$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/74708ca9-5c31-32e1-b243-14870abf5964.roa File: 74708ca9-5c31-32e1-b243-14870abf5964.roa (raw, json) Hash identifier: 7noFM++zRKn9PHbvdk+Ou/97Jn6vf+z+qYtWsEoTwlM= Subject key identifier: 56:99:4E:4C:1D:DD:DB:50:9E:F8:74:32:6D:A4:50:EA:FB:DA:34:0A Certificate issuer: /CN=f375140c-52cc-401f-b3a0-476ffa367076 Certificate serial: 010D0C9F4328584CB551DED110C229F62D05EC00 Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/74708ca9-5c31-32e1-b243-14870abf5964.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 399976 IP address blocks: 23.131.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:de:d1:10:c2:29:f6:2d:05:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=ac1c28cc-985e-4308-bb30-557d3b141ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:90:31:e9:28:b5:b6:f4:63:cb:4d:0c:8d:2e: 20:8a:0b:14:d7:00:d1:5f:42:80:e8:a6:91:b4:26: b3:e8:d1:f1:b3:3d:92:92:50:cf:ca:52:48:13:cf: 64:ca:65:8e:73:be:85:b1:49:35:54:a1:75:c1:9e: e9:18:fd:0b:28:d9:fd:f8:09:9e:21:f9:af:b1:27: 1c:ab:ad:33:da:ac:cb:c8:6d:f1:d0:86:08:61:f3: 16:21:6c:41:25:75:64:9e:84:49:d2:eb:06:b0:df: 57:1f:e0:12:93:db:01:39:04:52:43:39:8c:0a:10: 85:e4:b7:dd:4d:2e:44:69:7d:91:45:be:c9:aa:0b: 08:3f:6c:4f:c5:c0:0f:ee:45:bb:ab:f3:c0:aa:f7: 8a:68:08:9b:8f:5e:79:87:a2:0d:5b:f0:17:18:19: 5a:46:99:d0:9c:18:92:87:55:15:57:6f:c7:20:4f: 23:be:56:fa:af:d5:02:c6:c1:06:ef:09:8e:37:21: 41:3b:fa:1d:f4:20:5e:96:a8:97:34:fb:6a:84:24: 60:56:e8:66:bc:90:c6:00:b3:00:74:dc:92:6b:f3: 29:0c:84:2c:82:b7:e3:76:4f:84:e9:45:ff:cf:61: c3:f9:bc:f5:c7:e8:f2:d8:c2:48:31:b5:04:bb:d2: 7e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:99:4E:4C:1D:DD:DB:50:9E:F8:74:32:6D:A4:50:EA:FB:DA:34:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/74708ca9-5c31-32e1-b243-14870abf5964.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl X509v3 Authority Key Identifier: keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer sbgp-ipAddrBlock: critical IPv4: 23.131.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:07:7b:04:3d:8f:9f:1e:5a:c1:a5:8c:01:24:df:87:31:83: 1e:0c:0c:be:f6:31:2d:d7:9c:8c:09:0c:9b:e5:38:95:68:3c: 3c:6a:61:ad:ea:85:1e:8c:45:67:11:66:d0:3b:18:19:e8:ac: 5e:43:35:94:5f:5e:39:7f:36:b9:7d:a3:7c:1c:6a:e2:1a:0f: 12:9e:41:8f:41:a4:ac:71:0f:19:8a:db:66:05:b1:e1:85:b9: ce:e9:f5:60:ee:19:59:ea:29:58:96:f1:f9:c9:f9:e8:9e:cc: 99:a1:f3:6a:d5:e4:09:9f:d0:cf:04:a4:b2:0e:e4:cb:47:dd: 7d:45:53:28:e5:c3:0c:61:34:d6:c9:bf:c8:52:e1:cd:ba:e7: 6b:92:0e:ac:44:db:2b:e7:c6:27:ce:33:aa:51:af:38:b3:17: 06:d1:20:28:63:b2:f6:73:65:64:40:9b:42:56:72:d5:a4:0e: e6:46:93:8c:30:53:b4:b4:0c:86:18:75:4f:82:59:35:71:6b: ad:fc:4e:e9:d5:1f:e6:2c:21:f8:2a:ab:5a:0b:30:5f:4a:2b: 2d:7b:ce:8a:af:80:60:06:ed:a2:46:8d:ef:bd:ad:84:da:8b: 51:cc:83:f8:61:61:07:1b:45:8d:71:8a:ef:3c:73:e6:03:70: 30:37:b3:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1Ud7REMIp9i0F7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3 MDc2MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk YWMxYzI4Y2MtOTg1ZS00MzA4LWJiMzAtNTU3ZDNiMTQxYWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55Ax6Si1tvRjy00MjS4gigsU1wDRX0KA6KaR tCaz6NHxsz2SklDPylJIE89kymWOc76FsUk1VKF1wZ7pGP0LKNn9+AmeIfmvsScc q60z2qzLyG3x0IYIYfMWIWxBJXVknoRJ0usGsN9XH+ASk9sBOQRSQzmMChCF5Lfd TS5EaX2RRb7JqgsIP2xPxcAP7kW7q/PAqveKaAibj155h6INW/AXGBlaRpnQnBiS h1UVV2/HIE8jvlb6r9UCxsEG7wmONyFBO/od9CBelqiXNPtqhCRgVuhmvJDGALMA dNySa/MpDIQsgrfjdk+E6UX/z2HD+bz1x+jy2MJIMbUEu9J+RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaZTkwd3dtQnvh0Mm2kUOr72jQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1 MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvNzQ3MDhjYTktNWMzMS0z MmUxLWIyNDMtMTQ4NzBhYmY1OTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2 NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm ZmEzNjcwNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4PJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAHewQ9j58eWsGljAEk34cxgx4MDL72MS3XnIwJDJvlOJVoPDxqYa3q hR6MRWcRZtA7GBnorF5DNZRfXjl/Nrl9o3wcauIaDxKeQY9BpKxxDxmK22YFseGF uc7p9WDuGVnqKViW8fnJ+eiezJmh82rV5Amf0M8EpLIO5MtH3X1FUyjlwwxhNNbJ v8hS4c2652uSDqxE2yvnxifOM6pRrzizFwbRIChjsvZzZWRAm0JWctWkDuZGk4ww U7S0DIYYdU+CWTVxa638TunVH+YsIfgqq1oLMF9KKy17zoqvgGAG7aJGje+9rYTa i1HMg/hhYQcbRY1xiu88c+YDcDA3s7s= -----END CERTIFICATE-----Generated at Mon Mar 2 13:38:02 2026 by rpki-client