$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/4cecb50a-dda5-3206-892f-841e1f8d6994.roa File: 4cecb50a-dda5-3206-892f-841e1f8d6994.roa (raw, json) Hash identifier: zqoAlR0354S48hB9OeBh7Tqy2itP3mwc0DPsJ45lHR8= Subject key identifier: 67:2A:0F:25:0F:A3:3C:6E:78:EF:A1:33:E5:38:0B:43:01:85:34:7E Certificate issuer: /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84 Certificate serial: 010D0C9F4328584CED279005BD97473853DD7A80 Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/4cecb50a-dda5-3206-892f-841e1f8d6994.roa Signing time: Fri 20 Feb 2026 14:00:41 +0000 ROA not before: Fri 20 Feb 2026 14:00:41 +0000 ROA not after: Thu 21 May 2026 13:00:41 +0000 asID: 23347 IP address blocks: 23.156.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:27:90:05:bd:97:47:38:53:dd:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84 Validity Not Before: Feb 20 14:00:41 2026 GMT Not After : May 21 13:00:41 2026 GMT Subject: CN=6d641df5-a944-41e8-a705-c8e124ea10d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:36:7d:81:99:b5:1d:e9:84:f9:52:e7:fc:6c: 7c:3f:d3:84:6c:ed:ae:a0:f4:eb:cd:83:b8:81:9d: 9e:a5:cf:50:44:19:44:70:c5:98:eb:f6:bd:47:e2: 95:63:33:84:64:5d:57:a8:df:48:ed:89:76:e9:53: cf:f3:cf:66:66:22:5f:a6:4a:96:93:ae:50:74:9b: d0:35:f4:aa:20:bb:3d:1b:db:e6:5b:42:93:60:8c: 1e:5d:53:e6:35:5a:b6:2b:58:b6:34:8a:27:20:45: 2d:34:00:00:98:3f:03:d8:d1:db:b7:ce:24:b4:3c: 28:9c:b2:55:d9:1c:86:79:be:a0:ae:75:5f:ac:22: 1b:43:f4:8c:58:a2:2c:90:9e:13:21:37:2d:49:83: 9a:33:e8:50:f0:6a:8a:c1:6b:30:a7:f3:32:27:bf: 5a:40:0b:a9:9d:94:80:fe:fe:0b:63:1f:95:41:c9: 59:b6:57:13:ff:cd:f8:44:4d:46:9a:64:8c:03:bb: ef:de:de:da:c9:5d:ee:e8:4e:c0:02:38:7f:86:90: 36:01:69:60:29:e9:28:29:86:c9:06:ba:5f:82:a4: a2:e6:41:60:04:3a:73:a7:d5:5b:f1:76:71:39:a1: a0:7a:04:81:5e:e9:c1:8f:a2:d9:5e:2a:fa:b1:23: 00:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2A:0F:25:0F:A3:3C:6E:78:EF:A1:33:E5:38:0B:43:01:85:34:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/4cecb50a-dda5-3206-892f-841e1f8d6994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl X509v3 Authority Key Identifier: keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer sbgp-ipAddrBlock: critical IPv4: 23.156.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:1b:bf:37:27:32:46:13:a2:64:38:67:c8:e4:16:1c:e4:39: 77:0b:44:6f:b6:e9:2c:8f:7a:4c:24:94:83:ec:b7:cf:8c:ee: 06:f1:8f:aa:ad:53:15:4d:9e:e0:56:8b:75:0b:e4:c5:cb:76: aa:19:71:97:72:f4:da:2a:9d:97:75:6b:29:24:75:71:d0:17: 72:31:71:3a:45:d5:b0:88:cd:31:12:eb:c2:4d:04:75:73:90: 6e:3e:9d:95:99:7d:1a:05:92:74:bb:c7:f9:61:8c:85:24:d3: 1e:ea:85:1d:e6:5f:ca:e9:bc:aa:7d:55:30:8e:a4:5d:a5:80: 57:60:8a:e8:09:08:90:5a:ed:0a:f1:41:b1:92:f1:3b:7e:20: d3:4f:84:3d:28:f1:a8:22:11:24:7d:a9:fe:83:f2:33:01:80: 54:b6:01:49:4e:ba:fb:1a:ac:f8:5f:ed:2c:eb:37:4f:ce:e7: cc:ed:77:9a:4f:92:b8:61:27:69:86:ff:2f:52:e0:ed:7e:9f: cd:ef:19:f3:5f:38:d9:e7:5b:f5:89:69:b6:da:2c:39:24:b7: a0:89:dc:53:92:61:90:cd:e9:ef:1b:17:5a:0c:b9:41:fc:c5: 2c:7d:c2:17:99:62:68:a3:a8:8f:7a:e0:c1:37:b8:e7:3d:b8: 68:9c:8f:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ5AFvZdHOFPdeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc5MTBhMDgtOWNlZi00NDZkLThiMzYtMWFkNDczZDNm Yjg0MB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk NmQ2NDFkZjUtYTk0NC00MWU4LWE3MDUtYzhlMTI0ZWExMGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDZ9gZm1HemE+VLn/Gx8P9OEbO2uoPTrzYO4 gZ2epc9QRBlEcMWY6/a9R+KVYzOEZF1XqN9I7Yl26VPP889mZiJfpkqWk65QdJvQ NfSqILs9G9vmW0KTYIweXVPmNVq2K1i2NIonIEUtNAAAmD8D2NHbt84ktDwonLJV 2RyGeb6grnVfrCIbQ/SMWKIskJ4TITctSYOaM+hQ8GqKwWswp/MyJ79aQAupnZSA /v4LYx+VQclZtlcT/834RE1GmmSMA7vv3t7ayV3u6E7AAjh/hpA2AWlgKekoKYbJ BrpfgqSi5kFgBDpzp9Vb8XZxOaGgegSBXunBj6LZXir6sSMA7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcqDyUPozxueO+hM+U4C0MBhTR+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkx MGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0NzNkM2ZiODQvNGNlY2I1MGEtZGRhNS0z MjA2LTg5MmYtODQxZTFmOGQ2OTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzc5MTBhMDgtOWNlZi00NDZkLThi MzYtMWFkNDczZDNmYjg0L2M3OTEwYTA4LTljZWYtNDQ2ZC04YjM2LTFhZDQ3M2Qz ZmI4NC5jcmwwHwYDVR0jBBgwFoAU66ZgoNMrx0ecrtHiDYXrRpOyqrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkxMGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0 NzNkM2ZiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5yZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsbvzcnMkYTomQ4Z8jkFhzkOXcLRG+26SyPekwklIPst8+M7gbxj6qt UxVNnuBWi3UL5MXLdqoZcZdy9NoqnZd1aykkdXHQF3IxcTpF1bCIzTES68JNBHVz kG4+nZWZfRoFknS7x/lhjIUk0x7qhR3mX8rpvKp9VTCOpF2lgFdgiugJCJBa7Qrx QbGS8Tt+INNPhD0o8agiESR9qf6D8jMBgFS2AUlOuvsarPhf7SzrN0/O58ztd5pP krhhJ2mG/y9S4O1+n83vGfNfONnnW/WJabbaLDkkt6CJ3FOSYZDN6e8bF1oMuUH8 xSx9wheZYmijqI964ME3uOc9uGicj9Y= -----END CERTIFICATE-----Generated at Sun Mar 1 18:26:16 2026 by rpki-client