$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa File: cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa (raw, json) Hash identifier: A/o7OLCYEAwXG9Yk7u52r8zEolBbrcgTokxhsUjY6dw= Subject key identifier: A7:CF:EC:18:DD:F9:27:5F:3F:C5:CD:B8:DB:B6:3F:00:34:B8:61:CA Certificate issuer: /CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62 Certificate serial: 010D0C9F4328584D1B1A15C89D58D920CC555C80 Authority key identifier: 46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 12131 IP address blocks: 23.161.34.0/24 maxlen: 24 23.187.0.0/24 maxlen: 24 23.187.1.0/24 maxlen: 24 2620:1df::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:15:c8:9d:58:d9:20:cc:55:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=695bb5e1-b30b-40ad-b8a9-6a8f7568e551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:24:69:db:ff:0e:d4:55:70:af:a4:70:d3:73: d4:3d:34:41:30:1c:91:2f:df:3e:e0:e7:ab:17:35: ed:ab:64:f2:05:e9:cd:e7:1e:18:d2:d8:e3:6f:70: cf:5a:fc:8e:8f:56:c3:0c:92:a1:96:99:5a:de:19: ef:dc:a5:33:83:7d:71:ce:da:7d:62:5f:bd:48:b8: b4:18:ff:8f:e9:c6:83:ca:4d:72:60:67:51:ac:a4: b3:c1:ae:2e:90:ed:e6:67:ac:b1:8c:b7:59:64:70: 17:61:4e:77:31:5e:8f:d2:49:f6:05:b8:ab:4d:c8: e6:6d:64:6a:c6:b8:a6:ef:18:3a:70:ba:c1:52:78: e7:8c:e9:96:61:b9:76:22:68:bf:6e:1e:74:2a:24: db:2a:98:e1:ea:d5:5a:f0:1b:38:48:be:46:12:c1: d5:98:c1:9c:e8:1f:17:5f:aa:3a:e3:9b:fb:ba:e7: 46:57:7b:e6:38:1e:3f:cd:27:ec:dd:aa:aa:7a:35: ed:20:a3:b6:9e:ef:f7:be:82:1b:65:a8:5f:7c:51: dd:ad:1d:01:c0:4e:6b:90:5a:2f:d2:0f:13:17:f3: 08:6b:52:51:ec:4e:7a:e3:5b:41:0c:db:d0:db:eb: 94:e7:5c:02:40:05:39:e3:d8:9f:fb:25:6e:99:f4: 15:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:CF:EC:18:DD:F9:27:5F:3F:C5:CD:B8:DB:B6:3F:00:34:B8:61:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl X509v3 Authority Key Identifier: keyid:46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer sbgp-ipAddrBlock: critical IPv4: 23.161.34.0/24 23.187.0.0/23 IPv6: 2620:1df::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:69:77:7e:56:f9:1a:71:60:5f:9e:59:a7:5c:3b:f7:e7:ea: 3e:7b:41:65:de:09:da:ef:25:c3:8b:0e:18:f1:30:48:84:3a: 50:2a:c7:c7:2b:c1:57:ac:28:4a:1c:11:b4:ff:65:88:f3:a1: be:c7:75:fe:77:05:f9:57:87:15:a0:c4:81:a5:62:4e:c7:59: 19:2e:cd:ba:9a:fd:8a:fc:6c:61:09:5d:d7:57:0e:b3:5a:42: d9:13:97:57:87:ca:79:f7:07:83:14:25:16:fc:60:d0:ab:68: f2:62:25:18:18:7b:c9:bc:7b:33:9d:ba:0b:ea:09:93:e0:38: a2:8a:6e:d5:72:61:2a:5d:17:98:33:c7:8f:d8:12:2f:aa:c1: a5:12:0a:17:f2:47:db:fc:5f:d3:39:11:fd:ea:19:10:cb:2b: d1:16:d0:13:ee:b7:6b:d5:88:6c:18:fb:d7:0b:d4:ad:39:52: 06:fd:ed:79:f0:0f:89:45:f0:75:76:ee:b4:b8:1d:30:c6:7e: 1a:06:5e:a3:99:cd:89:40:b2:a4:8d:21:8b:85:d6:2e:7f:2c: 30:3e:d2:11:af:70:16:82:86:d9:f4:74:e8:34:d0:3c:69:4d: 7f:92:73:43:52:8b:6a:e1:21:ed:f5:81:8b:1d:72:58:2e:8a: dd:e9:e3:c2 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE0bGhXInVjZIMxVXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRmOTEzNTEtYmEyNy00ZDhhLTlkMDYtNTlhZWFhOTcy YTYyMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk Njk1YmI1ZTEtYjMwYi00MGFkLWI4YTktNmE4Zjc1NjhlNTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SRp2/8O1FVwr6Rw03PUPTRBMByRL98+4Oer FzXtq2TyBenN5x4Y0tjjb3DPWvyOj1bDDJKhlpla3hnv3KUzg31xztp9Yl+9SLi0 GP+P6caDyk1yYGdRrKSzwa4ukO3mZ6yxjLdZZHAXYU53MV6P0kn2BbirTcjmbWRq xrim7xg6cLrBUnjnjOmWYbl2Imi/bh50KiTbKpjh6tVa8Bs4SL5GEsHVmMGc6B8X X6o645v7uudGV3vmOB4/zSfs3aqqejXtIKO2nu/3voIbZahffFHdrR0BwE5rkFov 0g8TF/MIa1JR7E5641tBDNvQ2+uU51wCQAU549if+yVumfQVWQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFKfP7Bjd+SdfP8XNuNu2PwA0uGHKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGY5 MTM1MS1iYTI3LTRkOGEtOWQwNi01OWFlYWE5NzJhNjIvY2YxZjU1NDItMzgzMi0z ZGQ3LWEyYTItMmM2ODU3MWRkMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjRmOTEzNTEtYmEyNy00ZDhhLTlk MDYtNTlhZWFhOTcyYTYyL2I0ZjkxMzUxLWJhMjctNGQ4YS05ZDA2LTU5YWVhYTk3 MmE2Mi5jcmwwHwYDVR0jBBgwFoAURuImqBfX+N2+K7c2p8i7Vk+K/3kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGY5MTM1MS1iYTI3LTRkOGEtOWQwNi01OWFl YWE5NzJhNjIuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF6EiAwQB F7sAMA0EAgACMAcDBQAmIAHfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAERpd35W+RpxYF+eWadcO/fn6j57 QWXeCdrvJcOLDhjxMEiEOlAqx8crwVesKEocEbT/ZYjzob7Hdf53BflXhxWgxIGl Yk7HWRkuzbqa/Yr8bGEJXddXDrNaQtkTl1eHynn3B4MUJRb8YNCraPJiJRgYe8m8 ezOdugvqCZPgOKKKbtVyYSpdF5gzx4/YEi+qwaUSChfyR9v8X9M5Ef3qGRDLK9EW 0BPut2vViGwY+9cL1K05Ugb97XnwD4lF8HV27rS4HTDGfhoGXqOZzYlAsqSNIYuF 1i5/LDA+0hGvcBaChtn0dOg00DxpTX+Sc0NSi2rhIe31gYsdclguit3p48I= -----END CERTIFICATE-----Generated at Tue Mar 17 00:42:26 2026 by rpki-client