$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1b988d6e-c498-37ed-88a5-8fc2554a27a6.roa File: 1b988d6e-c498-37ed-88a5-8fc2554a27a6.roa (raw, json) Hash identifier: 4gJWF+c9kWo4hNH2Pj+al8xdSct4hBaRPTtNomaehs8= Subject key identifier: C0:AA:8E:97:1E:D8:31:F2:3B:BA:35:62:B4:57:EA:7D:10:F2:19:4D Certificate issuer: /CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f Certificate serial: 010D0C9F4328584D39CF7E07D03E73CC27D6B400 Authority key identifier: B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1b988d6e-c498-37ed-88a5-8fc2554a27a6.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 3742 IP address blocks: 23.128.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:7e:07:d0:3e:73:cc:27:d6:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=8e02ad1b-6d60-45a9-960c-8eecbe9d39a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:de:5e:74:92:84:66:06:02:73:74:d4:51:53: ad:95:bb:af:5a:4b:be:67:4e:19:49:d8:72:23:ef: 01:00:9e:a7:db:c9:49:90:5b:0b:a0:db:29:15:ea: 7a:ff:31:19:ff:76:31:9f:c4:65:75:a4:2b:98:53: f9:d7:ae:16:33:bb:a5:b3:ea:99:fb:16:19:2a:f2: 45:fc:ee:d1:0d:8c:67:f2:5c:6a:a9:bd:6b:69:eb: 9e:19:1b:46:0f:bb:8a:17:86:df:83:8b:34:e1:58: d5:29:c0:a8:e6:f6:c3:25:47:ab:06:13:59:17:01: 02:2f:29:98:fc:87:7f:2c:33:71:0c:e5:e9:9d:e6: 57:40:dc:58:74:13:db:fa:48:1e:28:dd:2e:e3:65: f5:e5:a4:58:dc:19:b4:37:eb:9e:48:30:4a:b6:b2: 1f:91:b9:7f:36:c8:6d:34:77:44:24:3b:23:db:e6: 57:5a:2d:a2:78:df:4a:ba:2f:b7:2b:44:f3:8d:fe: d6:ea:a6:2a:75:24:fe:5a:d9:d9:74:bf:e0:d2:06: a1:0e:29:df:c0:64:3c:83:60:28:6e:45:a2:25:ce: e8:bd:e7:31:25:d4:a4:72:6f:3e:b4:90:b0:91:63: ab:4a:52:dc:29:6a:f2:51:a8:a3:42:67:aa:89:71: 8c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AA:8E:97:1E:D8:31:F2:3B:BA:35:62:B4:57:EA:7D:10:F2:19:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1b988d6e-c498-37ed-88a5-8fc2554a27a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl X509v3 Authority Key Identifier: keyid:B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer sbgp-ipAddrBlock: critical IPv4: 23.128.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:0b:bf:24:fa:08:58:45:96:75:cd:ac:42:d5:3c:a3:bf:b9: 75:d9:1d:10:49:dd:82:61:2a:cd:6b:17:91:63:28:01:72:71: 87:76:2d:bd:ab:95:44:69:d8:d3:92:a2:2d:37:0b:1b:b7:f4: cc:69:5c:62:61:b7:8c:5a:00:2e:7f:1d:21:d6:c9:18:3f:88: ae:dd:73:82:fe:fa:e3:29:8e:59:38:4a:b8:7a:26:79:bd:9d: 26:14:79:52:50:71:9c:8d:13:44:99:2a:61:cc:a1:02:8a:89: 19:e6:80:1a:da:08:9d:93:36:fa:e1:dd:4c:00:28:ee:28:00: 94:59:bc:66:5e:34:ba:30:b8:10:43:6f:af:d8:60:24:66:e9: b1:cd:30:23:7d:01:30:07:6e:7a:58:e9:b7:4f:30:b7:f5:a2: 89:fa:cb:5b:0c:34:14:f5:da:53:4e:d5:91:32:d7:2b:27:b1: 43:1c:e9:71:53:7d:cf:47:85:48:d6:05:23:2c:99:dd:d9:b1: 5b:56:44:d9:6e:e5:9c:d4:d2:7a:c0:56:3d:1e:92:67:30:cf: 4e:e7:6e:dd:1f:e5:70:8c:12:c0:31:db:6a:2c:35:6f:db:bf: 60:b6:b7:0e:07:44:2c:d4:90:20:31:d2:c3:29:8c:7c:c6:c6: 7b:40:88:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z34H0D5zzCfWtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkOTViYjYtZjhlNi00ZDY2LThkN2ItZDVhMzQyYjM1 ODdmMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk OGUwMmFkMWItNmQ2MC00NWE5LTk2MGMtOGVlY2JlOWQzOWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN5edJKEZgYCc3TUUVOtlbuvWku+Z04ZSdhy I+8BAJ6n28lJkFsLoNspFep6/zEZ/3Yxn8RldaQrmFP5164WM7uls+qZ+xYZKvJF /O7RDYxn8lxqqb1raeueGRtGD7uKF4bfg4s04VjVKcCo5vbDJUerBhNZFwECLymY /Id/LDNxDOXpneZXQNxYdBPb+kgeKN0u42X15aRY3Bm0N+ueSDBKtrIfkbl/Nsht NHdEJDsj2+ZXWi2ieN9Kui+3K0Tzjf7W6qYqdST+WtnZdL/g0gahDinfwGQ8g2Ao bkWiJc7ovecxJdSkcm8+tJCwkWOrSlLcKWryUaijQmeqiXGMGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCqjpce2DHyO7o1YrRX6n0Q8hlNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYmQ5 NWJiNi1mOGU2LTRkNjYtOGQ3Yi1kNWEzNDJiMzU4N2YvMWI5ODhkNmUtYzQ5OC0z N2VkLTg4YTUtOGZjMjU1NGEyN2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWJkOTViYjYtZjhlNi00ZDY2LThk N2ItZDVhMzQyYjM1ODdmLzFiZDk1YmI2LWY4ZTYtNGQ2Ni04ZDdiLWQ1YTM0MmIz NTg3Zi5jcmwwHwYDVR0jBBgwFoAUt1f5a1swFAeafsmLHd40lt3uqFAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYmQ5NWJiNi1mOGU2LTRkNjYtOGQ3Yi1kNWEz NDJiMzU4N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4CIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKALvyT6CFhFlnXNrELVPKO/uXXZHRBJ3YJhKs1rF5FjKAFycYd2Lb2r lURp2NOSoi03Cxu39MxpXGJht4xaAC5/HSHWyRg/iK7dc4L++uMpjlk4Srh6Jnm9 nSYUeVJQcZyNE0SZKmHMoQKKiRnmgBraCJ2TNvrh3UwAKO4oAJRZvGZeNLowuBBD b6/YYCRm6bHNMCN9ATAHbnpY6bdPMLf1oon6y1sMNBT12lNO1ZEy1ysnsUMc6XFT fc9HhUjWBSMsmd3ZsVtWRNlu5ZzU0nrAVj0ekmcwz07nbt0f5XCMEsAx22osNW/b v2C2tw4HRCzUkCAx0sMpjHzGxntAiLk= -----END CERTIFICATE-----Generated at Thu Mar 26 15:51:30 2026 by rpki-client