$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/5b544329-5f81-3c9e-8a03-9130ec07b101.roa File: 5b544329-5f81-3c9e-8a03-9130ec07b101.roa (raw, json) Hash identifier: xA59G0ICGup8hUNNZkBbfJjtJT9A7G2xrH/SJaK3zG0= Subject key identifier: B7:8B:4F:60:23:CF:74:EC:5B:D1:B6:15:5F:1D:D9:83:A4:BE:09:4A Certificate issuer: /CN=6d2e159b-7f9d-4fde-83eb-ff2852b127f7 Certificate serial: 010D0C9F4328584D44FA69170CFCDD6C00BF3580 Authority key identifier: 4A:82:75:D7:A7:7C:40:CB:AA:EE:BD:86:14:01:53:AC:A1:C7:5D:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/5b544329-5f81-3c9e-8a03-9130ec07b101.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 401449 IP address blocks: 23.128.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:69:17:0c:fc:dd:6c:00:bf:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d2e159b-7f9d-4fde-83eb-ff2852b127f7 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=272496e8-41d3-4044-86ea-90cc03192ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9d:5a:f6:3a:2e:8f:71:c5:ec:6b:c0:12:0b: 49:a1:2c:eb:c4:b0:5e:e5:94:88:71:32:7d:a7:f4: 9d:a6:41:14:b5:6a:eb:ea:f4:bd:d5:d1:94:9a:b5: 39:09:79:28:94:9b:28:34:69:67:53:2a:d5:c3:15: 0c:07:96:f4:a5:40:8f:d0:07:cf:c2:4d:39:37:2d: 6c:97:ed:02:08:b0:38:5b:b0:2d:d9:3d:de:92:b2: ce:d6:d5:d6:21:3c:bb:19:b1:48:7a:a3:da:a6:45: 0f:27:bd:78:f2:1d:d4:a1:5a:3c:bb:46:e7:35:ea: ba:24:6c:96:df:4f:1d:7b:0e:d5:7d:12:0b:fb:bf: e8:04:73:9a:ae:f2:74:77:96:67:99:e6:97:7b:00: 9b:41:70:43:aa:16:bd:11:61:a3:e3:4d:29:f7:2d: fd:77:73:ea:5b:1c:40:22:55:65:77:1d:79:59:db: 63:b3:40:f4:c9:d9:9e:fd:66:a8:29:1d:9d:78:95: 9b:a4:08:2f:bd:57:75:e9:8b:bb:68:1e:0d:63:bd: bf:22:3e:be:63:d1:92:db:0b:df:19:33:ac:1e:bd: c2:20:b1:de:59:4e:fe:d7:ec:7a:e3:8a:45:d3:4f: 7d:0e:b3:e6:10:a6:e1:3a:a2:b5:d9:72:3f:05:5f: 43:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8B:4F:60:23:CF:74:EC:5B:D1:B6:15:5F:1D:D9:83:A4:BE:09:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/5b544329-5f81-3c9e-8a03-9130ec07b101.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.crl X509v3 Authority Key Identifier: keyid:4A:82:75:D7:A7:7C:40:CB:AA:EE:BD:86:14:01:53:AC:A1:C7:5D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer sbgp-ipAddrBlock: critical IPv4: 23.128.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:fc:38:20:a1:7d:e3:d9:89:7b:1d:39:4d:4d:ad:c2:0d:45: 3a:26:b0:ed:f5:13:d2:13:53:3a:96:fb:3c:d8:04:ca:4e:0e: c5:71:dc:79:ac:ff:e8:4a:0f:57:89:b4:2b:a7:9f:26:21:df: 0e:85:ec:84:cc:26:f1:b1:7f:2b:d2:fc:e9:79:5c:3a:f3:ea: 0a:cd:68:b8:69:ca:cd:54:cc:ed:86:bd:27:48:25:5f:a5:40: 4c:bb:44:d0:bc:c7:63:9f:10:f6:8c:19:3b:41:38:52:1b:eb: 5f:3b:8c:76:88:77:f3:d1:19:c6:f9:e8:63:58:c2:7f:7a:43: d9:19:1a:cc:88:6f:d9:fa:00:0f:25:90:e5:b8:65:75:c3:6e: 2d:ad:14:92:93:f5:47:5c:76:10:9a:2d:02:18:04:b3:58:4d: 1d:42:36:df:85:23:73:7b:7a:0a:bd:6f:8a:02:26:5f:f6:2d: 23:18:af:c0:02:cf:94:b8:4b:9a:17:6c:c6:c6:6e:c2:d9:21: b9:d3:b6:42:c0:31:af:e4:96:a0:ae:53:1e:4f:73:00:03:1e: 3f:10:3d:c1:9f:58:8f:75:27:0c:e7:c2:6e:8c:4a:6b:71:32: 38:1e:ef:75:2f:bc:ba:fc:7b:a8:44:6b:cf:f4:b8:6b:22:57: 22:ac:34:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mkXDPzdbAC/NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQyZTE1OWItN2Y5ZC00ZmRlLTgzZWItZmYyODUyYjEy N2Y3MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MjcyNDk2ZTgtNDFkMy00MDQ0LTg2ZWEtOTBjYzAzMTkyY2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ1a9jouj3HF7GvAEgtJoSzrxLBe5ZSIcTJ9 p/SdpkEUtWrr6vS91dGUmrU5CXkolJsoNGlnUyrVwxUMB5b0pUCP0AfPwk05Ny1s l+0CCLA4W7At2T3ekrLO1tXWITy7GbFIeqPapkUPJ7148h3UoVo8u0bnNeq6JGyW 308dew7VfRIL+7/oBHOarvJ0d5ZnmeaXewCbQXBDqha9EWGj400p9y39d3PqWxxA IlVldx15Wdtjs0D0ydme/WaoKR2deJWbpAgvvVd16Yu7aB4NY72/Ij6+Y9GS2wvf GTOsHr3CILHeWU7+1+x644pF0099DrPmEKbhOqK12XI/BV9DDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeLT2Ajz3TsW9G2FV8d2YOkvglKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDJl MTU5Yi03ZjlkLTRmZGUtODNlYi1mZjI4NTJiMTI3ZjcvNWI1NDQzMjktNWY4MS0z YzllLThhMDMtOTEzMGVjMDdiMTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNmQyZTE1OWItN2Y5ZC00ZmRlLTgz ZWItZmYyODUyYjEyN2Y3LzZkMmUxNTliLTdmOWQtNGZkZS04M2ViLWZmMjg1MmIx MjdmNy5jcmwwHwYDVR0jBBgwFoAUSoJ116d8QMuq7r2GFAFTrKHHXcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDJlMTU5Yi03ZjlkLTRmZGUtODNlYi1mZjI4 NTJiMTI3ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4BUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABL8OCChfePZiXsdOU1NrcINRTomsO31E9ITUzqW+zzYBMpODsVx3Hms /+hKD1eJtCunnyYh3w6F7ITMJvGxfyvS/Ol5XDrz6grNaLhpys1UzO2GvSdIJV+l QEy7RNC8x2OfEPaMGTtBOFIb6187jHaId/PRGcb56GNYwn96Q9kZGsyIb9n6AA8l kOW4ZXXDbi2tFJKT9UdcdhCaLQIYBLNYTR1CNt+FI3N7egq9b4oCJl/2LSMYr8AC z5S4S5oXbMbGbsLZIbnTtkLAMa/klqCuUx5PcwADHj8QPcGfWI91Jwznwm6MSmtx Mjge73UvvLr8e6hEa8/0uGsiVyKsNDk= -----END CERTIFICATE-----Generated at Thu Mar 26 12:55:52 2026 by rpki-client