$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/d0aa6771-362e-3935-947a-bfd5081d3828.roa File: d0aa6771-362e-3935-947a-bfd5081d3828.roa (raw, json) Hash identifier: U9q1BMu0Dg847BDeqW1VBu3AqHhEcRVN4O3nAt7vDco= Subject key identifier: 1C:83:37:AA:BF:48:E2:FA:E2:DF:1A:3D:C1:35:30:58:15:E3:47:2B Certificate issuer: /CN=f8fa851f-0c6f-44a2-8017-7b062f4d8e74 Certificate serial: 010D0C9F4328584D3DFFAE66885DC1091544359A Authority key identifier: DF:AE:29:DC:48:23:A0:74:F5:E6:38:79:26:77:86:E8:AC:D0:6B:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/d0aa6771-362e-3935-947a-bfd5081d3828.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 399340 IP address blocks: 23.180.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:ae:66:88:5d:c1:09:15:44:35:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8fa851f-0c6f-44a2-8017-7b062f4d8e74 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=5f472a0a-3aff-4e01-898a-bc5dd0113d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:46:50:83:99:6a:e5:07:2a:0a:61:c4:77:1a: cc:e4:31:9f:e1:09:f8:34:b8:70:30:6b:28:7f:10: d9:a0:9e:15:fb:55:e8:d9:e9:79:b8:0a:6a:29:6e: bc:42:94:85:0b:90:0d:2d:20:63:6a:3e:b7:f2:38: ea:96:10:90:14:4c:3f:03:d2:d3:2f:3b:39:05:13: c3:b5:99:94:cd:cf:a2:74:f4:8a:83:0a:27:9a:ca: b7:56:43:73:7b:b0:2f:b4:30:a4:fd:6d:0b:73:3f: 84:85:b6:e9:74:39:ef:d0:25:95:20:fa:a4:09:b1: f0:df:8a:5a:b4:55:04:4e:1e:93:e9:5a:6c:db:c0: 61:04:2f:24:62:ec:86:e5:a4:d6:56:3a:d1:00:ac: 6f:23:64:5b:65:2d:f6:c3:d3:74:0a:f8:ef:dc:61: 7c:6c:01:9e:80:87:f5:a9:80:85:f1:fe:6b:f1:c3: 10:6e:59:cf:2b:cd:06:89:b7:76:ba:85:34:de:0e: df:2d:28:3b:b1:7a:9c:3f:fa:54:2b:ef:58:17:52: 00:69:f3:75:d1:94:8c:52:f6:de:88:b7:8b:9b:23: 57:ed:82:a9:3a:69:e9:7a:cf:ed:b0:e7:a6:74:63: 8a:4e:5a:5a:44:99:73:de:3b:ed:35:21:ee:98:5a: 24:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:83:37:AA:BF:48:E2:FA:E2:DF:1A:3D:C1:35:30:58:15:E3:47:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/d0aa6771-362e-3935-947a-bfd5081d3828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.crl X509v3 Authority Key Identifier: keyid:DF:AE:29:DC:48:23:A0:74:F5:E6:38:79:26:77:86:E8:AC:D0:6B:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.cer sbgp-ipAddrBlock: critical IPv4: 23.180.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:27:c8:d2:3c:94:db:fa:9e:8b:a5:70:61:cb:ea:5f:c7:ff: 70:90:74:43:7a:7e:73:64:4d:05:cc:db:20:20:2d:23:41:56: 88:52:31:c9:ae:64:74:00:e6:f6:1a:c7:34:f8:b5:f2:90:88: d1:4e:a4:df:ce:3b:c3:ad:b9:b4:ac:4a:f1:0c:e8:db:80:c4: 56:c2:58:82:bc:6c:26:e4:82:ab:42:ba:ad:8d:71:5f:1f:0d: f0:97:33:25:6d:1f:de:33:31:78:f8:7b:9d:9e:c7:a5:a2:d9: 2f:99:c1:6d:3f:75:e8:0f:24:90:40:b8:aa:6c:d1:52:5d:36: 2c:1f:a8:e0:b0:a7:ee:c2:06:b9:8f:1d:16:49:4d:ef:d1:5d: 64:0f:2d:d6:d4:3f:5e:39:f7:c1:9a:98:d2:fd:f1:4b:a8:ce: 6d:e5:ff:93:c1:8e:13:a2:e8:b7:ed:b7:16:66:e2:39:87:4f: 05:6d:71:3b:d9:9e:5a:2b:27:0a:0e:63:ab:dc:c0:f4:44:b0: d2:e0:c2:d2:90:38:db:df:b7:e5:52:19:d2:fe:f0:c0:68:7b: df:86:91:f6:ca:34:71:f2:fa:fa:ca:34:7f:7f:51:4d:33:71: 87:7d:6b:e2:f0:ff:bf:7c:61:bb:14:c6:a4:6a:a5:1f:5b:1f: eb:0c:60:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/65miF3BCRVENZowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhmYTg1MWYtMGM2Zi00NGEyLTgwMTctN2IwNjJmNGQ4 ZTc0MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NWY0NzJhMGEtM2FmZi00ZTAxLTg5OGEtYmM1ZGQwMTEzZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkZQg5lq5QcqCmHEdxrM5DGf4Qn4NLhwMGso fxDZoJ4V+1Xo2el5uApqKW68QpSFC5ANLSBjaj638jjqlhCQFEw/A9LTLzs5BRPD tZmUzc+idPSKgwonmsq3VkNze7AvtDCk/W0Lcz+EhbbpdDnv0CWVIPqkCbHw34pa tFUETh6T6Vps28BhBC8kYuyG5aTWVjrRAKxvI2RbZS32w9N0Cvjv3GF8bAGegIf1 qYCF8f5r8cMQblnPK80Gibd2uoU03g7fLSg7sXqcP/pUK+9YF1IAafN10ZSMUvbe iLeLmyNX7YKpOmnpes/tsOemdGOKTlpaRJlz3jvtNSHumFok9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByDN6q/SOL64t8aPcE1MFgV40crMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOGZh ODUxZi0wYzZmLTQ0YTItODAxNy03YjA2MmY0ZDhlNzQvZDBhYTY3NzEtMzYyZS0z OTM1LTk0N2EtYmZkNTA4MWQzODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjhmYTg1MWYtMGM2Zi00NGEyLTgw MTctN2IwNjJmNGQ4ZTc0L2Y4ZmE4NTFmLTBjNmYtNDRhMi04MDE3LTdiMDYyZjRk OGU3NC5jcmwwHwYDVR0jBBgwFoAU364p3EgjoHT15jh5JneG6KzQa54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOGZhODUxZi0wYzZmLTQ0YTItODAxNy03YjA2 MmY0ZDhlNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7QwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0nyNI8lNv6noulcGHL6l/H/3CQdEN6fnNkTQXM2yAgLSNBVohSMcmu ZHQA5vYaxzT4tfKQiNFOpN/OO8OtubSsSvEM6NuAxFbCWIK8bCbkgqtCuq2NcV8f DfCXMyVtH94zMXj4e52ex6Wi2S+ZwW0/degPJJBAuKps0VJdNiwfqOCwp+7CBrmP HRZJTe/RXWQPLdbUP14598GamNL98Uuozm3l/5PBjhOi6LfttxZm4jmHTwVtcTvZ nlorJwoOY6vcwPREsNLgwtKQONvft+VSGdL+8MBoe9+GkfbKNHHy+vrKNH9/UU0z cYd9a+Lw/798YbsUxqRqpR9bH+sMYFA= -----END CERTIFICATE-----Generated at Sat Mar 28 13:41:29 2026 by rpki-client