$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/002e220d-5567-33ef-bd92-28d89dfe57f5.roa File: 002e220d-5567-33ef-bd92-28d89dfe57f5.roa (raw, json) Hash identifier: gM1Y6ZXXYpE8WDd0DokKj9YTP6nJwZw/CGZqUcXuCoQ= Subject key identifier: 44:DF:EA:8D:09:25:5B:E7:86:CF:48:CD:CE:9E:16:05:30:2D:41:26 Certificate issuer: /CN=b433860d-ab5d-45f4-a11e-f313b584710a Certificate serial: 010D0C9F4328584D5234F247E3B32B109F774F00 Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/002e220d-5567-33ef-bd92-28d89dfe57f5.roa Signing time: Sat 28 Mar 2026 18:44:32 +0000 ROA not before: Sat 28 Mar 2026 18:44:32 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 14445 IP address blocks: 23.174.80.0/24 maxlen: 24 104.249.136.0/24 maxlen: 24 104.249.137.0/24 maxlen: 24 104.249.138.0/24 maxlen: 24 104.249.139.0/24 maxlen: 24 2606:2a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:f2:47:e3:b3:2b:10:9f:77:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a Validity Not Before: Mar 28 18:44:32 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=9381cfc8-5a94-4927-89b3-3f8454db5ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f1:3f:eb:21:d7:a4:fd:95:bc:84:e6:31:9f: 4f:85:a4:b9:5a:5b:17:07:c4:e4:6c:dd:f9:37:96: f9:94:9f:5c:52:e5:27:09:7c:89:3e:11:fc:d9:05: bb:ea:ff:79:e3:64:10:d3:f5:fe:de:dd:17:82:7b: 56:f7:10:d1:30:0c:a2:43:0c:12:93:89:b2:d4:48: 1e:16:40:ca:19:f9:3d:e1:39:a1:dc:1e:47:b8:c5: 6f:1b:2a:db:99:c6:2a:b6:8b:c6:bb:19:5f:d6:09: ab:83:c2:18:a5:e6:f6:f7:8e:5b:24:a2:fc:15:b0: 7f:2c:02:b0:b9:51:78:b1:7a:ce:e1:fb:e6:ff:a2: 1f:13:5d:73:df:d8:3c:2f:34:b1:90:44:5d:32:ae: ba:f8:ad:5a:98:62:75:a0:af:91:ea:55:63:6c:3c: a8:eb:ec:2d:dc:5c:4a:78:89:a4:f3:88:04:22:01: 81:7e:e6:d8:55:81:33:cc:06:5f:7e:43:3a:fd:2a: c7:72:bb:d9:50:be:05:c5:04:80:f2:93:59:8e:f7: cd:bf:be:f3:f7:b2:00:3b:8a:8f:9e:0f:ec:99:6c: 1d:36:ab:24:fd:da:c1:a0:f3:af:3c:ab:dd:4a:84: 30:34:95:2d:29:6e:58:be:9b:35:87:aa:eb:d9:62: f8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DF:EA:8D:09:25:5B:E7:86:CF:48:CD:CE:9E:16:05:30:2D:41:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/002e220d-5567-33ef-bd92-28d89dfe57f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl X509v3 Authority Key Identifier: keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer sbgp-ipAddrBlock: critical IPv4: 23.174.80.0/24 104.249.136.0/22 IPv6: 2606:2a40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:95:5a:2b:cd:1b:82:ab:df:f5:b7:e5:dc:68:d5:1f:2e:89: 73:ae:8c:78:00:d9:df:b9:24:2d:fb:22:df:dd:40:dc:29:71: 32:92:2f:67:70:57:a7:9d:d1:40:b8:3c:9f:d9:c9:7d:44:67: 29:55:fe:b9:4c:76:cc:22:ab:d7:5c:61:76:4e:67:38:cd:50: cd:d5:6f:11:c8:20:e7:1c:bc:fa:9f:34:6f:5a:89:16:ba:0a: e6:8d:63:03:84:c5:a9:e7:b3:cc:80:e4:3b:74:bf:5f:e4:c8: 42:ce:90:b9:70:4b:3e:c7:92:73:e7:99:c0:b7:a2:f9:30:83: e6:40:7d:64:27:54:6f:fe:c7:6e:53:33:44:85:db:31:92:c9: 23:89:5e:4d:00:76:c0:22:e5:54:92:1f:c1:8a:25:3a:68:ab: b0:92:9d:02:58:82:66:6b:be:38:6f:14:c6:de:c4:64:c0:7c: 3d:44:eb:6e:04:22:36:42:bf:d7:3a:f7:c2:8d:f2:1f:7b:e8: 1e:a8:e9:39:5f:cc:98:a3:f4:e8:cb:d8:2c:31:ba:00:71:4e: fc:53:94:97:5a:9b:d4:4a:0c:d0:1f:78:77:d8:43:46:2f:b3: 82:e0:2e:d9:62:aa:66:70:b5:a9:a2:3c:57:38:3c:ae:e7:b0: 04:0d:08:e0 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE1SNPJH47MrEJ93TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzMzg2MGQtYWI1ZC00NWY0LWExMWUtZjMxM2I1ODQ3 MTBhMB4XDTI2MDMyODE4NDQzMloXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk OTM4MWNmYzgtNWE5NC00OTI3LTg5YjMtM2Y4NDU0ZGI1Y2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/E/6yHXpP2VvITmMZ9PhaS5WlsXB8TkbN35 N5b5lJ9cUuUnCXyJPhH82QW76v9542QQ0/X+3t0XgntW9xDRMAyiQwwSk4my1Ege FkDKGfk94Tmh3B5HuMVvGyrbmcYqtovGuxlf1gmrg8IYpeb2945bJKL8FbB/LAKw uVF4sXrO4fvm/6IfE11z39g8LzSxkERdMq66+K1amGJ1oK+R6lVjbDyo6+wt3FxK eImk84gEIgGBfubYVYEzzAZffkM6/SrHcrvZUL4FxQSA8pNZjvfNv77z97IAO4qP ng/smWwdNqsk/drBoPOvPKvdSoQwNJUtKW5Yvps1h6rr2WL4FQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFETf6o0JJVvnhs9Izc6eFgUwLUEmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMz ODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEzYjU4NDcxMGEvMDAyZTIyMGQtNTU2Ny0z M2VmLWJkOTItMjhkODlkZmU1N2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjQzMzg2MGQtYWI1ZC00NWY0LWEx MWUtZjMxM2I1ODQ3MTBhL2I0MzM4NjBkLWFiNWQtNDVmNC1hMTFlLWYzMTNiNTg0 NzEwYS5jcmwwHwYDVR0jBBgwFoAUz9UTZdOGkQNiuVzEe6KxGXpl5VUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMzODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEz YjU4NDcxMGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF65QAwQC aPmIMA0EAgACMAcDBQAmBipAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEWVWivNG4Kr3/W35dxo1R8uiXOu jHgA2d+5JC37It/dQNwpcTKSL2dwV6ed0UC4PJ/ZyX1EZylV/rlMdswiq9dcYXZO ZzjNUM3VbxHIIOccvPqfNG9aiRa6CuaNYwOExanns8yA5Dt0v1/kyELOkLlwSz7H knPnmcC3ovkwg+ZAfWQnVG/+x25TM0SF2zGSySOJXk0AdsAi5VSSH8GKJTpoq7CS nQJYgmZrvjhvFMbexGTAfD1E624EIjZCv9c698KN8h976B6o6TlfzJij9OjL2Cwx ugBxTvxTlJdam9RKDNAfeHfYQ0Yvs4LgLtliqmZwtamiPFc4PK7nsAQNCOA= -----END CERTIFICATE-----Generated at Thu Apr 9 17:57:12 2026 by rpki-client