$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/148471f6-afa7-3f62-ac8d-1a7a880a2409.roa File: 148471f6-afa7-3f62-ac8d-1a7a880a2409.roa (raw, json) Hash identifier: gkahTJFiCyevSNisC2wVz/OWf/rP/2/TG0JlVBU51hQ= Subject key identifier: 63:26:71:63:6E:FB:61:B7:FF:C0:33:12:35:7F:D0:B8:AD:27:22:E3 Certificate issuer: /CN=7cafc1ae-8aed-47d8-a718-169a271736a5 Certificate serial: 010D0C9F4328584CEBC232981BF59B3D08A9ED80 Authority key identifier: F2:8E:00:8F:88:BA:DD:98:6B:B2:D9:86:CD:8E:0D:60:A4:3C:3C:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/148471f6-afa7-3f62-ac8d-1a7a880a2409.roa Signing time: Fri 20 Feb 2026 02:00:32 +0000 ROA not before: Fri 20 Feb 2026 02:00:32 +0000 ROA not after: Thu 21 May 2026 01:00:32 +0000 asID: 396189 IP address blocks: 163.123.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/7cafc1ae-8aed-47d8-a718-169a271736a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/7cafc1ae-8aed-47d8-a718-169a271736a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:eb:c2:32:98:1b:f5:9b:3d:08:a9:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cafc1ae-8aed-47d8-a718-169a271736a5 Validity Not Before: Feb 20 02:00:32 2026 GMT Not After : May 21 01:00:32 2026 GMT Subject: CN=1c90087b-a565-4d87-8c5b-9c67a5fb58f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6b:1c:ad:09:37:48:a3:44:64:51:31:da:b5: 2e:a2:9b:f4:c7:35:f4:48:07:22:fd:2a:eb:0a:da: f4:2b:27:35:f4:50:a4:50:77:bc:ae:22:4c:58:9a: 91:c1:1e:fe:e8:8b:da:5d:b8:78:e6:7f:12:fd:dc: 97:d8:6b:cb:5c:88:88:66:4d:ea:ec:a3:43:46:65: 5b:4e:05:52:84:db:85:ce:03:3b:04:ae:19:e5:cb: 36:de:80:f5:d9:be:fa:cc:af:dd:06:f4:b1:2c:12: f2:a9:84:e2:b6:89:75:cf:32:e3:6c:34:97:af:72: 8b:b1:11:80:80:eb:5f:bb:d1:6f:36:58:ee:be:15: 09:ae:1d:4a:cc:51:8e:6e:2b:9d:98:32:61:19:1c: fd:ed:88:54:5f:57:ae:d2:68:d0:cb:ba:a8:08:5a: 31:21:d8:de:8e:59:56:72:79:02:a4:6a:88:e7:23: ca:e8:c7:6d:9f:6c:ed:07:b7:07:77:1c:fd:1b:04: 33:eb:f9:59:8d:f8:d7:a4:45:a6:63:8b:5a:67:e9: 5c:69:03:04:80:7c:90:5d:05:76:51:26:90:0c:88: 21:65:91:ce:15:1a:59:e7:d1:c5:89:82:3c:ce:20: 30:ca:81:a4:c5:75:a1:a9:22:4f:34:e2:08:69:59: e0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:26:71:63:6E:FB:61:B7:FF:C0:33:12:35:7F:D0:B8:AD:27:22:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/148471f6-afa7-3f62-ac8d-1a7a880a2409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/7cafc1ae-8aed-47d8-a718-169a271736a5.crl X509v3 Authority Key Identifier: keyid:F2:8E:00:8F:88:BA:DD:98:6B:B2:D9:86:CD:8E:0D:60:A4:3C:3C:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5.cer sbgp-ipAddrBlock: critical IPv4: 163.123.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:f9:f8:f8:8e:53:50:7b:ef:5a:fd:7e:34:b0:3f:3f:8d:e9: 0e:24:cb:92:04:3b:66:ec:8b:40:67:73:a7:a7:e8:96:2a:4f: fd:bf:7c:2d:19:8b:02:a2:db:90:05:28:65:19:16:1a:ed:67: 6a:cb:90:a7:88:96:84:c2:94:66:23:78:ea:27:2d:da:9d:77: 7a:4e:ff:28:9d:fa:81:5b:5d:aa:c6:9f:11:e1:9f:0a:02:1f: 6f:2f:44:42:48:25:d2:13:77:85:3a:dc:07:61:64:13:36:69: 31:9f:d8:84:d3:1e:f1:fc:7e:05:1e:79:55:0f:7b:98:73:3c: 04:70:be:f1:2b:29:7c:2b:46:c9:ad:fc:94:3d:df:7c:d7:72: f5:38:3c:cd:ba:4f:9a:05:85:0c:63:5b:33:b4:4e:21:8e:2e: e1:a8:16:9e:42:14:e5:fc:7d:0b:41:dc:56:b7:c1:1a:66:41: d7:29:60:2a:09:ac:fb:28:bf:71:90:80:11:76:af:f3:09:d0: 1d:f3:f0:5b:78:43:85:d3:74:0c:df:5b:42:eb:59:38:54:4b: 2b:9b:ac:48:ae:c2:44:d8:a5:08:92:64:16:d4:d5:39:e2:81: 7d:18:45:43:b2:39:d5:77:89:21:ff:e2:91:f5:12:40:d9:89: 4e:09:fc:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwjKYG/WbPQip7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2NhZmMxYWUtOGFlZC00N2Q4LWE3MTgtMTY5YTI3MTcz NmE1MB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk MWM5MDA4N2ItYTU2NS00ZDg3LThjNWItOWM2N2E1ZmI1OGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWscrQk3SKNEZFEx2rUuopv0xzX0SAci/Srr Ctr0Kyc19FCkUHe8riJMWJqRwR7+6IvaXbh45n8S/dyX2GvLXIiIZk3q7KNDRmVb TgVShNuFzgM7BK4Z5cs23oD12b76zK/dBvSxLBLyqYTitol1zzLjbDSXr3KLsRGA gOtfu9FvNljuvhUJrh1KzFGObiudmDJhGRz97YhUX1eu0mjQy7qoCFoxIdjejllW cnkCpGqI5yPK6Mdtn2ztB7cHdxz9GwQz6/lZjfjXpEWmY4taZ+lcaQMEgHyQXQV2 USaQDIghZZHOFRpZ59HFiYI8ziAwyoGkxXWhqSJPNOIIaVngfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMmcWNu+2G3/8AzEjV/0LitJyLjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83Y2Fm YzFhZS04YWVkLTQ3ZDgtYTcxOC0xNjlhMjcxNzM2YTUvMTQ4NDcxZjYtYWZhNy0z ZjYyLWFjOGQtMWE3YTg4MGEyNDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2NhZmMxYWUtOGFlZC00N2Q4LWE3 MTgtMTY5YTI3MTczNmE1LzdjYWZjMWFlLThhZWQtNDdkOC1hNzE4LTE2OWEyNzE3 MzZhNS5jcmwwHwYDVR0jBBgwFoAU8o4Aj4i63ZhrstmGzY4NYKQ8PDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83Y2FmYzFhZS04YWVkLTQ3ZDgtYTcxOC0xNjlh MjcxNzM2YTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3vaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC35+PiOU1B771r9fjSwPz+N6Q4ky5IEO2bsi0Bnc6en6JYqT/2/fC0Z iwKi25AFKGUZFhrtZ2rLkKeIloTClGYjeOonLdqdd3pO/yid+oFbXarGnxHhnwoC H28vREJIJdITd4U63AdhZBM2aTGf2ITTHvH8fgUeeVUPe5hzPARwvvErKXwrRsmt /JQ933zXcvU4PM26T5oFhQxjWzO0TiGOLuGoFp5CFOX8fQtB3Fa3wRpmQdcpYCoJ rPsov3GQgBF2r/MJ0B3z8Ft4Q4XTdAzfW0LrWThUSyubrEiuwkTYpQiSZBbU1Tni gX0YRUOyOdV3iSH/4pH1EkDZiU4J/JA= -----END CERTIFICATE-----Generated at Mon Mar 2 22:21:48 2026 by rpki-client