$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/295d13d7-99ef-33dd-a625-3a2596a0f75d.roa File: 295d13d7-99ef-33dd-a625-3a2596a0f75d.roa (raw, json) Hash identifier: aAAJuA56yzg3APoe99fLt1R1txr7jQsR/nB/qyRGcjY= Subject key identifier: CA:28:16:82:E2:B2:23:06:8A:21:03:BD:43:AB:0E:40:73:6B:5F:97 Certificate issuer: /CN=cb5b14dc-69ee-4b58-b27d-78fe51b1335f Certificate serial: 010D0C9F4328584CB81C88F13101C77C0CA48E80 Authority key identifier: A1:9A:77:2F:FD:70:E8:07:64:E2:E3:1C:A4:41:24:B6:42:51:05:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/295d13d7-99ef-33dd-a625-3a2596a0f75d.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 401010 IP address blocks: 23.148.136.0/24 maxlen: 24 130.51.77.0/24 maxlen: 24 2602:face::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:88:f1:31:01:c7:7c:0c:a4:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb5b14dc-69ee-4b58-b27d-78fe51b1335f Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=01f69aea-7346-422d-b939-e685edb4d571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d0:bf:ee:9e:9a:75:d7:7c:ee:06:33:cc:59: b8:43:f4:ba:b9:82:8e:0d:3e:68:4f:ab:6f:a9:40: 5c:d8:61:f4:55:49:7b:08:46:82:cb:85:45:61:d1: cc:03:55:2b:b9:b9:48:fd:8c:7b:3b:f3:e1:42:fa: 37:86:be:44:51:77:19:41:ff:05:b2:a0:0e:21:12: 92:85:8f:8f:c3:c2:a8:2c:c1:aa:a3:ed:0d:c4:73: 54:a6:33:ee:82:a4:1d:79:d8:ae:aa:88:7d:f2:09: a8:3f:aa:a1:e0:26:c8:6e:8c:86:de:bb:8c:a0:c7: ba:df:eb:3c:82:8d:12:ef:d2:18:bd:a1:85:0a:a4: a1:51:9c:68:52:77:3f:64:32:d6:2e:44:8c:44:58: 03:b6:17:cc:8e:f5:9e:0a:d2:5a:6c:c6:17:d4:a6: 20:8a:c2:3f:b4:76:a4:07:42:d7:a6:2f:ae:65:42: c2:f7:17:a4:37:aa:22:d3:60:9d:fc:14:87:1e:99: c8:69:c9:82:11:32:8c:c5:4c:6e:7d:a1:ad:8c:98: 3a:d7:09:d5:cb:b1:0c:2f:2d:97:3c:48:a8:62:ff: 93:08:7c:37:68:aa:6f:a5:55:af:a1:92:a4:1c:78: 0a:39:15:17:7f:10:b5:17:90:fa:48:7a:31:84:6f: 9d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:28:16:82:E2:B2:23:06:8A:21:03:BD:43:AB:0E:40:73:6B:5F:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/295d13d7-99ef-33dd-a625-3a2596a0f75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.crl X509v3 Authority Key Identifier: keyid:A1:9A:77:2F:FD:70:E8:07:64:E2:E3:1C:A4:41:24:B6:42:51:05:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer sbgp-ipAddrBlock: critical IPv4: 23.148.136.0/24 130.51.77.0/24 IPv6: 2602:face::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5f:f2:22:e8:b3:82:bc:7b:ad:99:ad:06:73:65:33:d7:a5: 0d:5e:9f:1d:88:0f:6f:62:ed:eb:21:f0:d6:cb:43:3b:96:51: 91:f6:95:d4:8b:9f:df:77:fd:16:8c:6c:2c:b9:f1:4a:96:2e: f0:32:71:59:87:87:6a:e9:19:2e:16:8e:4a:d8:85:77:90:23: d6:b7:3f:b1:d7:1f:cb:f1:56:b5:10:97:c8:08:d3:50:8f:84: ac:f3:8c:d4:6e:56:c4:0e:5b:71:17:10:8c:7a:27:83:85:1c: a9:a0:ab:46:87:b0:73:48:a5:05:6e:fc:53:d1:5a:cb:b1:89: 16:ee:68:ee:5d:b2:38:86:5d:7c:9f:27:61:4e:5c:f6:4d:b3: cb:bd:00:f3:fb:e3:0c:d2:32:b4:87:72:d8:e3:9c:bb:58:03: bc:e2:55:ec:54:af:23:29:2a:a3:c3:13:ab:5b:d5:cb:d8:6a: f4:5e:5f:05:93:a2:8c:5e:9d:38:1d:7e:a6:2b:ae:d2:94:ed: 75:a3:e7:22:91:fd:a4:4e:85:71:16:2a:5f:b6:62:25:af:87: b0:36:f5:02:60:05:07:1a:8c:ad:25:99:5f:76:61:0d:c0:2f: b1:30:79:4c:a9:f6:14:3b:d3:16:b2:29:2d:53:6c:eb:11:fb: 76:08:de:e5 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEy4HIjxMQHHfAykjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I1YjE0ZGMtNjllZS00YjU4LWIyN2QtNzhmZTUxYjEz MzVmMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk MDFmNjlhZWEtNzM0Ni00MjJkLWI5MzktZTY4NWVkYjRkNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNC/7p6addd87gYzzFm4Q/S6uYKODT5oT6tv qUBc2GH0VUl7CEaCy4VFYdHMA1UrublI/Yx7O/PhQvo3hr5EUXcZQf8FsqAOIRKS hY+Pw8KoLMGqo+0NxHNUpjPugqQdediuqoh98gmoP6qh4CbIboyG3ruMoMe63+s8 go0S79IYvaGFCqShUZxoUnc/ZDLWLkSMRFgDthfMjvWeCtJabMYX1KYgisI/tHak B0LXpi+uZULC9xekN6oi02Cd/BSHHpnIacmCETKMxUxufaGtjJg61wnVy7EMLy2X PEioYv+TCHw3aKpvpVWvoZKkHHgKORUXfxC1F5D6SHoxhG+dHwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFMooFoLisiMGiiEDvUOrDkBza1+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYjVi MTRkYy02OWVlLTRiNTgtYjI3ZC03OGZlNTFiMTMzNWYvMjk1ZDEzZDctOTllZi0z M2RkLWE2MjUtM2EyNTk2YTBmNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2I1YjE0ZGMtNjllZS00YjU4LWIy N2QtNzhmZTUxYjEzMzVmL2NiNWIxNGRjLTY5ZWUtNGI1OC1iMjdkLTc4ZmU1MWIx MzM1Zi5jcmwwHwYDVR0jBBgwFoAUoZp3L/1w6Adk4uMcpEEktkJRBdEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jYjViMTRkYy02OWVlLTRiNTgtYjI3ZC03OGZl NTFiMTMzNWYuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5SIAwQA gjNNMA4EAgACMAgDBgQmAvrOADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFX/Ii6LOCvHutma0Gc2Uz16UN Xp8diA9vYu3rIfDWy0M7llGR9pXUi5/fd/0WjGwsufFKli7wMnFZh4dq6RkuFo5K 2IV3kCPWtz+x1x/L8Va1EJfICNNQj4Ss84zUblbEDltxFxCMeieDhRypoKtGh7Bz SKUFbvxT0VrLsYkW7mjuXbI4hl18nydhTlz2TbPLvQDz++MM0jK0h3LY45y7WAO8 4lXsVK8jKSqjwxOrW9XL2Gr0Xl8Fk6KMXp04HX6mK67SlO11o+cikf2kToVxFipf tmIlr4ewNvUCYAUHGoytJZlfdmENwC+xMHlMqfYUO9MWsiktU2zrEft2CN7l -----END CERTIFICATE-----Generated at Mon Mar 2 08:33:58 2026 by rpki-client