$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/821d388f-a517-3721-bd73-97470ca4681b.roa File: 821d388f-a517-3721-bd73-97470ca4681b.roa (raw, json) Hash identifier: nD7ueaESqt5aqhhv4vSEqDqj/B3XFnfjF2yq2IGfP2M= Subject key identifier: 4C:93:CA:3F:66:C2:A2:8D:7B:3A:EC:AE:E7:F8:60:E5:81:54:FC:FB Certificate issuer: /CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8 Certificate serial: 010D0C9F4328584D24E10EA8148744A1107BE300 Authority key identifier: 27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/821d388f-a517-3721-bd73-97470ca4681b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 32002 IP address blocks: 163.123.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:0e:a8:14:87:44:a1:10:7b:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=a1640f37-dacb-4802-abd1-80c89d9f2008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6d:ae:09:78:9c:ea:6f:25:7e:0b:bb:bb:99: ab:f9:73:ed:62:d3:b1:6b:36:1c:8a:a3:f4:57:64: 20:8f:e3:56:26:44:f2:65:43:83:f2:6c:27:be:ad: 9c:93:cc:64:de:1d:a4:c7:71:cd:b2:65:ce:e6:bc: 16:a5:46:42:b4:d0:6d:5b:fb:f6:ae:1b:75:28:e0: c8:88:ee:b2:a9:2d:5b:c1:64:75:94:68:fa:de:6b: e7:83:22:d1:d9:fb:08:96:28:41:17:ee:38:f7:73: ef:3d:61:e2:9c:c0:a1:7e:2d:7d:ce:57:4e:28:64: d0:0c:ff:f8:69:87:52:02:78:24:16:b8:7d:97:02: f0:74:a1:56:2e:59:e2:57:37:bc:c0:dd:1e:01:69: 3d:17:cc:f7:df:06:44:64:dc:cf:ee:81:04:38:c3: fe:cb:a6:33:c1:d8:00:a0:3a:85:fc:e5:b2:6a:81: bd:45:bc:c2:40:ff:0a:f2:f3:dd:e9:f4:c5:e3:2b: 46:89:9f:4d:b8:9a:4f:25:e1:1e:0f:32:0d:58:72: 1b:bb:39:b6:48:06:29:62:33:e1:eb:ef:cb:77:72: 6c:e5:2e:d9:a0:37:93:4f:44:59:1c:05:f1:71:94: 8c:16:4f:ad:e1:d8:d6:9c:23:36:71:81:a6:81:5b: f9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:93:CA:3F:66:C2:A2:8D:7B:3A:EC:AE:E7:F8:60:E5:81:54:FC:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/821d388f-a517-3721-bd73-97470ca4681b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl X509v3 Authority Key Identifier: keyid:27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer sbgp-ipAddrBlock: critical IPv4: 163.123.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:7e:15:39:36:83:91:a0:4b:f0:01:a2:e6:08:56:da:47:bf: 7e:06:eb:ff:85:70:38:1b:43:c4:ca:79:70:b1:b0:5c:8a:e2: 7a:18:31:2c:d3:40:2a:2d:7e:50:1b:1f:ea:12:5e:f6:3e:ea: 40:bd:ea:ea:2e:dc:0c:20:92:38:ec:23:73:3d:4b:4a:6d:6f: 4d:c1:ce:a5:77:36:0e:ea:69:47:35:99:81:1e:98:5f:bb:c7: d6:d2:6d:3e:c1:fd:99:13:14:63:00:58:0f:93:88:c9:b0:d1: 5a:7b:3c:99:1a:a2:9b:4b:03:b7:90:d5:aa:ef:a3:9f:90:e7: 55:d6:9d:96:36:d0:3c:38:bc:38:54:ec:82:88:bc:af:51:a6: 54:c8:02:21:71:f8:2c:35:fe:93:71:71:e5:89:a8:84:cf:cf: 71:49:53:da:ef:91:09:ad:4e:70:74:9b:4f:59:53:0b:ab:a6: c9:34:3a:b5:eb:77:db:88:05:a4:0f:6f:7d:2d:cb:b5:06:23: 4a:5f:bd:51:d8:55:a3:eb:47:5a:02:5b:c5:bd:01:e6:d0:3e: 12:7c:24:d4:08:1a:a1:a9:4e:9b:f8:38:c2:ae:92:d5:35:e5: 12:0a:df:84:94:69:25:9a:a5:17:cf:44:a4:22:20:ed:0e:9c: 34:f9:42:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Q6oFIdEoRB74wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThiODRlMmItYWZiZS00YjM1LWIwMDUtZTBkZmNhMmUy M2Q4MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YTE2NDBmMzctZGFjYi00ODAyLWFiZDEtODBjODlkOWYyMDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm2uCXic6m8lfgu7u5mr+XPtYtOxazYciqP0 V2Qgj+NWJkTyZUOD8mwnvq2ck8xk3h2kx3HNsmXO5rwWpUZCtNBtW/v2rht1KODI iO6yqS1bwWR1lGj63mvngyLR2fsIlihBF+4493PvPWHinMChfi19zldOKGTQDP/4 aYdSAngkFrh9lwLwdKFWLlniVze8wN0eAWk9F8z33wZEZNzP7oEEOMP+y6YzwdgA oDqF/OWyaoG9RbzCQP8K8vPd6fTF4ytGiZ9NuJpPJeEeDzINWHIbuzm2SAYpYjPh 6+/Ld3Js5S7ZoDeTT0RZHAXxcZSMFk+t4djWnCM2cYGmgVv5iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyTyj9mwqKNezrsruf4YOWBVPz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hOGI4 NGUyYi1hZmJlLTRiMzUtYjAwNS1lMGRmY2EyZTIzZDgvODIxZDM4OGYtYTUxNy0z NzIxLWJkNzMtOTc0NzBjYTQ2ODFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYThiODRlMmItYWZiZS00YjM1LWIw MDUtZTBkZmNhMmUyM2Q4L2E4Yjg0ZTJiLWFmYmUtNGIzNS1iMDA1LWUwZGZjYTJl MjNkOC5jcmwwHwYDVR0jBBgwFoAUJyaHnCMjdlLoJfSaxiQ6/6bmTi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hOGI4NGUyYi1hZmJlLTRiMzUtYjAwNS1lMGRm Y2EyZTIzZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo3vsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1+FTk2g5GgS/ABouYIVtpHv34G6/+FcDgbQ8TKeXCxsFyK4noYMSzT QCotflAbH+oSXvY+6kC96uou3AwgkjjsI3M9S0ptb03BzqV3Ng7qaUc1mYEemF+7 x9bSbT7B/ZkTFGMAWA+TiMmw0Vp7PJkaoptLA7eQ1arvo5+Q51XWnZY20Dw4vDhU 7IKIvK9RplTIAiFx+Cw1/pNxceWJqITPz3FJU9rvkQmtTnB0m09ZUwurpsk0OrXr d9uIBaQPb30ty7UGI0pfvVHYVaPrR1oCW8W9AebQPhJ8JNQIGqGpTpv4OMKuktU1 5RIK34SUaSWapRfPRKQiIO0OnDT5QiM= -----END CERTIFICATE-----Generated at Sat Mar 21 02:25:25 2026 by rpki-client