$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/7775276c-856c-33de-af30-3ede7fad10f3.roa File: 7775276c-856c-33de-af30-3ede7fad10f3.roa (raw, json) Hash identifier: UkgmuhO76Dt5t4K5t3REsJqMZrLOSk0DLhCcRu9uBrI= Subject key identifier: 43:7D:19:6A:F0:0B:1E:99:EC:A4:78:92:FB:D7:6D:DF:7D:05:67:50 Certificate issuer: /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Certificate serial: 010D0C9F4328584D386A31306EE599879D5B3730 Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/7775276c-856c-33de-af30-3ede7fad10f3.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 0 IP address blocks: 23.172.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:31:30:6e:e5:99:87:9d:5b:37:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=6f0be03c-b612-4209-99db-38d3566410f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:72:f1:56:83:4f:22:17:c0:1e:a4:8e:26:44: c8:10:4b:ad:75:e1:de:e3:11:7a:0a:97:f9:03:a2: a6:00:2e:b7:22:12:fb:df:71:b0:f2:a1:b0:20:00: 07:50:dd:e8:e5:fa:3c:64:fd:da:96:53:3f:13:64: cf:d6:6d:42:dd:1f:39:f6:86:db:26:01:24:c8:6a: 9f:17:6d:92:7e:4a:ff:a1:2e:c0:e3:e2:98:e3:16: e1:6c:04:54:7a:4f:19:0d:0c:a6:ca:85:7f:52:3e: 1e:b5:36:5d:b2:d6:e0:7c:eb:d4:dc:fe:33:14:32: 0e:01:bf:6a:1d:ce:d3:7b:6c:34:aa:3d:8f:2d:ca: 88:59:d3:7c:40:7f:32:ee:f0:1a:3b:27:3a:1f:30: 1e:09:85:73:d2:31:c8:b1:c3:4d:b4:37:14:8a:bd: da:b7:ae:47:74:af:c4:4a:90:9b:3b:cf:4f:4e:34: b4:b2:11:e3:36:55:54:2e:46:a1:63:af:e9:85:39: 4b:3f:a1:31:6f:c3:ec:1d:08:7f:96:72:5f:39:f2: 14:fd:05:23:62:58:e0:f4:42:5d:01:a2:8c:35:3b: 0f:2c:89:88:3c:a0:a3:11:c7:e2:ca:12:cf:9e:bd: e4:91:dd:6e:9e:da:02:69:63:c9:a0:37:9e:b3:0b: 9e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7D:19:6A:F0:0B:1E:99:EC:A4:78:92:FB:D7:6D:DF:7D:05:67:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/7775276c-856c-33de-af30-3ede7fad10f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl X509v3 Authority Key Identifier: keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer sbgp-ipAddrBlock: critical IPv4: 23.172.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b2:c4:80:0f:f1:c9:98:44:41:62:bf:66:35:08:67:0c:ad: ba:aa:cc:74:93:88:47:e2:d5:72:18:81:7f:97:b9:cc:75:ad: 4c:7e:47:89:ef:ad:78:b7:5d:9c:47:67:57:90:53:88:54:3d: 8f:f1:6a:2c:53:7a:66:7b:3d:5f:e8:b6:ac:86:e4:8d:64:76: 4e:76:af:38:6d:3b:e2:a5:3c:33:75:81:3a:c0:f4:6c:75:33: 7e:c1:59:a6:8e:b9:cf:3e:29:98:7b:bd:a5:31:1e:7f:3c:23: c4:7a:29:d8:1b:6d:70:f1:d1:6c:05:09:0e:e1:77:b8:b6:24: 70:4d:d7:9e:0c:24:5f:c9:d9:d8:cd:7b:19:c9:1a:06:be:7b: 1b:53:2e:a5:37:4c:3d:fe:b8:a5:80:47:dd:ab:3d:6e:da:1b: fd:74:74:28:72:5a:cc:d6:ed:52:75:1b:17:07:4f:84:61:9a: 6f:97:7a:2e:e5:e5:2d:9c:c4:1e:76:6b:a4:7a:5e:5d:8c:9c: 4d:f1:08:99:86:5f:5f:3e:51:76:8e:41:88:6d:14:d4:d7:9d: bb:4f:e1:d5:75:54:a7:cd:be:16:1f:24:e0:1b:30:b1:ab:04: 30:61:77:f5:f7:3f:0d:fb:7a:1e:af:5f:da:da:3f:d4:8f:4b: 6c:e9:76:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04ajEwbuWZh51bNzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzYmI3ZTQtYzk3ZS00M2FiLWE2ZGQtY2JmMGU2NDM0 YzViMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NmYwYmUwM2MtYjYxMi00MjA5LTk5ZGItMzhkMzU2NjQxMGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+nLxVoNPIhfAHqSOJkTIEEutdeHe4xF6Cpf5 A6KmAC63IhL733Gw8qGwIAAHUN3o5fo8ZP3allM/E2TP1m1C3R859obbJgEkyGqf F22Sfkr/oS7A4+KY4xbhbARUek8ZDQymyoV/Uj4etTZdstbgfOvU3P4zFDIOAb9q Hc7Te2w0qj2PLcqIWdN8QH8y7vAaOyc6HzAeCYVz0jHIscNNtDcUir3at65HdK/E SpCbO89PTjS0shHjNlVULkahY6/phTlLP6Exb8PsHQh/lnJfOfIU/QUjYljg9EJd AaKMNTsPLImIPKCjEcfiyhLPnr3kkd1untoCaWPJoDeeswuenQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEN9GWrwCx6Z7KR4kvvXbd99BWdQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YzNi YjdlNC1jOTdlLTQzYWItYTZkZC1jYmYwZTY0MzRjNWIvNzc3NTI3NmMtODU2Yy0z M2RlLWFmMzAtM2VkZTdmYWQxMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGMzYmI3ZTQtYzk3ZS00M2FiLWE2 ZGQtY2JmMGU2NDM0YzViLzRjM2JiN2U0LWM5N2UtNDNhYi1hNmRkLWNiZjBlNjQz NGM1Yi5jcmwwHwYDVR0jBBgwFoAUjXaDMJHnSwSEQ/fEjyRQUNGYlvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YzNiYjdlNC1jOTdlLTQzYWItYTZkZC1jYmYw ZTY0MzRjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6yxIAP8cmYREFiv2Y1CGcMrbqqzHSTiEfi1XIYgX+Xucx1rUx+R4nv rXi3XZxHZ1eQU4hUPY/xaixTemZ7PV/otqyG5I1kdk52rzhtO+KlPDN1gTrA9Gx1 M37BWaaOuc8+KZh7vaUxHn88I8R6KdgbbXDx0WwFCQ7hd7i2JHBN154MJF/J2djN exnJGga+extTLqU3TD3+uKWAR92rPW7aG/10dChyWszW7VJ1GxcHT4Rhmm+Xei7l 5S2cxB52a6R6Xl2MnE3xCJmGX18+UXaOQYhtFNTXnbtP4dV1VKfNvhYfJOAbMLGr BDBhd/X3Pw37eh6vX9raP9SPS2zpdjg= -----END CERTIFICATE-----Generated at Thu Mar 26 13:53:56 2026 by rpki-client