$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/2f411f0a-4589-3467-ac67-d972f19f437f.roa File: 2f411f0a-4589-3467-ac67-d972f19f437f.roa (raw, json) Hash identifier: aD4zT0uBhGfuyPBikWC/DNRrKnmh+cfkKA4fvgJA6yI= Subject key identifier: 7C:A6:97:C3:31:6E:4D:31:21:4A:5D:B8:8E:6A:7C:1F:BB:0D:F8:C7 Certificate issuer: /CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Certificate serial: 010D0C9F4328584D281957A4626F324E16D278C0 Authority key identifier: 16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/2f411f0a-4589-3467-ac67-d972f19f437f.roa Signing time: Fri 13 Mar 2026 16:44:58 +0000 ROA not before: Fri 13 Mar 2026 16:44:58 +0000 ROA not after: Thu 11 Jun 2026 16:44:58 +0000 asID: 399861 IP address blocks: 23.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:28:19:57:a4:62:6f:32:4e:16:d2:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Validity Not Before: Mar 13 16:44:58 2026 GMT Not After : Jun 11 16:44:58 2026 GMT Subject: CN=8b09d541-27fe-47cb-85f1-dc5b9e34c3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:2a:08:d9:11:b9:cf:90:0c:39:28:0d:59: da:04:9a:ec:3e:d1:71:cc:b2:76:a2:ec:e3:03:3b: 6f:e5:7b:03:50:ff:c9:cb:f7:4a:31:e3:8c:09:ea: 06:c8:30:d1:7e:53:87:16:16:98:47:94:df:37:8a: 1e:70:33:58:2c:d7:bf:b0:7b:1c:96:8b:ae:65:05: 22:5a:ff:ed:9c:61:e3:ef:b1:45:c2:66:df:84:70: f5:e5:35:c3:c2:e7:9c:7c:80:ed:2c:bf:94:77:9c: 14:80:18:b3:7c:14:26:1d:a1:69:4f:07:03:5f:f0: b3:74:4b:a7:09:fd:5c:67:c4:1c:3d:2f:f0:9a:d1: f0:e3:59:fd:15:a9:3f:21:ab:5d:e1:e7:9d:11:99: 16:36:88:df:64:b7:ce:04:8a:d4:67:2e:cb:b4:e9: 74:f3:8a:dd:5d:34:8d:12:9a:ce:c4:76:bc:9a:0b: d4:59:f2:06:77:00:2d:17:58:7c:11:68:61:d9:0a: d9:e4:95:9a:f6:28:8e:23:2c:5c:77:17:74:58:e5: 7b:8f:ff:78:0d:9b:57:8b:db:60:a4:ed:08:20:6f: da:ed:f7:fd:76:d2:0d:b2:ad:c4:a7:1e:ef:25:a6: c7:9b:95:30:88:26:82:09:e6:2d:e9:52:31:84:c2: 67:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A6:97:C3:31:6E:4D:31:21:4A:5D:B8:8E:6A:7C:1F:BB:0D:F8:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/2f411f0a-4589-3467-ac67-d972f19f437f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl X509v3 Authority Key Identifier: keyid:16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer sbgp-ipAddrBlock: critical IPv4: 23.128.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:cf:9e:8c:ad:2f:27:98:2e:7c:e7:63:fc:91:aa:c9:63:d5: 23:0e:ff:fc:2e:e9:8e:56:b1:23:91:2a:28:37:b9:38:0d:8e: 5d:98:0b:23:12:0e:49:51:74:8c:9f:8e:72:bf:e2:f0:e1:41: 3f:84:d8:0a:85:1b:00:44:32:63:6e:48:16:55:c1:9a:6a:01: d3:c3:f8:2a:cb:c4:ca:ae:57:ce:54:35:b5:1e:84:22:17:68: 9f:b7:79:93:f3:7e:e1:aa:4d:72:ed:f6:48:8c:f7:8d:d8:32: 1f:1c:27:65:a9:a0:d0:2a:70:76:5a:48:ed:0a:8b:cc:07:bb: b6:14:ec:28:aa:ba:56:b6:e6:23:ab:52:43:7f:cf:4c:79:cf: 5d:74:68:e3:37:28:17:5f:d1:a0:5a:51:f8:65:44:c6:19:1a: c3:c4:34:36:f0:4b:f0:8e:9e:1c:31:73:65:b4:de:85:1d:03: 55:86:22:b6:17:cd:19:7e:a1:49:a3:8f:56:49:34:b8:00:79: c1:1d:00:13:d6:4e:7d:46:59:81:ef:cc:2d:21:2b:26:ea:12: 41:af:79:28:c8:f5:2d:2b:b6:e0:60:b3:ad:6c:25:f5:da:f6: 29:cc:64:ec:46:66:e5:07:db:64:9f:c2:b6:cf:91:b9:d4:cd: 8a:70:a5:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0oGVekYm8yThbSeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZDFkYzEtNDdlMy00YTVlLWFmN2YtOTQ0OTM5ZDIx MGM2MB4XDTI2MDMxMzE2NDQ1OFoXDTI2MDYxMTE2NDQ1OFowLzEtMCsGA1UEAxMk OGIwOWQ1NDEtMjdmZS00N2NiLTg1ZjEtZGM1YjllMzRjM2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCQqCNkRuc+QDDkoDVnaBJrsPtFxzLJ2ouzj Aztv5XsDUP/Jy/dKMeOMCeoGyDDRflOHFhaYR5TfN4oecDNYLNe/sHsclouuZQUi Wv/tnGHj77FFwmbfhHD15TXDwuecfIDtLL+Ud5wUgBizfBQmHaFpTwcDX/CzdEun Cf1cZ8QcPS/wmtHw41n9Fak/Iatd4eedEZkWNojfZLfOBIrUZy7LtOl084rdXTSN EprOxHa8mgvUWfIGdwAtF1h8EWhh2QrZ5JWa9iiOIyxcdxd0WOV7j/94DZtXi9tg pO0IIG/a7ff9dtINsq3Epx7vJabHm5UwiCaCCeYt6VIxhMJncwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyml8Mxbk0xIUpduI5qfB+7DfjHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ZGRk MWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5MzlkMjEwYzYvMmY0MTFmMGEtNDU4OS0z NDY3LWFjNjctZDk3MmYxOWY0MzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWRkZDFkYzEtNDdlMy00YTVlLWFm N2YtOTQ0OTM5ZDIxMGM2LzVkZGQxZGMxLTQ3ZTMtNGE1ZS1hZjdmLTk0NDkzOWQy MTBjNi5jcmwwHwYDVR0jBBgwFoAUFvWgluO97t2XyiXRe/Tf/5SzhMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ZGRkMWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5 MzlkMjEwYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4D8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXPnoytLyeYLnznY/yRqslj1SMO//wu6Y5WsSORKig3uTgNjl2YCyMS DklRdIyfjnK/4vDhQT+E2AqFGwBEMmNuSBZVwZpqAdPD+CrLxMquV85UNbUehCIX aJ+3eZPzfuGqTXLt9kiM943YMh8cJ2WpoNAqcHZaSO0Ki8wHu7YU7Ciqula25iOr UkN/z0x5z110aOM3KBdf0aBaUfhlRMYZGsPENDbwS/COnhwxc2W03oUdA1WGIrYX zRl+oUmjj1ZJNLgAecEdABPWTn1GWYHvzC0hKybqEkGveSjI9S0rtuBgs61sJfXa 9inMZOxGZuUH22SfwrbPkbnUzYpwpcc= -----END CERTIFICATE-----Generated at Sun Mar 15 17:16:13 2026 by rpki-client