$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/dd6af4c2-5403-3185-a2e1-55aebfa6ffd5.roa File: dd6af4c2-5403-3185-a2e1-55aebfa6ffd5.roa (raw, json) Hash identifier: YhTh70vlLwtWC1Y6+kC6U0tiyN13beoxgoJyEwi321Y= Subject key identifier: E8:2C:BC:20:3E:DE:4C:17:03:6D:BF:04:1E:71:19:17:63:4F:0B:9E Certificate issuer: /CN=2aa2eb71-3102-4859-928f-a833f2c63713 Certificate serial: 010D0C9F4328584D571FA097F6CF61994B631740 Authority key identifier: AA:77:D5:7B:C1:16:4F:BE:B8:81:7D:3F:4C:E0:33:7E:47:42:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/dd6af4c2-5403-3185-a2e1-55aebfa6ffd5.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 64260 IP address blocks: 23.138.192.0/24 maxlen: 24 138.128.252.0/22 maxlen: 24 2607:7c80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/2aa2eb71-3102-4859-928f-a833f2c63713.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/2aa2eb71-3102-4859-928f-a833f2c63713.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:a0:97:f6:cf:61:99:4b:63:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa2eb71-3102-4859-928f-a833f2c63713 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=e707547d-3d81-4cf8-8f85-410025696d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a9:c2:15:30:9f:53:78:79:57:6f:5c:42:b1: 0d:bf:5f:09:b7:1d:4f:17:98:a1:7f:83:9e:7d:64: 44:c6:20:a2:17:9e:c9:e6:2d:34:96:80:c6:10:68: ba:cb:91:70:b5:ae:28:d0:cc:7f:85:6f:3c:8b:f8: d6:44:0b:b5:09:6f:e4:78:50:1a:cc:7e:99:e8:7c: 17:c0:e6:96:ca:17:bd:57:0f:97:42:59:df:5b:b1: 7f:bc:b0:bd:f9:05:02:da:dc:92:a4:15:d2:c7:d0: f6:53:72:9e:66:a2:03:4e:2b:d8:99:7e:56:fe:e2: fd:40:63:80:50:a4:1c:64:56:39:45:9e:cc:ab:5c: 40:e3:0b:31:5b:80:7e:0e:31:75:0c:09:90:df:3a: b7:75:46:95:ed:dc:d1:4f:93:f9:8c:97:e7:b5:08: fb:f1:64:af:cf:01:c2:7a:60:5f:14:b9:33:ba:4b: 5d:4a:70:7a:a2:c9:e6:67:ae:e4:54:1d:65:9b:36: eb:44:c4:95:13:5d:d0:b1:41:fb:bc:c2:5c:e1:85: 15:76:70:20:8f:30:15:b1:e9:ea:d1:72:55:c3:78: 03:99:1a:54:dd:ed:2b:f1:e4:7b:27:fb:a2:7a:b9: 26:43:db:d9:0a:68:6a:9c:1f:81:c6:8e:04:55:28: 0b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2C:BC:20:3E:DE:4C:17:03:6D:BF:04:1E:71:19:17:63:4F:0B:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/dd6af4c2-5403-3185-a2e1-55aebfa6ffd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/2aa2eb71-3102-4859-928f-a833f2c63713.crl X509v3 Authority Key Identifier: keyid:AA:77:D5:7B:C1:16:4F:BE:B8:81:7D:3F:4C:E0:33:7E:47:42:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713.cer sbgp-ipAddrBlock: critical IPv4: 23.138.192.0/24 138.128.252.0/22 IPv6: 2607:7c80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:76:28:30:2d:6b:df:d4:c1:40:3a:4d:8f:36:44:e4:1c:1d: 06:88:12:d0:af:97:7f:b8:8c:2b:31:b3:5d:1e:90:2d:9c:79: c3:ba:e8:f9:f6:09:6f:e7:33:57:dc:7c:72:e0:c2:8a:d8:09: 02:9b:b0:44:6b:13:2a:56:e5:fd:ec:35:8b:e5:f0:68:24:cd: 21:12:2b:ed:98:de:b8:de:ed:eb:54:0a:7d:e4:a3:d9:b7:b3: 2a:76:be:1c:18:37:a5:33:7f:a4:5c:02:a4:34:94:05:ed:dd: 8f:2a:15:df:9f:06:5f:0c:4c:ed:a6:f6:34:8e:f4:ff:f3:9f: ff:10:b2:f2:50:6f:62:31:c7:ef:9f:66:05:5e:56:8b:62:ad: c9:3a:e8:8c:34:8e:70:7e:1c:f1:4c:54:8c:a9:57:ab:70:88: 35:d0:34:71:3a:5f:1a:44:78:05:f6:54:56:0d:55:b9:32:0e: 0e:0d:4d:da:d3:68:15:9a:4d:5b:e1:97:fd:20:87:63:fa:90: 5d:56:88:8a:13:b1:f9:d9:b5:64:1b:9d:6d:fc:bd:f1:89:cb: 6b:82:d1:9f:de:6b:4e:d8:17:f5:ee:90:73:bd:e1:98:0a:13: 92:a1:50:74:9a:de:2f:ec:69:56:08:8f:48:98:53:56:58:65: 08:9a:74:16 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE1XH6CX9s9hmUtjF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhMmViNzEtMzEwMi00ODU5LTkyOGYtYTgzM2YyYzYz NzEzMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk ZTcwNzU0N2QtM2Q4MS00Y2Y4LThmODUtNDEwMDI1Njk2ZDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6nCFTCfU3h5V29cQrENv18Jtx1PF5ihf4Oe fWRExiCiF57J5i00loDGEGi6y5Fwta4o0Mx/hW88i/jWRAu1CW/keFAazH6Z6HwX wOaWyhe9Vw+XQlnfW7F/vLC9+QUC2tySpBXSx9D2U3KeZqIDTivYmX5W/uL9QGOA UKQcZFY5RZ7Mq1xA4wsxW4B+DjF1DAmQ3zq3dUaV7dzRT5P5jJfntQj78WSvzwHC emBfFLkzuktdSnB6osnmZ67kVB1lmzbrRMSVE13QsUH7vMJc4YUVdnAgjzAVsenq 0XJVw3gDmRpU3e0r8eR7J/uierkmQ9vZCmhqnB+Bxo4EVSgLcQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFOgsvCA+3kwXA22/BB5xGRdjTwueMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYWEy ZWI3MS0zMTAyLTQ4NTktOTI4Zi1hODMzZjJjNjM3MTMvZGQ2YWY0YzItNTQwMy0z MTg1LWEyZTEtNTVhZWJmYTZmZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmFhMmViNzEtMzEwMi00ODU5LTky OGYtYTgzM2YyYzYzNzEzLzJhYTJlYjcxLTMxMDItNDg1OS05MjhmLWE4MzNmMmM2 MzcxMy5jcmwwHwYDVR0jBBgwFoAUqnfVe8EWT764gX0/TOAzfkdCPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYWEyZWI3MS0zMTAyLTQ4NTktOTI4Zi1hODMz ZjJjNjM3MTMuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF4rAAwQC ioD8MA0EAgACMAcDBQAmB3yAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB12KDAta9/UwUA6TY82ROQcHQaI EtCvl3+4jCsxs10ekC2cecO66Pn2CW/nM1fcfHLgworYCQKbsERrEypW5f3sNYvl 8GgkzSESK+2Y3rje7etUCn3ko9m3syp2vhwYN6Uzf6RcAqQ0lAXt3Y8qFd+fBl8M TO2m9jSO9P/zn/8QsvJQb2Ixx++fZgVeVotirck66Iw0jnB+HPFMVIypV6twiDXQ NHE6XxpEeAX2VFYNVbkyDg4NTdrTaBWaTVvhl/0gh2P6kF1WiIoTsfnZtWQbnW38 vfGJy2uC0Z/ea07YF/XukHO94ZgKE5KhUHSa3i/saVYIj0iYU1ZYZQiadBY= -----END CERTIFICATE-----Generated at Tue Apr 7 21:29:53 2026 by rpki-client