$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/24dd6ee4-d727-3a97-a2d3-2279e5452cb2.roa File: 24dd6ee4-d727-3a97-a2d3-2279e5452cb2.roa (raw, json) Hash identifier: WXWXJv3F7AJOkOO+BZz1b+mucQ/IPhkFYduia+YxDYU= Subject key identifier: 2F:64:92:D4:CA:68:C3:A2:78:F9:8A:3F:67:3D:A4:1F:00:6E:19:0A Certificate issuer: /CN=c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7 Certificate serial: 010D0C9F4328584D492A4C8CB193036D44BA7F00 Authority key identifier: 1D:C1:30:50:A3:52:2D:3C:9C:17:AD:6C:F0:EE:55:82:42:33:93:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/24dd6ee4-d727-3a97-a2d3-2279e5452cb2.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 7346 IP address blocks: 23.131.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:4c:8c:b1:93:03:6d:44:ba:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=338274b8-9ff2-4656-a548-18a132fbdc47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:47:3c:60:6d:37:02:0a:89:30:74:86:14:99: 6a:4e:b1:aa:40:f2:cc:df:fc:b1:00:7d:4d:d0:33: 27:64:3f:37:c6:95:e2:01:e7:59:f2:4d:06:71:8c: 34:78:1e:a1:56:20:99:eb:d6:45:35:ea:87:a3:15: b1:e0:f4:35:83:06:07:d8:ee:db:e1:8a:7d:c7:f3: eb:2b:3e:72:8f:3e:a3:5a:13:ce:ca:f9:d1:5c:0f: df:fc:46:a8:d9:4e:20:10:d0:df:aa:3c:9f:4a:50: 80:d9:6a:c4:59:2f:ec:90:80:4b:80:34:ed:bc:24: c0:28:94:69:9a:b7:f3:35:e3:de:1f:a2:be:02:68: 9c:0d:ce:ce:e2:b1:fd:33:e2:f4:61:e6:ac:6b:4e: 7a:7e:5d:6b:b5:1d:94:fd:ba:7d:1c:28:22:db:d0: 71:ab:a8:07:03:d8:04:27:cd:d0:28:e8:a6:27:9f: 3b:f2:f8:85:ab:27:92:48:ea:f6:ca:dc:68:d4:03: c6:9f:34:73:f3:f1:34:c4:42:ef:16:65:ea:06:23: 4d:e0:34:20:14:b4:50:c4:16:27:74:d6:81:0c:22: 7d:26:3c:ef:e0:3f:a6:d0:6c:c8:d9:55:c4:e0:0b: ca:cd:8a:08:c9:0b:ec:6a:bf:66:ff:d1:e8:4f:49: 6d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:64:92:D4:CA:68:C3:A2:78:F9:8A:3F:67:3D:A4:1F:00:6E:19:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/24dd6ee4-d727-3a97-a2d3-2279e5452cb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.crl X509v3 Authority Key Identifier: keyid:1D:C1:30:50:A3:52:2D:3C:9C:17:AD:6C:F0:EE:55:82:42:33:93:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer sbgp-ipAddrBlock: critical IPv4: 23.131.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:d8:bb:1f:c0:d9:5c:d5:c8:29:16:9a:b2:22:39:bc:42:39: 06:05:ed:e8:bc:5f:75:27:dc:d3:e7:61:0f:eb:db:89:85:bc: b0:c3:16:d3:70:78:0f:95:d8:6c:c9:c8:de:78:5e:f1:48:76: 09:3b:1e:fa:88:43:12:b0:55:a6:ce:ec:ea:90:c9:55:c7:e0: 6f:f4:1b:df:d6:d5:bf:3d:94:09:c7:6c:2f:1d:2e:aa:f7:4c: 60:c2:33:ae:d8:88:4a:f3:1d:61:b1:81:d7:f3:39:f7:50:78: 9b:c5:33:0c:ab:46:7b:b3:bb:dc:58:47:34:4a:42:93:75:3d: 7b:f8:24:c5:b2:b4:06:bc:b5:73:1e:29:b3:99:73:b1:c7:8f: 56:b4:73:0f:c0:86:a9:25:ba:d6:ac:7f:60:9e:70:5c:d8:50: e7:a0:c9:0d:ed:2c:d0:a9:10:85:31:f3:24:06:cf:d5:58:d3: b7:ae:b5:ac:79:5b:75:90:36:f8:44:44:b6:5b:82:22:23:20: 7b:60:a3:37:60:ea:54:6b:74:10:1e:cc:d8:09:a3:7a:c1:cd: bf:79:0d:02:99:0e:d7:77:41:b3:33:be:41:c5:b7:23:02:34: 84:bf:39:fd:30:ea:5f:ad:20:02:45:8f:f8:99:48:ec:db:28: f3:45:6c:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKkyMsZMDbUS6fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdiYmEwZTAtZmI3Yi00OWU1LWJjZjgtNTQ5NGExZjRj ZGU3MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk MzM4Mjc0YjgtOWZmMi00NjU2LWE1NDgtMThhMTMyZmJkYzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0c8YG03AgqJMHSGFJlqTrGqQPLM3/yxAH1N 0DMnZD83xpXiAedZ8k0GcYw0eB6hViCZ69ZFNeqHoxWx4PQ1gwYH2O7b4Yp9x/Pr Kz5yjz6jWhPOyvnRXA/f/Eao2U4gENDfqjyfSlCA2WrEWS/skIBLgDTtvCTAKJRp mrfzNePeH6K+AmicDc7O4rH9M+L0Yeasa056fl1rtR2U/bp9HCgi29Bxq6gHA9gE J83QKOimJ5878viFqyeSSOr2ytxo1APGnzRz8/E0xELvFmXqBiNN4DQgFLRQxBYn dNaBDCJ9Jjzv4D+m0GzI2VXE4AvKzYoIyQvsar9m/9HoT0ltVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9kktTKaMOiePmKP2c9pB8AbhkKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Ji YTBlMC1mYjdiLTQ5ZTUtYmNmOC01NDk0YTFmNGNkZTcvMjRkZDZlZTQtZDcyNy0z YTk3LWEyZDMtMjI3OWU1NDUyY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdiYmEwZTAtZmI3Yi00OWU1LWJj ZjgtNTQ5NGExZjRjZGU3L2M3YmJhMGUwLWZiN2ItNDllNS1iY2Y4LTU0OTRhMWY0 Y2RlNy5jcmwwHwYDVR0jBBgwFoAUHcEwUKNSLTycF61s8O5VgkIzk/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2JiYTBlMC1mYjdiLTQ5ZTUtYmNmOC01NDk0 YTFmNGNkZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4OkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMLYux/A2VzVyCkWmrIiObxCOQYF7ei8X3Un3NPnYQ/r24mFvLDDFtNw eA+V2GzJyN54XvFIdgk7HvqIQxKwVabO7OqQyVXH4G/0G9/W1b89lAnHbC8dLqr3 TGDCM67YiErzHWGxgdfzOfdQeJvFMwyrRnuzu9xYRzRKQpN1PXv4JMWytAa8tXMe KbOZc7HHj1a0cw/Ahqklutasf2CecFzYUOegyQ3tLNCpEIUx8yQGz9VY07eutax5 W3WQNvhERLZbgiIjIHtgozdg6lRrdBAezNgJo3rBzb95DQKZDtd3QbMzvkHFtyMC NIS/Of0w6l+tIAJFj/iZSOzbKPNFbKI= -----END CERTIFICATE-----Generated at Thu Mar 26 10:06:12 2026 by rpki-client