$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/0643f9f7-9d02-32fe-847d-014edce56609.roa File: 0643f9f7-9d02-32fe-847d-014edce56609.roa (raw, json) Hash identifier: wkvBc7r/Zh0ZvWMmnhwu3pOI2mzDgAXAK1EzCH6A9DE= Subject key identifier: 6B:05:B4:BC:66:48:3D:13:DD:ED:CF:7B:49:5E:CB:BF:ED:A6:82:07 Certificate issuer: /CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd Certificate serial: 010D0C9F4328584D3F64F356C6F3D58843911960 Authority key identifier: 1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/0643f9f7-9d02-32fe-847d-014edce56609.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 1030 IP address blocks: 23.166.8.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f3:56:c6:f3:d5:88:43:91:19:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=bec25942-8e8a-4948-a095-e5ee77885b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a7:18:96:61:23:a5:9a:f6:84:86:57:1c:ed: 0a:4b:e6:b3:fc:2b:2e:18:db:7e:78:2d:9a:5d:d8: 86:4d:31:26:f6:c3:1c:a4:f0:f2:5e:8f:10:16:65: 30:b6:21:b6:cb:64:d1:52:c4:d2:4b:1b:26:51:32: 90:84:b5:7c:58:c4:79:88:ed:9e:34:81:f6:80:10: 6a:aa:72:a4:cf:b0:52:66:a8:d5:60:b7:d9:a6:5a: e2:2f:1e:48:0d:ff:fa:bc:90:6e:05:e0:89:b3:1a: 35:74:d4:22:02:5e:98:2b:7e:88:7a:3d:a5:30:c0: 70:5e:13:cf:a8:6b:a3:2b:c3:a6:fb:f1:fd:72:14: af:71:26:f4:a5:50:76:fb:27:1f:f4:c5:c2:bf:fc: 43:4b:64:e7:71:3a:3a:80:2e:dd:82:e4:16:22:32: fa:d7:12:05:b6:cb:3b:0d:6b:7f:43:de:92:eb:53: d8:12:94:61:ea:c8:47:89:b8:bd:3b:73:26:9f:98: ec:a1:07:47:34:98:ea:56:58:3b:da:64:8c:a6:4f: 33:b2:cd:37:a7:1d:40:36:1b:27:18:77:f5:13:29: bc:60:37:16:43:d1:c5:5c:93:f7:41:0f:57:23:d6: a9:c0:25:b0:76:18:19:3e:a5:5b:30:df:c7:e9:90: 69:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:05:B4:BC:66:48:3D:13:DD:ED:CF:7B:49:5E:CB:BF:ED:A6:82:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/0643f9f7-9d02-32fe-847d-014edce56609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl X509v3 Authority Key Identifier: keyid:1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer sbgp-ipAddrBlock: critical IPv4: 23.166.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:9e:5a:9f:ff:33:ba:56:7a:58:62:02:5c:a1:6b:6d:5d:2f: 02:e7:5b:37:77:a7:41:e5:bf:2a:cb:5e:5a:c5:0f:d3:38:3d: d3:3a:92:3c:84:f0:bc:c5:d6:a7:2c:81:c1:e5:2c:f5:80:d6: 1b:74:73:1f:54:67:fc:81:09:39:a9:fb:64:4e:b7:cd:38:55: f6:89:ab:2a:3a:6c:f5:80:06:b9:43:e8:9d:e2:80:ce:01:84: 2f:5e:4a:55:7e:9a:d8:fb:c9:8d:21:e5:d0:63:54:60:dd:bb: b3:d0:95:cb:20:df:ea:eb:49:44:92:cb:f1:8a:13:39:9b:18: 00:39:3f:a1:b0:7e:6c:49:55:4c:23:4c:ab:c9:45:f8:8c:ab: e6:08:dd:fc:f9:67:b2:bd:b9:22:f6:a5:53:d8:0e:59:d7:a7: fe:5f:4b:af:a2:47:df:46:1c:10:83:24:c6:3c:12:ab:92:f2: c1:7b:fe:d3:a1:36:f4:eb:f4:f3:9e:ed:06:fe:db:14:46:3d: 48:10:74:34:8c:7a:05:a7:44:ca:1d:4d:54:f2:64:b9:f2:7f: bb:a3:33:ea:d9:1d:d8:32:9a:90:35:04:5f:2d:f7:1a:36:b3: c9:4c:3d:03:ae:d1:7a:bd:58:39:83:5b:ed:17:fd:2f:62:1b: fe:76:f6:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZPNWxvPViEORGWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIyMjNmN2YtZjI4Yi00ZGY0LWI2ZGEtY2FiNDg1NThj MmNkMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YmVjMjU5NDItOGU4YS00OTQ4LWEwOTUtZTVlZTc3ODg1YjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqcYlmEjpZr2hIZXHO0KS+az/CsuGNt+eC2a XdiGTTEm9sMcpPDyXo8QFmUwtiG2y2TRUsTSSxsmUTKQhLV8WMR5iO2eNIH2gBBq qnKkz7BSZqjVYLfZplriLx5IDf/6vJBuBeCJsxo1dNQiAl6YK36Iej2lMMBwXhPP qGujK8Om+/H9chSvcSb0pVB2+ycf9MXCv/xDS2TncTo6gC7dguQWIjL61xIFtss7 DWt/Q96S61PYEpRh6shHibi9O3Mmn5jsoQdHNJjqVlg72mSMpk8zss03px1ANhsn GHf1Eym8YDcWQ9HFXJP3QQ9XI9apwCWwdhgZPqVbMN/H6ZBpQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsFtLxmSD0T3e3Pe0ley7/tpoIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjIy M2Y3Zi1mMjhiLTRkZjQtYjZkYS1jYWI0ODU1OGMyY2QvMDY0M2Y5ZjctOWQwMi0z MmZlLTg0N2QtMDE0ZWRjZTU2NjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmIyMjNmN2YtZjI4Yi00ZGY0LWI2 ZGEtY2FiNDg1NThjMmNkL2JiMjIzZjdmLWYyOGItNGRmNC1iNmRhLWNhYjQ4NTU4 YzJjZC5jcmwwHwYDVR0jBBgwFoAUHLQAnkcraCaH/sJecmJGH10i5HQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjIyM2Y3Zi1mMjhiLTRkZjQtYjZkYS1jYWI0 ODU1OGMyY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6YIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFueWp//M7pWelhiAlyha21dLwLnWzd3p0HlvyrLXlrFD9M4PdM6kjyE 8LzF1qcsgcHlLPWA1ht0cx9UZ/yBCTmp+2ROt804VfaJqyo6bPWABrlD6J3igM4B hC9eSlV+mtj7yY0h5dBjVGDdu7PQlcsg3+rrSUSSy/GKEzmbGAA5P6GwfmxJVUwj TKvJRfiMq+YI3fz5Z7K9uSL2pVPYDlnXp/5fS6+iR99GHBCDJMY8EquS8sF7/tOh NvTr9POe7Qb+2xRGPUgQdDSMegWnRModTVTyZLnyf7ujM+rZHdgympA1BF8t9xo2 s8lMPQOu0Xq9WDmDW+0X/S9iG/529gw= -----END CERTIFICATE-----Generated at Thu Mar 26 15:44:07 2026 by rpki-client