$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6/54be00b5-1368-3b8b-a8ca-2dbf316c3035.roa File: 54be00b5-1368-3b8b-a8ca-2dbf316c3035.roa (raw, json) Hash identifier: ov5nOLXeH8eKDSsHF1V8KI6BMeW2b/0F2DCmov6q7PY= Subject key identifier: B3:33:E6:B1:34:A8:20:4A:0A:A9:FD:5F:65:D2:2F:83:BB:F6:FD:D1 Certificate issuer: /CN=0bc475b7-f559-4c8e-a66b-c6e0cacf90f6 Certificate serial: 010D0C9F4328584D490FC96D58658623A9FB7900 Authority key identifier: 4D:2F:44:8B:8E:BF:31:A5:86:8D:75:D4:55:5D:52:71:83:CD:46:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6/54be00b5-1368-3b8b-a8ca-2dbf316c3035.roa Signing time: Wed 25 Mar 2026 12:07:24 +0000 ROA not before: Wed 25 Mar 2026 12:07:24 +0000 ROA not after: Tue 23 Jun 2026 12:07:24 +0000 asID: 2497 IP address blocks: 23.131.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:0f:c9:6d:58:65:86:23:a9:fb:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bc475b7-f559-4c8e-a66b-c6e0cacf90f6 Validity Not Before: Mar 25 12:07:24 2026 GMT Not After : Jun 23 12:07:24 2026 GMT Subject: CN=1fd295f5-6b66-43a1-be52-d70786729748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b6:4e:26:7b:33:e9:be:b7:ee:fb:6e:30:a9: bc:06:66:47:66:3d:68:b8:26:e9:c9:98:dd:ca:dc: 87:c8:67:3e:00:c1:7d:a2:9c:18:e6:75:76:d3:55: d3:1f:59:7d:2c:6b:65:91:2f:c8:8e:7b:cf:a9:e7: 8f:50:bf:7c:8f:c6:6a:2d:28:78:95:55:72:ef:0e: db:71:a6:13:38:88:08:f7:6a:4f:b2:bc:27:a9:a1: 28:bf:74:72:bb:3b:7f:86:63:52:75:42:62:12:c5: 60:95:79:ca:29:ee:c1:d0:b0:15:2b:76:70:7c:d1: ee:8e:e8:e1:77:8b:5f:8d:48:69:ab:b7:13:89:4a: 00:03:3b:c6:44:29:16:fe:49:ff:e5:b8:6a:3d:20: 9e:c9:94:11:2d:43:5f:01:97:49:ce:fd:dc:32:ba: 22:ee:bd:b9:af:a5:3c:a4:f6:e3:cb:e0:25:cc:4e: f6:dd:20:bc:09:c2:c5:97:35:a8:bb:b4:eb:cf:b1: ca:40:7f:f7:61:95:19:87:e5:1f:0b:8a:2e:17:ba: 9e:73:39:69:b2:4e:eb:ae:1c:68:77:1c:70:76:78: 12:40:31:64:e0:86:a8:f2:e5:a4:02:e4:25:75:6f: 0a:d4:e4:ee:36:c8:65:2c:51:48:96:47:90:bf:80: 03:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:33:E6:B1:34:A8:20:4A:0A:A9:FD:5F:65:D2:2F:83:BB:F6:FD:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6/54be00b5-1368-3b8b-a8ca-2dbf316c3035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6.crl X509v3 Authority Key Identifier: keyid:4D:2F:44:8B:8E:BF:31:A5:86:8D:75:D4:55:5D:52:71:83:CD:46:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6.cer sbgp-ipAddrBlock: critical IPv4: 23.131.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:d8:40:fa:13:94:59:86:fa:9c:5b:44:a1:5b:12:2c:07:2f: 27:12:c1:3b:47:c7:45:93:a1:55:df:0e:90:53:f0:94:be:75: 32:3e:00:4a:f3:bf:4a:29:9e:8b:89:02:aa:09:b6:93:f5:df: ea:aa:00:54:d2:0b:a5:7a:77:d2:19:dd:fc:29:8c:05:e9:be: 41:10:4f:05:b1:26:46:df:8a:0d:f5:d2:20:37:13:41:74:14: 2e:c6:c8:07:50:c6:26:52:fc:4f:92:6a:ac:a5:2b:c5:da:4a: 76:82:dc:0c:4a:e2:8f:e5:9f:f7:9c:c8:71:e6:5e:06:b0:b6: 47:29:62:bb:52:ec:2b:64:15:02:d9:c7:27:4e:e7:cc:7b:0a: 42:6f:87:c0:07:64:0b:b2:79:7a:d9:81:75:cc:5f:e8:f3:f4: 1f:50:a3:e8:51:c1:97:e7:29:cb:6f:54:5d:5c:6c:1e:66:31: 4c:9d:10:8e:6b:25:02:7c:59:40:52:c1:67:59:bd:e1:f2:d5: 81:b3:02:f2:cc:1d:4e:ac:ff:93:f7:bb:7d:f9:4c:f4:89:b6: 7a:aa:56:73:6b:e0:04:cf:1f:f2:40:8b:02:80:82:c0:e1:26: 16:3a:f4:cd:d0:03:00:18:46:5c:29:b5:e9:91:b5:2a:1f:7b: 84:ab:9e:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JD8ltWGWGI6n7eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJjNDc1YjctZjU1OS00YzhlLWE2NmItYzZlMGNhY2Y5 MGY2MB4XDTI2MDMyNTEyMDcyNFoXDTI2MDYyMzEyMDcyNFowLzEtMCsGA1UEAxMk MWZkMjk1ZjUtNmI2Ni00M2ExLWJlNTItZDcwNzg2NzI5NzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLZOJnsz6b637vtuMKm8BmZHZj1ouCbpyZjd ytyHyGc+AMF9opwY5nV201XTH1l9LGtlkS/IjnvPqeePUL98j8ZqLSh4lVVy7w7b caYTOIgI92pPsrwnqaEov3Ryuzt/hmNSdUJiEsVglXnKKe7B0LAVK3ZwfNHujujh d4tfjUhpq7cTiUoAAzvGRCkW/kn/5bhqPSCeyZQRLUNfAZdJzv3cMroi7r25r6U8 pPbjy+AlzE723SC8CcLFlzWou7Trz7HKQH/3YZUZh+UfC4ouF7qeczlpsk7rrhxo dxxwdngSQDFk4Iao8uWkAuQldW8K1OTuNshlLFFIlkeQv4ADLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMz5rE0qCBKCqn9X2XSL4O79v3RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wYmM0 NzViNy1mNTU5LTRjOGUtYTY2Yi1jNmUwY2FjZjkwZjYvNTRiZTAwYjUtMTM2OC0z YjhiLWE4Y2EtMmRiZjMxNmMzMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMGJjNDc1YjctZjU1OS00YzhlLWE2 NmItYzZlMGNhY2Y5MGY2LzBiYzQ3NWI3LWY1NTktNGM4ZS1hNjZiLWM2ZTBjYWNm OTBmNi5jcmwwHwYDVR0jBBgwFoAUTS9Ei46/MaWGjXXUVV1ScYPNRvcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wYmM0NzViNy1mNTU5LTRjOGUtYTY2Yi1jNmUw Y2FjZjkwZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4OIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7YQPoTlFmG+pxbRKFbEiwHLycSwTtHx0WToVXfDpBT8JS+dTI+AErz v0opnouJAqoJtpP13+qqAFTSC6V6d9IZ3fwpjAXpvkEQTwWxJkbfig310iA3E0F0 FC7GyAdQxiZS/E+SaqylK8XaSnaC3AxK4o/ln/ecyHHmXgawtkcpYrtS7CtkFQLZ xydO58x7CkJvh8AHZAuyeXrZgXXMX+jz9B9Qo+hRwZfnKctvVF1cbB5mMUydEI5r JQJ8WUBSwWdZveHy1YGzAvLMHU6s/5P3u335TPSJtnqqVnNr4ATPH/JAiwKAgsDh JhY69M3QAwAYRlwptemRtSofe4SrnjM= -----END CERTIFICATE-----Generated at Thu Mar 26 08:22:35 2026 by rpki-client