$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/7a1721aa-faa9-366b-8a98-ce7f741692fc.roa File: 7a1721aa-faa9-366b-8a98-ce7f741692fc.roa (raw, json) Hash identifier: /POVzg4uY9BAf7cMMjMNKaJq4x5owie7My5QJYsldeo= Subject key identifier: 3A:F0:9F:FB:93:93:A9:C6:A1:EA:1A:82:2F:78:FA:35:BA:C7:FA:6E Certificate issuer: /CN=f80afed8-630c-4446-a972-f7554ab8ece0 Certificate serial: 010D0C9F4328584D492A57CE864C61F9B6F39280 Authority key identifier: ED:46:6B:37:0E:5E:93:E5:81:F9:D0:DA:B1:76:0B:BB:89:2E:4F:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/7a1721aa-faa9-366b-8a98-ce7f741692fc.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 22339 IP address blocks: 23.135.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/f80afed8-630c-4446-a972-f7554ab8ece0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/f80afed8-630c-4446-a972-f7554ab8ece0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:57:ce:86:4c:61:f9:b6:f3:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f80afed8-630c-4446-a972-f7554ab8ece0 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=83c002fc-bfe9-4d62-a947-2fd25a150b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b7:24:35:73:1e:84:49:c8:b2:f3:86:6a:bf: 1e:39:85:57:31:1d:56:1c:fe:72:8f:60:55:2b:a6: d1:17:ff:29:7a:28:57:b2:64:f4:a2:1b:7f:03:c9: 20:78:45:5a:29:ae:2f:00:cc:c5:00:17:2c:4a:8a: aa:98:de:f8:27:20:4a:b2:a5:f6:5f:d5:98:76:f2: e3:c4:31:8c:35:34:7f:84:63:85:55:93:a3:cc:ba: 05:1f:d9:e2:59:80:74:86:3c:56:6c:bc:44:42:a1: 10:9f:48:b8:a2:16:38:a0:65:71:71:b9:7f:f6:29: 54:ab:ba:21:5b:d0:5a:9a:03:91:8f:55:0a:7c:75: 3e:3c:3e:22:37:3e:8e:72:c3:6c:46:9b:3b:22:f3: 44:ad:8c:f5:60:53:14:ad:1f:55:a6:41:7d:f8:8a: e2:34:af:30:f2:3b:f4:66:bb:72:62:4b:4b:a1:4a: 69:6a:45:2e:fe:6e:8b:c1:4e:cd:62:5f:8d:5f:36: 93:13:ed:8c:b8:50:25:26:d8:0e:1e:69:63:e3:d1: 3e:34:f2:32:17:fd:aa:49:56:fc:9f:09:bd:54:db: 29:70:d6:82:9a:0b:66:8e:ea:36:53:fa:90:d1:09: b9:df:3e:30:5c:1f:08:e9:44:50:dd:19:bb:78:82: b1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F0:9F:FB:93:93:A9:C6:A1:EA:1A:82:2F:78:FA:35:BA:C7:FA:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/7a1721aa-faa9-366b-8a98-ce7f741692fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/f80afed8-630c-4446-a972-f7554ab8ece0.crl X509v3 Authority Key Identifier: keyid:ED:46:6B:37:0E:5E:93:E5:81:F9:D0:DA:B1:76:0B:BB:89:2E:4F:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0.cer sbgp-ipAddrBlock: critical IPv4: 23.135.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:23:84:a7:8f:4f:b8:e2:06:7a:55:b7:dd:4d:4a:fc:74:a6: 86:cf:c2:99:a4:41:5d:fc:a5:4f:5c:c0:f2:f0:91:85:8b:8f: 09:0b:dc:7a:e8:b9:7d:f5:c4:ec:fa:c7:1b:68:7a:df:f9:f1: b3:62:48:02:12:f6:82:22:f5:d1:a6:ec:c7:f2:a5:00:83:84: a0:79:ee:99:34:fc:45:79:94:c4:a5:5d:a3:3f:06:bb:e6:da: 4e:51:47:0d:09:ba:ad:45:41:07:c3:8a:05:93:2b:19:29:28: 3b:a6:83:b2:07:9a:ce:5e:44:06:b1:a5:07:0e:3f:08:a5:06: 33:d1:e7:ce:7d:eb:d3:4d:f1:00:2f:c1:63:6b:5d:7e:b8:b8: 70:42:e0:fe:5e:60:6c:c9:e6:dc:9b:f3:ca:88:51:47:25:e5: 0d:5d:6a:c8:4e:6f:aa:31:1d:22:d8:9d:67:ba:4a:fa:ff:d9: 27:1b:1a:1c:6f:74:55:3a:17:43:b6:9f:83:a0:6a:c5:a0:4d: 41:f4:2e:85:64:1c:ae:8d:b0:32:8b:4a:27:d5:23:26:88:04: 11:62:bd:48:ca:88:1f:25:7d:cd:81:e8:7c:2d:95:b7:6f:2e: 7f:a8:44:2c:3c:6c:f8:a8:42:03:a5:b0:f2:9a:11:3b:e4:ea: 4f:74:72:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKlfOhkxh+bbzkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjgwYWZlZDgtNjMwYy00NDQ2LWE5NzItZjc1NTRhYjhl Y2UwMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk ODNjMDAyZmMtYmZlOS00ZDYyLWE5NDctMmZkMjVhMTUwYjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbckNXMehEnIsvOGar8eOYVXMR1WHP5yj2BV K6bRF/8peihXsmT0oht/A8kgeEVaKa4vAMzFABcsSoqqmN74JyBKsqX2X9WYdvLj xDGMNTR/hGOFVZOjzLoFH9niWYB0hjxWbLxEQqEQn0i4ohY4oGVxcbl/9ilUq7oh W9BamgORj1UKfHU+PD4iNz6OcsNsRps7IvNErYz1YFMUrR9VpkF9+IriNK8w8jv0 ZrtyYktLoUppakUu/m6LwU7NYl+NXzaTE+2MuFAlJtgOHmlj49E+NPIyF/2qSVb8 nwm9VNspcNaCmgtmjuo2U/qQ0Qm53z4wXB8I6URQ3Rm7eIKxcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrwn/uTk6nGoeoagi94+jW6x/puMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mODBh ZmVkOC02MzBjLTQ0NDYtYTk3Mi1mNzU1NGFiOGVjZTAvN2ExNzIxYWEtZmFhOS0z NjZiLThhOTgtY2U3Zjc0MTY5MmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjgwYWZlZDgtNjMwYy00NDQ2LWE5 NzItZjc1NTRhYjhlY2UwL2Y4MGFmZWQ4LTYzMGMtNDQ0Ni1hOTcyLWY3NTU0YWI4 ZWNlMC5jcmwwHwYDVR0jBBgwFoAU7UZrNw5ek+WB+dDasXYLu4kuTycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mODBhZmVkOC02MzBjLTQ0NDYtYTk3Mi1mNzU1 NGFiOGVjZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4ekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAjhKePT7jiBnpVt91NSvx0pobPwpmkQV38pU9cwPLwkYWLjwkL3Hro uX31xOz6xxtoet/58bNiSAIS9oIi9dGm7MfypQCDhKB57pk0/EV5lMSlXaM/Brvm 2k5RRw0Juq1FQQfDigWTKxkpKDumg7IHms5eRAaxpQcOPwilBjPR585969NN8QAv wWNrXX64uHBC4P5eYGzJ5tyb88qIUUcl5Q1dashOb6oxHSLYnWe6Svr/2ScbGhxv dFU6F0O2n4OgasWgTUH0LoVkHK6NsDKLSifVIyaIBBFivUjKiB8lfc2B6Hwtlbdv Ln+oRCw8bPioQgOlsPKaETvk6k90cps= -----END CERTIFICATE-----Generated at Thu Mar 26 23:08:47 2026 by rpki-client