$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/543f2b9a-3539-3d5c-9557-9b937fc9f7a7.roa File: 543f2b9a-3539-3d5c-9557-9b937fc9f7a7.roa (raw, json) Hash identifier: Ii4Joui0+jAO+FYZ4B5qpwVA4Oljwlga0pAO+NZtI+I= Subject key identifier: 75:83:E7:75:40:FA:8D:24:6A:92:57:28:29:FE:0B:07:AC:20:6B:FE Certificate issuer: /CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed Certificate serial: 010D0C9F4328584CF42230990CB893A3BDA5D600 Authority key identifier: 06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/543f2b9a-3539-3d5c-9557-9b937fc9f7a7.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 46109 IP address blocks: 23.156.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:30:99:0c:b8:93:a3:bd:a5:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=1cad23b8-dc7c-45d9-8e97-77b9f12d333b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7c:ff:96:15:88:fc:a1:61:9f:99:31:cf:4c: af:6a:2b:1f:4d:b6:2c:e3:2e:da:7f:1c:23:f0:c2: 7b:a1:6f:75:cb:cc:e6:3a:3c:d3:c5:54:f2:71:82: 2d:40:ca:f9:99:b1:e8:ac:61:e9:7b:c1:90:7e:1f: 4a:d4:a5:a0:92:e1:7e:b8:f1:fe:5e:d8:e7:b3:07: 24:b8:3e:09:28:10:c3:bf:20:62:96:61:d9:95:06: a2:2f:0e:49:4b:c3:55:ef:44:8e:de:db:f9:14:7a: 1a:49:da:01:c5:bd:db:bd:37:e6:57:8b:e6:37:c5: d2:97:50:bd:a1:b1:98:c7:11:fe:27:c5:9a:58:ee: 0e:9b:e4:d5:1c:78:01:d8:dc:63:52:e4:d7:16:ce: 61:57:ab:0d:9d:11:2e:95:69:f3:59:97:d7:ea:82: 7f:12:65:05:ce:b2:62:c3:1f:bd:a6:db:1f:ed:a4: 0c:0b:6f:9e:28:6a:48:76:a8:8d:c1:ff:07:49:e0: 44:56:ef:78:6a:da:10:73:e9:ff:15:4e:c8:3b:82: 64:bd:36:36:79:f8:a5:9b:3a:71:c1:6e:ce:f3:8e: 18:41:be:39:89:8f:75:e0:d1:4c:0c:b6:7c:c9:ae: 2b:45:07:e3:88:f7:0e:85:61:7f:66:83:ce:79:d4: a5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:83:E7:75:40:FA:8D:24:6A:92:57:28:29:FE:0B:07:AC:20:6B:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/543f2b9a-3539-3d5c-9557-9b937fc9f7a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.crl X509v3 Authority Key Identifier: keyid:06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer sbgp-ipAddrBlock: critical IPv4: 23.156.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c6:1c:62:80:86:0f:08:45:23:5c:a4:20:20:8a:24:7c:42: ac:95:81:b1:c9:bd:26:a9:79:4c:30:db:22:4e:a0:c2:5c:d6: 08:0d:10:f0:bf:9c:7c:23:3b:04:76:f3:2c:c6:b8:a5:18:cb: d0:14:39:c9:d2:e3:4c:86:12:25:30:95:b4:6c:59:16:bc:63: 97:02:3a:93:c7:56:20:91:42:e9:b1:ea:ef:f1:b6:03:41:b3: 6e:9a:e0:0d:4c:df:38:2a:d2:a1:ef:ac:5a:a2:c7:df:01:b1: bf:15:99:81:3e:2b:33:ae:03:08:d4:5f:a9:b9:67:81:e2:91: 99:8b:d4:e1:a8:68:67:5a:8b:60:1c:4f:67:d1:9c:96:af:97: 9b:3a:5f:62:7b:c8:24:6a:37:bd:93:ef:8f:46:5b:34:10:4d: 60:b2:cf:58:e2:86:73:21:01:c9:18:ea:33:b5:69:48:e5:2a: ab:07:a4:c3:be:16:99:9d:dd:59:7d:58:53:93:68:9d:41:4a: 4a:9c:70:a1:2c:c7:a8:2e:08:7f:4f:f6:7a:56:0e:79:44:68: 7c:b1:f2:03:06:15:8c:ee:31:11:4f:fa:1d:af:ef:8a:90:e5: 35:8e:a4:2d:a7:b3:6d:d7:a0:c1:22:71:20:3d:53:c5:34:7c: b2:3d:a8:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0IjCZDLiTo72l1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZmNDM4ZDItNDcxNy00MmMwLWJjYTUtOWIzYTJjZGQw OWVkMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk MWNhZDIzYjgtZGM3Yy00NWQ5LThlOTctNzdiOWYxMmQzMzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHz/lhWI/KFhn5kxz0yvaisfTbYs4y7afxwj 8MJ7oW91y8zmOjzTxVTycYItQMr5mbHorGHpe8GQfh9K1KWgkuF+uPH+Xtjnswck uD4JKBDDvyBilmHZlQaiLw5JS8NV70SO3tv5FHoaSdoBxb3bvTfmV4vmN8XSl1C9 obGYxxH+J8WaWO4Om+TVHHgB2NxjUuTXFs5hV6sNnREulWnzWZfX6oJ/EmUFzrJi wx+9ptsf7aQMC2+eKGpIdqiNwf8HSeBEVu94atoQc+n/FU7IO4JkvTY2efilmzpx wW7O844YQb45iY914NFMDLZ8ya4rRQfjiPcOhWF/ZoPOedSljwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWD53VA+o0kapJXKCn+CwesIGv+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wNmY0 MzhkMi00NzE3LTQyYzAtYmNhNS05YjNhMmNkZDA5ZWQvNTQzZjJiOWEtMzUzOS0z ZDVjLTk1NTctOWI5MzdmYzlmN2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDZmNDM4ZDItNDcxNy00MmMwLWJj YTUtOWIzYTJjZGQwOWVkLzA2ZjQzOGQyLTQ3MTctNDJjMC1iY2E1LTliM2EyY2Rk MDllZC5jcmwwHwYDVR0jBBgwFoAUBq42m6IiDFcFNj+gveDl/fPwaNowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wNmY0MzhkMi00NzE3LTQyYzAtYmNhNS05YjNh MmNkZDA5ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5z5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjGHGKAhg8IRSNcpCAgiiR8QqyVgbHJvSapeUww2yJOoMJc1ggNEPC/ nHwjOwR28yzGuKUYy9AUOcnS40yGEiUwlbRsWRa8Y5cCOpPHViCRQumx6u/xtgNB s26a4A1M3zgq0qHvrFqix98Bsb8VmYE+KzOuAwjUX6m5Z4HikZmL1OGoaGdai2Ac T2fRnJavl5s6X2J7yCRqN72T749GWzQQTWCyz1jihnMhAckY6jO1aUjlKqsHpMO+ Fpmd3Vl9WFOTaJ1BSkqccKEsx6guCH9P9npWDnlEaHyx8gMGFYzuMRFP+h2v74qQ 5TWOpC2ns23XoMEicSA9U8U0fLI9qAE= -----END CERTIFICATE-----Generated at Mon Mar 2 00:17:24 2026 by rpki-client