$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/1584faf1-c6b9-36aa-93c1-0e40302d9104.roa File: 1584faf1-c6b9-36aa-93c1-0e40302d9104.roa (raw, json) Hash identifier: tmSOdnqPiOVeiwI54xVYxTMI7vs1aJN8JOYkdZ2ty+U= Subject key identifier: 1F:20:B8:65:31:A2:75:7A:E4:C1:1E:86:96:7D:0F:4B:37:3C:5F:13 Certificate issuer: /CN=09fb7d57-7876-4e3a-b055-3534010fc6a9 Certificate serial: 010D0C9F4328584D143D571637AF7685900F1680 Authority key identifier: 96:72:1A:72:B1:9C:B8:2E:77:EF:D4:F4:1C:CD:C8:A0:BC:C9:AC:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/1584faf1-c6b9-36aa-93c1-0e40302d9104.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 8095 IP address blocks: 23.157.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:57:16:37:af:76:85:90:0f:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09fb7d57-7876-4e3a-b055-3534010fc6a9 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=495c9528-12a3-4a28-a57b-31bb764d7839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:30:85:9b:d8:66:ec:85:b5:5b:ed:c7:c0:9f: 0b:3f:7f:20:ee:00:5f:1a:a3:16:6a:4f:21:7b:f0: 15:57:fd:42:7c:e9:a0:97:e4:9c:45:e2:b1:91:67: 82:cf:1c:82:9b:55:e6:7e:5b:c9:f2:40:67:48:b7: ff:01:50:55:c8:c6:c0:7a:18:0c:84:59:d5:e5:d2: 05:80:3f:e2:7c:32:91:34:0a:9e:b5:4c:66:17:41: 83:82:d0:f7:6a:f6:37:27:fe:6c:b7:fd:aa:ea:e9: d0:28:7c:be:75:f5:9c:d7:ff:ef:76:de:62:27:ba: f7:e8:b8:04:1b:4e:5e:05:a7:a9:71:68:e0:df:90: 77:16:83:4c:44:33:04:6f:95:05:10:dc:b9:cc:41: d3:54:76:15:b2:d2:aa:fd:cb:44:c5:5f:bf:b1:00: b8:67:14:ca:2d:9a:ef:6f:84:95:6e:52:da:f7:d2: 41:5e:e9:01:65:d6:4b:98:d7:b2:4d:74:79:63:01: 52:d2:3e:65:c4:2d:f6:f2:80:8c:46:4d:55:09:bd: 74:b3:32:fc:a9:d0:c3:5e:38:1a:13:49:e5:29:b3: 71:71:e5:ee:9c:a4:8c:54:01:18:81:f4:4e:b8:88: 20:d5:2b:c9:f7:d1:46:c1:2f:4b:27:d9:2b:b5:35: e9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:20:B8:65:31:A2:75:7A:E4:C1:1E:86:96:7D:0F:4B:37:3C:5F:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/1584faf1-c6b9-36aa-93c1-0e40302d9104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.crl X509v3 Authority Key Identifier: keyid:96:72:1A:72:B1:9C:B8:2E:77:EF:D4:F4:1C:CD:C8:A0:BC:C9:AC:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer sbgp-ipAddrBlock: critical IPv4: 23.157.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:35:f0:f1:cb:17:38:09:12:7c:00:10:91:ed:4e:9b:1d:e0: bd:2a:41:64:35:03:aa:9e:2c:f6:70:5f:0c:30:b1:ba:b6:56: ee:07:d2:18:ed:9b:6d:62:fe:f6:36:b6:04:d4:1e:7a:4a:8d: 0d:f2:c8:4c:f3:44:fe:3a:eb:dd:9f:e4:69:78:cf:ca:42:58: e3:79:68:eb:37:ab:e0:53:9a:cf:d4:dd:d1:3d:16:12:bc:c7: cf:1a:c5:65:39:0b:da:60:ec:66:b6:85:9f:aa:c3:5a:f2:f4: d6:09:77:5a:8c:4f:a7:95:26:3b:5d:cf:16:03:e1:5f:cf:c0: 2c:73:6d:16:18:fe:00:46:d5:38:fd:05:f5:4b:7e:42:72:61: dc:79:e4:15:6b:4c:5c:9e:f1:fc:ba:96:11:b2:bb:69:3b:96: 5b:c3:a7:b3:4f:c6:56:9d:68:13:1c:4d:f2:3b:3c:f9:75:e6: 81:94:ff:f9:80:3c:a0:2b:05:78:1c:22:73:39:17:70:20:af: 2c:61:34:74:84:4a:7d:74:4d:83:47:9a:a1:db:0a:7a:bb:38: 37:23:cc:34:50:58:11:4c:a1:a0:b3:fa:8e:c4:02:c0:a1:84: 82:15:a7:b9:56:4c:33:34:dd:52:44:37:1b:78:ec:bd:72:a9: 66:c0:ae:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPVcWN692hZAPFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlmYjdkNTctNzg3Ni00ZTNhLWIwNTUtMzUzNDAxMGZj NmE5MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NDk1Yzk1MjgtMTJhMy00YTI4LWE1N2ItMzFiYjc2NGQ3ODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjCFm9hm7IW1W+3HwJ8LP38g7gBfGqMWak8h e/AVV/1CfOmgl+ScReKxkWeCzxyCm1XmflvJ8kBnSLf/AVBVyMbAehgMhFnV5dIF gD/ifDKRNAqetUxmF0GDgtD3avY3J/5st/2q6unQKHy+dfWc1//vdt5iJ7r36LgE G05eBaepcWjg35B3FoNMRDMEb5UFENy5zEHTVHYVstKq/ctExV+/sQC4ZxTKLZrv b4SVblLa99JBXukBZdZLmNeyTXR5YwFS0j5lxC328oCMRk1VCb10szL8qdDDXjga E0nlKbNxceXunKSMVAEYgfROuIgg1SvJ99FGwS9LJ9krtTXp1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8guGUxonV65MEehpZ9D0s3PF8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wOWZi N2Q1Ny03ODc2LTRlM2EtYjA1NS0zNTM0MDEwZmM2YTkvMTU4NGZhZjEtYzZiOS0z NmFhLTkzYzEtMGU0MDMwMmQ5MTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDlmYjdkNTctNzg3Ni00ZTNhLWIw NTUtMzUzNDAxMGZjNmE5LzA5ZmI3ZDU3LTc4NzYtNGUzYS1iMDU1LTM1MzQwMTBm YzZhOS5jcmwwHwYDVR0jBBgwFoAUlnIacrGcuC5379T0HM3IoLzJrE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wOWZiN2Q1Ny03ODc2LTRlM2EtYjA1NS0zNTM0 MDEwZmM2YTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF51IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF418PHLFzgJEnwAEJHtTpsd4L0qQWQ1A6qeLPZwXwwwsbq2Vu4H0hjt m21i/vY2tgTUHnpKjQ3yyEzzRP46692f5Gl4z8pCWON5aOs3q+BTms/U3dE9FhK8 x88axWU5C9pg7Ga2hZ+qw1ry9NYJd1qMT6eVJjtdzxYD4V/PwCxzbRYY/gBG1Tj9 BfVLfkJyYdx55BVrTFye8fy6lhGyu2k7llvDp7NPxladaBMcTfI7PPl15oGU//mA PKArBXgcInM5F3AgryxhNHSESn10TYNHmqHbCnq7ODcjzDRQWBFMoaCz+o7EAsCh hIIVp7lWTDM03VJENxt47L1yqWbArhA= -----END CERTIFICATE-----Generated at Sun Mar 22 04:25:24 2026 by rpki-client