a5:f3:e2:43:6b:0b:94:fd:02: ca:3b:7c:56:f7:96:e5:a7:f1:ee:ee:2f:cc:4a:ce:ae:6c:8e: b7:ec:6c:8f:2d:f8:0a:c0:6e:3d:6f:92:73:77:81:0a:cd:8f: 72:ea:03:08:75:a0:44:85:c3:9b:74:c2:fc:ab:db:a9:fe:ad: 7b:ad:fd:4e:c8:d0:1b:e3:ab:53:ec:84:6f:d8:13:db:00:4c: 9e:bd:41:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUhU0LxJm8NTqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQyMWM3NGMtYWQwYi00M2I5LTllYTMtYmRhYzRiZjZi YzdiMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NGY2MDExZmYtMDhlZi00YTdmLTg3ZjctNmJiODAxMzgxZWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOajO3O7vFP7utZUkjPoD6+cSqTWXpMrObRp 39FvRuKGgd++WrUFRT7oBOc191C2Jw2yJCZC2RkOlabWSkKv4jBMuAn/HpVPgrHC EwGjpe3hmnTvsuYpMcBZxuV5OtRdpQ9y9kfXFdZUSNJ62noVeTcQA/ZC4Bo8mq64 1pFXVycmPkPm8DgrLSX3R5+Qsncb0bGjXlum1sVDnFSyO7bj5jVmXtP6oKWAQJnd 1pNSWoQuUQ9ZAx9ubCxk0okUHY19dwBmBdsnSYyMYc7y2IAyL8hhQ3uD36p5uPjn A6MePq6Ix67Q/xu5qG6YOXT9lFNomfUfZJdWM3fWok22ZG5ZcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+hNWyFOE+OnsUp/pM9Y1il8HEHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNDIx Yzc0Yy1hZDBiLTQzYjktOWVhMy1iZGFjNGJmNmJjN2IvMWM0NjljMGEtZDRjYS0z NDZjLWFjZjEtODE0YmE4NjZhNjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzQyMWM3NGMtYWQwYi00M2I5LTll YTMtYmRhYzRiZjZiYzdiLzM0MjFjNzRjLWFkMGItNDNiOS05ZWEzLWJkYWM0YmY2 YmM3Yi5jcmwwHwYDVR0jBBgwFoAU8Py5nS1n03RsdNT9KVvXSB5soqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNDIxYzc0Yy1hZDBiLTQzYjktOWVhMy1iZGFj NGJmNmJjN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6eYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPg/t32ouBbfNQTIEqBYNlSjSsAJDa66xXAuNThMgwmtrMw1w2Cf5CC 6jkWJFr1BdHnyqpgGn4pRj4DWvejUfCj+4w0MhbBwxerfMBJynBFdc7+1W2nlqwi +CizJvmwP2n/BHR82YTAolXQCZyACw6WmQ/jg9Th1eXuPoAnBcjv6+JpUhs8rD4F hJ0Xe9MEk8h9j+IHiRJJT30ZZIzPrpYe7G9xhnyjBodWB6Xz4kNrC5T9Aso7fFb3 luWn8e7uL8xKzq5sjrfsbI8t+ArAbj1vknN3gQrNj3LqAwh1oESFw5t0wvyr26n+ rXut/U7I0Bvjq1PshG/YE9sATJ69QQk= -----END CERTIFICATE-----Generated at Thu Mar 26 12:25:08 2026 by rpki-client