$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30a5a212-a3a8-4b26-aba4-098d85b565b5/493b5f8e-26b8-352d-9d17-8590cea302af.roa File: 493b5f8e-26b8-352d-9d17-8590cea302af.roa (raw, json) Hash identifier: KK7nt2DFtoTAoQRkT9G4iJAE7n9pK9U00E17JP1qzRQ= Subject key identifier: 74:48:A8:CB:A0:AB:70:8B:E3:F4:90:35:12:83:FF:06:5D:FF:8A:90 Certificate issuer: /CN=30a5a212-a3a8-4b26-aba4-098d85b565b5 Certificate serial: 010D0C9F4328584D492A3EF12CB630E77DD2F100 Authority key identifier: 02:86:9B:B1:68:CE:32:EA:38:71:6E:7D:3A:D6:CA:F5:B5:23:8B:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30a5a212-a3a8-4b26-aba4-098d85b565b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30a5a212-a3a8-4b26-aba4-098d85b565b5/493b5f8e-26b8-352d-9d17-8590cea302af.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 214483 IP address blocks: 23.150.148.0/24 maxlen: 24 2602:f4b0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30a5a212-a3a8-4b26-aba4-098d85b565b5/30a5a212-a3a8-4b26-aba4-098d85b565b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30a5a212-a3a8-4b26-aba4-098d85b565b5/30a5a212-a3a8-4b26-aba4-098d85b565b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30a5a212-a3a8-4b26-aba4-098d85b565b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:3e:f1:2c:b6:30:e7:7d:d2:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a5a212-a3a8-4b26-aba4-098d85b565b5 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=eadf7cf3-3cb2-4343-929a-c2af7e0836a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:13:ff:8a:8e:a1:49:82:9b:79:ad:cd:05: 90:b6:0c:f0:20:e6:be:6a:b1:4e:c3:27:33:d0:64: 39:32:da:a7:4a:75:4d:23:90:b5:ab:11:ad:7a:60: 2a:39:6b:3a:5c:93:24:14:8f:5a:0b:53:b1:bb:66: ca:c5:79:dd:e1:cd:a2:a7:97:d1:55:1e:83:f5:96: 59:0c:48:97:f7:47:41:38:5e:3c:e2:5f:6c:65:fb: c1:ed:72:2f:de:78:3e:00:fc:ad:f6:2f:40:91:c7: 95:58:83:d2:72:2a:f5:57:5b:d0:13:f0:7b:10:f0: fc:47:97:cc:83:6b:1f:77:c4:b3:26:1f:54:2e:33: a0:a3:d9:13:2c:bb:66:5a:ce:81:24:eb:19:f3:58: fc:d0:a7:cb:ed:4e:48:ad:b5:d6:46:84:12:3a:11: 1b:b7:07:53:c6:34:45:f5:7e:eb:28:9f:39:38:d8: 48:3b:88:f8:38:78:bb:eb:92:22:5c:b4:d0:cf:65: 79:fc:2d:c6:24:08:5a:1f:3c:d2:b8:86:d1:e5:bc: 77:a7:7f:e4:3e:df:56:d2:99:7c:64:fd:9f:de:e9: a8:00:bc:8f:5e:97:78:31:7c:44:33:ef:63:28:ca: 0b:4c:f9:2e:28:f2:f8:77:35:6d:f7:e4:53:a2:98: 1c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:48:A8:CB:A0:AB:70:8B:E3:F4:90:35:12:83:FF:06:5D:FF:8A:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30a5a212-a3a8-4b26-aba4-098d85b565b5/493b5f8e-26b8-352d-9d17-8590cea302af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30a5a212-a3a8-4b26-aba4-098d85b565b5/30a5a212-a3a8-4b26-aba4-098d85b565b5.crl X509v3 Authority Key Identifier: keyid:02:86:9B:B1:68:CE:32:EA:38:71:6E:7D:3A:D6:CA:F5:B5:23:8B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30a5a212-a3a8-4b26-aba4-098d85b565b5.cer sbgp-ipAddrBlock: critical IPv4: 23.150.148.0/24 IPv6: 2602:f4b0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:41:db:ba:ef:41:c3:3a:a4:c1:6e:f6:8f:8e:8f:a0:97:ba: b5:b4:44:66:bb:4c:74:d7:b1:01:80:17:e8:01:50:2d:2f:ee: 35:99:ec:6e:fd:76:43:97:d8:c5:fb:4d:c1:81:c3:47:05:c1: 58:e2:c9:e7:b7:10:ca:00:ee:d8:3c:e3:2c:1c:4e:f6:80:c5: 64:b4:49:45:88:86:21:81:2b:15:01:39:fb:42:3e:85:f8:47: e1:13:a0:8c:ae:bd:1c:e8:8e:07:a0:f6:62:16:0f:20:9c:fe: b4:0c:47:12:5b:51:fe:bf:c3:1f:da:16:b1:58:61:af:3d:de: 70:e3:1e:52:4b:7b:50:39:75:d9:a1:82:37:77:b4:fb:ed:a2: 8c:81:4a:6a:ba:69:07:4f:63:a6:14:5f:8d:f3:ee:21:5a:83: e5:d8:b8:a5:0c:ad:b1:b8:ef:29:96:ba:65:69:6b:12:38:a2: 9c:58:a4:b3:16:40:be:0f:dc:17:46:8e:95:5f:ab:8c:80:38: 12:25:4b:24:09:6d:bb:0d:3e:62:53:53:84:a1:5d:4e:f9:f5: 4a:5e:9d:2d:0e:1a:05:6e:f3:a2:1b:56:7d:f9:1f:7c:ce:ac: 08:b2:53:ea:a6:90:e3:91:c0:ea:87:19:63:47:ac:c5:22:32: ea:4c:b0:19 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE1JKj7xLLYw533S8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzBhNWEyMTItYTNhOC00YjI2LWFiYTQtMDk4ZDg1YjU2 NWI1MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZWFkZjdjZjMtM2NiMi00MzQzLTkyOWEtYzJhZjdlMDgzNmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTwT/4qOoUmCm3mtzQWQtgzwIOa+arFOwycz 0GQ5MtqnSnVNI5C1qxGtemAqOWs6XJMkFI9aC1Oxu2bKxXnd4c2ip5fRVR6D9ZZZ DEiX90dBOF484l9sZfvB7XIv3ng+APyt9i9AkceVWIPScir1V1vQE/B7EPD8R5fM g2sfd8SzJh9ULjOgo9kTLLtmWs6BJOsZ81j80KfL7U5IrbXWRoQSOhEbtwdTxjRF 9X7rKJ85ONhIO4j4OHi765IiXLTQz2V5/C3GJAhaHzzSuIbR5bx3p3/kPt9W0pl8 ZP2f3umoALyPXpd4MXxEM+9jKMoLTPkuKPL4dzVt9+RTopgcYQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHRIqMugq3CL4/SQNRKD/wZd/4qQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMGE1 YTIxMi1hM2E4LTRiMjYtYWJhNC0wOThkODViNTY1YjUvNDkzYjVmOGUtMjZiOC0z NTJkLTlkMTctODU5MGNlYTMwMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzBhNWEyMTItYTNhOC00YjI2LWFi YTQtMDk4ZDg1YjU2NWI1LzMwYTVhMjEyLWEzYTgtNGIyNi1hYmE0LTA5OGQ4NWI1 NjViNS5jcmwwHwYDVR0jBBgwFoAUAoabsWjOMuo4cW59OtbK9bUji3MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMGE1YTIxMi1hM2E4LTRiMjYtYWJhNC0wOThk ODViNTY1YjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5aUMA4E AgACMAgDBgAmAvSwADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJQdu670HDOqTBbvaPjo+gl7q1tERmu0x0 17EBgBfoAVAtL+41mexu/XZDl9jF+03BgcNHBcFY4snntxDKAO7YPOMsHE72gMVk tElFiIYhgSsVATn7Qj6F+EfhE6CMrr0c6I4HoPZiFg8gnP60DEcSW1H+v8Mf2hax WGGvPd5w4x5SS3tQOXXZoYI3d7T77aKMgUpqumkHT2OmFF+N8+4hWoPl2LilDK2x uO8plrplaWsSOKKcWKSzFkC+D9wXRo6VX6uMgDgSJUskCW27DT5iU1OEoV1O+fVK Xp0tDhoFbvOiG1Z9+R98zqwIslPqppDjkcDqhxljR6zFIjLqTLAZ -----END CERTIFICATE-----Generated at Thu Mar 26 12:59:56 2026 by rpki-client