$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/990b7dd1-611c-3ea1-aafc-3d83c74060da.roa File: 990b7dd1-611c-3ea1-aafc-3d83c74060da.roa (raw, json) Hash identifier: Z2bPOKjKi+k72vTTqSrWWhOBLkXbjtv47YHqY///Idk= Subject key identifier: A8:25:6F:60:48:51:99:0E:71:57:93:34:FE:38:6F:01:A1:3E:1C:83 Certificate issuer: /CN=958d43d9-c341-46e7-b131-b154f01666e6 Certificate serial: 010D0C9F4328584CB981C28D2BFAA8941EA019C0 Authority key identifier: E4:8F:F3:FC:95:1C:FA:80:6D:03:75:DF:E9:AB:35:C0:8E:5A:28:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/990b7dd1-611c-3ea1-aafc-3d83c74060da.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 399687 IP address blocks: 23.189.240.0/24 maxlen: 24 146.19.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:c2:8d:2b:fa:a8:94:1e:a0:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=958d43d9-c341-46e7-b131-b154f01666e6 Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=89e40e6b-e9ef-43d0-9e1f-401600ed9837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a8:c0:ee:85:79:13:98:59:9c:f5:14:3a:b9: f0:01:74:97:82:4a:7b:e0:68:ff:56:8b:0c:8b:26: 21:3b:d4:1a:c1:96:05:ed:99:1c:9f:97:3a:c2:6b: df:cc:b4:13:e4:dc:14:6a:12:8a:04:d8:f6:ee:ef: 6a:bd:b3:02:ba:05:53:71:b7:21:41:5d:3f:61:7f: 7c:5c:ad:ca:72:04:23:7d:4c:ec:d1:86:be:91:4e: 06:84:00:0a:27:dd:0e:a4:af:97:9b:a3:46:d2:39: cb:6e:34:7b:b4:7c:75:82:f9:76:b4:28:81:7e:f5: 3a:88:e2:b5:60:6a:df:33:54:7b:a9:a8:43:fa:97: 8b:08:53:f6:78:8e:2c:d5:ab:75:e7:36:54:b7:6c: a5:8e:93:29:2c:1a:4d:5c:1d:62:3b:ef:46:8f:3d: 3a:23:73:1a:ee:6b:70:ca:35:00:90:1c:09:59:d2: a9:90:c7:09:81:e7:13:b2:10:ce:e7:ea:d1:29:28: 2f:d2:ae:d0:a3:20:b1:53:ad:5b:25:70:91:50:67: ac:a1:da:b5:ad:a2:01:26:db:ba:af:cb:78:2a:7e: 6a:f4:c4:b5:e0:6c:30:01:7a:f2:a4:81:cc:42:a7: f2:9a:c7:60:6c:7f:cd:7a:61:0c:65:67:9f:12:62: 10:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:25:6F:60:48:51:99:0E:71:57:93:34:FE:38:6F:01:A1:3E:1C:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/990b7dd1-611c-3ea1-aafc-3d83c74060da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.crl X509v3 Authority Key Identifier: keyid:E4:8F:F3:FC:95:1C:FA:80:6D:03:75:DF:E9:AB:35:C0:8E:5A:28:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer sbgp-ipAddrBlock: critical IPv4: 23.189.240.0/24 146.19.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:0e:12:23:07:49:25:a3:a8:49:05:aa:a2:1b:d6:86:44:b3: 74:58:7f:ad:a1:92:8b:10:7f:b0:b4:54:75:a6:39:22:c6:99: 4f:3d:84:6f:4f:70:7d:29:91:0e:e0:e9:cc:28:95:e9:d0:cc: d4:3b:1c:b6:9f:a9:9b:13:8c:d4:8a:52:3d:42:a6:e8:5d:ea: 93:64:72:f7:5e:d8:76:f6:f3:ac:b1:85:62:ae:fe:88:46:15: cf:83:92:9b:4e:47:fa:aa:2f:c9:66:0a:90:42:09:94:dd:ed: ee:01:74:02:89:f8:fa:31:66:27:77:7e:22:ae:3b:71:bc:62: d9:3d:e0:5c:3b:12:dc:5c:70:19:17:25:69:c0:95:e6:b2:56: ef:c3:e7:54:24:04:87:b5:f5:11:04:1f:ce:7c:68:25:f2:5f: 37:71:fd:07:a2:2b:48:be:1c:66:7c:91:21:d7:ec:99:94:e8: b8:48:f9:27:f4:39:e0:2b:a2:9e:89:5a:6a:a0:21:db:38:4a: 22:32:06:3c:bf:39:37:2b:c5:52:76:4c:97:96:d9:a4:16:dc: 06:08:35:24:ff:7e:d5:19:4e:aa:ef:c3:ae:54:7b:86:ee:e6: 69:fe:c4:3d:54:c5:a0:3d:77:d2:9c:ce:00:4d:52:a1:cd:8b: 6e:31:18:16 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEy5gcKNK/qolB6gGcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU4ZDQzZDktYzM0MS00NmU3LWIxMzEtYjE1NGYwMTY2 NmU2MB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk ODllNDBlNmItZTllZi00M2QwLTllMWYtNDAxNjAwZWQ5ODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ajA7oV5E5hZnPUUOrnwAXSXgkp74Gj/VosM iyYhO9QawZYF7Zkcn5c6wmvfzLQT5NwUahKKBNj27u9qvbMCugVTcbchQV0/YX98 XK3KcgQjfUzs0Ya+kU4GhAAKJ90OpK+Xm6NG0jnLbjR7tHx1gvl2tCiBfvU6iOK1 YGrfM1R7qahD+peLCFP2eI4s1at15zZUt2yljpMpLBpNXB1iO+9Gjz06I3Ma7mtw yjUAkBwJWdKpkMcJgecTshDO5+rRKSgv0q7QoyCxU61bJXCRUGesodq1raIBJtu6 r8t4Kn5q9MS14GwwAXrypIHMQqfymsdgbH/NemEMZWefEmIQYwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKglb2BIUZkOcVeTNP44bwGhPhyDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85NThk NDNkOS1jMzQxLTQ2ZTctYjEzMS1iMTU0ZjAxNjY2ZTYvOTkwYjdkZDEtNjExYy0z ZWExLWFhZmMtM2Q4M2M3NDA2MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTU4ZDQzZDktYzM0MS00NmU3LWIx MzEtYjE1NGYwMTY2NmU2Lzk1OGQ0M2Q5LWMzNDEtNDZlNy1iMTMxLWIxNTRmMDE2 NjZlNi5jcmwwHwYDVR0jBBgwFoAU5I/z/JUc+oBtA3Xf6as1wI5aKBUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85NThkNDNkOS1jMzQxLTQ2ZTctYjEzMS1iMTU0 ZjAxNjY2ZTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF73wAwQA khMCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA4OEiMHSSWjqEkFqqIb1oZEs3RYf62hkosQf7C0VHWmOSLG mU89hG9PcH0pkQ7g6cwolenQzNQ7HLafqZsTjNSKUj1Cpuhd6pNkcvde2Hb286yx hWKu/ohGFc+DkptOR/qqL8lmCpBCCZTd7e4BdAKJ+PoxZid3fiKuO3G8Ytk94Fw7 EtxccBkXJWnAleayVu/D51QkBIe19REEH858aCXyXzdx/QeiK0i+HGZ8kSHX7JmU 6LhI+Sf0OeArop6JWmqgIds4SiIyBjy/OTcrxVJ2TJeW2aQW3AYINST/ftUZTqrv w65Ue4bu5mn+xD1UxaA9d9KczgBNUqHNi24xGBY= -----END CERTIFICATE-----Generated at Mon Mar 2 11:24:46 2026 by rpki-client