$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/2dfe31c7-54ee-3017-8637-ce67fd53b424.roa File: 2dfe31c7-54ee-3017-8637-ce67fd53b424.roa (raw, json) Hash identifier: b1t4fDOpkBr3rLvEqWNvxEwtSV7JaRMBLJT5kk2Ydng= Subject key identifier: 9B:52:CD:AC:95:D8:7A:F8:55:22:35:7E:19:10:0B:FD:99:6F:0D:05 Certificate issuer: /CN=70379220-49c0-45f2-94d3-098a72b1db54 Certificate serial: 010D0C9F4328584D20AF7DA1FCE6FD216109BFC0 Authority key identifier: DE:AE:5B:59:16:A5:88:64:34:27:20:3B:E1:A0:9C:5E:69:FB:57:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/2dfe31c7-54ee-3017-8637-ce67fd53b424.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 400656 IP address blocks: 23.135.152.0/23 maxlen: 23 2606:cb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:7d:a1:fc:e6:fd:21:61:09:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70379220-49c0-45f2-94d3-098a72b1db54 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=e72d3c5d-12f1-4ff0-8a50-4d815f6b8a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e8:b6:c1:c8:22:c3:28:12:f8:82:58:13:e9: 55:73:88:ee:19:90:56:ea:0d:19:a2:d0:33:56:37: e1:f9:ba:39:75:12:4a:cb:2b:44:11:e8:06:00:24: a6:bb:8b:2b:13:58:05:e1:84:b0:20:d0:4d:7c:ff: 76:59:d9:18:35:e4:62:18:d8:64:bc:ae:22:16:6d: fc:9b:22:dd:84:d1:86:51:db:e7:69:47:8b:9d:c0: 80:e3:7b:49:7e:cb:c4:ca:1e:3a:c0:6a:8c:36:66: 7e:8e:af:6b:1e:cc:60:1c:ce:08:af:6d:6c:91:f1: 2d:0f:a7:89:2f:65:c6:77:f3:00:3c:ce:f3:39:7b: 02:ad:b8:2f:77:d7:f9:0c:6d:68:35:c1:68:c0:42: 11:20:12:8f:18:43:6e:d5:2c:9d:c1:30:6f:9d:4c: 42:34:12:09:73:92:f0:15:4e:e0:85:31:1b:07:b7: 12:64:bb:e2:1b:22:d8:42:34:89:52:b6:5c:7f:ee: b1:c0:d8:22:84:f4:c9:39:b4:8b:7c:d0:d5:c8:6f: 95:46:65:26:83:43:a2:13:78:cf:91:9a:f5:f2:bb: f9:31:aa:d8:70:aa:a8:f5:32:dd:1b:69:69:cd:f9: c7:8b:9b:a2:a4:30:f1:94:8a:8a:40:b9:09:ed:db: 21:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:52:CD:AC:95:D8:7A:F8:55:22:35:7E:19:10:0B:FD:99:6F:0D:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/2dfe31c7-54ee-3017-8637-ce67fd53b424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.crl X509v3 Authority Key Identifier: keyid:DE:AE:5B:59:16:A5:88:64:34:27:20:3B:E1:A0:9C:5E:69:FB:57:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer sbgp-ipAddrBlock: critical IPv4: 23.135.152.0/23 IPv6: 2606:cb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:c7:96:0d:21:1e:dc:36:f0:02:86:30:ed:c5:d0:0e:4f:d6: ef:ec:f0:a0:1d:37:e3:4c:d9:0a:9e:49:fa:49:05:f4:70:8d: ef:97:0e:0b:14:97:b3:07:7c:67:01:d4:97:66:9e:7a:fe:af: 12:e1:7e:08:f0:e9:1b:64:78:99:43:b8:55:f3:10:0c:c9:ec: 0a:de:56:33:d5:d9:e6:a6:cf:de:ba:ef:03:e0:87:ce:d2:83: 41:db:f6:62:51:24:c0:bd:b0:38:4a:00:e3:f7:3f:b6:b0:ff: 56:b4:de:da:2d:ed:a9:ae:01:64:b9:f3:71:76:dd:8b:d5:c2: c2:ff:8f:0b:1d:62:9e:7a:71:64:01:f6:b1:ff:61:4b:56:6e: aa:7e:f3:84:cb:12:87:8e:96:5e:89:5b:56:57:22:cd:68:cb: 5e:b2:73:f9:0e:51:40:df:df:03:d7:f0:eb:d2:b6:73:61:16: 12:5a:72:67:fc:03:49:3c:8e:7f:1d:81:b0:62:cb:98:ab:47: 3b:91:ba:57:1e:55:cd:ce:4c:5c:e3:45:b0:19:0f:3b:fe:fa: f8:57:2d:5b:ef:d1:f2:ca:d5:db:ea:80:83:d6:07:b3:57:4e: e7:9e:f4:cb:0e:d3:58:e0:f3:20:04:27:a6:c4:64:b9:2c:59: dc:33:a2:71 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE0gr32h/Ob9IWEJv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAzNzkyMjAtNDljMC00NWYyLTk0ZDMtMDk4YTcyYjFk YjU0MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTcyZDNjNWQtMTJmMS00ZmYwLThhNTAtNGQ4MTVmNmI4YTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApui2wcgiwygS+IJYE+lVc4juGZBW6g0ZotAz Vjfh+bo5dRJKyytEEegGACSmu4srE1gF4YSwINBNfP92WdkYNeRiGNhkvK4iFm38 myLdhNGGUdvnaUeLncCA43tJfsvEyh46wGqMNmZ+jq9rHsxgHM4Ir21skfEtD6eJ L2XGd/MAPM7zOXsCrbgvd9f5DG1oNcFowEIRIBKPGENu1SydwTBvnUxCNBIJc5Lw FU7ghTEbB7cSZLviGyLYQjSJUrZcf+6xwNgihPTJObSLfNDVyG+VRmUmg0OiE3jP kZr18rv5MarYcKqo9TLdG2lpzfnHi5uipDDxlIqKQLkJ7dshYQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFJtSzayV2Hr4VSI1fhkQC/2Zbw0FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDM3 OTIyMC00OWMwLTQ1ZjItOTRkMy0wOThhNzJiMWRiNTQvMmRmZTMxYzctNTRlZS0z MDE3LTg2MzctY2U2N2ZkNTNiNDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzAzNzkyMjAtNDljMC00NWYyLTk0 ZDMtMDk4YTcyYjFkYjU0LzcwMzc5MjIwLTQ5YzAtNDVmMi05NGQzLTA5OGE3MmIx ZGI1NC5jcmwwHwYDVR0jBBgwFoAU3q5bWRaliGQ0JyA74aCcXmn7V70wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDM3OTIyMC00OWMwLTQ1ZjItOTRkMy0wOThh NzJiMWRiNTQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBF4eYMA0E AgACMAcDBQAmBstAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAFzHlg0hHtw28AKGMO3F0A5P1u/s8KAdN+NM 2QqeSfpJBfRwje+XDgsUl7MHfGcB1Jdmnnr+rxLhfgjw6RtkeJlDuFXzEAzJ7Are VjPV2eamz9667wPgh87Sg0Hb9mJRJMC9sDhKAOP3P7aw/1a03tot7amuAWS583F2 3YvVwsL/jwsdYp56cWQB9rH/YUtWbqp+84TLEoeOll6JW1ZXIs1oy16yc/kOUUDf 3wPX8OvStnNhFhJacmf8A0k8jn8dgbBiy5irRzuRulceVc3OTFzjRbAZDzv++vhX LVvv0fLK1dvqgIPWB7NXTuee9MsO01jg8yAEJ6bEZLksWdwzonE= -----END CERTIFICATE-----Generated at Thu Mar 26 16:32:34 2026 by rpki-client