$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa File: a05edcb1-cd53-3361-9a4a-f92812c5008e.roa (raw, json) Hash identifier: ofL3pOJiTjmw5ClWihP+OqHTvUszgpmTEnnsNYflN7c= Subject key identifier: 28:43:53:3D:16:83:42:07:33:0D:F4:BF:7D:2B:73:8D:ED:62:FD:1D Certificate issuer: /CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Certificate serial: 010D0C9F4328584CAE570EAE2BC5D33415C2DA00 Authority key identifier: 8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 400312 IP address blocks: 23.131.168.0/24 maxlen: 24 2602:fbf0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:0e:ae:2b:c5:d3:34:15:c2:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=b312232d-e33c-43f5-b4ca-e0c4bb8b904f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5e:75:41:00:d1:32:27:2a:d5:5f:6e:ae:39: 46:71:78:55:ed:10:50:9e:6f:0f:11:9f:8e:0e:22: de:32:5d:d0:2f:54:7c:28:ea:c8:3a:f5:1a:64:5f: b5:7a:01:2f:c9:db:b0:1a:f1:9c:9b:38:c5:c1:df: 9b:8c:db:cb:20:5c:12:88:6b:db:43:ad:2a:3a:24: a4:0d:f3:58:89:4b:5c:b4:d9:cf:b5:5e:04:be:e1: 04:12:d8:76:98:17:6e:68:f9:6e:f8:5a:37:50:f4: 06:2f:7d:25:48:17:7a:ce:4f:ac:08:36:02:4a:f6: b3:ff:1e:89:ac:36:dd:35:1f:8f:ad:ff:58:d4:ac: 64:c7:e0:36:08:f9:88:da:be:d6:f2:50:c5:4e:b3: 28:aa:41:2e:eb:13:66:68:7e:c1:16:43:bc:bf:8d: af:34:26:f7:f0:6e:26:77:a9:cb:fe:5e:20:a1:d0: 70:cb:bf:23:d2:ff:97:cb:1d:2b:3b:ec:d5:35:a0: 7b:c7:6c:03:e9:a3:db:c5:0e:32:7b:04:54:70:9c: c1:45:f5:bf:d6:4e:dd:cb:4a:4c:a3:bf:25:5a:d6: d3:ea:ff:3c:4b:fc:2b:0e:a1:da:c5:59:09:e1:b2: 65:95:ff:1c:e6:fa:4a:58:83:5b:b7:13:db:50:4c: e7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:43:53:3D:16:83:42:07:33:0D:F4:BF:7D:2B:73:8D:ED:62:FD:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl X509v3 Authority Key Identifier: keyid:8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer sbgp-ipAddrBlock: critical IPv4: 23.131.168.0/24 IPv6: 2602:fbf0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ea:fd:c7:ba:10:92:78:96:b0:d2:52:19:81:f0:dc:b2:0c:23: 6a:1d:15:cf:16:7e:f1:20:ad:7c:8d:c1:1a:4d:f3:b0:f8:bd: 1f:2f:bc:59:d7:41:b0:e5:f9:98:2d:d6:c6:9f:ba:7c:15:51: 2d:d9:8b:38:c4:66:c0:54:0f:ee:70:14:91:0c:df:99:50:79: 2f:ad:6b:a9:0b:18:5f:a4:89:97:52:e4:f5:c6:19:2e:82:db: f3:66:1e:aa:8d:fc:80:f1:ff:88:72:71:88:21:08:ec:c3:5f: 21:35:ea:c5:f3:3f:aa:07:bb:18:56:47:1f:0c:ed:9b:05:77: 9c:08:f6:ea:20:71:46:86:ae:21:4a:2d:a6:0c:06:3b:d5:4f: 66:76:be:06:c5:88:19:1d:5c:0f:ca:32:40:cf:f3:fc:21:5c: cb:46:0c:b7:4a:78:f5:0a:fc:51:55:71:b5:7c:c7:a1:a1:5c: 78:c4:e7:f8:1b:0b:a7:6a:5e:f3:69:9f:47:50:ab:eb:7f:36: b0:aa:25:7c:90:a2:24:d3:ce:9a:1a:0f:d9:d8:99:cc:05:36: fb:5e:c0:c0:70:3d:88:d5:08:b0:8f:ed:70:d3:06:fe:18:e0: 43:74:4a:1f:e6:c1:8d:66:52:67:22:58:55:5b:11:b6:b3:35: 55:3e:92:be -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEyuVw6uK8XTNBXC2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2ZTlhMjUtMTU5OS00ZTliLWE4YTItMDE1OTk1Yzgw NWI4MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjMxMjIzMmQtZTMzYy00M2Y1LWI0Y2EtZTBjNGJiOGI5MDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4151QQDRMicq1V9urjlGcXhV7RBQnm8PEZ+O DiLeMl3QL1R8KOrIOvUaZF+1egEvyduwGvGcmzjFwd+bjNvLIFwSiGvbQ60qOiSk DfNYiUtctNnPtV4EvuEEEth2mBduaPlu+Fo3UPQGL30lSBd6zk+sCDYCSvaz/x6J rDbdNR+Prf9Y1Kxkx+A2CPmI2r7W8lDFTrMoqkEu6xNmaH7BFkO8v42vNCb38G4m d6nL/l4godBwy78j0v+Xyx0rO+zVNaB7x2wD6aPbxQ4yewRUcJzBRfW/1k7dy0pM o78lWtbT6v88S/wrDqHaxVkJ4bJllf8c5vpKWINbtxPbUEznTwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFChDUz0Wg0IHMw30v30rc43tYv0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YzZl OWEyNS0xNTk5LTRlOWItYThhMi0wMTU5OTVjODA1YjgvYTA1ZWRjYjEtY2Q1My0z MzYxLTlhNGEtZjkyODEyYzUwMDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWM2ZTlhMjUtMTU5OS00ZTliLWE4 YTItMDE1OTk1YzgwNWI4LzljNmU5YTI1LTE1OTktNGU5Yi1hOGEyLTAxNTk5NWM4 MDViOC5jcmwwHwYDVR0jBBgwFoAUjvfJnlBoZhsQD1ZqN6tb/9Qmj6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YzZlOWEyNS0xNTk5LTRlOWItYThhMi0wMTU5 OTVjODA1YjguY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4OoMA0E AgACMAcDBQAmAvvwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAOr9x7oQkniWsNJSGYHw3LIMI2odFc8WfvEg rXyNwRpN87D4vR8vvFnXQbDl+Zgt1safunwVUS3ZizjEZsBUD+5wFJEM35lQeS+t a6kLGF+kiZdS5PXGGS6C2/NmHqqN/IDx/4hycYghCOzDXyE16sXzP6oHuxhWRx8M 7ZsFd5wI9uogcUaGriFKLaYMBjvVT2Z2vgbFiBkdXA/KMkDP8/whXMtGDLdKePUK /FFVcbV8x6GhXHjE5/gbC6dqXvNpn0dQq+t/NrCqJXyQoiTTzpoaD9nYmcwFNvte wMBwPYjVCLCP7XDTBv4Y4EN0Sh/mwY1mUmciWFVbEbazNVU+kr4= -----END CERTIFICATE-----Generated at Mon Mar 2 11:41:01 2026 by rpki-client