$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa File: a981c111-3341-3f73-85ec-3e9f5b8d2766.roa (raw, json) Hash identifier: DZUaKQTAOT13iU33AKjvUPnKImTc/sZ4VX2DQ9iE58w= Subject key identifier: 04:31:AC:72:2E:1B:DD:1C:C0:88:F8:43:D4:38:64:BB:AE:9A:76:DF Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F4328584D6AAA8DC093C71EC7CF4FE1A0 Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 396500 IP address blocks: 23.187.152.0/24 maxlen: 24 2602:f82d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:8d:c0:93:c7:1e:c7:cf:4f:e1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=ea656e82-e599-4f16-99dc-fafa5876ec07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:dc:d9:bb:1c:d8:21:90:a5:37:20:9e:02:25: 3d:8c:e2:81:e4:d5:50:9c:ce:5d:0c:bc:93:34:b1: 07:43:2c:3a:9a:82:05:a2:72:67:21:c1:70:30:9b: 42:2a:4a:ae:ca:0e:99:14:8e:a0:e2:24:8f:81:8d: c9:a4:8e:95:a6:47:d8:c3:e9:d4:5a:d8:48:3f:01: f6:4b:ec:e8:b4:76:c1:07:ff:25:79:03:f1:e0:f8: 57:05:26:42:7a:ba:e5:4e:f0:8f:dd:b7:4e:73:18: 4b:c0:28:a8:5e:c9:8c:d6:f1:2e:52:5f:93:a8:aa: 7b:c2:a9:be:3e:e2:44:75:df:8b:0a:99:78:9e:49: e8:ee:8b:e3:ea:bd:68:88:4d:43:12:10:22:eb:ec: 5e:c4:bc:70:6d:4e:ce:e8:58:a3:dd:9f:cb:12:a8: 44:ca:15:4a:19:fc:9a:55:05:c1:46:43:90:8b:4a: b7:40:32:58:4c:b3:f1:61:75:d9:2e:3f:65:74:51: c8:9b:6a:c9:b7:64:90:c2:c5:a0:bc:04:82:69:4f: ea:7b:d6:46:d0:a4:c5:82:a9:83:61:7c:e3:81:2e: 81:1b:26:4e:65:b3:d1:82:40:70:4c:3c:1a:dc:b1: e6:6d:63:52:00:ae:3d:aa:c9:21:7c:a0:a8:99:a9: 49:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:31:AC:72:2E:1B:DD:1C:C0:88:F8:43:D4:38:64:BB:AE:9A:76:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: 23.187.152.0/24 IPv6: 2602:f82d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:8c:33:59:6b:c5:1a:0a:0c:79:03:ee:4e:63:99:0d:2f:92: 18:49:df:ba:72:c2:0e:15:eb:cc:75:00:13:ef:d4:dc:3a:e0: 59:02:96:d2:6b:f6:0f:ca:86:9c:d3:44:a3:70:91:a1:ca:d3: 3c:5a:f9:72:5a:3e:dd:51:b9:45:45:2f:0a:1f:ee:7a:38:c9: 64:d4:07:d8:a9:c2:17:36:a9:06:72:96:ac:2e:c2:07:5a:42: de:17:d4:bd:22:b8:03:e0:bc:52:5a:07:d4:e2:cd:dc:04:e4: 7f:ea:7d:08:27:59:01:ab:58:f3:b7:f9:16:35:2e:23:ef:1b: 11:c3:5f:d0:ae:66:cc:3a:76:b3:15:19:dc:6e:66:98:6a:b4: c2:f7:35:ef:9a:be:96:35:2e:96:fb:80:16:bf:4f:96:5c:ad: be:e3:5f:f8:4c:ff:0b:75:cb:3b:01:ca:6c:56:87:5e:0a:17: c7:fc:d6:1d:b0:b6:60:b4:e8:77:14:db:9e:6a:ff:84:c5:9f: 3e:8a:63:a4:20:f9:19:93:60:46:4e:da:b1:b1:b5:3f:7c:f9: f3:b4:59:a1:37:9a:ab:b1:9c:75:d2:b2:3f:db:27:e7:00:e6: 7e:13:6e:b4:9c:06:22:1a:8c:23:c1:12:dd:83:3c:ba:01:4d: 6a:34:79:3c -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1qqo3Ak8cex89P4aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ZWE2NTZlODItZTU5OS00ZjE2LTk5ZGMtZmFmYTU4NzZlYzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNzZuxzYIZClNyCeAiU9jOKB5NVQnM5dDLyT NLEHQyw6moIFonJnIcFwMJtCKkquyg6ZFI6g4iSPgY3JpI6VpkfYw+nUWthIPwH2 S+zotHbBB/8leQPx4PhXBSZCerrlTvCP3bdOcxhLwCioXsmM1vEuUl+TqKp7wqm+ PuJEdd+LCpl4nkno7ovj6r1oiE1DEhAi6+xexLxwbU7O6Fij3Z/LEqhEyhVKGfya VQXBRkOQi0q3QDJYTLPxYXXZLj9ldFHIm2rJt2SQwsWgvASCaU/qe9ZG0KTFgqmD YXzjgS6BGyZOZbPRgkBwTDwa3LHmbWNSAK49qskhfKComalJsQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFAQxrHIuG90cwIj4Q9Q4ZLuumnbfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvYTk4MWMxMTEtMzM0MS0z ZjczLTg1ZWMtM2U5ZjViOGQyNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF7uYMA8E AgACMAkDBwAmAvgtAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARIwzWWvFGgoMeQPuTmOZDS+SGEnfunLC DhXrzHUAE+/U3DrgWQKW0mv2D8qGnNNEo3CRocrTPFr5clo+3VG5RUUvCh/uejjJ ZNQH2KnCFzapBnKWrC7CB1pC3hfUvSK4A+C8UloH1OLN3ATkf+p9CCdZAatY87f5 FjUuI+8bEcNf0K5mzDp2sxUZ3G5mmGq0wvc175q+ljUulvuAFr9PllytvuNf+Ez/ C3XLOwHKbFaHXgoXx/zWHbC2YLTodxTbnmr/hMWfPopjpCD5GZNgRk7asbG1P3z5 87RZoTeaq7GcddKyP9sn5wDmfhNutJwGIhqMI8ES3YM8ugFNajR5PA== -----END CERTIFICATE-----Generated at Wed Apr 15 22:17:50 2026 by rpki-client