$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa File: acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa (raw, json) Hash identifier: 7DYIq4wihy5PUYzJa0B8+SCvsMc3djwJEUT2HPEU3NY= Subject key identifier: D6:08:D8:2F:71:8C:E3:97:49:8A:54:F0:F1:D1:FA:FB:6A:F6:B0:F7 Certificate issuer: /CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Certificate serial: 010D0C9F4328584D47C5059B1C098D049B5A8580 Authority key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 19814 IP address blocks: 23.189.120.0/24 maxlen: 24 2602:f805::/48 maxlen: 48 2602:f805:800::/48 maxlen: 48 2602:f805:900::/48 maxlen: 48 2602:f805:a00::/48 maxlen: 48 2602:f805:b00::/48 maxlen: 48 2602:f805:c00::/48 maxlen: 48 2602:f805:d00::/48 maxlen: 48 2602:f805:e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:05:9b:1c:09:8d:04:9b:5a:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=49308401-a975-4752-8804-995c05e744c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:88:1f:a7:8a:4b:a3:18:fa:66:95:d8:9d:c4: 08:77:0e:ec:39:d4:fd:e3:27:9a:0b:63:bf:c2:20: a8:28:c0:8a:73:4e:7b:7f:02:00:ad:f9:3b:ab:0c: ea:3a:62:88:97:76:af:d3:cf:b8:99:88:8f:27:88: d9:c5:84:6f:c1:6e:5b:b8:67:88:07:80:cd:98:a1: cb:f6:0b:d3:87:db:c4:75:4b:fb:6b:61:bb:0c:09: 16:c4:3c:7e:f1:56:71:83:d5:db:e9:c8:0a:64:80: 07:10:83:4d:78:3e:9e:9a:4e:56:86:4c:41:86:83: 9b:5a:d7:0c:00:84:c3:c0:94:f7:56:b8:fa:f0:50: 7f:72:1e:93:e0:cd:4c:ce:c0:b0:34:72:66:db:48: e6:e2:ad:90:bd:0e:42:de:29:23:ba:5d:d2:e7:07: af:27:d9:6a:52:c5:9a:aa:7a:aa:5a:cf:11:3f:ba: 72:7d:88:33:f0:1e:08:d9:d6:bd:f9:ec:a5:7c:21: e6:c0:8e:72:06:16:0b:cb:08:48:bc:16:68:24:b5: 09:6c:a3:1a:8a:32:11:9b:7c:9d:f5:2b:be:30:72: fd:8d:b9:d9:9e:69:cc:cf:93:36:9d:07:e6:12:13: 46:64:3f:f3:95:58:c1:ba:d2:71:66:6e:54:e4:4f: 3d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:08:D8:2F:71:8C:E3:97:49:8A:54:F0:F1:D1:FA:FB:6A:F6:B0:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl X509v3 Authority Key Identifier: keyid:56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer sbgp-ipAddrBlock: critical IPv4: 23.189.120.0/24 IPv6: 2602:f805::/48 2602:f805:800::/48 2602:f805:900::/48 2602:f805:a00::/48 2602:f805:b00::/48 2602:f805:c00::/48 2602:f805:d00::/48 2602:f805:e00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:48:50:b0:0f:4a:c8:98:42:32:5a:4b:65:2f:fc:f1:d7:fc: 6a:0f:dc:7a:bf:9f:bf:2f:f9:e8:ec:e8:bd:2a:eb:39:be:11: 89:39:38:94:b7:ce:c3:9c:d6:8f:c0:44:ef:fe:0c:72:8e:7f: db:16:20:8b:f7:fa:f1:4d:5f:df:bb:f3:4f:29:b5:8e:c8:3e: 7e:8a:f1:66:55:d6:5e:5d:bb:56:65:d8:e7:c6:a8:18:36:49: 92:2f:f7:ff:1b:4c:76:a1:37:c7:59:db:aa:2e:d7:86:ea:32: 98:12:a2:fe:58:c2:3c:b3:a8:f4:80:9b:b3:d1:91:75:f5:04: d0:fa:80:da:f7:53:10:7c:1d:f1:c2:44:a9:01:4a:79:f8:d9: 41:b5:65:85:22:85:b1:cd:e9:c0:49:64:4f:88:c4:d6:43:5f: b4:39:f9:6c:03:25:3d:c0:eb:14:83:68:17:f9:01:28:53:fc: 59:63:79:ef:e2:7a:bc:8b:4d:82:47:ea:3a:dd:ee:74:97:7e: 20:e5:dc:71:5c:aa:42:6e:6f:67:51:a0:88:52:62:82:35:ef: 90:46:4f:1f:d8:f3:82:41:6d:7d:16:7f:ed:94:4a:25:0f:7f: b0:73:9e:77:88:6f:7f:60:43:8d:76:92:6e:f0:f9:34:07:76: 0a:73:f2:da -----BEGIN CERTIFICATE----- MIIGkzCCBXugAwIBAgIUAQ0Mn0MoWE1HxQWbHAmNBJtahYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2YTk1YjMtZGQzYy00MGRlLTliZDItODQzNTdiNzRm ODAxMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk NDkzMDg0MDEtYTk3NS00NzUyLTg4MDQtOTk1YzA1ZTc0NGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIgfp4pLoxj6ZpXYncQIdw7sOdT94yeaC2O/ wiCoKMCKc057fwIArfk7qwzqOmKIl3av08+4mYiPJ4jZxYRvwW5buGeIB4DNmKHL 9gvTh9vEdUv7a2G7DAkWxDx+8VZxg9Xb6cgKZIAHEINNeD6emk5WhkxBhoObWtcM AITDwJT3Vrj68FB/ch6T4M1MzsCwNHJm20jm4q2QvQ5C3ikjul3S5wevJ9lqUsWa qnqqWs8RP7pyfYgz8B4I2da9+eylfCHmwI5yBhYLywhIvBZoJLUJbKMaijIRm3yd 9Su+MHL9jbnZnmnMz5M2nQfmEhNGZD/zlVjButJxZm5U5E89nwIDAQABo4IDpTCC A6EwHQYDVR0OBBYEFNYI2C9xjOOXSYpU8PHR+vtq9rD3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYTZh OTViMy1kZDNjLTQwZGUtOWJkMi04NDM1N2I3NGY4MDEvYWNiMWNmYTYtYmE3Mi0z ZjljLWExMGQtNDMwYzU5MjA5YzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmE2YTk1YjMtZGQzYy00MGRlLTli ZDItODQzNTdiNzRmODAxL2JhNmE5NWIzLWRkM2MtNDBkZS05YmQyLTg0MzU3Yjc0 ZjgwMS5jcmwwHwYDVR0jBBgwFoAUVoM58N8yt2DFZSaxnWkfb2xEoXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYTZhOTViMy1kZDNjLTQwZGUtOWJkMi04NDM1 N2I3NGY4MDEuY2VyMG8GCCsGAQUFBwEHAQH/BGAwXjAMBAIAATAGAwQAF714ME4E AgACMEgDBwAmAvgFAAADBwAmAvgFCAADBwAmAvgFCQADBwAmAvgFCgADBwAmAvgF CwADBwAmAvgFDAADBwAmAvgFDQADBwAmAvgFDgAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAf0hQsA9KyJhC MlpLZS/88df8ag/cer+fvy/56OzovSrrOb4RiTk4lLfOw5zWj8BE7/4Mco5/2xYg i/f68U1f37vzTym1jsg+forxZlXWXl27VmXY58aoGDZJki/3/xtMdqE3x1nbqi7X huoymBKi/ljCPLOo9ICbs9GRdfUE0PqA2vdTEHwd8cJEqQFKefjZQbVlhSKFsc3p wElkT4jE1kNftDn5bAMlPcDrFINoF/kBKFP8WWN57+J6vItNgkfqOt3udJd+IOXc cVyqQm5vZ1GgiFJigjXvkEZPH9jzgkFtfRZ/7ZRKJQ9/sHOed4hvf2BDjXaSbvD5 NAd2CnPy2g== -----END CERTIFICATE-----Generated at Thu Mar 26 12:27:01 2026 by rpki-client