$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/d0c9ddfb-71b8-3f1b-a8d9-5bededd53340.roa File: d0c9ddfb-71b8-3f1b-a8d9-5bededd53340.roa (raw, json) Hash identifier: FVtt4M1l+gkBXe40NSvr0vh83VuSyGZKTRQsYnfyn58= Subject key identifier: 33:22:EE:3C:67:2E:07:A8:9A:1E:34:8C:D9:04:3A:5A:EA:C3:B6:84 Certificate issuer: /CN=2df6de74-9aed-474d-aed2-ba8ab13a7cf3 Certificate serial: 010D0C9F4328584D00B24D92DC9D129035F4BB80 Authority key identifier: 38:76:CF:4E:AE:7D:02:15:BF:04:B7:51:78:C3:1B:2D:9B:FD:BC:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/d0c9ddfb-71b8-3f1b-a8d9-5bededd53340.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 394256 IP address blocks: 23.173.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:4d:92:dc:9d:12:90:35:f4:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2df6de74-9aed-474d-aed2-ba8ab13a7cf3 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=9ec90578-0d2a-4433-83b7-780d9ba7213e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:83:bf:87:4b:db:6f:94:60:de:19:4a:5e:ed: c3:df:ea:18:87:68:81:30:bb:34:05:d8:f0:86:59: b8:92:07:98:f0:c7:82:8b:99:81:cc:e7:e7:ae:00: 5b:0b:05:ea:db:e4:41:45:f7:5d:df:50:32:39:b5: 4b:34:2a:64:59:22:bf:4c:7c:ec:9f:98:7f:80:dd: ff:5b:d1:1c:76:8a:32:e9:b7:10:30:0b:1e:bc:fc: cb:cd:ea:ff:76:b5:0e:22:aa:8f:bf:84:71:b0:c0: eb:97:3b:9b:ed:3f:fb:2e:dc:9d:d8:12:76:62:f7: 45:c7:35:fa:04:3b:2c:d4:c6:2e:da:d2:b5:79:71: 26:8c:83:ad:a2:ee:06:1d:db:9b:e7:3f:92:c2:26: 7f:21:1d:22:83:65:8f:9c:65:fa:b5:b9:6a:59:48: c9:c5:bd:19:76:f4:a6:04:30:4e:1d:c5:bf:4d:0b: ea:9f:01:4c:f4:0c:2f:bf:e6:97:85:4b:6f:7d:67: 31:70:30:e6:41:00:7a:7c:43:cc:0b:21:74:7a:bd: 2c:25:49:ec:b1:b3:4c:13:44:3b:29:0a:80:72:62: a9:ec:28:6b:3f:5a:90:b8:49:85:26:df:3e:eb:50: c8:0a:78:5f:a5:35:eb:c6:91:01:0f:9c:08:3f:ae: ea:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:22:EE:3C:67:2E:07:A8:9A:1E:34:8C:D9:04:3A:5A:EA:C3:B6:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/d0c9ddfb-71b8-3f1b-a8d9-5bededd53340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.crl X509v3 Authority Key Identifier: keyid:38:76:CF:4E:AE:7D:02:15:BF:04:B7:51:78:C3:1B:2D:9B:FD:BC:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer sbgp-ipAddrBlock: critical IPv4: 23.173.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:77:ab:7a:f9:c6:15:7c:56:f1:99:a5:d9:25:ad:8f:90:f3: b4:c3:d5:dc:16:62:b7:94:5b:42:e1:1c:44:22:12:fb:24:b1: c3:9c:63:3e:6b:ae:db:22:13:b2:76:70:bf:0d:5e:00:7a:52: 76:11:35:85:eb:94:44:70:e5:01:6a:91:f2:0e:d9:d2:de:60: 94:56:05:7c:70:63:71:01:fa:73:a3:ba:dd:73:14:b9:c0:ec: 51:6c:37:50:9b:ee:5d:8d:cb:d0:51:e8:00:cc:7f:38:ff:b7: c8:a3:14:56:1b:5f:f0:9a:41:7e:63:49:c4:28:a0:e3:dd:24: de:42:94:eb:57:41:e3:6d:7f:29:03:11:3d:8d:10:9c:b5:b6: cc:25:b1:7d:61:b8:ef:85:a3:28:ed:48:8b:01:a1:b8:91:ba: 26:ac:3e:d8:d4:37:9c:92:1a:64:5a:bc:ad:5f:c1:be:a7:15: ac:5e:3f:a2:f0:49:3a:ff:8e:d7:00:df:51:1d:c2:e3:00:df: c4:91:e4:bc:77:e2:70:b6:ae:8f:d0:04:41:c4:05:a8:92:aa: 45:99:54:22:96:bf:a9:e5:6f:81:87:d3:fd:de:11:4f:ae:42: 49:de:18:50:ab:52:d6:c8:e2:32:43:29:87:d1:cd:52:78:16: ae:74:b1:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Ask2S3J0SkDX0u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRmNmRlNzQtOWFlZC00NzRkLWFlZDItYmE4YWIxM2E3 Y2YzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk OWVjOTA1NzgtMGQyYS00NDMzLTgzYjctNzgwZDliYTcyMTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIO/h0vbb5Rg3hlKXu3D3+oYh2iBMLs0Bdjw hlm4kgeY8MeCi5mBzOfnrgBbCwXq2+RBRfdd31AyObVLNCpkWSK/THzsn5h/gN3/ W9Ecdooy6bcQMAsevPzLzer/drUOIqqPv4RxsMDrlzub7T/7Ltyd2BJ2YvdFxzX6 BDss1MYu2tK1eXEmjIOtou4GHdub5z+SwiZ/IR0ig2WPnGX6tblqWUjJxb0ZdvSm BDBOHcW/TQvqnwFM9Awvv+aXhUtvfWcxcDDmQQB6fEPMCyF0er0sJUnssbNME0Q7 KQqAcmKp7ChrP1qQuEmFJt8+61DICnhfpTXrxpEBD5wIP67qTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMi7jxnLgeomh40jNkEOlrqw7aEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZGY2 ZGU3NC05YWVkLTQ3NGQtYWVkMi1iYThhYjEzYTdjZjMvZDBjOWRkZmItNzFiOC0z ZjFiLWE4ZDktNWJlZGVkZDUzMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmRmNmRlNzQtOWFlZC00NzRkLWFl ZDItYmE4YWIxM2E3Y2YzLzJkZjZkZTc0LTlhZWQtNDc0ZC1hZWQyLWJhOGFiMTNh N2NmMy5jcmwwHwYDVR0jBBgwFoAUOHbPTq59AhW/BLdReMMbLZv9vOYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZGY2ZGU3NC05YWVkLTQ3NGQtYWVkMi1iYThh YjEzYTdjZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF61YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALB3q3r5xhV8VvGZpdklrY+Q87TD1dwWYreUW0LhHEQiEvskscOcYz5r rtsiE7J2cL8NXgB6UnYRNYXrlERw5QFqkfIO2dLeYJRWBXxwY3EB+nOjut1zFLnA 7FFsN1Cb7l2Ny9BR6ADMfzj/t8ijFFYbX/CaQX5jScQooOPdJN5ClOtXQeNtfykD ET2NEJy1tswlsX1huO+FoyjtSIsBobiRuiasPtjUN5ySGmRavK1fwb6nFaxeP6Lw STr/jtcA31EdwuMA38SR5Lx34nC2ro/QBEHEBaiSqkWZVCKWv6nlb4GH0/3eEU+u QkneGFCrUtbI4jJDKYfRzVJ4Fq50sUQ= -----END CERTIFICATE-----Generated at Mon Mar 2 02:04:15 2026 by rpki-client