$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/9e00c1ae-460d-3dcf-bccf-135f8beee00b.roa File: 9e00c1ae-460d-3dcf-bccf-135f8beee00b.roa (raw, json) Hash identifier: 9ft9VBdRHW5dIvhTXQLtbGvyPwskQC6VgDD5jbwGyy0= Subject key identifier: 9C:45:9D:36:79:A3:B2:24:0F:CC:72:22:B9:95:95:B7:31:D8:5B:27 Certificate issuer: /CN=dd7b2d92-487c-472a-b6c0-a0d9cfc490ba Certificate serial: 010D0C9F4328584D47C509E67B3C5B9D380D9D40 Authority key identifier: BF:C1:82:C5:D5:C0:98:39:07:1B:F1:6D:3F:F3:9C:AB:D9:A3:F0:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/9e00c1ae-460d-3dcf-bccf-135f8beee00b.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 402037 IP address blocks: 23.146.132.0/24 maxlen: 24 2602:f539::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:09:e6:7b:3c:5b:9d:38:0d:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd7b2d92-487c-472a-b6c0-a0d9cfc490ba Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=745c4c4d-e6ff-4e73-b8c7-a608c18708b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d4:28:88:7a:18:6a:67:26:99:3a:05:ef:29: c9:89:02:25:67:d6:97:ec:a1:26:f4:b8:5f:27:e4: 8e:92:be:e3:26:c0:05:50:33:b3:a3:8b:9e:df:8e: d1:e8:7f:a8:c7:e2:46:7a:d4:36:40:96:88:e6:2a: f4:3c:e3:68:82:57:e1:54:4b:2b:99:5f:1d:63:54: ce:a9:bd:21:ca:2e:4e:12:c7:05:ed:34:cd:50:36: af:c4:38:14:73:57:2b:c7:33:84:39:c0:e0:40:3c: 1a:4e:d2:8d:83:e8:ea:32:4d:32:f5:35:85:b8:ba: 19:fc:ae:9e:4d:f7:40:0b:f4:e0:8e:74:c7:28:e6: 5e:b0:fe:e0:f5:0a:19:8e:a1:26:5a:37:96:7a:12: d9:4d:a4:a9:4e:f3:bb:b9:36:13:ac:73:1a:0a:4b: 70:5b:4c:d1:59:26:1b:5c:28:34:de:43:ec:0e:b6: b1:b6:40:a1:ed:09:cd:b4:fa:44:ca:60:5a:75:04: c1:a6:e1:12:9a:d7:5d:3f:33:33:b7:0c:12:6f:fc: 4d:6e:29:d1:f4:61:91:1a:41:a1:48:7c:36:ee:59: a5:69:38:00:03:90:cb:1f:54:19:ce:12:8a:7a:b8: 94:7c:9d:5b:03:ad:cf:0f:6d:3e:96:1f:7d:ac:7b: ab:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:45:9D:36:79:A3:B2:24:0F:CC:72:22:B9:95:95:B7:31:D8:5B:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/9e00c1ae-460d-3dcf-bccf-135f8beee00b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.crl X509v3 Authority Key Identifier: keyid:BF:C1:82:C5:D5:C0:98:39:07:1B:F1:6D:3F:F3:9C:AB:D9:A3:F0:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.cer sbgp-ipAddrBlock: critical IPv4: 23.146.132.0/24 IPv6: 2602:f539::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:e4:ff:69:3f:3d:ce:47:e2:b7:b6:94:43:30:fa:ea:32:07: 53:2e:92:b5:2b:ae:32:59:0d:f1:87:3c:47:7f:99:cb:15:27: 72:a9:5b:3f:c2:32:c0:40:90:21:93:b1:63:00:f1:f3:e7:e2: eb:d8:7b:42:93:c0:67:f3:a7:a9:7e:99:92:a0:f4:dc:43:ad: 21:37:98:6d:9d:0a:c8:5c:43:59:e3:e6:ca:c5:32:d9:5f:3e: 4f:ab:65:3c:a2:ba:05:ba:f0:5d:9a:c3:de:6e:33:24:57:07: d8:c1:f0:d8:2b:4e:6a:ec:50:ba:b5:42:cc:e7:ee:c5:56:05: ee:fa:b9:2f:54:c5:21:26:63:41:d1:15:52:b2:be:6f:fc:25: ec:78:2f:ef:51:60:22:35:94:2b:1a:2f:9e:c5:53:40:0e:2c: 05:bc:3b:00:d1:a3:73:40:a7:41:aa:88:af:b7:da:e0:56:db: 62:1a:b9:31:19:3d:e1:b2:21:db:87:e3:f5:98:81:c2:fc:3c: 21:47:ba:3d:5a:55:27:d3:e6:19:e7:3b:a0:98:4c:bd:42:ea: e9:da:56:ca:31:71:b2:25:1a:6f:ad:ce:64:e3:6c:29:84:87: a0:4a:e1:8a:da:ea:d5:0d:21:dd:26:64:38:95:a6:ba:fa:59: 98:e7:15:d1 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE1HxQnmezxbnTgNnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3YjJkOTItNDg3Yy00NzJhLWI2YzAtYTBkOWNmYzQ5 MGJhMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk NzQ1YzRjNGQtZTZmZi00ZTczLWI4YzctYTYwOGMxODcwOGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9QoiHoYamcmmToF7ynJiQIlZ9aX7KEm9Lhf J+SOkr7jJsAFUDOzo4ue347R6H+ox+JGetQ2QJaI5ir0PONoglfhVEsrmV8dY1TO qb0hyi5OEscF7TTNUDavxDgUc1crxzOEOcDgQDwaTtKNg+jqMk0y9TWFuLoZ/K6e TfdAC/TgjnTHKOZesP7g9QoZjqEmWjeWehLZTaSpTvO7uTYTrHMaCktwW0zRWSYb XCg03kPsDraxtkCh7QnNtPpEymBadQTBpuESmtddPzMztwwSb/xNbinR9GGRGkGh SHw27lmlaTgAA5DLH1QZzhKKeriUfJ1bA63PD20+lh99rHurMQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJxFnTZ5o7IkD8xyIrmVlbcx2FsnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDdi MmQ5Mi00ODdjLTQ3MmEtYjZjMC1hMGQ5Y2ZjNDkwYmEvOWUwMGMxYWUtNDYwZC0z ZGNmLWJjY2YtMTM1ZjhiZWVlMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGQ3YjJkOTItNDg3Yy00NzJhLWI2 YzAtYTBkOWNmYzQ5MGJhL2RkN2IyZDkyLTQ4N2MtNDcyYS1iNmMwLWEwZDljZmM0 OTBiYS5jcmwwHwYDVR0jBBgwFoAUv8GCxdXAmDkHG/FtP/Ocq9mj8GwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDdiMmQ5Mi00ODdjLTQ3MmEtYjZjMC1hMGQ5 Y2ZjNDkwYmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5KEMA4E AgACMAgDBgAmAvU5ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCe5P9pPz3OR+K3tpRDMPrqMgdTLpK1K64y WQ3xhzxHf5nLFSdyqVs/wjLAQJAhk7FjAPHz5+Lr2HtCk8Bn86epfpmSoPTcQ60h N5htnQrIXENZ4+bKxTLZXz5Pq2U8oroFuvBdmsPebjMkVwfYwfDYK05q7FC6tULM 5+7FVgXu+rkvVMUhJmNB0RVSsr5v/CXseC/vUWAiNZQrGi+exVNADiwFvDsA0aNz QKdBqoivt9rgVttiGrkxGT3hsiHbh+P1mIHC/DwhR7o9WlUn0+YZ5zugmEy9Qurp 2lbKMXGyJRpvrc5k42wphIegSuGK2urVDSHdJmQ4laa6+lmY5xXR -----END CERTIFICATE-----Generated at Thu Mar 26 02:24:03 2026 by rpki-client