$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/1cee1fb9-f452-30a3-996d-1de632277883.roa File: 1cee1fb9-f452-30a3-996d-1de632277883.roa (raw, json) Hash identifier: JViQaEezYUdVum9L64GrtIlwdeLrrK5SM3rgKnGqo0I= Subject key identifier: E1:74:F8:03:1C:82:41:8A:0E:1A:AB:4A:F7:01:1B:52:90:2E:DD:1E Certificate issuer: /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Certificate serial: 010D0C9F4328584CD4075F988719ACEE40A2BF00 Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/1cee1fb9-f452-30a3-996d-1de632277883.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 396416 IP address blocks: 23.137.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:5f:98:87:19:ac:ee:40:a2:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=a08dab0b-3a7d-475c-94cd-43fcb8009724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ce:b4:2c:fb:75:45:61:37:03:14:d3:e2:7a: cd:5f:10:b4:98:29:69:a6:dd:3a:b2:e5:a7:ce:5b: 21:90:77:7c:16:ad:ad:29:4a:03:77:ae:e6:bd:b9: 24:2b:e6:e5:fb:80:a7:cc:91:de:9d:51:62:e3:b3: 60:c9:4d:84:99:d8:a5:80:b6:09:d6:fd:01:fe:1b: 30:e9:38:67:85:a5:db:b4:12:dc:74:79:18:dc:ac: 1c:1f:6e:b5:96:99:48:0c:25:f4:40:b2:f5:67:1d: a7:ba:c1:aa:45:d8:9e:34:07:40:62:06:22:99:55: df:48:6c:63:e3:80:f9:15:d9:da:bd:36:f5:40:70: 69:4d:a4:0f:50:b6:8a:1b:91:ac:8c:ed:0c:18:16: 66:05:9a:c9:4c:53:f6:ba:91:b6:53:87:7e:05:2f: ba:77:2d:64:0b:ee:ce:c9:95:cb:84:45:e5:b2:b1: e6:4e:59:b5:a2:46:6a:1b:d7:0d:bf:c6:b2:8f:d7: 86:a5:c4:05:54:e6:5a:f4:07:24:6f:68:9a:08:fd: c2:27:e4:cb:d8:2f:81:18:46:35:3f:80:b3:0e:79: 02:9f:98:e0:16:cb:3b:6b:66:d7:68:38:b2:7e:03: 1b:29:ef:9f:69:93:31:6e:63:77:af:1d:ba:76:c4: 3e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:74:F8:03:1C:82:41:8A:0E:1A:AB:4A:F7:01:1B:52:90:2E:DD:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/1cee1fb9-f452-30a3-996d-1de632277883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl X509v3 Authority Key Identifier: keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer sbgp-ipAddrBlock: critical IPv4: 23.137.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:8e:72:a2:ae:c0:7d:fd:36:ad:74:f4:62:62:4c:32:26:2f: de:f3:a4:2e:13:7c:46:26:78:8f:76:bf:e2:ee:b0:d9:31:28: cc:ab:68:44:c7:90:2e:68:1b:51:fd:e6:4a:d6:b7:0f:e5:0b: 60:56:cc:e6:dd:16:6f:ae:6e:17:ec:89:8a:28:5d:6d:2b:18: ad:d8:90:3a:50:e0:24:11:04:17:dd:19:31:7b:63:d3:88:d1: 3d:11:a8:ab:07:16:1a:e4:d1:6f:09:83:91:0e:95:71:65:4e: 11:7f:a5:18:ee:d4:39:fe:1c:be:4c:79:9c:88:3b:a4:db:c7: 90:f7:90:80:af:0f:8e:01:7a:17:29:d4:bd:26:a9:71:37:3e: 78:d5:24:c9:9a:d3:7e:0f:0f:c2:f3:81:22:b2:49:5d:41:0b: f0:0d:65:fb:49:e3:81:2b:5a:e7:fd:4e:14:b2:8c:87:eb:e5: 48:e8:41:fc:d8:dd:04:f8:f8:37:c3:65:f7:06:3b:28:ef:0f: 58:9a:00:4c:78:1b:89:fc:0b:2e:6e:fa:b0:cb:9c:0f:2c:41: 91:d1:a0:14:d2:65:72:3e:8a:38:08:e1:f1:1a:7f:6d:70:b3: d0:71:a9:f3:a5:b4:c0:7d:81:71:69:54:76:b4:cb:8a:fb:38: 37:b9:a6:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB1+Yhxms7kCivwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNzExYjUtZDE2Zi00NTQ5LTllNzUtYmQyMDFmNWI3 YTEzMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk YTA4ZGFiMGItM2E3ZC00NzVjLTk0Y2QtNDNmY2I4MDA5NzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM60LPt1RWE3AxTT4nrNXxC0mClppt06suWn zlshkHd8Fq2tKUoDd67mvbkkK+bl+4CnzJHenVFi47NgyU2EmdilgLYJ1v0B/hsw 6ThnhaXbtBLcdHkY3KwcH261lplIDCX0QLL1Zx2nusGqRdieNAdAYgYimVXfSGxj 44D5FdnavTb1QHBpTaQPULaKG5GsjO0MGBZmBZrJTFP2upG2U4d+BS+6dy1kC+7O yZXLhEXlsrHmTlm1okZqG9cNv8ayj9eGpcQFVOZa9Ackb2iaCP3CJ+TL2C+BGEY1 P4CzDnkCn5jgFss7a2bXaDiyfgMbKe+faZMxbmN3rx26dsQ+uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOF0+AMcgkGKDhqrSvcBG1KQLt0eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3 MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIwMWY1YjdhMTMvMWNlZTFmYjktZjQ1Mi0z MGEzLTk5NmQtMWRlNjMyMjc3ODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRkNzExYjUtZDE2Zi00NTQ5LTll NzUtYmQyMDFmNWI3YTEzL2ZkZDcxMWI1LWQxNmYtNDU0OS05ZTc1LWJkMjAxZjVi N2ExMy5jcmwwHwYDVR0jBBgwFoAUHHKGSiScg7PMA5PUnLiNgqiJlT8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIw MWY1YjdhMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4koMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaOcqKuwH39Nq109GJiTDImL97zpC4TfEYmeI92v+LusNkxKMyraETH kC5oG1H95krWtw/lC2BWzObdFm+ubhfsiYooXW0rGK3YkDpQ4CQRBBfdGTF7Y9OI 0T0RqKsHFhrk0W8Jg5EOlXFlThF/pRju1Dn+HL5MeZyIO6Tbx5D3kICvD44Behcp 1L0mqXE3PnjVJMma034PD8LzgSKySV1BC/ANZftJ44ErWuf9ThSyjIfr5UjoQfzY 3QT4+DfDZfcGOyjvD1iaAEx4G4n8Cy5u+rDLnA8sQZHRoBTSZXI+ijgI4fEaf21w s9BxqfOltMB9gXFpVHa0y4r7ODe5pis= -----END CERTIFICATE-----Generated at Sun Mar 1 14:58:07 2026 by rpki-client