$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/d16055ca-dc7f-3352-833b-ee9a136e1952.roa File: d16055ca-dc7f-3352-833b-ee9a136e1952.roa (raw, json) Hash identifier: XGC2q5N8Fa0k6II7MDl1+kNoksPjV3Sbwuwuc5sjbTo= Subject key identifier: 13:17:1A:04:A9:5C:AF:3E:E7:1B:ED:0A:97:B8:00:88:99:74:0A:7A Certificate issuer: /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84 Certificate serial: 010D0C9F4328584CED278FF7A1A929F834D53540 Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/d16055ca-dc7f-3352-833b-ee9a136e1952.roa Signing time: Fri 20 Feb 2026 14:00:41 +0000 ROA not before: Fri 20 Feb 2026 14:00:41 +0000 ROA not after: Thu 21 May 2026 13:00:41 +0000 asID: 23347 IP address blocks: 23.156.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:27:8f:f7:a1:a9:29:f8:34:d5:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84 Validity Not Before: Feb 20 14:00:41 2026 GMT Not After : May 21 13:00:41 2026 GMT Subject: CN=c34ab053-0860-4be0-b580-fbc406c7300d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:66:b0:06:7f:ef:32:85:9a:d4:c3:f4:7f:b7: bd:74:1a:c7:46:6c:fb:5f:fb:74:c9:5d:54:96:cb: 34:34:56:e9:6f:ff:82:09:59:71:56:e3:0e:93:07: 39:44:e8:da:76:98:8e:91:7c:b3:5a:bb:cb:3d:ff: 21:4d:66:aa:73:d2:79:2a:03:3c:f6:69:11:1d:c9: 37:92:54:02:96:16:a6:90:c8:fe:47:ea:20:b6:f2: 5c:40:61:14:fb:71:f2:c3:ce:13:64:17:35:29:8f: d1:b1:ee:d3:2d:eb:bf:6e:c4:9a:88:50:30:33:cf: d0:08:a2:a2:22:31:d5:1b:6d:c7:fe:d4:fd:3e:73: 8b:9d:8e:93:4d:bb:a8:87:62:18:e8:08:06:0d:53: 57:17:d4:b1:71:c4:c6:35:78:b8:27:c8:93:06:f2: 34:69:0f:00:5a:a0:0c:1f:90:4e:fe:0e:eb:28:ca: 3e:45:0c:a9:6f:2b:64:b7:8f:7f:fe:41:b1:45:ab: 35:4e:87:b8:79:1d:b2:c7:2d:8b:65:e1:0b:34:3c: ad:4c:ab:4c:23:4b:6e:36:f6:6e:de:d7:5e:3c:77: 59:4b:d8:8e:e0:b5:07:be:fd:1b:06:19:d9:6e:67: 26:b1:58:ec:c5:25:f4:3e:9a:03:28:36:e5:81:ee: 5a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:17:1A:04:A9:5C:AF:3E:E7:1B:ED:0A:97:B8:00:88:99:74:0A:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/d16055ca-dc7f-3352-833b-ee9a136e1952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl X509v3 Authority Key Identifier: keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer sbgp-ipAddrBlock: critical IPv4: 23.156.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:41:d0:c5:61:f3:4d:24:35:cd:dc:a1:5e:14:7c:0b:e8:c0: d3:e0:c6:06:ee:6e:5e:8d:e8:dd:75:2b:81:4c:c6:c4:2a:ea: 34:ea:47:39:5c:0f:31:63:40:45:2c:d5:31:05:3b:e0:ad:14: 0b:b7:0a:11:86:c6:ca:a1:43:6c:c6:c8:d0:b4:bf:5c:d5:9c: 1f:fc:91:c8:fc:93:95:c9:c3:ec:e9:96:ae:83:d4:66:9f:ce: 8a:74:b4:3f:23:92:a4:1d:37:3f:00:0a:f2:f2:9a:a7:1c:a3: 22:36:9a:77:c6:ca:99:5e:5c:3d:b0:38:41:6c:cb:00:35:5a: 78:eb:30:5e:aa:ce:59:7e:61:4d:1b:01:0a:17:98:92:cf:8d: fd:63:93:31:56:8a:82:fb:71:4a:29:89:91:23:7c:89:dd:ae: ed:fb:03:31:72:ce:b0:3b:84:55:c8:30:6b:5d:6c:d7:99:d8: fc:f6:2b:a2:8b:48:3d:ff:ed:ec:7a:42:47:01:fe:fd:b6:6c: 9b:b6:5f:59:f4:0c:a1:93:01:fd:82:7e:f6:0a:98:f1:64:a7: fe:26:4a:d1:65:ff:0f:f9:b6:ed:5f:fc:da:5f:b7:0c:99:7a: 0b:cc:38:65:7c:26:b0:ea:bf:b5:04:64:d7:d3:b5:53:a9:d5: 1b:fc:b2:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ4/3oakp+DTVNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc5MTBhMDgtOWNlZi00NDZkLThiMzYtMWFkNDczZDNm Yjg0MB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk YzM0YWIwNTMtMDg2MC00YmUwLWI1ODAtZmJjNDA2YzczMDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WawBn/vMoWa1MP0f7e9dBrHRmz7X/t0yV1U lss0NFbpb/+CCVlxVuMOkwc5ROjadpiOkXyzWrvLPf8hTWaqc9J5KgM89mkRHck3 klQClhamkMj+R+ogtvJcQGEU+3Hyw84TZBc1KY/Rse7TLeu/bsSaiFAwM8/QCKKi IjHVG23H/tT9PnOLnY6TTbuoh2IY6AgGDVNXF9SxccTGNXi4J8iTBvI0aQ8AWqAM H5BO/g7rKMo+RQypbytkt49//kGxRas1Toe4eR2yxy2LZeELNDytTKtMI0tuNvZu 3tdePHdZS9iO4LUHvv0bBhnZbmcmsVjsxSX0PpoDKDblge5ayQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMXGgSpXK8+5xvtCpe4AIiZdAp6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkx MGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0NzNkM2ZiODQvZDE2MDU1Y2EtZGM3Zi0z MzUyLTgzM2ItZWU5YTEzNmUxOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzc5MTBhMDgtOWNlZi00NDZkLThi MzYtMWFkNDczZDNmYjg0L2M3OTEwYTA4LTljZWYtNDQ2ZC04YjM2LTFhZDQ3M2Qz ZmI4NC5jcmwwHwYDVR0jBBgwFoAU66ZgoNMrx0ecrtHiDYXrRpOyqrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkxMGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0 NzNkM2ZiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5yYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1B0MVh800kNc3coV4UfAvowNPgxgbubl6N6N11K4FMxsQq6jTqRzlc DzFjQEUs1TEFO+CtFAu3ChGGxsqhQ2zGyNC0v1zVnB/8kcj8k5XJw+zplq6D1Gaf zop0tD8jkqQdNz8ACvLymqccoyI2mnfGypleXD2wOEFsywA1WnjrMF6qzll+YU0b AQoXmJLPjf1jkzFWioL7cUopiZEjfIndru37AzFyzrA7hFXIMGtdbNeZ2Pz2K6KL SD3/7ex6QkcB/v22bJu2X1n0DKGTAf2CfvYKmPFkp/4mStFl/w/5tu1f/NpftwyZ egvMOGV8JrDqv7UEZNfTtVOp1Rv8siE= -----END CERTIFICATE-----Generated at Sun Mar 1 16:28:37 2026 by rpki-client