$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/2269ef02-ea5a-3244-b8a9-793522bcb47c.roa File: 2269ef02-ea5a-3244-b8a9-793522bcb47c.roa (raw, json) Hash identifier: QJ6I7L9YZWb/xrYxT+4fypwaQwuq982V4bjUop/aJ14= Subject key identifier: 91:60:2B:4E:4B:26:2B:64:FB:73:7B:DA:05:B5:10:71:73:77:FE:A3 Certificate issuer: /CN=efc37d3d-05e3-4f5b-85f2-374292d5009e Certificate serial: 010D0C9F4328584D0A77BAE26645D7300950C900 Authority key identifier: 9F:77:B3:18:AD:C7:08:C0:68:C5:97:FD:9C:2B:2A:34:03:FB:2B:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/2269ef02-ea5a-3244-b8a9-793522bcb47c.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 401469 IP address blocks: 23.128.156.0/24 maxlen: 24 2602:f7ad::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/efc37d3d-05e3-4f5b-85f2-374292d5009e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/efc37d3d-05e3-4f5b-85f2-374292d5009e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:ba:e2:66:45:d7:30:09:50:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efc37d3d-05e3-4f5b-85f2-374292d5009e Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=35abff10-c496-433e-9846-97241c02b815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:0e:fb:82:5c:84:ee:fe:5f:94:59:7c:a7: 06:ac:b4:63:82:6a:92:47:9a:b1:6e:0e:48:3d:73: 4a:48:54:0d:dc:a9:ff:75:9b:ad:ba:a5:e1:1b:1c: 2d:e4:c6:0f:e4:cd:64:f4:06:e0:d2:0d:c6:e8:f9: 91:35:ca:d5:d0:b5:b5:ce:af:67:8e:2b:4b:85:d1: 6f:7d:a8:e1:4e:93:3c:39:da:89:5d:f7:26:28:31: e7:f5:dd:d3:ba:a7:51:b9:50:c9:51:4a:33:62:d7: a3:55:75:d0:e2:1f:a3:4a:59:41:c7:d5:82:00:7c: d2:73:8e:42:6d:a2:69:ef:57:74:49:45:48:9c:3f: 57:04:ce:86:65:28:ed:8f:91:ca:a4:6c:8c:93:95: a9:86:61:a8:35:0c:cc:25:3f:ea:bb:66:4e:4c:72: d3:b4:d5:43:1d:e2:fd:f6:e7:47:d4:d9:da:05:28: 4e:38:80:e4:1a:ab:31:5b:f9:6a:88:02:3d:3b:36: 92:54:22:37:53:b4:ba:03:49:4a:69:16:1c:75:1d: 17:8b:ac:72:b4:1a:47:12:d4:23:29:75:ce:1d:9b: ec:d6:d0:a4:04:bb:c2:b7:4f:2c:84:e1:ff:e4:4d: ae:f9:46:82:af:52:c7:f7:ff:3e:c8:50:03:80:47: be:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:60:2B:4E:4B:26:2B:64:FB:73:7B:DA:05:B5:10:71:73:77:FE:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/2269ef02-ea5a-3244-b8a9-793522bcb47c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/efc37d3d-05e3-4f5b-85f2-374292d5009e.crl X509v3 Authority Key Identifier: keyid:9F:77:B3:18:AD:C7:08:C0:68:C5:97:FD:9C:2B:2A:34:03:FB:2B:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e.cer sbgp-ipAddrBlock: critical IPv4: 23.128.156.0/24 IPv6: 2602:f7ad::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:79:62:4d:05:32:10:79:8d:7c:06:c8:3c:e8:e3:78:db:87: 57:66:15:6c:c2:e1:9a:fa:c8:83:9a:41:90:33:81:81:c3:b7: 8f:a0:c8:05:09:87:d2:79:0a:f6:39:fd:b7:72:47:aa:85:7f: fb:cf:f5:bc:31:1a:d7:6e:d9:fd:fc:b4:dc:52:f2:04:e9:4e: 99:9f:fa:a8:c5:46:83:6e:80:ae:3c:3b:91:fd:5d:58:cd:3b: e7:3d:87:2d:3a:ad:16:df:8d:6a:0f:c9:b3:e1:49:9a:57:2e: 31:29:89:fd:98:10:f8:21:c8:be:71:6a:19:c2:33:1a:f4:35: dc:07:ac:ae:55:2f:26:fb:70:f1:b0:3a:fb:b2:3f:b5:2a:2a: 11:55:64:c5:d5:c5:df:e8:d7:7e:0c:b4:ae:3b:3f:17:05:4a: 01:c1:e4:21:1c:d3:04:11:d8:91:03:92:a4:12:96:be:da:ef: 42:d7:20:10:09:6b:09:db:1c:a6:72:ff:42:04:24:4d:b5:9c: 23:0f:c9:30:69:a3:fe:98:4a:89:6c:4c:80:14:2a:da:30:5b: fb:f8:c7:0c:93:ff:46:c0:24:6f:88:a5:2e:e1:4d:65:a9:6c: 33:50:bc:62:b9:99:61:ce:31:c0:7c:f0:9e:ac:e4:ab:ac:cc: 80:e5:99:cb -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE0Kd7riZkXXMAlQyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZjMzdkM2QtMDVlMy00ZjViLTg1ZjItMzc0MjkyZDUw MDllMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk MzVhYmZmMTAtYzQ5Ni00MzNlLTk4NDYtOTcyNDFjMDJiODE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn4O+4JchO7+X5RZfKcGrLRjgmqSR5qxbg5I PXNKSFQN3Kn/dZutuqXhGxwt5MYP5M1k9Abg0g3G6PmRNcrV0LW1zq9njitLhdFv fajhTpM8OdqJXfcmKDHn9d3TuqdRuVDJUUozYtejVXXQ4h+jSllBx9WCAHzSc45C baJp71d0SUVInD9XBM6GZSjtj5HKpGyMk5WphmGoNQzMJT/qu2ZOTHLTtNVDHeL9 9udH1NnaBShOOIDkGqsxW/lqiAI9OzaSVCI3U7S6A0lKaRYcdR0Xi6xytBpHEtQj KXXOHZvs1tCkBLvCt08shOH/5E2u+UaCr1LH9/8+yFADgEe+iQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJFgK05LJitk+3N72gW1EHFzd/6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lZmMz N2QzZC0wNWUzLTRmNWItODVmMi0zNzQyOTJkNTAwOWUvMjI2OWVmMDItZWE1YS0z MjQ0LWI4YTktNzkzNTIyYmNiNDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWZjMzdkM2QtMDVlMy00ZjViLTg1 ZjItMzc0MjkyZDUwMDllL2VmYzM3ZDNkLTA1ZTMtNGY1Yi04NWYyLTM3NDI5MmQ1 MDA5ZS5jcmwwHwYDVR0jBBgwFoAUn3ezGK3HCMBoxZf9nCsqNAP7K8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lZmMzN2QzZC0wNWUzLTRmNWItODVmMi0zNzQy OTJkNTAwOWUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4CcMA4E AgACMAgDBgQmAvetADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFeWJNBTIQeY18Bsg86ON424dXZhVswuGa +siDmkGQM4GBw7ePoMgFCYfSeQr2Of23ckeqhX/7z/W8MRrXbtn9/LTcUvIE6U6Z n/qoxUaDboCuPDuR/V1YzTvnPYctOq0W341qD8mz4UmaVy4xKYn9mBD4Ici+cWoZ wjMa9DXcB6yuVS8m+3DxsDr7sj+1KioRVWTF1cXf6Nd+DLSuOz8XBUoBweQhHNME EdiRA5KkEpa+2u9C1yAQCWsJ2xymcv9CBCRNtZwjD8kwaaP+mEqJbEyAFCraMFv7 +McMk/9GwCRviKUu4U1lqWwzULxiuZlhzjHAfPCerOSrrMyA5ZnL -----END CERTIFICATE-----Generated at Thu Mar 26 13:55:27 2026 by rpki-client