$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/01307e7f-cc1e-3508-a44c-557b2e686d06.roa File: 01307e7f-cc1e-3508-a44c-557b2e686d06.roa (raw, json) Hash identifier: OcYJErwBuoG9TKSCx+80yuHo3z9vRoHqZHmdAlHlOt0= Subject key identifier: 70:9E:E0:BB:CB:6C:7A:62:1C:23:DB:7B:8B:F9:9D:E2:D8:60:BC:DB Certificate issuer: /CN=91a5f71b-bf1d-474c-b568-55393b7da475 Certificate serial: 010D0C9F4328584D386A316486A582BB7E999B00 Authority key identifier: E4:54:BF:12:DB:F3:85:A8:7A:77:C1:2C:DD:8C:47:AF:A4:DF:DD:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/01307e7f-cc1e-3508-a44c-557b2e686d06.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 401345 IP address blocks: 23.134.252.0/24 maxlen: 24 2602:f88e::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/91a5f71b-bf1d-474c-b568-55393b7da475.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/91a5f71b-bf1d-474c-b568-55393b7da475.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:31:64:86:a5:82:bb:7e:99:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a5f71b-bf1d-474c-b568-55393b7da475 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=8931a5dd-9b0a-41f4-b0cf-acd463a8f4da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c9:41:f2:9c:3e:ef:a9:27:0e:c0:40:0b:77: a6:bb:53:0d:3c:10:1d:5f:d8:e7:96:5f:b4:30:eb: 70:e0:9f:2c:d5:d7:d4:d0:de:ab:85:07:1c:a4:59: 5a:a8:bc:d3:17:74:c7:84:61:5d:8c:cd:1d:a5:d3: b0:81:f4:50:eb:23:33:c4:49:9e:f4:92:97:1b:07: b5:32:7b:1c:32:f2:51:f0:57:3e:52:3b:77:82:51: 78:30:9e:a1:b0:9c:3c:3f:4d:6e:92:5a:35:3e:ef: 63:07:a0:8f:92:ff:cd:b3:76:f4:b7:67:96:43:24: 84:94:5b:2d:1c:17:a0:72:81:1c:bc:4b:4c:ff:d5: 24:e2:45:48:1a:55:66:51:33:a2:83:e3:de:28:5e: e7:57:09:6d:49:6c:c4:84:57:12:2c:91:f5:0b:1d: 17:ae:92:00:45:f1:6d:26:9c:52:5d:5f:47:03:97: 07:a0:fe:b9:c7:3d:6c:a7:12:56:65:07:33:2f:2e: f6:28:0f:d2:2d:10:28:4c:86:2f:32:4e:68:5e:90: 28:92:51:af:95:2d:23:83:10:90:67:cb:a7:4d:c4: 72:09:1e:44:53:79:9e:47:04:41:bf:84:2d:fd:64: 20:bc:e7:55:a1:fc:12:80:48:e6:c9:e3:bb:6d:64: eb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9E:E0:BB:CB:6C:7A:62:1C:23:DB:7B:8B:F9:9D:E2:D8:60:BC:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/01307e7f-cc1e-3508-a44c-557b2e686d06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/91a5f71b-bf1d-474c-b568-55393b7da475.crl X509v3 Authority Key Identifier: keyid:E4:54:BF:12:DB:F3:85:A8:7A:77:C1:2C:DD:8C:47:AF:A4:DF:DD:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475.cer sbgp-ipAddrBlock: critical IPv4: 23.134.252.0/24 IPv6: 2602:f88e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:ca:7a:fd:7d:c4:ce:95:de:c8:df:8c:d8:6b:7c:a3:70:60: d9:e9:32:6e:33:82:a9:5d:93:fd:2a:4b:d6:29:a9:1e:31:29: 84:17:43:49:0b:ff:14:18:f7:bf:22:b2:4c:26:38:65:76:ae: cd:26:74:7d:7a:cd:04:2f:2a:65:2a:4f:92:9a:2d:8e:1f:5f: 68:c2:f2:b7:b5:22:a6:d7:2e:00:d8:8b:4b:92:fc:86:3a:53: 3f:a4:4a:19:45:d9:8b:e4:8c:be:6c:2a:cc:b3:62:30:57:bd: e1:cd:70:30:0a:b5:cf:e7:f0:45:7e:7a:72:60:5d:34:5f:67: 28:61:83:8a:e9:6a:c1:8d:dd:6b:ef:0c:89:99:ef:39:32:05: 8a:e5:5b:da:54:64:8e:13:73:5d:c5:79:e5:c7:d8:f6:bb:40: dd:c0:56:0c:d8:4c:82:cf:8f:61:9b:89:87:1b:fb:dc:a8:1c: e7:f1:ab:1b:41:2e:66:02:f9:6b:0b:73:46:ea:23:20:da:50: de:ce:74:09:bf:ab:ba:ed:79:f6:e0:fd:97:31:36:ae:93:42: 59:c5:f9:58:c0:cb:0c:63:85:a1:10:a1:49:0f:8a:ef:c1:e9: 18:03:b9:a3:b5:98:9d:25:44:6f:d0:6e:92:65:0b:01:56:76: b5:9e:2b:f7 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE04ajFkhqWCu36ZmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFhNWY3MWItYmYxZC00NzRjLWI1NjgtNTUzOTNiN2Rh NDc1MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk ODkzMWE1ZGQtOWIwYS00MWY0LWIwY2YtYWNkNDYzYThmNGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18lB8pw+76knDsBAC3emu1MNPBAdX9jnll+0 MOtw4J8s1dfU0N6rhQccpFlaqLzTF3THhGFdjM0dpdOwgfRQ6yMzxEme9JKXGwe1 MnscMvJR8Fc+Ujt3glF4MJ6hsJw8P01uklo1Pu9jB6CPkv/Ns3b0t2eWQySElFst HBegcoEcvEtM/9Uk4kVIGlVmUTOig+PeKF7nVwltSWzEhFcSLJH1Cx0XrpIARfFt JpxSXV9HA5cHoP65xz1spxJWZQczLy72KA/SLRAoTIYvMk5oXpAoklGvlS0jgxCQ Z8unTcRyCR5EU3meRwRBv4Qt/WQgvOdVofwSgEjmyeO7bWTrVwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHCe4LvLbHpiHCPbe4v5neLYYLzbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85MWE1 ZjcxYi1iZjFkLTQ3NGMtYjU2OC01NTM5M2I3ZGE0NzUvMDEzMDdlN2YtY2MxZS0z NTA4LWE0NGMtNTU3YjJlNjg2ZDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTFhNWY3MWItYmYxZC00NzRjLWI1 NjgtNTUzOTNiN2RhNDc1LzkxYTVmNzFiLWJmMWQtNDc0Yy1iNTY4LTU1MzkzYjdk YTQ3NS5jcmwwHwYDVR0jBBgwFoAU5FS/Etvzhah6d8Es3YxHr6Tf3YQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85MWE1ZjcxYi1iZjFkLTQ3NGMtYjU2OC01NTM5 M2I3ZGE0NzUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4b8MA4E AgACMAgDBgAmAviOADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC0ynr9fcTOld7I34zYa3yjcGDZ6TJuM4Kp XZP9KkvWKakeMSmEF0NJC/8UGPe/IrJMJjhldq7NJnR9es0ELyplKk+Smi2OH19o wvK3tSKm1y4A2ItLkvyGOlM/pEoZRdmL5Iy+bCrMs2IwV73hzXAwCrXP5/BFfnpy YF00X2coYYOK6WrBjd1r7wyJme85MgWK5VvaVGSOE3NdxXnlx9j2u0DdwFYM2EyC z49hm4mHG/vcqBzn8asbQS5mAvlrC3NG6iMg2lDeznQJv6u67Xn24P2XMTauk0JZ xflYwMsMY4WhEKFJD4rvwekYA7mjtZidJURv0G6SZQsBVna1niv3 -----END CERTIFICATE-----Generated at Thu Mar 26 15:18:40 2026 by rpki-client