$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/752e54be-47fb-3b53-ab52-4e79fd88e83f.roa File: 752e54be-47fb-3b53-ab52-4e79fd88e83f.roa (raw, json) Hash identifier: 4Y6ahBJgE7WukcmHUm5r5V69ITG1I7v46dqUroite1s= Subject key identifier: E4:A4:44:68:9F:98:2B:0F:1D:E9:54:17:F3:87:90:5E:97:0B:EB:FF Certificate issuer: /CN=950eb4ff-cb65-4e8f-90a9-11392dacfad2 Certificate serial: 010D0C9F4328584CD4076AC531FDDC36DDC56C80 Authority key identifier: E2:26:3D:77:1D:B9:BC:ED:3B:98:C9:25:A0:C3:9B:06:39:1E:F3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/752e54be-47fb-3b53-ab52-4e79fd88e83f.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 400512 IP address blocks: 23.133.200.0/24 maxlen: 24 2602:fba6::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/950eb4ff-cb65-4e8f-90a9-11392dacfad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/950eb4ff-cb65-4e8f-90a9-11392dacfad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:6a:c5:31:fd:dc:36:dd:c5:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=950eb4ff-cb65-4e8f-90a9-11392dacfad2 Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=13919af0-071d-49c7-a2c1-ada68ca86a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7b:13:46:d7:1a:40:96:2f:b9:3a:f7:ba:7d: f0:92:a7:ce:0c:90:06:af:05:d2:d6:77:a8:cf:f9: 83:3b:22:62:00:6c:3d:2b:19:19:16:bb:b6:b1:63: c7:81:f0:9c:62:fa:5f:b1:6e:9a:d3:11:c1:12:8c: 1d:ec:71:63:03:71:71:df:80:20:9d:91:ea:10:cc: 0d:b3:cc:26:e8:14:1f:b3:4f:79:cd:8c:8a:49:5c: 06:8e:6a:48:b9:77:dd:5a:24:b5:d9:39:53:62:28: d3:49:45:0c:c1:11:4d:8e:14:13:1a:92:f4:17:70: 75:21:92:35:b8:d9:d8:f4:02:3c:39:4d:1c:7c:ef: 56:3d:5f:a5:79:25:ac:00:46:53:e2:7c:0c:3e:3a: b8:73:4a:30:67:16:a8:cf:09:6e:b2:5c:d4:2e:8e: f6:e3:d0:51:a0:85:fa:33:48:b9:18:5e:f2:ad:5b: 05:4e:a6:2e:b4:63:58:97:77:2f:ed:6f:27:26:e8: 63:32:ac:36:b3:d8:ec:c1:17:53:a3:9d:60:76:fe: 17:be:69:fe:21:7a:bd:8d:40:b1:77:b8:f4:2d:53: cc:35:66:53:fd:c9:3d:14:5e:64:c1:58:f9:b1:40: f5:7e:f2:79:3c:63:0a:d5:b7:fe:97:be:c6:cf:8f: c6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A4:44:68:9F:98:2B:0F:1D:E9:54:17:F3:87:90:5E:97:0B:EB:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/752e54be-47fb-3b53-ab52-4e79fd88e83f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/950eb4ff-cb65-4e8f-90a9-11392dacfad2.crl X509v3 Authority Key Identifier: keyid:E2:26:3D:77:1D:B9:BC:ED:3B:98:C9:25:A0:C3:9B:06:39:1E:F3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2.cer sbgp-ipAddrBlock: critical IPv4: 23.133.200.0/24 IPv6: 2602:fba6::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:09:93:6c:0a:32:f7:63:a8:35:58:31:0f:67:da:b5:6a:08: c1:66:fa:f9:5a:82:34:ae:5a:33:e5:7a:83:f2:01:6c:4d:02: 89:aa:d8:93:13:8c:b1:35:9e:85:8a:1a:19:90:fa:b2:26:2c: 4d:86:64:dc:c9:0e:06:7c:50:01:60:e4:3d:d4:b8:d8:ea:40: b7:16:0f:73:36:9a:3f:49:35:65:79:bc:89:5d:52:63:b6:d7: 8f:45:72:13:64:4d:ec:51:91:7c:d3:1f:f3:7d:b8:41:0d:14: f4:66:81:e5:b1:93:81:06:32:06:43:51:51:b1:7e:95:ed:2c: ca:e0:07:ea:20:ff:5c:4a:07:f7:e5:92:f7:a3:10:94:45:b8: 9b:9b:33:c5:16:4d:e5:87:e9:5b:ee:0c:b8:d8:da:9b:6b:cc: ad:c8:e3:73:30:27:b8:d9:07:1a:2a:6e:1f:5e:03:f1:34:e9: 66:d8:1e:6d:5c:a2:ee:6a:a1:06:4d:c2:a3:bf:85:50:f6:2c: 22:30:a2:7d:4c:22:eb:af:d4:72:25:2f:85:01:c1:f7:db:5d: 27:53:48:11:31:a0:71:10:b1:66:31:da:b3:36:c3:aa:1e:b1: 45:69:92:fd:ee:67:02:45:71:a7:bd:22:bb:e3:cf:e6:e8:e4: ca:71:73:e3 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEzUB2rFMf3cNt3FbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTUwZWI0ZmYtY2I2NS00ZThmLTkwYTktMTEzOTJkYWNm YWQyMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk MTM5MTlhZjAtMDcxZC00OWM3LWEyYzEtYWRhNjhjYTg2YTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonsTRtcaQJYvuTr3un3wkqfODJAGrwXS1neo z/mDOyJiAGw9KxkZFru2sWPHgfCcYvpfsW6a0xHBEowd7HFjA3Fx34AgnZHqEMwN s8wm6BQfs095zYyKSVwGjmpIuXfdWiS12TlTYijTSUUMwRFNjhQTGpL0F3B1IZI1 uNnY9AI8OU0cfO9WPV+leSWsAEZT4nwMPjq4c0owZxaozwluslzULo7249BRoIX6 M0i5GF7yrVsFTqYutGNYl3cv7W8nJuhjMqw2s9jswRdTo51gdv4Xvmn+IXq9jUCx d7j0LVPMNWZT/ck9FF5kwVj5sUD1fvJ5PGMK1bf+l77Gz4/GdwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOSkRGifmCsPHelUF/OHkF6XC+v/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NTBl YjRmZi1jYjY1LTRlOGYtOTBhOS0xMTM5MmRhY2ZhZDIvNzUyZTU0YmUtNDdmYi0z YjUzLWFiNTItNGU3OWZkODhlODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTUwZWI0ZmYtY2I2NS00ZThmLTkw YTktMTEzOTJkYWNmYWQyLzk1MGViNGZmLWNiNjUtNGU4Zi05MGE5LTExMzkyZGFj ZmFkMi5jcmwwHwYDVR0jBBgwFoAU4iY9dx25vO07mMkloMObBjke85YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NTBlYjRmZi1jYjY1LTRlOGYtOTBhOS0xMTM5 MmRhY2ZhZDIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4XIMA4E AgACMAgDBgQmAvumADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCcCZNsCjL3Y6g1WDEPZ9q1agjBZvr5WoI0 rloz5XqD8gFsTQKJqtiTE4yxNZ6FihoZkPqyJixNhmTcyQ4GfFABYOQ91LjY6kC3 Fg9zNpo/STVlebyJXVJjttePRXITZE3sUZF80x/zfbhBDRT0ZoHlsZOBBjIGQ1FR sX6V7SzK4AfqIP9cSgf35ZL3oxCURbibmzPFFk3lh+lb7gy42Nqba8ytyONzMCe4 2QcaKm4fXgPxNOlm2B5tXKLuaqEGTcKjv4VQ9iwiMKJ9TCLrr9RyJS+FAcH3210n U0gRMaBxELFmMdqzNsOqHrFFaZL97mcCRXGnvSK748/m6OTKcXPj -----END CERTIFICATE-----Generated at Sun Mar 1 23:54:28 2026 by rpki-client