$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/23d19562-52d9-3fab-90df-dd0af2be83d4.roa File: 23d19562-52d9-3fab-90df-dd0af2be83d4.roa (raw, json) Hash identifier: HSmN+8XwkukCpc5LMtwKwhIee21hSufhlJcIsHH8FBs= Subject key identifier: 74:31:60:50:FD:3F:2D:8F:41:18:E6:45:79:A6:5A:92:60:A8:09:31 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584D00B27DADC5F63821F9137D00 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/23d19562-52d9-3fab-90df-dd0af2be83d4.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 18434 IP address blocks: 147.249.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:7d:ad:c5:f6:38:21:f9:13:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=7e5f80f9-5d33-4332-97a1-fed5598e3e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f9:63:9e:9b:fc:63:63:3e:67:f5:ed:c3:33: aa:ac:bb:a2:29:8e:ba:08:17:6d:b9:53:8b:0b:a3: 23:14:06:a6:f5:50:5f:75:fd:09:5b:d2:67:f8:65: 64:0e:4d:b1:d4:ab:ba:58:af:ab:d9:e2:2b:95:74: e2:cb:69:4c:60:d3:26:f9:8b:96:76:18:ae:f9:38: d4:77:93:fc:4f:f1:23:48:ed:9c:35:58:a2:14:1d: 46:77:b9:ee:7e:86:aa:40:b2:66:4e:b1:17:d8:47: f3:2a:02:54:03:cf:d8:c0:36:fe:40:97:59:6b:fb: 46:ec:56:3d:de:fe:95:9f:3f:c6:78:da:10:a2:5f: 08:14:fe:4e:41:90:e8:bf:6e:85:1f:c9:6e:24:a0: b8:6b:74:29:26:05:14:d7:ce:d3:f1:0e:6f:33:a2: da:75:05:4f:05:4d:82:ca:0a:0e:33:3a:e8:b0:03: 4f:81:be:e4:d1:bb:0a:6c:61:79:be:df:16:c8:35: 3f:10:99:dd:cc:03:5d:ee:01:d1:bc:6a:03:45:c3: be:44:01:85:3e:73:7d:a0:5d:77:d1:49:3c:0b:81: 5c:70:94:fd:b2:8e:14:98:11:5d:2b:3a:4f:95:b0: 2e:62:20:67:dd:73:9f:9b:b6:49:47:95:92:72:66: 39:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:31:60:50:FD:3F:2D:8F:41:18:E6:45:79:A6:5A:92:60:A8:09:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/23d19562-52d9-3fab-90df-dd0af2be83d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:8d:50:70:97:d0:9f:f5:fb:3b:ba:2b:ee:89:7b:8a:6e:74: 79:c1:f0:55:f7:d0:08:04:44:91:9c:9f:dd:d7:cc:64:be:2c: 14:36:91:ab:8d:45:2a:31:8f:04:b9:cc:d4:da:0a:11:dd:95: 3c:c6:07:9a:10:bb:d5:0f:32:73:78:c6:d9:c8:f4:e5:82:df: 72:e6:e2:2e:3b:f2:37:0c:6a:7b:0d:84:6d:15:bb:7a:b5:03: dd:15:b3:ff:b5:7c:b7:ba:64:8d:53:3f:f4:11:59:65:18:1c: ce:e2:83:88:74:b9:00:c7:ac:f9:36:2b:30:b8:ac:4d:76:c8: ab:e8:b0:d6:3f:40:19:46:b0:8b:54:06:3d:9c:ca:8e:9d:cd: 31:7f:79:84:df:90:d0:b0:9a:f0:df:79:20:24:c7:48:16:41: ca:84:ee:ae:85:9f:c8:23:fb:03:33:0d:08:f3:4c:61:7a:a2: d8:a6:41:87:1f:3f:34:e7:06:52:43:6a:5e:15:98:54:e9:a3: fb:f3:ca:d0:6d:16:10:42:34:f2:11:85:c2:14:18:1c:aa:24: 3f:48:46:2c:bc:00:fc:22:42:6a:53:79:7e:68:c2:95:e6:28: d6:d0:53:f8:2f:ab:80:da:2b:52:24:a2:e6:d1:b1:f2:80:69: f5:65:de:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Asn2txfY4IfkTfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk N2U1ZjgwZjktNWQzMy00MzMyLTk3YTEtZmVkNTU5OGUzZTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/ljnpv8Y2M+Z/XtwzOqrLuiKY66CBdtuVOL C6MjFAam9VBfdf0JW9Jn+GVkDk2x1Ku6WK+r2eIrlXTiy2lMYNMm+YuWdhiu+TjU d5P8T/EjSO2cNViiFB1Gd7nufoaqQLJmTrEX2EfzKgJUA8/YwDb+QJdZa/tG7FY9 3v6Vnz/GeNoQol8IFP5OQZDov26FH8luJKC4a3QpJgUU187T8Q5vM6LadQVPBU2C ygoOMzrosANPgb7k0bsKbGF5vt8WyDU/EJndzANd7gHRvGoDRcO+RAGFPnN9oF13 0Uk8C4FccJT9so4UmBFdKzpPlbAuYiBn3XOfm7ZJR5WScmY5ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQxYFD9Py2PQRjmRXmmWpJgqAkxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvMjNkMTk1NjItNTJkOS0z ZmFiLTkwZGYtZGQwYWYyYmU4M2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/k0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWNUHCX0J/1+zu6K+6Je4pudHnB8FX30AgERJGcn93XzGS+LBQ2kauN RSoxjwS5zNTaChHdlTzGB5oQu9UPMnN4xtnI9OWC33Lm4i478jcMansNhG0Vu3q1 A90Vs/+1fLe6ZI1TP/QRWWUYHM7ig4h0uQDHrPk2KzC4rE12yKvosNY/QBlGsItU Bj2cyo6dzTF/eYTfkNCwmvDfeSAkx0gWQcqE7q6Fn8gj+wMzDQjzTGF6otimQYcf PzTnBlJDal4VmFTpo/vzytBtFhBCNPIRhcIUGByqJD9IRiy8APwiQmpTeX5owpXm KNbQU/gvq4DaK1IkoubRsfKAafVl3tQ= -----END CERTIFICATE-----Generated at Mon Mar 2 15:50:22 2026 by rpki-client