$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/e88d0bb7-c4d5-3664-b8f9-37af1a189d77.roa File: e88d0bb7-c4d5-3664-b8f9-37af1a189d77.roa (raw, json) Hash identifier: aYo0NdwkbmWGf6ryDsyNUke35mAVCuwxEIsmhmuvRA0= Subject key identifier: 5A:B8:E9:C6:C1:2F:E8:4C:F9:0A:EB:D4:07:B6:E3:2D:29:55:F7:B4 Certificate issuer: /CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Certificate serial: 010D0C9F4328584D237A6E57F605DD21913CCAC0 Authority key identifier: 96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/e88d0bb7-c4d5-3664-b8f9-37af1a189d77.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 8095 IP address blocks: 23.154.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:6e:57:f6:05:dd:21:91:3c:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=83a03a18-5c5a-4c56-8ae2-e0edc9767665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6a:d3:26:ab:be:57:1f:c3:6d:e8:bd:28:38: 87:24:cf:e5:cf:7f:1a:e4:f1:21:14:30:5e:44:85: 6b:df:3e:03:b0:52:07:b6:0e:c0:a2:41:45:b9:d4: 8b:3d:48:ef:cd:94:22:b5:5e:d1:d9:df:67:80:dd: 9f:15:e5:dc:28:5e:e1:ca:79:28:6e:15:b3:13:d7: 60:4f:52:a9:ab:13:c5:2c:2b:b2:3e:74:1d:5a:fc: 3f:75:69:9c:1c:73:96:43:41:71:43:f7:6a:cc:62: 4b:44:15:18:b3:c3:81:37:f6:16:3c:d3:7f:88:12: b0:fa:f9:a0:28:1a:29:3f:09:06:b3:42:61:bd:d8: 23:e2:52:bc:fa:aa:01:95:c9:c5:b2:ef:ea:bb:4a: 04:98:cc:0a:cf:e8:54:c9:27:fe:71:6b:cc:71:27: 27:01:bd:59:ad:ce:53:e9:29:f4:af:f4:8d:e8:f7: c9:a5:d4:fb:22:3a:86:43:7a:bc:78:2d:0a:a0:2c: 97:ba:b0:98:35:cc:fb:f0:46:ab:68:05:ca:db:5f: b4:de:dd:9e:c4:30:67:19:44:00:5c:51:22:c3:63: 94:ee:95:cf:78:ab:08:c4:ad:fb:c2:11:7f:ba:ab: b9:7b:c6:27:1a:d8:7c:49:a4:df:dd:99:d4:20:c1: 0d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B8:E9:C6:C1:2F:E8:4C:F9:0A:EB:D4:07:B6:E3:2D:29:55:F7:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/e88d0bb7-c4d5-3664-b8f9-37af1a189d77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl X509v3 Authority Key Identifier: keyid:96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer sbgp-ipAddrBlock: critical IPv4: 23.154.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:0a:20:1f:5c:1f:d6:3d:f6:7c:7d:d9:5e:8a:06:9b:d4:75: 59:67:bf:1f:44:15:64:c9:e5:14:f7:3d:2a:f0:52:73:0d:29: 34:dd:9d:06:1a:11:a1:8d:a4:d7:92:05:38:fd:aa:a2:ac:e3: ad:8a:3a:4c:e5:f4:6c:6e:47:1f:d7:ea:99:cb:23:b5:e9:cd: 24:9c:a6:ef:48:25:33:ab:35:b5:91:a1:65:60:c0:88:fe:b4: fb:d8:a1:a4:c0:4e:ef:bc:99:db:01:c6:a7:79:2f:31:e4:65: 8c:be:f4:28:eb:ac:45:a7:2b:9c:37:b6:b3:21:5b:eb:45:8b: 96:4c:af:91:33:a0:03:13:74:1c:a6:65:9d:0f:6f:82:27:91: 2b:40:ca:b1:b1:7b:7b:f1:b0:e2:5d:9d:6d:30:26:a8:03:2e: 42:18:90:78:6c:88:3f:ad:14:53:00:d8:a5:36:5f:e2:4d:f5: dc:8e:0c:ff:bd:a1:c8:d7:44:d7:66:af:08:e5:6b:6c:d9:51: 47:b9:8c:2f:93:fe:bc:2f:23:6f:3c:a7:50:e0:04:d3:2e:77: 33:b0:be:1b:1d:b2:c5:eb:7b:37:1f:64:f4:99:a2:c0:03:51: f2:88:a6:06:3e:64:07:e1:af:bf:4f:42:7a:97:67:26:5f:5f: a9:b2:4b:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jem5X9gXdIZE8ysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YjgzZmEtMzdhYS00Y2E4LWIwN2MtNWQ3YTYxM2Fm MDliMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ODNhMDNhMTgtNWM1YS00YzU2LThhZTItZTBlZGM5NzY3NjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGrTJqu+Vx/Dbei9KDiHJM/lz38a5PEhFDBe RIVr3z4DsFIHtg7AokFFudSLPUjvzZQitV7R2d9ngN2fFeXcKF7hynkobhWzE9dg T1KpqxPFLCuyPnQdWvw/dWmcHHOWQ0FxQ/dqzGJLRBUYs8OBN/YWPNN/iBKw+vmg KBopPwkGs0Jhvdgj4lK8+qoBlcnFsu/qu0oEmMwKz+hUySf+cWvMcScnAb1Zrc5T 6Sn0r/SN6PfJpdT7IjqGQ3q8eC0KoCyXurCYNcz78EaraAXK21+03t2exDBnGUQA XFEiw2OU7pXPeKsIxK37whF/uqu5e8YnGth8SaTf3ZnUIMENUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFq46cbBL+hM+Qrr1Ae24y0pVfe0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Zjli ODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdhNjEzYWYwOWIvZTg4ZDBiYjctYzRkNS0z NjY0LWI4ZjktMzdhZjFhMTg5ZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGY5YjgzZmEtMzdhYS00Y2E4LWIw N2MtNWQ3YTYxM2FmMDliLzRmOWI4M2ZhLTM3YWEtNGNhOC1iMDdjLTVkN2E2MTNh ZjA5Yi5jcmwwHwYDVR0jBBgwFoAUludc273pvvJ5z9UzPWmH7hV7AfowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZjliODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdh NjEzYWYwOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMgKIB9cH9Y99nx92V6KBpvUdVlnvx9EFWTJ5RT3PSrwUnMNKTTdnQYa EaGNpNeSBTj9qqKs462KOkzl9GxuRx/X6pnLI7XpzSScpu9IJTOrNbWRoWVgwIj+ tPvYoaTATu+8mdsBxqd5LzHkZYy+9CjrrEWnK5w3trMhW+tFi5ZMr5EzoAMTdBym ZZ0Pb4InkStAyrGxe3vxsOJdnW0wJqgDLkIYkHhsiD+tFFMA2KU2X+JN9dyODP+9 ocjXRNdmrwjla2zZUUe5jC+T/rwvI288p1DgBNMudzOwvhsdssXrezcfZPSZosAD UfKIpgY+ZAfhr79PQnqXZyZfX6mySwA= -----END CERTIFICATE-----Generated at Sun Mar 22 04:25:57 2026 by rpki-client