$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/bfe1b12d-9cbf-3bd3-a357-8bed5f3e39dc.roa File: bfe1b12d-9cbf-3bd3-a357-8bed5f3e39dc.roa (raw, json) Hash identifier: eE9xKgKWcilof4X4ogsFn2/MbS7WvOooh6+1hABW8U0= Subject key identifier: 50:BF:62:D7:A5:5A:B4:B5:27:EE:CB:2B:8D:86:1C:69:8B:54:20:D0 Certificate issuer: /CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Certificate serial: 010D0C9F4328584D0BDD1C21F0049A8450E7C5E0 Authority key identifier: 30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/bfe1b12d-9cbf-3bd3-a357-8bed5f3e39dc.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 135074 IP address blocks: 23.170.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:1c:21:f0:04:9a:84:50:e7:c5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=b3d6cb1e-f15f-4bda-8e80-338833a842f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:19:05:5c:c8:65:ce:0c:66:07:62:fa:a2:2e: e2:f0:ac:0b:d5:35:84:dd:de:75:0f:40:43:ad:a0: 85:b9:d9:d9:42:f4:1c:68:3e:7d:ee:80:15:19:c1: c9:52:6d:94:6d:6c:13:2f:44:38:52:50:0d:25:48: 2b:2c:c4:99:fa:02:2a:39:93:37:ad:c1:3d:f7:cd: 78:43:28:0a:9a:56:f4:cf:6b:03:cd:ed:67:fb:90: d3:e6:8b:a9:25:29:60:86:d7:d9:d8:37:11:11:3c: 6a:ad:7b:b4:1e:c1:d1:e7:ef:0e:75:cf:d2:6c:cd: 37:45:64:55:df:40:39:58:c6:38:68:f7:5d:9c:c5: 23:3f:7c:ad:cb:36:f1:d2:61:ab:66:e7:4f:1e:2b: 0e:38:32:fc:d2:69:5a:4a:a9:1b:54:d4:78:34:15: a3:34:f5:e2:19:a6:18:1c:23:4b:ac:54:d7:6e:01: 93:23:b4:72:93:6c:98:f5:c5:f0:c6:69:b8:6d:f4: 85:d5:6a:30:a3:30:5e:2d:f1:fe:fd:e3:a3:da:10: ac:38:b8:c0:d5:c3:93:2e:6b:c7:d4:52:f8:ff:52: 24:83:e8:ae:87:d7:39:90:e3:54:18:50:92:ac:7a: 7e:14:13:5b:08:43:5f:07:c8:26:82:79:8f:85:c9: 0e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BF:62:D7:A5:5A:B4:B5:27:EE:CB:2B:8D:86:1C:69:8B:54:20:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/bfe1b12d-9cbf-3bd3-a357-8bed5f3e39dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl X509v3 Authority Key Identifier: keyid:30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer sbgp-ipAddrBlock: critical IPv4: 23.170.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:c3:d2:4d:44:dd:07:1b:95:d7:41:09:50:82:51:35:d2:fa: 9f:2f:7f:13:82:fd:23:66:9a:a7:8f:b1:02:62:26:54:76:cd: 5e:62:42:38:92:a5:4c:2c:64:61:d1:f1:1f:39:02:60:53:9d: 88:a3:ba:99:7e:e4:9b:b3:10:e2:e3:4b:66:4c:19:fc:e4:ce: 63:ca:7a:a9:7d:53:42:3f:b4:c4:c9:38:b0:2e:ef:21:88:91: 4c:f8:9f:de:c4:53:9e:ec:ca:a9:78:cb:d6:7c:84:18:4e:82: 27:ef:d6:75:af:bb:ce:e2:d4:a1:cc:8d:cd:fe:f5:1b:e6:d0: 58:46:e7:f5:d5:13:f3:fc:ec:7c:65:83:51:62:f9:3a:1d:22: ee:4e:eb:de:8f:6d:a9:38:fe:03:18:39:b6:de:b8:08:ed:6d: af:9b:4a:13:d1:6a:df:09:07:4e:45:61:05:a7:83:88:ca:3f: d6:17:67:3b:db:f4:66:88:0a:4c:67:cf:b7:fd:ca:88:74:b9: a0:46:a7:dc:ba:a1:fe:1a:2f:1b:7d:0a:64:a2:56:b6:73:80: 9e:6c:51:dd:06:d0:af:4a:17:b0:e5:24:b6:5e:79:34:df:4e: 9d:be:71:92:47:86:6f:da:08:6d:59:f3:83:a8:5c:e6:38:b5: d0:79:4a:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L3Rwh8ASahFDnxeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NjdmOGItZTdiNy00YzM0LWFhYTAtMDBmZGRiZWVm NDhkMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk YjNkNmNiMWUtZjE1Zi00YmRhLThlODAtMzM4ODMzYTg0MmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBkFXMhlzgxmB2L6oi7i8KwL1TWE3d51D0BD raCFudnZQvQcaD597oAVGcHJUm2UbWwTL0Q4UlANJUgrLMSZ+gIqOZM3rcE99814 QygKmlb0z2sDze1n+5DT5oupJSlghtfZ2DcRETxqrXu0HsHR5+8Odc/SbM03RWRV 30A5WMY4aPddnMUjP3ytyzbx0mGrZudPHisOODL80mlaSqkbVNR4NBWjNPXiGaYY HCNLrFTXbgGTI7Ryk2yY9cXwxmm4bfSF1WowozBeLfH+/eOj2hCsOLjA1cOTLmvH 1FL4/1Ikg+iuh9c5kONUGFCSrHp+FBNbCENfB8gmgnmPhckOKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFC/YtelWrS1J+7LK42GHGmLVCDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOTY2 N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZkZGJlZWY0OGQvYmZlMWIxMmQtOWNiZi0z YmQzLWEzNTctOGJlZDVmM2UzOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzk2NjdmOGItZTdiNy00YzM0LWFh YTAtMDBmZGRiZWVmNDhkLzM5NjY3ZjhiLWU3YjctNGMzNC1hYWEwLTAwZmRkYmVl ZjQ4ZC5jcmwwHwYDVR0jBBgwFoAUMN8a5EPYVgbeIdFXPxgyY3q5bw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zOTY2N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZk ZGJlZWY0OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6o4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvD0k1E3QcblddBCVCCUTXS+p8vfxOC/SNmmqePsQJiJlR2zV5iQjiS pUwsZGHR8R85AmBTnYijupl+5JuzEOLjS2ZMGfzkzmPKeql9U0I/tMTJOLAu7yGI kUz4n97EU57syql4y9Z8hBhOgifv1nWvu87i1KHMjc3+9Rvm0FhG5/XVE/P87Hxl g1Fi+TodIu5O696Pbak4/gMYObbeuAjtba+bShPRat8JB05FYQWng4jKP9YXZzvb 9GaICkxnz7f9yoh0uaBGp9y6of4aLxt9CmSiVrZzgJ5sUd0G0K9KF7DlJLZeeTTf Tp2+cZJHhm/aCG1Z84OoXOY4tdB5Sio= -----END CERTIFICATE-----Generated at Thu Mar 26 17:50:41 2026 by rpki-client