$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c/b6824052-8ce4-3e2b-b21f-17b72e30cdc0.roa File: b6824052-8ce4-3e2b-b21f-17b72e30cdc0.roa (raw, json) Hash identifier: Pyx6wOH7+DEAFLhUFQw0OJW8lHhbqvgLjoJjCb+KGb4= Subject key identifier: 56:05:41:2E:43:15:AE:CF:05:A6:67:17:C6:64:79:22:12:DE:FD:55 Certificate issuer: /CN=650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c Certificate serial: 010D0C9F4328584D290F65F5FE149F07A081F300 Authority key identifier: 20:CB:1A:25:77:55:9B:9C:8A:AE:F4:F7:C6:AF:11:05:DB:5E:B1:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c/b6824052-8ce4-3e2b-b21f-17b72e30cdc0.roa Signing time: Sat 14 Mar 2026 01:00:31 +0000 ROA not before: Sat 14 Mar 2026 01:00:31 +0000 ROA not after: Fri 12 Jun 2026 01:00:31 +0000 asID: 400359 IP address blocks: 23.129.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:29:0f:65:f5:fe:14:9f:07:a0:81:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c Validity Not Before: Mar 14 01:00:31 2026 GMT Not After : Jun 12 01:00:31 2026 GMT Subject: CN=fa2e684e-bc6f-46b6-8af4-dc0208cb0949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:28:6f:43:bf:91:74:8f:0c:94:54:66:88:4e: 0c:a5:ac:c9:76:82:26:e7:3b:48:18:0a:22:34:88: 88:55:24:ee:00:7b:21:22:0f:75:e0:36:b8:76:e6: 82:ad:fd:d9:c8:ec:66:a1:83:c8:87:f0:3c:91:24: 1f:64:cc:e9:3b:14:c4:9b:dd:2b:8d:75:b1:af:bf: 79:ea:a6:10:f5:b0:fb:cb:4c:4c:e8:5a:66:94:d5: 1a:aa:d3:62:22:38:cf:dc:49:c8:82:e5:bf:40:28: c4:b0:39:19:4c:1f:64:3b:f4:b9:d9:f7:95:e6:2c: b5:02:6a:6e:70:52:3d:44:4d:5b:56:1f:71:e3:de: 67:ea:e3:c3:d6:ea:df:12:fc:b4:46:46:51:51:ed: ab:c1:1c:d2:63:79:cd:1b:13:36:6b:9d:7a:67:c5: 3e:c0:58:1b:21:53:2e:68:0c:ef:3b:cb:ef:46:e5: dd:6c:0f:81:79:e3:ee:73:9c:4d:fb:9c:31:46:6b: 8c:79:e1:a1:de:cf:c9:10:85:75:6f:76:8e:30:4c: 6a:3b:34:2b:d8:18:4c:de:ad:3d:75:b6:23:27:33: af:47:4b:ba:b9:4b:38:ab:a3:05:65:13:2d:4d:60: fe:c0:1a:af:56:0a:cf:3f:a9:f2:01:02:da:85:d4: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:05:41:2E:43:15:AE:CF:05:A6:67:17:C6:64:79:22:12:DE:FD:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c/b6824052-8ce4-3e2b-b21f-17b72e30cdc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c.crl X509v3 Authority Key Identifier: keyid:20:CB:1A:25:77:55:9B:9C:8A:AE:F4:F7:C6:AF:11:05:DB:5E:B1:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c.cer sbgp-ipAddrBlock: critical IPv4: 23.129.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e5:26:8a:aa:49:66:b1:c3:ea:f2:a2:a9:13:67:93:23:04: de:f5:d4:56:e0:7d:f1:38:8e:f2:69:52:55:c9:92:ac:8b:c5: 17:6e:46:c6:bd:5a:4f:9b:da:fa:bc:32:20:4b:de:0b:c7:b1: 92:ee:d9:a9:55:ca:9c:da:8e:1a:09:eb:0a:e0:65:ea:43:c8: e0:e5:a8:e0:0e:69:f3:22:80:35:8f:3b:17:89:98:4b:df:95: 75:58:21:f9:bf:c9:47:28:10:e0:74:03:49:61:6c:97:b0:1c: 58:53:2b:2e:5d:fe:89:0c:e5:49:69:fd:cf:d3:b9:a3:7f:7f: 55:1f:6e:9c:2d:78:bf:ab:75:fa:03:5e:01:f7:e7:c9:a6:4f: 77:af:39:b9:27:76:70:96:d0:fd:03:6c:f9:2a:f2:e3:d7:73: 2c:92:b9:39:cd:4b:11:cc:35:cc:73:4f:ac:c1:ec:ad:70:61: 63:d0:d8:20:01:b2:66:eb:3f:e6:c8:0d:cd:38:8a:8d:c6:48: ea:55:2e:38:56:32:ac:20:72:15:f7:c1:f2:27:2d:17:d4:b5: da:15:6a:9f:71:eb:27:b9:62:0a:43:4a:a5:bd:94:a5:52:3f: b0:4c:e9:a3:b3:22:5c:84:a3:e2:0d:5d:72:cc:c7:97:27:09: 9a:7c:8f:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0pD2X1/hSfB6CB8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUwYjcyZGQtYzlkNS00YmE0LTgzYmMtZTY1YjYxYjZh YTdjMB4XDTI2MDMxNDAxMDAzMVoXDTI2MDYxMjAxMDAzMVowLzEtMCsGA1UEAxMk ZmEyZTY4NGUtYmM2Zi00NmI2LThhZjQtZGMwMjA4Y2IwOTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yhvQ7+RdI8MlFRmiE4MpazJdoIm5ztIGAoi NIiIVSTuAHshIg914Da4duaCrf3ZyOxmoYPIh/A8kSQfZMzpOxTEm90rjXWxr795 6qYQ9bD7y0xM6FpmlNUaqtNiIjjP3EnIguW/QCjEsDkZTB9kO/S52feV5iy1Ampu cFI9RE1bVh9x495n6uPD1urfEvy0RkZRUe2rwRzSY3nNGxM2a516Z8U+wFgbIVMu aAzvO8vvRuXdbA+BeePuc5xN+5wxRmuMeeGh3s/JEIV1b3aOMExqOzQr2BhM3q09 dbYjJzOvR0u6uUs4q6MFZRMtTWD+wBqvVgrPP6nyAQLahdTeCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYFQS5DFa7PBaZnF8ZkeSIS3v1VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NTBi NzJkZC1jOWQ1LTRiYTQtODNiYy1lNjViNjFiNmFhN2MvYjY4MjQwNTItOGNlNC0z ZTJiLWIyMWYtMTdiNzJlMzBjZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjUwYjcyZGQtYzlkNS00YmE0LTgz YmMtZTY1YjYxYjZhYTdjLzY1MGI3MmRkLWM5ZDUtNGJhNC04M2JjLWU2NWI2MWI2 YWE3Yy5jcmwwHwYDVR0jBBgwFoAUIMsaJXdVm5yKrvT3xq8RBdtesbkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NTBiNzJkZC1jOWQ1LTRiYTQtODNiYy1lNjVi NjFiNmFhN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/lJoqqSWaxw+ryoqkTZ5MjBN711FbgffE4jvJpUlXJkqyLxRduRsa9 Wk+b2vq8MiBL3gvHsZLu2alVypzajhoJ6wrgZepDyODlqOAOafMigDWPOxeJmEvf lXVYIfm/yUcoEOB0A0lhbJewHFhTKy5d/okM5Ulp/c/TuaN/f1UfbpwteL+rdfoD XgH358mmT3evObkndnCW0P0DbPkq8uPXcyySuTnNSxHMNcxzT6zB7K1wYWPQ2CAB smbrP+bIDc04io3GSOpVLjhWMqwgchX3wfInLRfUtdoVap9x6ye5YgpDSqW9lKVS P7BM6aOzIlyEo+INXXLMx5cnCZp8jzE= -----END CERTIFICATE-----Generated at Sat Mar 28 13:23:43 2026 by rpki-client