$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/eb089c1b-c5cb-3caa-a868-952fc11242db.roa File: eb089c1b-c5cb-3caa-a868-952fc11242db.roa (raw, json) Hash identifier: tIBAvjxk1il2jrpBrFESEuOraQ86zbySWmcHDLrIVdM= Subject key identifier: D6:0A:52:86:DD:38:D5:BC:60:97:66:47:C4:6E:D3:96:83:C0:06:A8 Certificate issuer: /CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Certificate serial: 010D0C9F4328584D8EF55BACF611E5E6A1ADD650 Authority key identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/eb089c1b-c5cb-3caa-a868-952fc11242db.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 393444 IP address blocks: 23.165.48.0/24 maxlen: 24 2602:fd1c::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:5b:ac:f6:11:e5:e6:a1:ad:d6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=fb9dfc03-7680-4d0e-bbcf-48b4f4db892e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f1:09:42:3d:12:34:f0:3c:7c:56:44:24:52: 4a:a8:cd:ad:05:19:b3:cc:f9:27:25:dc:91:b6:4b: d3:11:32:9f:5e:ec:83:99:6e:ff:6a:d9:18:a5:5d: cd:a5:cd:37:b0:7e:33:82:86:4e:05:ef:d0:a9:fe: 32:7c:68:77:f8:4f:94:78:66:6e:ce:44:33:29:d9: b4:af:25:b1:54:db:ff:6d:a9:08:ab:ab:cc:28:cd: 3b:38:6c:d5:b0:9f:b6:37:d3:74:7e:6c:b8:ea:8e: d4:49:87:a9:00:c1:e3:58:a3:79:36:8a:72:db:dd: 7f:26:59:9f:54:6b:f3:76:2b:69:98:eb:38:5c:be: 5f:b6:7b:81:e4:75:96:40:5a:94:ce:3b:81:ad:e4: c4:07:9c:5c:55:da:a6:c3:86:dc:97:fb:a2:77:e4: 78:f7:ba:42:82:85:15:2c:38:ed:d9:ff:05:37:8f: 27:c1:53:ab:af:a7:7f:16:e3:6d:b9:62:d4:a0:26: df:65:13:a7:93:17:25:ac:0c:ed:4c:73:4a:80:c6: 99:1d:dc:20:97:6b:62:ed:ad:16:85:f2:38:9d:33: 0e:94:3a:91:e8:4e:a4:02:4c:a4:b1:55:08:d3:87: 4c:ea:1f:0a:f7:14:a5:09:d4:77:e4:7a:bc:af:86: d1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0A:52:86:DD:38:D5:BC:60:97:66:47:C4:6E:D3:96:83:C0:06:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/eb089c1b-c5cb-3caa-a868-952fc11242db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl X509v3 Authority Key Identifier: keyid:C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer sbgp-ipAddrBlock: critical IPv4: 23.165.48.0/24 IPv6: 2602:fd1c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:22:49:46:00:ba:73:ff:7a:da:09:09:f6:1d:a4:58:fb:a7: ce:ed:cb:d8:1c:56:b2:83:4e:28:bb:13:2d:90:08:c9:96:c5: 60:50:d0:8e:64:0a:71:7d:eb:11:60:4d:f7:d2:e1:84:e8:5a: 88:32:d4:6e:b9:78:12:4d:97:18:bf:e9:5c:d5:32:ea:de:c0: a8:d1:da:1b:17:1c:fd:d8:4a:34:f5:07:7b:74:02:0e:18:a0: 0a:9f:1f:bd:09:bf:7b:3a:07:a3:d0:72:88:15:9b:db:7d:5a: c1:ae:bf:9a:b8:e4:91:2f:8c:7a:a8:15:35:79:9e:17:11:59: 72:69:88:7e:2e:20:20:ec:29:b8:41:1c:84:2b:d0:31:dd:3a: 77:e9:42:a9:d5:db:3d:b8:30:30:95:22:e8:ee:85:98:0a:47: 6a:e8:68:3f:02:53:cb:ed:71:44:49:ec:27:7c:01:5d:a0:61: b7:db:f8:76:44:e8:fc:6a:98:5d:cd:6e:59:64:ba:8c:44:e4: 55:c6:29:04:e6:7f:29:f5:51:67:fe:64:58:9e:0b:98:47:79: 37:11:a8:38:ff:fc:10:6c:6e:b4:7c:18:77:fe:f3:4b:e7:84: 77:70:a1:19:f8:14:27:c6:1f:be:0c:40:7b:83:4a:8d:29:8d: ed:b3:69:73 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2O9Vus9hHl5qGt1lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1ZjNiMmMtYzM5MS00OWUzLWEzYTUtZWE0MzAyMzVj YzZiMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZmI5ZGZjMDMtNzY4MC00ZDBlLWJiY2YtNDhiNGY0ZGI4OTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/EJQj0SNPA8fFZEJFJKqM2tBRmzzPknJdyR tkvTETKfXuyDmW7/atkYpV3Npc03sH4zgoZOBe/Qqf4yfGh3+E+UeGZuzkQzKdm0 ryWxVNv/bakIq6vMKM07OGzVsJ+2N9N0fmy46o7USYepAMHjWKN5Nopy291/Jlmf VGvzditpmOs4XL5ftnuB5HWWQFqUzjuBreTEB5xcVdqmw4bcl/uid+R497pCgoUV LDjt2f8FN48nwVOrr6d/FuNtuWLUoCbfZROnkxclrAztTHNKgMaZHdwgl2ti7a0W hfI4nTMOlDqR6E6kAkyksVUI04dM6h8K9xSlCdR35Hq8r4bRhQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFNYKUobdONW8YJdmR8Ru05aDwAaoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODVm M2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQzMDIzNWNjNmIvZWIwODljMWItYzVjYi0z Y2FhLWE4NjgtOTUyZmMxMTI0MmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg1ZjNiMmMtYzM5MS00OWUzLWEz YTUtZWE0MzAyMzVjYzZiL2M4NWYzYjJjLWMzOTEtNDllMy1hM2E1LWVhNDMwMjM1 Y2M2Yi5jcmwwHwYDVR0jBBgwFoAUwt9kE8JxBkVO8H7oR5kizmLkhpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODVmM2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQz MDIzNWNjNmIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6UwMA4E AgACMAgDBgQmAv0cADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAeIklGALpz/3raCQn2HaRY+6fO7cvYHFay g04ouxMtkAjJlsVgUNCOZApxfesRYE330uGE6FqIMtRuuXgSTZcYv+lc1TLq3sCo 0dobFxz92Eo09Qd7dAIOGKAKnx+9Cb97Ogej0HKIFZvbfVrBrr+auOSRL4x6qBU1 eZ4XEVlyaYh+LiAg7Cm4QRyEK9Ax3Tp36UKp1ds9uDAwlSLo7oWYCkdq6Gg/AlPL 7XFESewnfAFdoGG32/h2ROj8aphdzW5ZZLqMRORVxikE5n8p9VFn/mRYnguYR3k3 Eag4//wQbG60fBh3/vNL54R3cKEZ+BQnxh++DEB7g0qNKY3ts2lz -----END CERTIFICATE-----Generated at Mon Apr 27 22:52:48 2026 by rpki-client