$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa File: 2d0718a0-7c15-3300-af7e-f83127e2444a.roa (raw, json) Hash identifier: nyBzg7peuLaEqVR5HgO3yc8D/3xztQ5CJyd7h8fz17M= Subject key identifier: 51:F1:1C:BD:5E:EB:E0:B5:5B:7C:0E:37:D1:2E:A8:59:64:97:96:3E Certificate issuer: /CN=ec7ea071-9ad8-46c5-97de-de149c4a5a78 Certificate serial: 010D0C9F4328584D300A56813588657EBCFD4080 Authority key identifier: 54:37:C6:D0:49:4F:D4:29:D0:C4:97:3B:92:99:0B:BC:40:6B:C9:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 400893 IP address blocks: 23.153.0.0/24 maxlen: 24 172.82.8.0/22 maxlen: 24 2602:ff2a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:56:81:35:88:65:7e:bc:fd:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec7ea071-9ad8-46c5-97de-de149c4a5a78 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=3119f34c-e77d-40b7-aa36-593519d7fca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:18:3a:6f:e5:c2:c0:56:3c:c5:b0:b1:4f:7c: a5:68:77:75:9d:6c:15:9e:ed:2b:a0:e9:7b:e3:fe: 82:29:46:4e:a5:02:4c:e4:03:b5:d5:2c:fe:02:ba: 2e:4e:f7:43:dc:51:ed:c0:73:54:8a:85:dd:89:ac: b9:87:96:c3:94:1c:dc:e2:5d:4c:07:e9:4b:56:07: f3:d0:46:11:49:e6:f8:bf:6b:37:82:e2:cf:85:67: 0a:1d:ab:15:97:0c:b7:90:30:a9:d9:db:6b:0e:90: cf:46:68:75:34:eb:c3:4c:26:17:8e:2b:f3:4c:95: c1:25:96:9b:f8:99:64:15:3c:be:c1:7f:e6:e2:22: 3e:e7:7a:9a:fd:60:b9:4b:2b:69:0a:d0:00:45:e8: 0b:a1:3a:96:e3:08:d9:67:63:ed:71:28:b4:10:68: 71:59:85:18:c6:85:97:87:51:fa:09:60:bc:c0:f8: 91:2c:3e:02:95:06:10:38:08:f9:24:3d:05:67:a3: 94:b9:c3:33:97:94:be:ce:58:32:d1:cb:1c:94:f8: ae:a0:4d:d4:2d:69:f0:e2:12:1f:7c:1a:87:12:7e: 3a:d1:dd:75:a5:4a:14:98:be:dd:63:f5:78:c5:b2: 7c:5f:1e:a2:6f:32:6c:a4:c4:6c:4b:ff:19:bc:1f: 3a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F1:1C:BD:5E:EB:E0:B5:5B:7C:0E:37:D1:2E:A8:59:64:97:96:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.crl X509v3 Authority Key Identifier: keyid:54:37:C6:D0:49:4F:D4:29:D0:C4:97:3B:92:99:0B:BC:40:6B:C9:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer sbgp-ipAddrBlock: critical IPv4: 23.153.0.0/24 172.82.8.0/22 IPv6: 2602:ff2a::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:94:a4:6d:31:4c:e6:1a:2c:21:1b:7f:3d:24:10:0f:1b:ff: ff:ee:b4:e6:22:f1:08:07:70:bd:50:ea:80:7b:0b:98:18:8d: 76:3f:cf:c7:34:20:42:3c:cc:17:63:76:f5:8f:c2:e0:46:5a: 4d:1e:7d:c0:ab:40:bf:01:2c:7c:d6:4e:05:02:25:f4:7a:1d: b9:ab:9b:9b:f7:ec:10:87:69:04:e0:82:81:a9:7a:eb:b7:13: 00:28:5f:fd:c3:9f:58:22:b8:bd:1a:a3:95:76:80:be:2a:f0: de:41:a4:58:9d:32:97:47:4e:e7:5c:fa:79:d2:7d:8d:30:45: 0b:3c:ef:af:9a:22:5f:f3:1c:74:67:75:9f:04:b6:19:95:8e: 26:21:76:0d:09:09:47:36:e9:3c:de:ad:39:e6:cd:36:6d:39: f1:4f:b2:f9:02:df:03:91:b6:c1:96:53:34:56:c7:e0:85:4c: aa:10:42:af:64:00:13:51:37:5d:fd:d7:42:39:60:b5:3d:cb: c0:44:c4:8d:5a:49:ab:d6:13:f9:f1:57:8a:69:92:8a:0b:69: 80:e2:2b:90:c3:68:09:9e:90:98:9a:e5:14:f5:67:a9:a4:bf: 95:33:ad:b6:15:d0:5e:27:cb:32:45:fa:d2:1e:ed:85:ca:9c: e7:16:58:01 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE0wClaBNYhlfrz9QIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM3ZWEwNzEtOWFkOC00NmM1LTk3ZGUtZGUxNDljNGE1 YTc4MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MzExOWYzNGMtZTc3ZC00MGI3LWFhMzYtNTkzNTE5ZDdmY2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixg6b+XCwFY8xbCxT3ylaHd1nWwVnu0roOl7 4/6CKUZOpQJM5AO11Sz+ArouTvdD3FHtwHNUioXdiay5h5bDlBzc4l1MB+lLVgfz 0EYRSeb4v2s3guLPhWcKHasVlwy3kDCp2dtrDpDPRmh1NOvDTCYXjivzTJXBJZab +JlkFTy+wX/m4iI+53qa/WC5SytpCtAARegLoTqW4wjZZ2PtcSi0EGhxWYUYxoWX h1H6CWC8wPiRLD4ClQYQOAj5JD0FZ6OUucMzl5S+zlgy0csclPiuoE3ULWnw4hIf fBqHEn460d11pUoUmL7dY/V4xbJ8Xx6ibzJspMRsS/8ZvB86owIDAQABo4IDajCC A2YwHQYDVR0OBBYEFFHxHL1e6+C1W3wON9EuqFlkl5Y+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzdl YTA3MS05YWQ4LTQ2YzUtOTdkZS1kZTE0OWM0YTVhNzgvMmQwNzE4YTAtN2MxNS0z MzAwLWFmN2UtZjgzMTI3ZTI0NDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWM3ZWEwNzEtOWFkOC00NmM1LTk3 ZGUtZGUxNDljNGE1YTc4L2VjN2VhMDcxLTlhZDgtNDZjNS05N2RlLWRlMTQ5YzRh NWE3OC5jcmwwHwYDVR0jBBgwFoAUVDfG0ElP1CnQxJc7kpkLvEBryc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzdlYTA3MS05YWQ4LTQ2YzUtOTdkZS1kZTE0 OWM0YTVhNzguY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF5kAAwQC rFIIMA0EAgACMAcDBQAmAv8qMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFSUpG0xTOYaLCEbfz0kEA8b///u tOYi8QgHcL1Q6oB7C5gYjXY/z8c0IEI8zBdjdvWPwuBGWk0efcCrQL8BLHzWTgUC JfR6Hbmrm5v37BCHaQTggoGpeuu3EwAoX/3Dn1giuL0ao5V2gL4q8N5BpFidMpdH Tudc+nnSfY0wRQs876+aIl/zHHRndZ8EthmVjiYhdg0JCUc26TzerTnmzTZtOfFP svkC3wORtsGWUzRWx+CFTKoQQq9kABNRN13910I5YLU9y8BExI1aSavWE/nxV4pp kooLaYDiK5DDaAmekJia5RT1Z6mkv5UzrbYV0F4nyzJF+tIe7YXKnOcWWAE= -----END CERTIFICATE-----Generated at Tue Mar 17 00:44:23 2026 by rpki-client