$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a/8c7f94ca-9145-3593-a9bd-2fa38534ac23.roa File: 8c7f94ca-9145-3593-a9bd-2fa38534ac23.roa (raw, json) Hash identifier: rHioLmX6HUGfbDTZPlb1Ny+722m7EBLN4iZ57At7WHc= Subject key identifier: 00:84:07:4D:33:EB:DE:B2:84:0C:E7:38:90:BE:97:92:99:79:67:4E Certificate issuer: /CN=c873b1de-87e4-4876-98b6-52dff5baa65a Certificate serial: 010D0C9F4328584D40CA3205182155C386020360 Authority key identifier: CB:1B:D0:91:1F:26:8D:A8:35:17:B1:AB:12:AB:FF:B9:1E:7F:B2:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a/8c7f94ca-9145-3593-a9bd-2fa38534ac23.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 32989 IP address blocks: 23.142.40.0/24 maxlen: 24 130.12.220.0/22 maxlen: 22 199.33.118.0/24 maxlen: 24 207.228.204.0/24 maxlen: 24 207.228.205.0/24 maxlen: 24 207.228.206.0/24 maxlen: 24 2602:fbed::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a/c873b1de-87e4-4876-98b6-52dff5baa65a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a/c873b1de-87e4-4876-98b6-52dff5baa65a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:32:05:18:21:55:c3:86:02:03:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c873b1de-87e4-4876-98b6-52dff5baa65a Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=993c8859-2235-420f-95c1-8a1083c2a99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c6:fd:be:7a:ee:4a:81:35:0a:7d:80:eb:ef: 56:b9:90:6b:ba:8c:0c:07:29:e1:15:a2:86:c9:07: ee:88:ac:30:e4:61:81:a1:82:79:0c:40:23:e9:c3: 4b:e8:6a:47:f8:52:2a:f0:13:dd:90:cb:e1:4e:a6: 65:ce:09:bd:ef:87:5a:db:8f:71:bc:59:f0:01:b8: bd:4a:b1:2f:d1:9c:19:0f:69:4d:19:c5:bf:bb:50: 42:c9:0f:00:b8:41:09:a6:5d:7e:1d:a2:48:34:b7: ca:23:bf:a4:7c:0a:01:48:38:66:4d:ce:57:86:3a: 82:44:a3:25:1f:11:04:c1:ca:0b:29:c7:f2:6e:7a: 93:7a:4d:98:7b:a8:81:d0:d2:28:95:f2:a4:22:36: e4:ad:a5:89:05:53:a7:db:9c:e2:6e:10:eb:e3:d2: 5a:c5:78:55:34:8d:13:e8:ce:7f:bf:78:ac:2a:ba: 62:9e:ab:5a:d2:27:92:0e:bc:67:39:6f:0a:82:b2: 62:47:91:4d:ee:9c:66:99:47:61:df:f1:51:64:a1: fd:11:4e:6f:06:4b:e7:2e:48:3b:c2:ac:e5:73:6e: c4:f8:5f:c4:21:62:d5:02:2e:09:e4:24:14:dd:88: 66:5d:e7:d3:87:74:80:26:c8:0d:16:b7:c8:c2:0e: 79:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:84:07:4D:33:EB:DE:B2:84:0C:E7:38:90:BE:97:92:99:79:67:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a/8c7f94ca-9145-3593-a9bd-2fa38534ac23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a/c873b1de-87e4-4876-98b6-52dff5baa65a.crl X509v3 Authority Key Identifier: keyid:CB:1B:D0:91:1F:26:8D:A8:35:17:B1:AB:12:AB:FF:B9:1E:7F:B2:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c873b1de-87e4-4876-98b6-52dff5baa65a.cer sbgp-ipAddrBlock: critical IPv4: 23.142.40.0/24 130.12.220.0/22 199.33.118.0/24 207.228.204.0-207.228.206.255 IPv6: 2602:fbed::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:45:32:82:0e:c4:e6:1e:31:27:39:29:ca:5d:27:2f:b3:0e: 78:23:a2:35:17:50:1d:d2:5b:66:b7:c1:63:54:7a:6a:86:7a: 64:83:d4:6b:6d:1c:2f:d9:c4:47:de:ad:12:14:bd:96:20:52: 1e:34:c3:cb:5f:0c:23:66:45:e1:64:88:01:56:ec:29:b2:fb: cf:e7:29:d5:4c:f4:89:b2:9b:3d:40:e9:2e:c9:86:67:5f:c1: 35:35:16:6c:4e:a7:6f:b9:88:90:f4:c1:93:e4:28:0f:f8:de: 1a:8f:bc:40:f5:57:31:f0:38:c5:b9:68:f9:f2:d0:ce:da:38: e4:3e:db:45:78:3c:f5:05:80:b2:6c:6a:7f:78:f4:21:99:8a: ca:e3:45:a1:94:75:98:e4:72:93:14:f9:5a:07:41:2f:77:86: f3:fa:8a:43:02:f8:fa:13:2d:82:42:5b:46:8a:39:06:01:e5: ee:6f:23:76:24:e5:17:47:21:45:2e:8f:a9:ca:21:e4:04:32: a5:a8:d1:2e:b5:50:bb:af:69:90:7f:9a:21:40:0b:d9:50:f1: 76:bc:03:ad:96:de:ed:06:88:cc:58:f7:70:28:d1:b9:97:fc: f6:a7:ad:e7:9e:d1:4d:ec:fe:af:68:d2:7d:16:17:60:58:59: 43:28:17:8f -----BEGIN CERTIFICATE----- MIIGbDCCBVSgAwIBAgIUAQ0Mn0MoWE1AyjIFGCFVw4YCA2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg3M2IxZGUtODdlNC00ODc2LTk4YjYtNTJkZmY1YmFh NjVhMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk OTkzYzg4NTktMjIzNS00MjBmLTk1YzEtOGExMDgzYzJhOTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMb9vnruSoE1Cn2A6+9WuZBruowMBynhFaKG yQfuiKww5GGBoYJ5DEAj6cNL6GpH+FIq8BPdkMvhTqZlzgm974da249xvFnwAbi9 SrEv0ZwZD2lNGcW/u1BCyQ8AuEEJpl1+HaJINLfKI7+kfAoBSDhmTc5XhjqCRKMl HxEEwcoLKcfybnqTek2Ye6iB0NIolfKkIjbkraWJBVOn25zibhDr49JaxXhVNI0T 6M5/v3isKrpinqta0ieSDrxnOW8KgrJiR5FN7pxmmUdh3/FRZKH9EU5vBkvnLkg7 wqzlc27E+F/EIWLVAi4J5CQU3YhmXefTh3SAJsgNFrfIwg554wIDAQABo4IDfjCC A3owHQYDVR0OBBYEFACEB00z696yhAznOJC+l5KZeWdOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jODcz YjFkZS04N2U0LTQ4NzYtOThiNi01MmRmZjViYWE2NWEvOGM3Zjk0Y2EtOTE0NS0z NTkzLWE5YmQtMmZhMzg1MzRhYzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzg3M2IxZGUtODdlNC00ODc2LTk4 YjYtNTJkZmY1YmFhNjVhL2M4NzNiMWRlLTg3ZTQtNDg3Ni05OGI2LTUyZGZmNWJh YTY1YS5jcmwwHwYDVR0jBBgwFoAUyxvQkR8mjag1F7GrEqv/uR5/sr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jODczYjFkZS04N2U0LTQ4NzYtOThiNi01MmRm ZjViYWE2NWEuY2VyMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQAF44oAwQC ggzcAwQAxyF2MAwDBALP5MwDBADP5M4wDQQCAAIwBwMFACYC++0wVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA GEUygg7E5h4xJzkpyl0nL7MOeCOiNRdQHdJbZrfBY1R6aoZ6ZIPUa20cL9nER96t EhS9liBSHjTDy18MI2ZF4WSIAVbsKbL7z+cp1Uz0ibKbPUDpLsmGZ1/BNTUWbE6n b7mIkPTBk+QoD/jeGo+8QPVXMfA4xblo+fLQzto45D7bRXg89QWAsmxqf3j0IZmK yuNFoZR1mORykxT5WgdBL3eG8/qKQwL4+hMtgkJbRoo5BgHl7m8jdiTlF0chRS6P qcoh5AQypajRLrVQu69pkH+aIUAL2VDxdrwDrZbe7QaIzFj3cCjRuZf89qet557R Tez+r2jSfRYXYFhZQygXjw== -----END CERTIFICATE-----Generated at Sun Mar 22 23:48:22 2026 by rpki-client