$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa File: d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa (raw, json) Hash identifier: 9zXWxCqv+HKcU0V1J+LXE6Y8ugWHSZGLoK8xkPbbY78= Subject key identifier: 32:C2:30:41:6B:D7:3F:C3:1A:0E:98:21:C0:A4:42:6A:9C:0F:51:B2 Certificate issuer: /CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Certificate serial: 010D0C9F4328584D143D487AC59AA4EF3B678540 Authority key identifier: 30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 209242 IP address blocks: 23.170.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:48:7a:c5:9a:a4:ef:3b:67:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=878e056c-2015-4a39-af2a-99c7278aac2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7f:b0:03:cc:18:75:24:ce:fd:a0:4c:53:2b: 7c:b8:e1:32:f5:67:ba:0b:0e:d1:e9:0b:40:25:ac: 4f:d0:d2:01:16:28:22:02:94:bf:13:35:0d:5f:6c: f5:2e:6c:40:a0:ce:ba:b5:3b:f8:f0:3b:08:0c:b8: 9e:12:05:f1:47:3a:90:8c:10:ab:1a:fb:7d:a1:ad: da:ae:99:85:ce:fa:d1:18:10:5a:1a:10:97:9e:b3: 7c:4a:11:ed:fd:6a:b5:07:b6:f1:f7:f9:82:8a:3f: 0a:04:8f:59:64:28:fd:38:dd:f1:4c:c2:02:f1:fa: ea:03:61:dd:e6:4d:21:e8:62:64:85:c0:fe:ff:2d: 29:20:37:09:52:74:07:99:4b:bf:ae:4f:c0:13:73: 1a:ea:32:14:0f:6f:a4:0e:2a:83:e3:5d:77:a3:ef: 26:55:e2:64:78:9e:a1:f2:84:85:da:6c:67:29:c3: aa:98:63:41:2d:dd:9a:eb:ca:b4:b6:cb:04:ac:4f: 05:49:e8:48:0b:3a:2b:18:3f:cf:4f:c2:f9:ac:58: 21:17:2f:aa:cd:7b:a6:77:10:4b:7e:d5:50:62:85: 5a:81:9a:a3:2a:40:86:49:1c:20:b2:50:4b:75:10: 50:b4:71:5d:47:d5:80:50:27:35:2d:fd:18:c1:56: bf:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C2:30:41:6B:D7:3F:C3:1A:0E:98:21:C0:A4:42:6A:9C:0F:51:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl X509v3 Authority Key Identifier: keyid:30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer sbgp-ipAddrBlock: critical IPv4: 23.170.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:36:93:af:37:ce:a8:93:d5:b9:04:77:60:be:75:c3:d2:37: c5:bc:e8:d0:b6:a1:e2:63:4f:f6:12:1b:16:db:b3:ed:ba:8a: b8:9f:55:cc:1e:e9:f4:d2:ed:fb:02:ed:e2:74:d8:b3:59:bd: 73:70:ec:07:85:f0:08:aa:2e:dc:ae:b1:fa:c0:e6:09:37:39: 79:14:63:c1:07:61:b8:76:ba:b3:22:a8:db:6e:0a:10:0d:8a: 3b:6f:dc:c4:03:d8:e2:a0:8c:96:1a:03:bd:72:6b:63:88:28: 76:1d:b6:95:8a:42:25:4e:f6:da:41:ba:4e:c2:b7:da:98:83: d2:3a:f6:73:b5:c4:64:b0:93:bb:0c:12:0e:89:f4:c5:18:d7: 9f:b1:1d:e2:04:9c:ee:4a:0b:38:24:62:fa:a8:b3:6b:40:f7: cd:aa:68:a0:c4:98:93:13:1e:2a:f9:2a:38:3f:c3:a2:c5:c5: b5:48:73:14:65:4e:6e:d2:44:92:14:07:a4:99:86:73:43:9f: 6f:25:65:ac:7e:bf:6d:c3:39:52:3d:23:d3:e6:ee:90:41:04: f9:c1:84:89:eb:e0:3c:78:7d:72:da:ba:66:3e:89:b3:e5:b7: 35:29:ef:64:e7:ce:88:27:10:ba:4f:45:e8:35:52:0d:1d:8f: b7:16:22:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUh6xZqk7ztnhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NjdmOGItZTdiNy00YzM0LWFhYTAtMDBmZGRiZWVm NDhkMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ODc4ZTA1NmMtMjAxNS00YTM5LWFmMmEtOTljNzI3OGFhYzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX+wA8wYdSTO/aBMUyt8uOEy9We6Cw7R6QtA JaxP0NIBFigiApS/EzUNX2z1LmxAoM66tTv48DsIDLieEgXxRzqQjBCrGvt9oa3a rpmFzvrRGBBaGhCXnrN8ShHt/Wq1B7bx9/mCij8KBI9ZZCj9ON3xTMIC8frqA2Hd 5k0h6GJkhcD+/y0pIDcJUnQHmUu/rk/AE3Ma6jIUD2+kDiqD4113o+8mVeJkeJ6h 8oSF2mxnKcOqmGNBLd2a68q0tssErE8FSehICzorGD/PT8L5rFghFy+qzXumdxBL ftVQYoVagZqjKkCGSRwgslBLdRBQtHFdR9WAUCc1Lf0YwVa/pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLCMEFr1z/DGg6YIcCkQmqcD1GyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOTY2 N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZkZGJlZWY0OGQvZDNiNDFjOWYtNWE5OC0z ZGM5LTkwOGUtOGI0YzEwZWU4NDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzk2NjdmOGItZTdiNy00YzM0LWFh YTAtMDBmZGRiZWVmNDhkLzM5NjY3ZjhiLWU3YjctNGMzNC1hYWEwLTAwZmRkYmVl ZjQ4ZC5jcmwwHwYDVR0jBBgwFoAUMN8a5EPYVgbeIdFXPxgyY3q5bw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zOTY2N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZk ZGJlZWY0OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6o4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAs2k683zqiT1bkEd2C+dcPSN8W86NC2oeJjT/YSGxbbs+26irifVcwe 6fTS7fsC7eJ02LNZvXNw7AeF8AiqLtyusfrA5gk3OXkUY8EHYbh2urMiqNtuChAN ijtv3MQD2OKgjJYaA71ya2OIKHYdtpWKQiVO9tpBuk7Ct9qYg9I69nO1xGSwk7sM Eg6J9MUY15+xHeIEnO5KCzgkYvqos2tA982qaKDEmJMTHir5Kjg/w6LFxbVIcxRl Tm7SRJIUB6SZhnNDn28lZax+v23DOVI9I9Pm7pBBBPnBhInr4Dx4fXLaumY+ibPl tzUp72TnzognELpPReg1Ug0dj7cWIkA= -----END CERTIFICATE-----Generated at Wed Mar 25 23:17:23 2026 by rpki-client