$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/42dd5fc3-eb41-3bc8-8ac8-31b594bbb490.roa File: 42dd5fc3-eb41-3bc8-8ac8-31b594bbb490.roa (raw, json) Hash identifier: I9laQ2ROr2J9Ld118dxaeD6CkOVHK5jW15iLAr/Frpo= Subject key identifier: 32:DF:BE:EA:BA:4E:CC:D5:88:BD:AD:47:A4:15:35:DB:C0:C3:64:7F Certificate issuer: /CN=7423c5ab-e2e6-4295-abc7-be3fad2b25b0 Certificate serial: 010D0C9F4328584CE62CC82C99435DBEAA6535C0 Authority key identifier: D0:25:61:0D:23:3E:C6:4C:D1:D4:D3:41:94:46:47:D8:F0:5A:AC:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/42dd5fc3-eb41-3bc8-8ac8-31b594bbb490.roa Signing time: Wed 18 Feb 2026 02:00:31 +0000 ROA not before: Wed 18 Feb 2026 02:00:31 +0000 ROA not after: Tue 19 May 2026 01:00:31 +0000 asID: 14618 IP address blocks: 23.235.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e6:2c:c8:2c:99:43:5d:be:aa:65:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7423c5ab-e2e6-4295-abc7-be3fad2b25b0 Validity Not Before: Feb 18 02:00:31 2026 GMT Not After : May 19 01:00:31 2026 GMT Subject: CN=88cb415b-1bf7-4e0f-a4af-36921d76b677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:75:3f:79:57:1b:08:64:f8:24:fa:02:a9:90: 0d:35:86:91:6e:f6:d5:6f:e1:0e:9e:fa:0e:a2:d8: 4e:3c:0b:6d:b2:7b:09:67:85:34:2e:cb:d6:0f:43: f6:fa:b8:e0:84:01:48:fa:f0:31:01:6c:ab:32:06: 66:c5:4c:c1:48:d8:6a:19:99:a8:4b:71:00:db:fb: e1:2b:d3:68:a4:0d:53:2b:85:59:06:48:de:2c:7c: 43:5b:fc:6c:ff:e8:d1:8b:ac:42:5c:64:3f:b4:b8: c5:34:51:28:af:87:78:33:1e:cb:a1:8c:9f:46:52: fe:f3:e1:35:6f:13:0c:38:c6:2b:19:a5:66:33:d3: 50:9b:c4:df:59:65:54:76:a1:95:e2:3c:51:17:bf: 31:20:ce:82:be:f9:04:8f:a8:a8:22:6c:90:4a:84: 74:3f:95:72:e1:7d:fc:3b:5c:58:0e:a2:ca:eb:e0: 21:60:9b:95:c9:09:02:53:95:01:3d:f8:e9:1e:74: 94:ac:28:5f:42:c8:9e:12:2f:e6:8c:f8:ae:ad:b8: 8b:73:a5:e2:4b:7d:f3:75:22:25:68:f7:4b:78:9f: 1c:c6:b4:45:91:6f:14:8f:ef:50:25:dc:12:59:e6: 40:f8:4f:d6:ac:0e:3c:d2:8f:15:fb:48:86:e9:20: 12:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DF:BE:EA:BA:4E:CC:D5:88:BD:AD:47:A4:15:35:DB:C0:C3:64:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/42dd5fc3-eb41-3bc8-8ac8-31b594bbb490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.crl X509v3 Authority Key Identifier: keyid:D0:25:61:0D:23:3E:C6:4C:D1:D4:D3:41:94:46:47:D8:F0:5A:AC:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.cer sbgp-ipAddrBlock: critical IPv4: 23.235.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:30:64:5b:04:01:1a:8b:98:d2:2a:be:e8:0e:4a:66:34:85: 2d:32:36:44:8b:b6:60:69:3a:30:21:85:66:8e:18:1e:28:ba: 94:4b:7a:7e:cd:91:5a:04:07:43:c2:63:37:fa:64:4f:76:d2: 1f:f1:43:12:a2:14:70:22:a3:c4:22:2f:29:b2:1d:96:05:ce: 96:c7:63:f6:0e:67:d6:83:3e:92:cb:41:2b:da:32:67:0d:62: 75:6b:9c:10:2f:64:df:ae:22:21:30:36:5b:ff:d0:55:74:0a: b7:b1:bb:9b:ff:f4:f2:f1:db:41:db:85:e2:69:e1:62:0c:41: 2f:2f:35:b2:b8:f3:33:4e:94:40:a6:25:33:4c:32:bd:6e:85: 05:18:f8:8d:c5:db:f9:e1:97:74:c4:54:3d:0d:87:11:98:c4: 23:82:90:5b:91:7e:ec:90:4a:f8:a3:6a:6b:5f:00:7b:91:15: e9:01:a2:da:57:17:60:ac:48:85:d5:0d:1c:20:a9:b5:66:ad: cd:ce:83:a7:e2:d5:f4:82:d8:b9:24:d6:b3:d4:16:e8:9b:20: 6a:36:92:38:11:ce:45:c0:dc:6f:f2:50:11:41:d6:84:7a:6c: 6d:b9:42:92:99:2f:e8:35:77:3a:87:2f:58:38:d7:38:6c:3a: 42:f5:20:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzmLMgsmUNdvqplNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQyM2M1YWItZTJlNi00Mjk1LWFiYzctYmUzZmFkMmIy NWIwMB4XDTI2MDIxODAyMDAzMVoXDTI2MDUxOTAxMDAzMVowLzEtMCsGA1UEAxMk ODhjYjQxNWItMWJmNy00ZTBmLWE0YWYtMzY5MjFkNzZiNjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXU/eVcbCGT4JPoCqZANNYaRbvbVb+EOnvoO othOPAttsnsJZ4U0LsvWD0P2+rjghAFI+vAxAWyrMgZmxUzBSNhqGZmoS3EA2/vh K9NopA1TK4VZBkjeLHxDW/xs/+jRi6xCXGQ/tLjFNFEor4d4Mx7LoYyfRlL+8+E1 bxMMOMYrGaVmM9NQm8TfWWVUdqGV4jxRF78xIM6CvvkEj6ioImyQSoR0P5Vy4X38 O1xYDqLK6+AhYJuVyQkCU5UBPfjpHnSUrChfQsieEi/mjPiurbiLc6XiS33zdSIl aPdLeJ8cxrRFkW8Uj+9QJdwSWeZA+E/WrA480o8V+0iG6SAS7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLfvuq6TszViL2tR6QVNdvAw2R/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NDIz YzVhYi1lMmU2LTQyOTUtYWJjNy1iZTNmYWQyYjI1YjAvNDJkZDVmYzMtZWI0MS0z YmM4LThhYzgtMzFiNTk0YmJiNDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzQyM2M1YWItZTJlNi00Mjk1LWFi YzctYmUzZmFkMmIyNWIwLzc0MjNjNWFiLWUyZTYtNDI5NS1hYmM3LWJlM2ZhZDJi MjViMC5jcmwwHwYDVR0jBBgwFoAU0CVhDSM+xkzR1NNBlEZH2PBarAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NDIzYzVhYi1lMmU2LTQyOTUtYWJjNy1iZTNm YWQyYjI1YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+t+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGowZFsEARqLmNIqvugOSmY0hS0yNkSLtmBpOjAhhWaOGB4oupRLen7N kVoEB0PCYzf6ZE920h/xQxKiFHAio8QiLymyHZYFzpbHY/YOZ9aDPpLLQSvaMmcN YnVrnBAvZN+uIiEwNlv/0FV0Crexu5v/9PLx20HbheJp4WIMQS8vNbK48zNOlECm JTNMMr1uhQUY+I3F2/nhl3TEVD0NhxGYxCOCkFuRfuyQSvijamtfAHuRFekBotpX F2CsSIXVDRwgqbVmrc3Og6fi1fSC2Lkk1rPUFuibIGo2kjgRzkXA3G/yUBFB1oR6 bG25QpKZL+g1dzqHL1g41zhsOkL1IOs= -----END CERTIFICATE-----Generated at Mon Mar 2 00:32:10 2026 by rpki-client