$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa File: 724dc813-9136-3075-bcba-f77834af4133.roa (raw, json) Hash identifier: 7kNwpGjKUhyT6ccor6dNCBTYJrDbEcAjQWFdOjVba6o= Subject key identifier: 1B:3F:1D:05:2E:38:B5:AC:C8:8A:BA:23:50:5F:25:BD:29:AD:42:55 Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F4328584CC611EB6C7FCC6DF141A3C900 Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 923 IP address blocks: 23.144.156.0/24 maxlen: 24 207.167.121.0/24 maxlen: 24 2602:fbf5::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:11:eb:6c:7f:cc:6d:f1:41:a3:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=14716730-c3b8-4a60-a4fa-5e7538f9605c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4f:00:1e:2c:17:1b:29:7c:c7:d7:29:44:4f: 19:82:66:99:a9:99:c3:f2:45:64:a4:0a:90:e3:f6: 6d:c1:9c:12:d3:ee:c3:43:4e:13:32:62:c2:08:43: 93:c5:40:9e:4b:dc:23:09:15:16:9b:c0:15:5c:d7: d8:19:80:9d:f1:84:11:d5:67:51:a9:b5:3b:7b:d3: 8c:70:ff:20:9c:6a:aa:15:4f:d8:b0:96:fb:45:1a: a9:e0:9b:41:e0:31:c1:ae:38:33:96:9b:12:cb:9c: 3b:3d:4c:d8:24:4c:91:45:81:24:76:38:88:02:4f: 21:b8:86:a4:af:4d:60:02:03:d6:6f:41:2a:c0:09: de:8d:69:ba:9b:02:c5:96:19:db:24:c9:5f:15:d3: 70:2e:cf:9b:f9:f2:7c:f2:05:21:c1:02:8d:c6:69: 31:a7:f3:2d:bd:42:ed:57:41:bc:94:87:dd:c9:de: 5e:dc:15:f3:2f:a4:7d:78:c4:e7:56:23:ec:da:65: ad:17:46:90:4d:90:88:b2:58:0a:f1:0c:51:ca:43: f5:7a:9a:0d:ac:74:0c:7f:b8:d3:a6:39:cd:96:ce: 34:11:40:c9:4e:8f:fc:76:33:4d:da:35:cc:02:0e: ff:c0:ce:60:45:00:35:31:2c:ce:46:c6:62:d1:f1: c5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3F:1D:05:2E:38:B5:AC:C8:8A:BA:23:50:5F:25:BD:29:AD:42:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv4: 23.144.156.0/24 207.167.121.0/24 IPv6: 2602:fbf5::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:8d:57:56:d9:af:03:ee:d3:7e:7a:e0:83:32:83:53:21:87: 4c:e5:69:95:51:5e:9d:1e:0b:ff:2a:60:7b:7c:c7:e4:85:f1: 2b:97:bb:31:2c:40:7e:55:32:96:89:4b:7d:95:79:64:12:fc: 56:b8:e3:a3:76:35:99:0a:8f:d1:aa:a7:3b:c2:b0:cd:14:68: c8:2d:5f:46:64:6d:0b:92:a8:8d:7c:55:93:45:a7:b7:0e:f9: 7f:55:60:76:0b:94:e2:4b:89:d1:58:75:4e:bb:cb:6f:0b:77: 3d:56:33:62:d5:e4:02:87:21:9d:10:cc:c2:90:e3:fc:bb:03: e2:22:4a:7a:72:98:ca:03:c2:f3:55:09:4c:9b:a9:b2:9e:1d: 9d:b3:00:c1:e6:56:6e:fe:5f:5d:db:f3:06:9f:b2:a8:a8:46: 12:eb:c1:40:b1:b4:44:d7:a6:f6:af:32:18:76:91:d0:81:bf: bd:ec:0e:c3:2b:29:f5:66:99:0e:2b:16:0f:ff:31:e1:b7:45: 87:23:3b:74:fd:19:13:1c:7e:ba:2e:9b:48:9e:96:56:3c:cf: 52:cf:d8:62:ce:26:16:88:5c:d2:ff:db:fc:78:f4:56:e7:93: ce:21:b4:8e:db:f7:33:c2:ab:d2:25:2d:71:a5:0c:db:6b:14: dc:52:3a:5f -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEzGEetsf8xt8UGjyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk MTQ3MTY3MzAtYzNiOC00YTYwLWE0ZmEtNWU3NTM4Zjk2MDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv08AHiwXGyl8x9cpRE8ZgmaZqZnD8kVkpAqQ 4/ZtwZwS0+7DQ04TMmLCCEOTxUCeS9wjCRUWm8AVXNfYGYCd8YQR1WdRqbU7e9OM cP8gnGqqFU/YsJb7RRqp4JtB4DHBrjgzlpsSy5w7PUzYJEyRRYEkdjiIAk8huIak r01gAgPWb0EqwAnejWm6mwLFlhnbJMlfFdNwLs+b+fJ88gUhwQKNxmkxp/MtvULt V0G8lIfdyd5e3BXzL6R9eMTnViPs2mWtF0aQTZCIslgK8QxRykP1epoNrHQMf7jT pjnNls40EUDJTo/8djNN2jXMAg7/wM5gRQA1MSzORsZi0fHFYwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFBs/HQUuOLWsyIq6I1BfJb0prUJVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvNzI0ZGM4MTMtOTEzNi0z MDc1LWJjYmEtZjc3ODM0YWY0MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5CcAwQA z6d5MA4EAgACMAgDBgQmAvv1ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbjVdW2a8D7tN+euCDMoNTIYdM 5WmVUV6dHgv/KmB7fMfkhfErl7sxLEB+VTKWiUt9lXlkEvxWuOOjdjWZCo/Rqqc7 wrDNFGjILV9GZG0LkqiNfFWTRae3Dvl/VWB2C5TiS4nRWHVOu8tvC3c9VjNi1eQC hyGdEMzCkOP8uwPiIkp6cpjKA8LzVQlMm6mynh2dswDB5lZu/l9d2/MGn7KoqEYS 68FAsbRE16b2rzIYdpHQgb+97A7DKyn1ZpkOKxYP/zHht0WHIzt0/RkTHH66LptI npZWPM9Sz9hiziYWiFzS/9v8ePRW55POIbSO2/czwqvSJS1xpQzbaxTcUjpf -----END CERTIFICATE-----Generated at Mon Mar 2 15:35:56 2026 by rpki-client