$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/faa2ef74-f3ac-358c-9428-0eb061b7e349.roa File: faa2ef74-f3ac-358c-9428-0eb061b7e349.roa (raw, json) Hash identifier: W9RF1eYWNeUYWEqS4tDeC2LE1ZHjrAcfaeHm36G3q50= Subject key identifier: 3F:DE:51:B3:1E:3C:54:A2:31:A0:C5:98:0F:AA:B3:59:07:B5:69:F9 Certificate issuer: /CN=1a319486-03d5-4fb1-997e-228350330847 Certificate serial: 010D0C9F4328584D037D1AB248DB774A76AAD280 Authority key identifier: A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/faa2ef74-f3ac-358c-9428-0eb061b7e349.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 46983 IP address blocks: 23.157.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:1a:b2:48:db:77:4a:76:aa:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a319486-03d5-4fb1-997e-228350330847 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=65b52261-9ce7-4ace-89d9-bef3055f2a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:65:c2:d5:f6:a4:17:00:cd:2b:8e:fb:99:74: e8:e6:9d:a5:2e:e9:8d:fd:5f:54:a5:37:9f:22:9a: 44:ce:c2:d3:c5:ef:45:31:6f:d1:50:ab:f8:00:95: 7f:85:12:76:8a:68:28:2f:59:b9:0f:71:94:48:b6: fe:93:8f:b5:c9:c0:4d:b2:b7:a5:b4:63:0c:d5:fd: 19:d2:2d:de:ad:d7:8b:bb:64:10:d1:15:bb:c8:14: 11:e0:9f:6b:86:11:f8:b5:99:74:d1:e4:c6:78:56: b9:60:2c:0a:85:07:49:56:13:e2:09:34:18:ef:a3: 1f:a9:79:4a:b5:77:56:65:9e:ee:d2:45:fa:80:a8: 22:94:3d:bb:7c:15:91:31:9a:36:12:dd:e0:ac:af: c0:22:66:af:91:cd:2e:f3:08:5a:2a:ed:95:df:48: c3:1a:17:4d:04:67:47:fd:14:91:75:37:84:2e:50: 62:19:a1:23:ba:46:7c:ba:fa:09:56:4d:c8:92:e7: cc:eb:ba:ca:10:3d:f1:f1:8e:5b:a9:c0:9c:f4:b7: bd:51:8b:9d:1f:1d:b4:93:03:43:b6:91:ac:e1:34: 85:be:9f:85:5e:cf:ac:cc:e2:b8:00:4c:76:9a:a0: 49:47:3a:f4:09:71:7e:18:0f:bc:67:44:73:14:34: d5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DE:51:B3:1E:3C:54:A2:31:A0:C5:98:0F:AA:B3:59:07:B5:69:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/faa2ef74-f3ac-358c-9428-0eb061b7e349.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl X509v3 Authority Key Identifier: keyid:A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer sbgp-ipAddrBlock: critical IPv4: 23.157.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:54:d9:97:96:2e:30:8e:38:b8:86:58:81:b3:8e:6b:1e:21: 0f:b2:ff:82:85:7c:c3:89:16:c8:ee:b1:87:15:5f:09:f4:b7: 7c:94:31:74:47:7d:08:eb:d4:08:20:fd:e3:f6:0d:05:fe:fb: 6c:12:74:b8:8c:d2:3c:ba:45:22:a1:48:d1:63:58:15:a2:67: cf:00:95:44:89:0d:ef:4d:a3:84:7f:c0:c7:0a:3a:81:8c:c4: db:a4:41:c6:fb:6c:d4:0b:3a:92:b6:fc:f6:71:3d:1d:7a:a1: ef:72:b1:63:d9:9b:cc:48:50:13:7e:11:5d:47:54:b9:95:a7: 12:06:3b:d9:0a:80:5d:e9:9f:8c:6b:a1:f4:c0:6e:85:c0:5a: 71:a9:36:97:5e:d5:38:0a:fe:51:bd:60:02:90:3d:51:2d:3a: be:7b:62:82:02:21:bb:d9:ce:25:91:b7:7e:bb:ea:b0:18:64: 03:e5:a1:97:bc:27:93:4f:91:66:c4:12:33:8b:2b:32:4e:76: a4:19:53:a4:6d:94:6a:3b:ab:41:a1:7b:d2:90:a5:d2:c5:11: d3:b9:4e:34:dc:86:50:3d:0f:a8:68:c3:ed:b2:f4:5d:6e:25: fd:81:90:60:b5:7d:62:6b:b6:e6:41:74:1c:b6:aa:af:65:6f: 35:ec:5c:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfRqySNt3Snaq0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWEzMTk0ODYtMDNkNS00ZmIxLTk5N2UtMjI4MzUwMzMw ODQ3MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk NjViNTIyNjEtOWNlNy00YWNlLTg5ZDktYmVmMzA1NWYyYTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGXC1fakFwDNK477mXTo5p2lLumN/V9UpTef IppEzsLTxe9FMW/RUKv4AJV/hRJ2imgoL1m5D3GUSLb+k4+1ycBNsreltGMM1f0Z 0i3erdeLu2QQ0RW7yBQR4J9rhhH4tZl00eTGeFa5YCwKhQdJVhPiCTQY76MfqXlK tXdWZZ7u0kX6gKgilD27fBWRMZo2Et3grK/AImavkc0u8whaKu2V30jDGhdNBGdH /RSRdTeELlBiGaEjukZ8uvoJVk3IkufM67rKED3x8Y5bqcCc9Le9UYudHx20kwND tpGs4TSFvp+FXs+szOK4AEx2mqBJRzr0CXF+GA+8Z0RzFDTVowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/eUbMePFSiMaDFmA+qs1kHtWn5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xYTMx OTQ4Ni0wM2Q1LTRmYjEtOTk3ZS0yMjgzNTAzMzA4NDcvZmFhMmVmNzQtZjNhYy0z NThjLTk0MjgtMGViMDYxYjdlMzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWEzMTk0ODYtMDNkNS00ZmIxLTk5 N2UtMjI4MzUwMzMwODQ3LzFhMzE5NDg2LTAzZDUtNGZiMS05OTdlLTIyODM1MDMz MDg0Ny5jcmwwHwYDVR0jBBgwFoAUojoUY2Szy8/8gGpP64Xxl3Adxp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xYTMxOTQ4Ni0wM2Q1LTRmYjEtOTk3ZS0yMjgz NTAzMzA4NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZU2ZeWLjCOOLiGWIGzjmseIQ+y/4KFfMOJFsjusYcVXwn0t3yUMXRH fQjr1Agg/eP2DQX++2wSdLiM0jy6RSKhSNFjWBWiZ88AlUSJDe9No4R/wMcKOoGM xNukQcb7bNQLOpK2/PZxPR16oe9ysWPZm8xIUBN+EV1HVLmVpxIGO9kKgF3pn4xr ofTAboXAWnGpNpde1TgK/lG9YAKQPVEtOr57YoICIbvZziWRt3676rAYZAPloZe8 J5NPkWbEEjOLKzJOdqQZU6RtlGo7q0Ghe9KQpdLFEdO5TjTchlA9D6how+2y9F1u Jf2BkGC1fWJrtuZBdBy2qq9lbzXsXJ8= -----END CERTIFICATE-----Generated at Mon Mar 2 16:09:59 2026 by rpki-client