$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/cd07b1d3-ee58-3299-8e5e-b690bd336dbc.roa File: cd07b1d3-ee58-3299-8e5e-b690bd336dbc.roa (raw, json) Hash identifier: yc2PMlvYxFGjVE2tUodA6LT45yVmZaAyf/qtN0nn+QU= Subject key identifier: 8C:F1:62:FF:8D:A1:18:90:1A:F9:03:09:36:28:A8:CC:97:87:27:69 Certificate issuer: /CN=fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73 Certificate serial: 010D0C9F4328584D4A9F4EB8DD8E2A85A84FD200 Authority key identifier: CE:20:58:04:19:B2:4B:B9:07:FB:67:00:E4:C5:81:94:9E:35:73:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/cd07b1d3-ee58-3299-8e5e-b690bd336dbc.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 400200 IP address blocks: 23.128.184.0/24 maxlen: 24 128.254.128.0/22 maxlen: 24 2602:80c:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:9f:4e:b8:dd:8e:2a:85:a8:4f:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=5f79f43d-5d7a-499c-b49e-86cfc9c741cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bf:15:e3:57:86:a8:e8:19:77:ea:ca:6b:42: 20:a9:34:01:8e:02:5b:1b:6a:5a:c6:75:ab:70:86: 5d:5d:4f:1f:59:d7:95:7f:b9:bc:ce:34:5b:26:72: 56:68:d0:65:57:5f:3a:6c:07:11:bd:a9:a8:37:c6: 86:cd:f8:24:fb:6d:92:1d:a5:be:59:19:1b:b7:ff: fd:1a:c0:fc:93:d5:30:8a:58:83:11:83:1d:6a:f7: 32:d1:5b:41:c8:d9:56:f9:0d:06:f5:19:26:da:71: 5d:cf:ac:32:0c:74:f1:fc:69:ca:c6:be:cf:cf:0c: 3d:a1:c2:47:d1:68:44:5e:7e:fa:af:51:99:b7:e6: 27:1e:88:b6:39:1d:13:5a:01:15:c5:d7:77:5b:ce: 1c:38:7d:da:c9:92:26:eb:7b:df:68:3c:2b:e7:d0: ec:2f:3e:15:92:dd:2b:c5:a3:42:c4:36:d0:e1:9e: a8:0c:75:03:61:d6:b4:1d:cb:de:f7:60:50:d6:46: f3:49:53:6b:6c:59:49:24:3b:9d:d3:9b:db:a9:50: 88:e6:d1:83:d1:11:ee:ac:a0:5b:7e:72:5f:75:d2: 97:f8:43:0d:c6:93:58:0b:94:ae:52:3e:b4:8b:34: 1e:31:60:79:db:fc:d3:f7:59:a2:ec:92:ed:ec:0b: 0a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F1:62:FF:8D:A1:18:90:1A:F9:03:09:36:28:A8:CC:97:87:27:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/cd07b1d3-ee58-3299-8e5e-b690bd336dbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.crl X509v3 Authority Key Identifier: keyid:CE:20:58:04:19:B2:4B:B9:07:FB:67:00:E4:C5:81:94:9E:35:73:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.cer sbgp-ipAddrBlock: critical IPv4: 23.128.184.0/24 128.254.128.0/22 IPv6: 2602:80c:e000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:42:24:e7:fb:4e:3d:45:60:5b:a6:d0:d3:ce:d1:92:59:df: 2c:1e:5a:dc:39:93:69:4a:a6:ff:b7:ee:8f:13:ff:90:41:19: b9:75:70:d2:a1:c2:a8:f4:61:30:e1:47:f0:a1:5d:9f:53:0d: ab:0f:e7:da:98:f1:4f:5d:e8:76:5f:10:6d:cf:76:76:82:17: 1b:1a:b2:c7:0f:d9:18:98:ad:71:67:d9:fc:7c:49:04:c2:09: 28:46:01:2d:e3:59:d2:ad:b1:72:7f:8a:89:aa:cd:00:88:03: 47:84:31:c0:52:c5:2d:4f:4a:46:f2:c8:3d:36:8d:bc:21:ee: 25:da:95:8f:82:89:b4:d5:3f:f6:6e:f1:75:0e:11:6b:fd:be: 70:e2:27:72:d3:9f:09:f3:92:94:b9:60:d5:6e:02:05:91:b7: 80:39:1a:5f:69:fa:85:04:45:ef:a2:f9:22:a6:59:3e:90:b3: 47:3b:9a:a3:f3:48:01:34:d3:8a:8d:79:21:16:c5:fe:ba:b3: ae:37:f0:76:1b:9c:c3:e2:3f:2c:fb:80:b0:c4:59:0b:e7:57: d8:0a:00:fb:bd:42:9f:63:3e:66:17:9e:77:db:6b:71:40:2b: e8:ae:a5:f6:75:d0:16:8f:6e:7a:1a:49:f1:2e:9f:69:57:36: 11:5c:f3:81 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE1Kn0643Y4qhahP0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmNkOTk2NGMtOGQwYy00YWJmLTljMDAtNmUwYzNkZDk2 YzczMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NWY3OWY0M2QtNWQ3YS00OTljLWI0OWUtODZjZmM5Yzc0MWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL8V41eGqOgZd+rKa0IgqTQBjgJbG2paxnWr cIZdXU8fWdeVf7m8zjRbJnJWaNBlV186bAcRvamoN8aGzfgk+22SHaW+WRkbt//9 GsD8k9UwiliDEYMdavcy0VtByNlW+Q0G9Rkm2nFdz6wyDHTx/GnKxr7Pzww9ocJH 0WhEXn76r1GZt+YnHoi2OR0TWgEVxdd3W84cOH3ayZIm63vfaDwr59DsLz4Vkt0r xaNCxDbQ4Z6oDHUDYda0Hcve92BQ1kbzSVNrbFlJJDud05vbqVCI5tGD0RHurKBb fnJfddKX+EMNxpNYC5SuUj60izQeMWB52/zT91mi7JLt7AsKoQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFIzxYv+NoRiQGvkDCTYoqMyXhydpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mY2Q5 OTY0Yy04ZDBjLTRhYmYtOWMwMC02ZTBjM2RkOTZjNzMvY2QwN2IxZDMtZWU1OC0z Mjk5LThlNWUtYjY5MGJkMzM2ZGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmNkOTk2NGMtOGQwYy00YWJmLTlj MDAtNmUwYzNkZDk2YzczL2ZjZDk5NjRjLThkMGMtNGFiZi05YzAwLTZlMGMzZGQ5 NmM3My5jcmwwHwYDVR0jBBgwFoAUziBYBBmyS7kH+2cA5MWBlJ41c7YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mY2Q5OTY0Yy04ZDBjLTRhYmYtOWMwMC02ZTBj M2RkOTZjNzMuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4C4AwQC gP6AMA4EAgACMAgDBgAmAggM4DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCcQiTn+049RWBbptDTztGSWd8s HlrcOZNpSqb/t+6PE/+QQRm5dXDSocKo9GEw4UfwoV2fUw2rD+famPFPXeh2XxBt z3Z2ghcbGrLHD9kYmK1xZ9n8fEkEwgkoRgEt41nSrbFyf4qJqs0AiANHhDHAUsUt T0pG8sg9No28Ie4l2pWPgom01T/2bvF1DhFr/b5w4idy058J85KUuWDVbgIFkbeA ORpfafqFBEXvovkiplk+kLNHO5qj80gBNNOKjXkhFsX+urOuN/B2G5zD4j8s+4Cw xFkL51fYCgD7vUKfYz5mF55322txQCvorqX2ddAWj256GknxLp9pVzYRXPOB -----END CERTIFICATE-----Generated at Thu Mar 26 08:33:32 2026 by rpki-client