$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af/bd2c377d-233f-30b0-9132-864a8aaf6c9e.roa File: bd2c377d-233f-30b0-9132-864a8aaf6c9e.roa (raw, json) Hash identifier: JX1SeugrXGRLZp0ih6XEBfAfBrbKjGSHdFkJh5jUp+I= Subject key identifier: D1:73:6C:AA:DB:0C:E6:93:9E:28:10:88:AE:75:F7:10:70:B6:99:3D Certificate issuer: /CN=0591b5c7-e4bf-4dcf-902b-b6fd12c339af Certificate serial: 010D0C9F4328584D100CF61D2A715E8FACB80A00 Authority key identifier: 61:E3:D3:75:35:7B:B7:0B:F6:20:1A:82:2C:94:32:85:66:02:85:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af/bd2c377d-233f-30b0-9132-864a8aaf6c9e.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 8095 IP address blocks: 23.179.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af/0591b5c7-e4bf-4dcf-902b-b6fd12c339af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af/0591b5c7-e4bf-4dcf-902b-b6fd12c339af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:f6:1d:2a:71:5e:8f:ac:b8:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0591b5c7-e4bf-4dcf-902b-b6fd12c339af Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=fb937218-2e82-43b2-abb3-deb3d7791cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:b0:0d:23:74:a5:72:72:8d:ee:20:57:3e: 98:2f:4a:91:5e:84:03:97:10:81:f3:b7:5d:d6:87: 86:63:b5:3a:2a:83:18:50:c2:51:6e:24:82:37:69: f4:92:dc:1c:38:20:76:b6:59:ab:ac:e9:b7:dc:a3: 37:a9:97:6e:a5:ed:f9:1b:fc:4d:a5:dd:8b:f2:2a: 10:27:78:12:af:47:58:28:e6:36:4f:8a:6a:3e:a5: 9d:a7:17:e5:95:e0:43:41:5e:b0:6c:ea:e0:43:d8: 86:ee:77:f5:7a:ed:62:f8:d0:09:8d:e6:3a:04:71: 0e:af:98:ec:26:6e:d6:2b:69:75:cf:92:d6:07:7c: bc:f4:61:f0:24:90:54:32:24:a1:91:43:51:41:6b: b6:2a:9e:9e:67:86:8d:55:5d:2f:99:67:45:8e:80: b3:5f:64:5d:3f:35:a8:ef:9e:92:60:5b:d6:08:5e: e5:b9:d9:74:26:d2:94:ac:ef:ac:00:ab:c0:5d:72: dc:be:4b:e8:7f:9f:5e:bd:2f:27:64:df:9e:e3:24: 1c:13:14:4b:37:42:c2:8a:9c:b9:60:23:51:95:21: 3d:53:8d:dd:09:45:f7:47:a8:88:dc:54:af:c4:4e: 28:44:c6:f0:00:00:da:cd:ef:59:2e:34:95:68:d4: 16:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:73:6C:AA:DB:0C:E6:93:9E:28:10:88:AE:75:F7:10:70:B6:99:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af/bd2c377d-233f-30b0-9132-864a8aaf6c9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af/0591b5c7-e4bf-4dcf-902b-b6fd12c339af.crl X509v3 Authority Key Identifier: keyid:61:E3:D3:75:35:7B:B7:0B:F6:20:1A:82:2C:94:32:85:66:02:85:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af.cer sbgp-ipAddrBlock: critical IPv4: 23.179.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:4c:b5:2a:73:b1:94:e4:32:f5:c6:a0:a0:ae:21:70:69:c9: 57:d2:b1:bc:15:2f:94:7e:ee:5d:c6:bf:b5:91:11:fd:c3:53: 4c:56:ea:35:63:f9:7f:31:12:43:be:2f:ed:6e:97:ff:4d:49: 40:01:72:e5:42:4e:90:80:d6:5f:41:4f:dd:23:02:78:b4:a2: 10:a1:10:92:5d:16:c6:23:e5:1a:c0:48:aa:bb:74:3f:dd:70: a5:c1:aa:00:d4:99:68:dc:03:20:9f:d9:43:51:6a:ed:fa:74: d2:68:32:50:d8:ff:d3:d6:7c:e8:6b:46:81:5f:4a:56:d0:3b: 34:02:5d:bd:51:e2:8f:2e:55:fc:94:e2:b0:44:98:e4:08:80: 2f:27:8f:52:a5:24:e7:e7:ab:7d:8c:ec:c6:3d:d7:88:7d:08: 36:fe:75:6e:13:ac:a3:62:b6:08:d5:a8:fa:14:93:37:42:23: ee:13:66:cc:f6:3d:5b:a1:87:15:a6:3f:fb:ce:c3:e4:94:cc: 58:72:e1:d5:8c:f9:65:93:2e:4f:a9:24:44:3f:3f:c1:a3:88: 2b:83:a1:10:e1:61:88:c0:df:5f:9f:cc:72:92:3f:48:cf:2b: 50:9c:27:fe:38:85:3a:9e:b8:d0:d3:fb:a1:b0:e2:84:ec:e9: 18:41:fd:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDPYdKnFej6y4CgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDU5MWI1YzctZTRiZi00ZGNmLTkwMmItYjZmZDEyYzMz OWFmMB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk ZmI5MzcyMTgtMmU4Mi00M2IyLWFiYjMtZGViM2Q3NzkxY2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseqwDSN0pXJyje4gVz6YL0qRXoQDlxCB87dd 1oeGY7U6KoMYUMJRbiSCN2n0ktwcOCB2tlmrrOm33KM3qZdupe35G/xNpd2L8ioQ J3gSr0dYKOY2T4pqPqWdpxflleBDQV6wbOrgQ9iG7nf1eu1i+NAJjeY6BHEOr5js Jm7WK2l1z5LWB3y89GHwJJBUMiShkUNRQWu2Kp6eZ4aNVV0vmWdFjoCzX2RdPzWo 756SYFvWCF7ludl0JtKUrO+sAKvAXXLcvkvof59evS8nZN+e4yQcExRLN0LCipy5 YCNRlSE9U43dCUX3R6iI3FSvxE4oRMbwAADaze9ZLjSVaNQWcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFzbKrbDOaTnigQiK519xBwtpk9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wNTkx YjVjNy1lNGJmLTRkY2YtOTAyYi1iNmZkMTJjMzM5YWYvYmQyYzM3N2QtMjMzZi0z MGIwLTkxMzItODY0YThhYWY2YzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMDU5MWI1YzctZTRiZi00ZGNmLTkw MmItYjZmZDEyYzMzOWFmLzA1OTFiNWM3LWU0YmYtNGRjZi05MDJiLWI2ZmQxMmMz MzlhZi5jcmwwHwYDVR0jBBgwFoAUYePTdTV7twv2IBqCLJQyhWYChV8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wNTkxYjVjNy1lNGJmLTRkY2YtOTAyYi1iNmZk MTJjMzM5YWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7NIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdMtSpzsZTkMvXGoKCuIXBpyVfSsbwVL5R+7l3Gv7WREf3DU0xW6jVj +X8xEkO+L+1ul/9NSUABcuVCTpCA1l9BT90jAni0ohChEJJdFsYj5RrASKq7dD/d cKXBqgDUmWjcAyCf2UNRau36dNJoMlDY/9PWfOhrRoFfSlbQOzQCXb1R4o8uVfyU 4rBEmOQIgC8nj1KlJOfnq32M7MY914h9CDb+dW4TrKNitgjVqPoUkzdCI+4TZsz2 PVuhhxWmP/vOw+SUzFhy4dWM+WWTLk+pJEQ/P8GjiCuDoRDhYYjA31+fzHKSP0jP K1CcJ/44hTqeuNDT+6Gw4oTs6RhB/VY= -----END CERTIFICATE-----Generated at Sun Mar 22 04:29:45 2026 by rpki-client