$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/efd5b1a7-a066-35e8-b1de-4f3895d78184.roa File: efd5b1a7-a066-35e8-b1de-4f3895d78184.roa (raw, json) Hash identifier: a7GGcBMlCR+DMih9OnbCEUEb/Tiga+K8/315qfmJfpY= Subject key identifier: 8C:C0:6A:18:C6:29:DD:3D:EE:56:FA:16:6D:63:8C:6F:A8:98:4B:D4 Certificate issuer: /CN=a509a7f2-7b5a-4e82-86cc-217eab093131 Certificate serial: 010D0C9F4328584D47C509083BDFBF9157DAB600 Authority key identifier: F5:09:E8:F5:08:1E:9C:78:DB:AF:52:A3:00:53:35:94:85:24:8E:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/efd5b1a7-a066-35e8-b1de-4f3895d78184.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 395173 IP address blocks: 23.149.128.0/23 maxlen: 24 64.239.8.0/21 maxlen: 24 64.239.64.0/22 maxlen: 24 64.239.76.0/22 maxlen: 24 131.226.8.0/22 maxlen: 24 131.226.12.0/24 maxlen: 24 131.226.13.0/24 maxlen: 24 131.226.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:09:08:3b:df:bf:91:57:da:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a509a7f2-7b5a-4e82-86cc-217eab093131 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=56811a26-6654-4500-900c-3a2d4ca75535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4d:66:6c:75:0c:ca:9a:4c:16:80:be:85:27: a2:f1:df:57:09:05:cf:7c:88:a2:91:76:36:29:22: 91:48:a1:5e:70:2d:ce:c5:f8:72:a1:57:02:22:34: 9e:56:8a:86:63:69:fa:62:40:af:f0:8b:6f:25:64: 16:00:55:35:80:25:48:7d:b8:b3:39:45:f7:cd:c0: 03:e7:16:a5:6e:86:4e:1f:d6:09:85:73:50:d0:c8: 91:1d:c0:e2:78:cb:df:28:81:32:48:78:97:ed:33: 44:8a:7d:da:ae:fa:23:49:d0:5f:89:e5:5a:cf:38: c3:60:a2:3e:37:a4:26:d9:56:bc:89:42:04:24:07: 60:06:19:66:be:3b:1a:79:e1:35:6f:c0:6d:10:c8: a9:a4:b4:ec:b0:81:8e:40:68:d9:e5:08:c5:7b:cd: d8:fc:f7:44:e7:d7:11:26:c2:91:da:0b:f6:9a:ac: b5:89:b4:52:3f:68:e6:94:b1:41:8c:82:01:be:8e: 36:fc:04:ce:5b:32:f7:f3:8d:2d:b3:93:a6:cb:bf: 33:bd:dc:82:0c:5a:19:81:fa:47:f1:a5:cc:98:e8: 80:63:ed:af:fd:5d:80:93:a5:01:0a:2d:a0:26:d6: 85:51:87:1b:c4:0b:b1:d3:15:c7:34:92:ec:55:cc: 2b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C0:6A:18:C6:29:DD:3D:EE:56:FA:16:6D:63:8C:6F:A8:98:4B:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/efd5b1a7-a066-35e8-b1de-4f3895d78184.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.crl X509v3 Authority Key Identifier: keyid:F5:09:E8:F5:08:1E:9C:78:DB:AF:52:A3:00:53:35:94:85:24:8E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer sbgp-ipAddrBlock: critical IPv4: 23.149.128.0/23 64.239.8.0/21 64.239.64.0/22 64.239.76.0/22 131.226.8.0-131.226.14.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:89:01:a6:17:de:ea:bc:03:ea:0a:f7:36:a9:48:59:54:4f: 8e:58:0c:63:46:b5:85:04:ce:36:6e:6c:ee:c8:5a:bb:f9:52: b2:bc:9b:54:77:2d:d1:ba:7b:6b:0b:c0:8f:a3:78:b9:ec:5e: 7f:ad:0e:ab:1f:6d:5a:3e:43:18:2f:72:f5:75:f6:ab:bc:9a: 86:4d:02:cb:1e:cc:4d:38:ae:f8:17:80:34:02:98:95:8e:98: 9f:2d:5b:2d:87:4e:44:d0:83:1f:a4:6e:65:39:9a:ff:ec:51: a9:f8:5c:95:cc:c0:63:7d:fd:17:93:37:af:c0:4a:cf:74:8f: 1f:01:06:67:99:1e:5c:2c:a2:d4:bc:da:de:29:9d:95:ff:9d: 1b:cf:b5:02:45:c2:26:fb:43:a8:b4:66:b1:87:38:ae:78:2f: fb:7f:82:06:16:8d:75:fc:3a:fb:14:f4:4f:ce:4d:b5:06:5c: b9:25:eb:70:f0:78:94:34:dd:14:54:ae:80:22:8b:6b:81:16: b6:df:d0:49:2c:bd:0a:b7:0d:4d:8a:93:00:8e:55:2f:70:2b: e5:e6:9b:8b:66:85:72:c0:dd:85:62:69:0f:ca:a9:00:db:07: a2:e3:66:3a:65:cf:4c:25:ca:64:b9:7f:fc:99:65:c2:ad:a2: af:08:95:35 -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWE1HxQkIO9+/kVfatgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUwOWE3ZjItN2I1YS00ZTgyLTg2Y2MtMjE3ZWFiMDkz MTMxMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk NTY4MTFhMjYtNjY1NC00NTAwLTkwMGMtM2EyZDRjYTc1NTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik1mbHUMyppMFoC+hSei8d9XCQXPfIiikXY2 KSKRSKFecC3OxfhyoVcCIjSeVoqGY2n6YkCv8ItvJWQWAFU1gCVIfbizOUX3zcAD 5xalboZOH9YJhXNQ0MiRHcDieMvfKIEySHiX7TNEin3arvojSdBfieVazzjDYKI+ N6Qm2Va8iUIEJAdgBhlmvjsaeeE1b8BtEMippLTssIGOQGjZ5QjFe83Y/PdE59cR JsKR2gv2mqy1ibRSP2jmlLFBjIIBvo42/ATOWzL3840ts5Omy78zvdyCDFoZgfpH 8aXMmOiAY+2v/V2Ak6UBCi2gJtaFUYcbxAux0xXHNJLsVcwr+wIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFIzAahjGKd097lb6Fm1jjG+omEvUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hNTA5 YTdmMi03YjVhLTRlODItODZjYy0yMTdlYWIwOTMxMzEvZWZkNWIxYTctYTA2Ni0z NWU4LWIxZGUtNGYzODk1ZDc4MTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTUwOWE3ZjItN2I1YS00ZTgyLTg2 Y2MtMjE3ZWFiMDkzMTMxL2E1MDlhN2YyLTdiNWEtNGU4Mi04NmNjLTIxN2VhYjA5 MzEzMS5jcmwwHwYDVR0jBBgwFoAU9Qno9QgenHjbr1KjAFM1lIUkjuswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hNTA5YTdmMi03YjVhLTRlODItODZjYy0yMTdl YWIwOTMxMzEuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBF5WAAwQD QO8IAwQCQO9AAwQCQO9MMAwDBAOD4ggDBACD4g4wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAK4kBphfe6rwD 6gr3NqlIWVRPjlgMY0a1hQTONm5s7shau/lSsrybVHct0bp7awvAj6N4uexef60O qx9tWj5DGC9y9XX2q7yahk0Cyx7MTTiu+BeANAKYlY6Yny1bLYdORNCDH6RuZTma /+xRqfhclczAY339F5M3r8BKz3SPHwEGZ5keXCyi1Lza3imdlf+dG8+1AkXCJvtD qLRmsYc4rngv+3+CBhaNdfw6+xT0T85NtQZcuSXrcPB4lDTdFFSugCKLa4EWtt/Q SSy9CrcNTYqTAI5VL3Ar5eabi2aFcsDdhWJpD8qpANsHouNmOmXPTCXKZLl//Jll wq2irwiVNQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:17:44 2026 by rpki-client