$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/34ea7717-0935-34ec-8511-5e5273f1e4d9.roa File: 34ea7717-0935-34ec-8511-5e5273f1e4d9.roa (raw, json) Hash identifier: vU0Z8LVtTE2bCyxbRsuCJfsUrKcX5tBeqVBL8dvQcXI= Subject key identifier: 9C:01:FC:0A:10:F0:9D:8E:A2:D1:0C:64:78:E0:11:25:34:A9:95:93 Certificate issuer: /CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b Certificate serial: 010D0C9F4328584D143D484266AEE8BD4955FFC0 Authority key identifier: F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/34ea7717-0935-34ec-8511-5e5273f1e4d9.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 211392 IP address blocks: 23.167.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:48:42:66:ae:e8:bd:49:55:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=a27ef33c-eb82-4857-a331-9fbd9aa6fb86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7d:4c:79:94:ec:7a:1b:f4:93:34:82:d0:f7: 69:b0:1d:d7:57:d9:be:c3:d2:26:7a:55:55:b0:06: 9a:a8:e3:94:87:02:ee:df:27:a8:8b:69:aa:a2:50: 0d:9c:34:36:04:fa:64:47:ad:73:95:cd:53:61:1a: ad:51:d1:54:53:48:e4:70:95:5f:5c:f7:8a:30:67: ab:ef:80:8a:4f:38:24:20:43:07:21:9e:77:09:63: f0:67:f1:36:8f:81:bd:e0:24:13:54:97:ac:9c:57: da:94:07:59:3d:00:dd:da:e1:c7:4e:86:5b:b6:c3: c6:ef:b1:34:e0:6f:52:42:a4:f5:f7:90:83:04:3d: a1:7b:15:c4:2e:b9:37:2d:c4:7a:38:59:66:dc:db: 93:77:22:9e:78:ec:74:b3:47:e8:ae:2e:e2:52:e1: c1:b5:09:1c:42:49:79:3e:8c:6a:3f:47:77:cd:0d: 2c:75:61:c0:a9:97:1d:0a:53:04:b2:a8:87:b0:a0: 27:85:b6:d3:3f:61:09:18:b5:cf:bc:51:51:5b:9e: b1:07:e1:7f:d7:d7:f7:7e:ac:c3:48:66:00:cc:a8: 16:71:57:e4:aa:8a:24:a1:40:46:b9:fc:da:d5:8d: 11:7c:52:c6:7f:7c:5c:e2:56:26:6a:78:5d:3a:9d: ed:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:01:FC:0A:10:F0:9D:8E:A2:D1:0C:64:78:E0:11:25:34:A9:95:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/34ea7717-0935-34ec-8511-5e5273f1e4d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl X509v3 Authority Key Identifier: keyid:F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer sbgp-ipAddrBlock: critical IPv4: 23.167.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:1f:34:33:20:0f:7d:98:d7:d2:b7:3c:a1:50:c2:bc:6a:91: 81:51:9b:6c:dc:0d:fe:a0:6a:c2:93:12:e6:30:d2:c0:22:df: e6:65:f8:37:c0:09:9d:f0:48:b3:d5:46:06:8d:93:b5:4f:b3: a9:01:06:54:20:8f:5c:12:d1:e9:95:68:07:d0:ce:9a:b8:7a: c6:4f:57:29:d4:ba:b5:a9:19:25:78:d6:2f:ad:40:fc:53:04: 4d:d7:d4:48:e5:4c:36:ed:d9:fb:ea:60:16:ef:b4:45:bd:5e: c2:f6:6c:d9:57:b8:b2:94:3b:90:2a:4e:fc:97:af:33:f9:a7: 15:23:73:e4:19:40:26:17:5e:3e:7b:ca:4e:34:e7:a2:7f:7e: 21:61:55:ee:eb:a2:b8:0e:ce:af:90:ac:74:1e:cd:de:e4:c2: 17:05:65:86:9c:2e:1e:08:ff:0d:a2:2c:bb:79:ab:e0:f5:47: 05:7b:2b:75:9d:09:54:9c:78:b6:e0:c6:1a:55:25:ee:5a:9d: 8c:01:f7:13:21:ed:df:28:43:c7:3d:6a:c4:e7:6b:38:ec:c7: 23:59:09:89:df:05:fe:e8:ee:4e:fe:a4:24:4b:f9:55:d2:4c: b6:9f:b8:61:30:41:6f:c0:a2:10:07:04:95:ca:55:bc:9d:9b: 6c:3e:92:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUhCZq7ovUlV/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQyMWM3NGMtYWQwYi00M2I5LTllYTMtYmRhYzRiZjZi YzdiMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YTI3ZWYzM2MtZWI4Mi00ODU3LWEzMzEtOWZiZDlhYTZmYjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7H1MeZTsehv0kzSC0PdpsB3XV9m+w9ImelVV sAaaqOOUhwLu3yeoi2mqolANnDQ2BPpkR61zlc1TYRqtUdFUU0jkcJVfXPeKMGer 74CKTzgkIEMHIZ53CWPwZ/E2j4G94CQTVJesnFfalAdZPQDd2uHHToZbtsPG77E0 4G9SQqT195CDBD2hexXELrk3LcR6OFlm3NuTdyKeeOx0s0fori7iUuHBtQkcQkl5 PoxqP0d3zQ0sdWHAqZcdClMEsqiHsKAnhbbTP2EJGLXPvFFRW56xB+F/19f3fqzD SGYAzKgWcVfkqookoUBGufza1Y0RfFLGf3xc4lYmanhdOp3tQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwB/AoQ8J2OotEMZHjgESU0qZWTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNDIx Yzc0Yy1hZDBiLTQzYjktOWVhMy1iZGFjNGJmNmJjN2IvMzRlYTc3MTctMDkzNS0z NGVjLTg1MTEtNWU1MjczZjFlNGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzQyMWM3NGMtYWQwYi00M2I5LTll YTMtYmRhYzRiZjZiYzdiLzM0MjFjNzRjLWFkMGItNDNiOS05ZWEzLWJkYWM0YmY2 YmM3Yi5jcmwwHwYDVR0jBBgwFoAU8Py5nS1n03RsdNT9KVvXSB5soqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNDIxYzc0Yy1hZDBiLTQzYjktOWVhMy1iZGFj NGJmNmJjN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6eYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIfNDMgD32Y19K3PKFQwrxqkYFRm2zcDf6gasKTEuYw0sAi3+Zl+DfA CZ3wSLPVRgaNk7VPs6kBBlQgj1wS0emVaAfQzpq4esZPVynUurWpGSV41i+tQPxT BE3X1EjlTDbt2fvqYBbvtEW9XsL2bNlXuLKUO5AqTvyXrzP5pxUjc+QZQCYXXj57 yk4056J/fiFhVe7rorgOzq+QrHQezd7kwhcFZYacLh4I/w2iLLt5q+D1RwV7K3Wd CVSceLbgxhpVJe5anYwB9xMh7d8oQ8c9asTnazjsxyNZCYnfBf7o7k7+pCRL+VXS TLafuGEwQW/AohAHBJXKVbydm2w+ksI= -----END CERTIFICATE-----Generated at Thu Mar 26 05:18:02 2026 by rpki-client