$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/fda8929c-8853-3deb-9937-6ac2a4d97c46.roa File: fda8929c-8853-3deb-9937-6ac2a4d97c46.roa (raw, json) Hash identifier: gqqResfC6fWfF21WRQCW7uDcAtu8+0gV9v5P2Brdj68= Subject key identifier: 4C:3B:45:3C:B1:94:5C:58:E2:E3:94:D3:7A:04:C8:F4:32:01:87:DA Certificate issuer: /CN=7d172af9-258d-47d2-b4e6-7e0c02152fea Certificate serial: 010D0C9F4328584CCD0C99874C7577BADDF9D000 Authority key identifier: 71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/fda8929c-8853-3deb-9937-6ac2a4d97c46.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 198487 IP address blocks: 23.156.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:99:87:4c:75:77:ba:dd:f9:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d172af9-258d-47d2-b4e6-7e0c02152fea Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=66e11297-ccc2-47ea-b70e-32b1f3b8147b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f7:17:ec:a0:e1:ef:a3:c8:79:0d:cc:78:68: 09:dd:d0:9d:61:17:f1:6f:85:38:97:26:d5:04:78: 50:b4:0c:78:87:91:df:82:88:bb:c7:f2:5d:07:e4: 61:4b:91:29:fb:0c:c2:fd:5e:9b:f2:b5:1d:51:f2: c1:9f:20:c1:f0:b0:17:6a:03:42:60:7c:e3:54:28: 1c:dd:6f:94:39:00:03:10:cf:37:e6:47:56:ce:3f: 18:95:5d:5c:7d:ee:6d:6e:16:a9:ab:62:cf:42:d4: 96:98:f3:47:5c:38:11:de:b7:db:4a:0d:1c:0e:8d: 25:83:8b:9a:9c:ca:0a:87:ba:ba:83:d7:9e:55:10: 41:a7:2d:ff:94:5b:4f:ba:d8:08:52:0c:bf:4c:5c: 6f:6a:87:6d:63:21:8c:1e:93:92:0e:e2:a4:80:9f: 75:c0:69:6c:03:c1:d1:83:d0:94:d2:68:e1:42:1e: b7:73:d3:fd:08:22:59:85:61:38:22:88:98:bb:03: c4:11:d6:db:2f:ae:1a:76:eb:a9:d4:dd:0c:cb:a0: 43:48:6a:b7:88:28:64:71:79:24:2d:1d:9a:9f:b6: 51:6f:84:92:dd:3a:87:af:d4:40:87:ca:54:78:b4: 11:40:a8:ed:76:20:20:0a:8e:9a:59:52:44:d6:28: 59:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3B:45:3C:B1:94:5C:58:E2:E3:94:D3:7A:04:C8:F4:32:01:87:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/fda8929c-8853-3deb-9937-6ac2a4d97c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.crl X509v3 Authority Key Identifier: keyid:71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer sbgp-ipAddrBlock: critical IPv4: 23.156.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:25:ad:1a:0c:c1:03:46:58:52:82:d5:8e:38:c3:10:c2:5e: df:be:e7:19:d3:50:df:db:45:38:20:aa:b3:8e:ac:6c:80:9f: 97:69:1a:85:97:15:b9:8d:00:2a:ae:8a:9a:4b:f8:b4:dd:17: d5:9e:ce:f4:92:da:4d:d1:1b:38:5c:1a:45:95:eb:38:19:49: 65:20:47:08:bd:50:89:36:52:29:ef:a0:8a:55:cd:77:88:f0: f0:3f:84:13:71:4c:35:04:d3:b0:ed:46:14:66:21:9c:3a:6d: e4:f5:a8:40:ca:a9:86:e1:50:7a:32:bc:26:2d:89:07:6a:b6: 21:b3:08:f4:f1:5a:cc:9e:5f:38:86:10:88:44:0f:ed:98:09: 65:e3:f7:a2:04:ff:ec:05:d4:92:67:d5:a9:4a:19:ab:8c:af: 38:89:62:0b:5a:0a:40:b5:1e:70:84:40:f6:06:c7:a1:25:9e: fe:24:9d:c7:4b:67:da:f2:59:83:26:8d:c7:86:4f:61:d1:ff: 0c:9a:d1:58:76:4d:cd:e5:e6:a7:66:a3:20:42:58:30:2e:88: a2:f9:66:2e:7f:dd:fa:c3:b9:d4:a9:7f:3b:8f:92:e2:65:9f: 5e:9b:36:47:c5:1d:ff:fe:b5:4a:8a:12:78:38:ac:dd:ac:9b: 5f:9a:c0:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDJmHTHV3ut350AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2QxNzJhZjktMjU4ZC00N2QyLWI0ZTYtN2UwYzAyMTUy ZmVhMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk NjZlMTEyOTctY2NjMi00N2VhLWI3MGUtMzJiMWYzYjgxNDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPcX7KDh76PIeQ3MeGgJ3dCdYRfxb4U4lybV BHhQtAx4h5Hfgoi7x/JdB+RhS5Ep+wzC/V6b8rUdUfLBnyDB8LAXagNCYHzjVCgc 3W+UOQADEM835kdWzj8YlV1cfe5tbhapq2LPQtSWmPNHXDgR3rfbSg0cDo0lg4ua nMoKh7q6g9eeVRBBpy3/lFtPutgIUgy/TFxvaodtYyGMHpOSDuKkgJ91wGlsA8HR g9CU0mjhQh63c9P9CCJZhWE4IoiYuwPEEdbbL64aduup1N0My6BDSGq3iChkcXkk LR2an7ZRb4SS3TqHr9RAh8pUeLQRQKjtdiAgCo6aWVJE1ihZPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEw7RTyxlFxY4uOU03oEyPQyAYfaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83ZDE3 MmFmOS0yNThkLTQ3ZDItYjRlNi03ZTBjMDIxNTJmZWEvZmRhODkyOWMtODg1My0z ZGViLTk5MzctNmFjMmE0ZDk3YzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2QxNzJhZjktMjU4ZC00N2QyLWI0 ZTYtN2UwYzAyMTUyZmVhLzdkMTcyYWY5LTI1OGQtNDdkMi1iNGU2LTdlMGMwMjE1 MmZlYS5jcmwwHwYDVR0jBBgwFoAUcQR+llhV3D3f6Qf17Duou2f8/NEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZDE3MmFmOS0yNThkLTQ3ZDItYjRlNi03ZTBj MDIxNTJmZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5wIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAclrRoMwQNGWFKC1Y44wxDCXt++5xnTUN/bRTggqrOOrGyAn5dpGoWX FbmNACquippL+LTdF9WezvSS2k3RGzhcGkWV6zgZSWUgRwi9UIk2UinvoIpVzXeI 8PA/hBNxTDUE07DtRhRmIZw6beT1qEDKqYbhUHoyvCYtiQdqtiGzCPTxWsyeXziG EIhED+2YCWXj96IE/+wF1JJn1alKGauMrziJYgtaCkC1HnCEQPYGx6Elnv4kncdL Z9ryWYMmjceGT2HR/wya0Vh2Tc3l5qdmoyBCWDAuiKL5Zi5/3frDudSpfzuPkuJl n16bNkfFHf/+tUqKEng4rN2sm1+awO0= -----END CERTIFICATE-----Generated at Mon Mar 2 14:22:51 2026 by rpki-client