$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/e0accc93-63d1-3c21-b64c-4277eccbb948.roa File: e0accc93-63d1-3c21-b64c-4277eccbb948.roa (raw, json) Hash identifier: 0twycTi60zGOck7W0KmLzZjlfX/1AyxDJcnZpTIGqqQ= Subject key identifier: A8:1C:FB:43:78:01:91:AF:47:99:E9:FD:4A:56:F6:9B:51:B4:36:96 Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Certificate serial: 010D0C9F4328584D47C4DF3BAD37824BC49D54C0 Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/e0accc93-63d1-3c21-b64c-4277eccbb948.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 26904 IP address blocks: 23.247.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:df:3b:ad:37:82:4b:c4:9d:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=ba5f38f9-b4fd-4f47-9b26-959f0a35a769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:79:5f:be:35:45:28:cd:14:1a:8a:d1:14:15: 6f:8e:80:3c:41:67:97:b0:8d:3a:17:3d:77:f9:f8: 88:77:29:dc:f2:66:f9:8e:9f:ea:2a:9d:db:67:9b: b6:56:70:cb:a3:3c:90:88:18:b7:c1:2b:b6:c8:d3: f5:de:eb:48:aa:e7:31:70:9a:82:ce:55:52:d9:1a: b8:01:d7:95:65:69:b4:cc:38:37:92:41:86:d5:9d: 18:3f:8a:69:50:1e:04:08:40:3b:05:34:e1:09:f8: 7a:49:cf:09:db:03:36:ca:50:27:6e:f5:1e:f0:f1: 25:ed:39:ba:a4:ba:8e:f1:b5:39:27:f2:fa:2c:bf: 20:47:96:fa:ab:73:a2:de:d0:10:36:a9:5f:98:c9: 60:e4:6c:ce:13:08:8c:33:18:72:67:53:84:bd:4e: 76:42:3b:04:21:77:05:a9:3c:85:ea:2a:09:f2:90: 34:93:9e:e0:77:02:98:da:95:de:ea:24:de:f8:c3: b0:96:05:da:a6:b5:12:0d:27:e7:f7:51:91:98:da: 90:1e:1d:b1:10:06:b4:40:d3:c6:8f:fd:e2:93:d0: 26:eb:d3:5f:c6:8b:16:1b:e8:7c:da:d1:e8:64:88: f9:e3:32:fb:fd:22:e6:ef:77:c7:85:fa:21:bc:d0: 80:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1C:FB:43:78:01:91:AF:47:99:E9:FD:4A:56:F6:9B:51:B4:36:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/e0accc93-63d1-3c21-b64c-4277eccbb948.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl X509v3 Authority Key Identifier: keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer sbgp-ipAddrBlock: critical IPv4: 23.247.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:60:85:65:ee:ca:88:ff:c0:76:f3:19:69:1c:9e:2a:8c:08: b8:16:7a:24:09:50:b0:28:b4:0a:d4:eb:fa:77:ab:31:6b:83: f7:54:6f:42:01:1f:98:05:d1:80:86:b6:05:b3:d6:ad:31:e7: 10:2d:2b:1d:26:7b:c8:38:5d:b4:90:65:92:94:8d:6f:0c:1e: 5c:51:c1:3f:75:15:b5:99:ea:9c:6e:bb:f7:7c:b3:fe:2f:2c: 8e:16:f8:b6:51:58:bc:a4:bc:92:9c:cf:2d:6c:c4:2e:11:eb: 6b:6e:9e:dd:54:be:84:dd:dc:b3:74:bd:38:80:78:c8:d1:6e: b1:2b:28:25:de:4b:74:9e:15:5c:82:da:98:44:ba:59:1e:b1: 85:91:29:17:f6:e0:e5:9c:02:25:10:46:de:bd:1a:d4:e7:0e: 91:f4:f0:b1:76:87:e6:01:6a:6b:f0:57:a0:d0:b6:7e:54:f3: db:ae:04:e8:30:00:46:71:6a:c9:b9:f8:d6:7c:07:01:f9:0e: 28:57:9b:d0:05:c4:95:30:7e:78:af:f2:87:77:61:17:04:25: a7:95:93:9a:50:4b:ac:d0:75:10:24:a4:11:92:cc:1c:27:73: 63:d3:4a:70:eb:12:30:c7:de:5a:82:d9:20:03:13:aa:8b:df: 9c:6c:45:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxN87rTeCS8SdVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VlNzIwZGUtYzMyMi00YmI1LWI4Y2QtYzdhM2YyM2I5 MmQ3MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk YmE1ZjM4ZjktYjRmZC00ZjQ3LTliMjYtOTU5ZjBhMzVhNzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nlfvjVFKM0UGorRFBVvjoA8QWeXsI06Fz13 +fiIdync8mb5jp/qKp3bZ5u2VnDLozyQiBi3wSu2yNP13utIqucxcJqCzlVS2Rq4 AdeVZWm0zDg3kkGG1Z0YP4ppUB4ECEA7BTThCfh6Sc8J2wM2ylAnbvUe8PEl7Tm6 pLqO8bU5J/L6LL8gR5b6q3Oi3tAQNqlfmMlg5GzOEwiMMxhyZ1OEvU52QjsEIXcF qTyF6ioJ8pA0k57gdwKY2pXe6iTe+MOwlgXaprUSDSfn91GRmNqQHh2xEAa0QNPG j/3ik9Am69NfxosWG+h82tHoZIj54zL7/SLm73fHhfohvNCAtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgc+0N4AZGvR5np/UpW9ptRtDaWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3 MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2EzZjIzYjkyZDcvZTBhY2NjOTMtNjNkMS0z YzIxLWI2NGMtNDI3N2VjY2JiOTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2VlNzIwZGUtYzMyMi00YmI1LWI4 Y2QtYzdhM2YyM2I5MmQ3LzNlZTcyMGRlLWMzMjItNGJiNS1iOGNkLWM3YTNmMjNi OTJkNy5jcmwwHwYDVR0jBBgwFoAUCeWmFW+MnUDiNV/P2g31BT5Sb+gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2Ez ZjIzYjkyZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/erMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFghWXuyoj/wHbzGWkcniqMCLgWeiQJULAotArU6/p3qzFrg/dUb0IB H5gF0YCGtgWz1q0x5xAtKx0me8g4XbSQZZKUjW8MHlxRwT91FbWZ6pxuu/d8s/4v LI4W+LZRWLykvJKczy1sxC4R62tunt1UvoTd3LN0vTiAeMjRbrErKCXeS3SeFVyC 2phEulkesYWRKRf24OWcAiUQRt69GtTnDpH08LF2h+YBamvwV6DQtn5U89uuBOgw AEZxasm5+NZ8BwH5DihXm9AFxJUwfniv8od3YRcEJaeVk5pQS6zQdRAkpBGSzBwn c2PTSnDrEjDH3lqC2SADE6qL35xsRW0= -----END CERTIFICATE-----Generated at Sat Mar 28 12:14:35 2026 by rpki-client