$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa File: f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa (raw, json) Hash identifier: S5ZTg07yCIqWye8NwqYDuKhwKvmcVI6OizVpObIUhTg= Subject key identifier: 50:08:B2:C4:83:4C:57:E3:EC:D1:14:63:6B:46:E5:D9:A1:E1:F5:CC Certificate issuer: /CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814 Certificate serial: 010D0C9F4328584D40CA51786009A6177D2898B0 Authority key identifier: AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 35008 IP address blocks: 23.153.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:51:78:60:09:a6:17:7d:28:98:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=c6f276db-07e7-4a86-800f-3e128c8f46ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d2:cb:ee:ee:55:f2:7a:20:1b:f2:d6:15:e3: 2d:be:4f:c9:39:1d:09:83:9d:24:ee:fa:5f:8b:ae: 7b:02:57:91:bf:55:40:75:0a:93:49:cd:e9:a8:76: 60:e0:60:da:ae:d4:f0:71:35:a9:25:a2:69:6d:27: 2e:99:0b:90:e3:3e:b3:80:33:1a:08:12:2d:6f:e4: 82:61:75:5c:7c:7d:41:34:b8:f5:c1:67:33:5e:79: cf:f6:1b:56:d3:36:d7:af:e0:cb:7f:e7:68:89:0c: 12:ec:e3:ed:02:13:5a:fe:68:de:91:f3:9c:38:62: 6f:ab:c4:36:34:e8:6f:ff:04:5f:4e:a8:31:49:ca: 8e:98:08:8c:a5:cd:bb:2a:e9:87:8c:25:ca:41:57: 3c:52:83:07:dc:5c:4c:ce:61:fd:90:95:d8:a5:47: 0f:15:74:c5:6b:86:81:f7:54:56:3e:5b:f4:6e:7b: 1e:72:28:13:c7:60:79:86:3c:a8:b8:f1:1d:6e:bf: cf:11:b3:78:eb:81:be:1a:5c:6c:fe:42:a4:e0:a7: 1b:09:12:b8:6e:1f:f4:c2:3d:19:2b:2b:45:f5:36: 96:8f:8c:cc:01:38:b0:16:e0:e3:08:e0:dc:c6:56: d3:de:e4:36:5d:3e:14:ff:bd:0a:53:72:6b:b4:c5: 45:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:08:B2:C4:83:4C:57:E3:EC:D1:14:63:6B:46:E5:D9:A1:E1:F5:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl X509v3 Authority Key Identifier: keyid:AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer sbgp-ipAddrBlock: critical IPv4: 23.153.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:51:34:95:11:ef:03:24:52:e4:35:95:0c:a3:17:bc:26:04: da:02:d8:11:2b:4c:c1:06:4a:65:ae:55:b5:b9:03:d0:21:ce: 5f:cb:1a:4e:65:ea:80:e1:12:3c:94:e0:2c:57:77:ad:50:59: 37:3b:26:7b:68:70:35:bf:01:e1:21:4c:9f:85:70:8b:26:b9: 5a:ab:db:c3:07:09:bd:05:25:5b:be:9b:14:da:be:fa:4b:f0: 88:a3:96:0e:19:75:f3:fd:d9:e8:26:e1:2a:e8:78:de:61:27: f8:9f:a9:d7:1c:b6:52:ec:c4:90:3c:0f:a4:ce:50:2b:cf:09: 0b:71:70:ac:49:f0:63:8a:16:51:67:57:03:b9:ad:bb:72:75: 73:a8:6d:f6:3e:b7:e2:16:88:4a:4a:c5:f4:c6:55:a6:fa:64: 35:a6:de:de:f7:bb:d3:52:e3:27:07:51:4c:58:b1:8d:6b:45: 31:fe:f0:02:0e:b9:51:0a:07:a0:28:41:10:07:ec:77:6f:3c: 5d:27:92:d1:54:a1:d4:23:19:2a:04:65:e6:6f:84:32:2f:c1: 84:b7:b3:86:1a:47:88:1f:b0:59:63:65:23:4b:82:5c:39:fe: e2:2f:20:ae:68:6f:43:12:0f:13:15:e3:8d:b6:8a:07:da:0a: 13:c1:e4:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AylF4YAmmF30omLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YxYjVhYTktZmM1YS00ZmI3LTg5MmQtMGZhYmY5YjYz ODE0MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk YzZmMjc2ZGItMDdlNy00YTg2LTgwMGYtM2UxMjhjOGY0NmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9LL7u5V8nogG/LWFeMtvk/JOR0Jg50k7vpf i657AleRv1VAdQqTSc3pqHZg4GDartTwcTWpJaJpbScumQuQ4z6zgDMaCBItb+SC YXVcfH1BNLj1wWczXnnP9htW0zbXr+DLf+doiQwS7OPtAhNa/mjekfOcOGJvq8Q2 NOhv/wRfTqgxScqOmAiMpc27KumHjCXKQVc8UoMH3FxMzmH9kJXYpUcPFXTFa4aB 91RWPlv0bnsecigTx2B5hjyouPEdbr/PEbN464G+Glxs/kKk4KcbCRK4bh/0wj0Z KytF9TaWj4zMATiwFuDjCODcxlbT3uQ2XT4U/70KU3JrtMVFjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAIssSDTFfj7NEUY2tG5dmh4fXMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZjFi NWFhOS1mYzVhLTRmYjctODkyZC0wZmFiZjliNjM4MTQvZjFjNDBmOGYtNGM5Yy0z YWNiLTkzY2QtZjZjOWIyZTlkNDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2YxYjVhYTktZmM1YS00ZmI3LTg5 MmQtMGZhYmY5YjYzODE0LzNmMWI1YWE5LWZjNWEtNGZiNy04OTJkLTBmYWJmOWI2 MzgxNC5jcmwwHwYDVR0jBBgwFoAUrloX1F4ZJ5TObM909xhdmFWLzZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZjFiNWFhOS1mYzVhLTRmYjctODkyZC0wZmFi ZjliNjM4MTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5k4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpRNJUR7wMkUuQ1lQyjF7wmBNoC2BErTMEGSmWuVbW5A9Ahzl/LGk5l 6oDhEjyU4CxXd61QWTc7JntocDW/AeEhTJ+FcIsmuVqr28MHCb0FJVu+mxTavvpL 8Iijlg4ZdfP92egm4SroeN5hJ/ifqdcctlLsxJA8D6TOUCvPCQtxcKxJ8GOKFlFn VwO5rbtydXOobfY+t+IWiEpKxfTGVab6ZDWm3t73u9NS4ycHUUxYsY1rRTH+8AIO uVEKB6AoQRAH7HdvPF0nktFUodQjGSoEZeZvhDIvwYS3s4YaR4gfsFljZSNLglw5 /uIvIK5ob0MSDxMV4422igfaChPB5Cc= -----END CERTIFICATE-----Generated at Fri Mar 27 05:08:06 2026 by rpki-client