$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/70a46534-e8e5-3181-abb5-2f44dc79049a.roa File: 70a46534-e8e5-3181-abb5-2f44dc79049a.roa (raw, json) Hash identifier: 1ytji0bVL/019V+bjjHgs7CwCG4DItyg9jRS/5bKUaI= Subject key identifier: AE:6C:6B:3D:39:E9:E0:1E:D0:F2:6D:ED:C1:D8:70:09:D5:76:D2:81 Certificate issuer: /CN=b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5 Certificate serial: 010D0C9F4328584D4A8FBAED536E64F7C230AD00 Authority key identifier: DB:F4:ED:9B:E8:FD:BD:34:98:5C:6A:7F:D2:D1:AB:2A:29:D8:8A:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/70a46534-e8e5-3181-abb5-2f44dc79049a.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 209699 IP address blocks: 23.138.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:ba:ed:53:6e:64:f7:c2:30:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=402ef306-fbbb-489c-ae32-9184723e3bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:80:bf:4a:b9:b6:1f:fd:d6:14:4d:03:62:24: ce:2f:83:aa:47:af:47:7e:fc:22:cf:4f:31:61:ec: 64:a0:53:cd:49:81:bc:48:29:9f:fa:1c:7a:e8:35: 79:96:45:bf:5a:1b:8b:8c:08:80:50:f6:bf:0e:29: fa:ce:35:61:9f:45:a4:08:8e:81:e4:4a:df:09:a7: 2d:1c:1d:f6:8f:3f:b4:31:1e:28:88:5b:07:8e:81: 36:f4:43:10:be:0a:e3:95:6a:4f:b6:4f:18:ec:5f: cd:33:c7:32:9b:1a:b0:c6:9a:5c:bd:20:32:07:3e: cb:fa:2b:c2:9a:0a:a8:1e:be:42:4d:a1:fd:65:ca: 6b:1c:29:fb:b9:65:eb:f4:f9:3f:53:d3:56:ee:1e: a8:9c:3d:18:00:c2:ce:3c:81:dc:97:e6:40:2c:8d: bf:2b:5c:16:5c:42:0c:61:b3:06:de:72:0a:c1:8d: a4:f2:0d:60:b5:1c:49:68:6a:7d:e2:3d:04:71:7f: ee:b3:06:2f:9a:9a:f6:43:b9:d0:e3:6b:99:0a:74: 08:44:6b:19:8f:e2:9b:de:94:41:56:56:9b:c0:c1: 55:3f:59:b8:be:d0:36:af:87:7c:70:75:35:da:66: 4a:4e:47:dc:02:09:24:90:6f:78:ff:76:f2:fa:0b: 5c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6C:6B:3D:39:E9:E0:1E:D0:F2:6D:ED:C1:D8:70:09:D5:76:D2:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/70a46534-e8e5-3181-abb5-2f44dc79049a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.crl X509v3 Authority Key Identifier: keyid:DB:F4:ED:9B:E8:FD:BD:34:98:5C:6A:7F:D2:D1:AB:2A:29:D8:8A:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer sbgp-ipAddrBlock: critical IPv4: 23.138.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:81:78:59:8e:75:bf:42:0b:48:76:f1:2f:fe:b2:cf:55:e3: f3:8e:e7:78:4a:27:b3:1b:a2:32:ed:88:a6:29:bc:7c:a8:8e: b7:d1:35:ff:30:ff:5a:97:85:ec:9a:a6:d9:1e:12:b4:90:0c: 51:a9:ed:ac:38:02:e4:c2:c1:da:4f:44:b9:1e:57:3f:57:55: 3f:05:a1:cd:5c:01:57:e7:5f:c9:2d:ad:b0:ab:64:f1:63:ec: 88:61:95:a3:f5:e8:c1:4a:66:b1:fb:14:03:39:98:b2:81:cb: 8b:d0:58:c6:ff:8d:85:26:5c:d8:38:53:c7:63:95:48:0d:69: 8b:f9:4e:37:96:68:75:79:58:e8:83:90:57:b3:fa:58:51:80: ee:22:b6:56:4b:02:3b:c7:de:e5:34:1a:b8:ef:05:bc:7e:b0: 13:20:d9:59:8c:fe:7b:ef:a5:f5:ac:80:75:5b:1c:5b:87:72: be:ba:c2:dd:3b:d9:df:c7:c3:64:cc:44:9b:57:99:13:82:45: 23:0a:61:bb:ff:45:f3:0a:58:7d:e8:53:1e:9f:9b:a3:c6:aa: e5:be:a7:4e:12:34:b9:37:74:f0:8f:dc:85:e4:27:e3:dc:03: 58:a2:4f:f1:c3:85:31:41:ad:2e:6b:42:7a:34:2f:f3:50:dd: b4:80:ff:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj7rtU25k98IwrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMzZGRiYjItZmYyMS00YjA3LWI0ZTctMjY2ZDZkZjVh NmI1MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk NDAyZWYzMDYtZmJiYi00ODljLWFlMzItOTE4NDcyM2UzYmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+oC/Srm2H/3WFE0DYiTOL4OqR69Hfvwiz08x YexkoFPNSYG8SCmf+hx66DV5lkW/WhuLjAiAUPa/Din6zjVhn0WkCI6B5ErfCact HB32jz+0MR4oiFsHjoE29EMQvgrjlWpPtk8Y7F/NM8cymxqwxppcvSAyBz7L+ivC mgqoHr5CTaH9ZcprHCn7uWXr9Pk/U9NW7h6onD0YAMLOPIHcl+ZALI2/K1wWXEIM YbMG3nIKwY2k8g1gtRxJaGp94j0EcX/uswYvmpr2Q7nQ42uZCnQIRGsZj+Kb3pRB VlabwMFVP1m4vtA2r4d8cHU12mZKTkfcAgkkkG94/3by+gtczwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5saz056eAe0PJt7cHYcAnVdtKBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iMzNk ZGJiMi1mZjIxLTRiMDctYjRlNy0yNjZkNmRmNWE2YjUvNzBhNDY1MzQtZThlNS0z MTgxLWFiYjUtMmY0NGRjNzkwNDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjMzZGRiYjItZmYyMS00YjA3LWI0 ZTctMjY2ZDZkZjVhNmI1L2IzM2RkYmIyLWZmMjEtNGIwNy1iNGU3LTI2NmQ2ZGY1 YTZiNS5jcmwwHwYDVR0jBBgwFoAU2/Ttm+j9vTSYXGp/0tGrKinYiuYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iMzNkZGJiMi1mZjIxLTRiMDctYjRlNy0yNjZk NmRmNWE2YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4qsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaBeFmOdb9CC0h28S/+ss9V4/OO53hKJ7MbojLtiKYpvHyojrfRNf8w /1qXheyaptkeErSQDFGp7aw4AuTCwdpPRLkeVz9XVT8Foc1cAVfnX8ktrbCrZPFj 7IhhlaP16MFKZrH7FAM5mLKBy4vQWMb/jYUmXNg4U8djlUgNaYv5TjeWaHV5WOiD kFez+lhRgO4itlZLAjvH3uU0GrjvBbx+sBMg2VmM/nvvpfWsgHVbHFuHcr66wt07 2d/Hw2TMRJtXmROCRSMKYbv/RfMKWH3oUx6fm6PGquW+p04SNLk3dPCP3IXkJ+Pc A1iiT/HDhTFBrS5rQno0L/NQ3bSA/+E= -----END CERTIFICATE-----Generated at Thu Mar 26 08:43:34 2026 by rpki-client