$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/de5dd76f-259a-3d52-a142-5fb9a1245fa9.roa File: de5dd76f-259a-3d52-a142-5fb9a1245fa9.roa (raw, json) Hash identifier: suYNzHbPZGqxNRSE3GsU/Brsh3ZUqwL9TlCDHOMPCbU= Subject key identifier: E4:A1:FC:BE:B9:81:AB:37:05:EA:53:E6:F1:B9:79:61:69:87:E2:4C Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584CEA5D014ABEB6129AAC7A2448 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/de5dd76f-259a-3d52-a142-5fb9a1245fa9.roa Signing time: Thu 19 Feb 2026 14:00:40 +0000 ROA not before: Thu 19 Feb 2026 14:00:40 +0000 ROA not after: Wed 20 May 2026 13:00:40 +0000 asID: 20001 IP address blocks: 147.53.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ea:5d:01:4a:be:b6:12:9a:ac:7a:24:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 19 14:00:40 2026 GMT Not After : May 20 13:00:40 2026 GMT Subject: CN=2a3a5067-b4fd-4b21-966f-94b941d6de5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:42:a6:47:27:8e:00:5a:7b:9c:10:bb:35:c7: da:b3:54:1a:1b:e1:09:11:78:ab:06:01:a8:ef:1d: 7d:ed:ef:e5:07:23:2d:51:5d:53:26:82:1a:3d:b4: 67:92:a2:66:79:18:97:b1:20:fe:38:25:20:0b:23: 72:3c:a9:7e:51:1e:a2:90:59:59:d6:24:11:3d:a7: 4c:6c:2f:11:cc:cc:22:0e:3f:e3:82:9b:31:cc:23: 33:ba:83:38:9a:00:87:30:21:a2:d7:d7:30:c8:5b: b7:34:0d:c7:22:1d:10:f4:2f:71:9e:9f:01:e4:ce: 39:4d:ef:3f:ad:71:04:6b:86:99:16:ff:d7:11:70: c1:b0:01:94:80:44:67:ee:66:8f:f7:60:92:d7:a4: 98:3c:b2:b7:82:7c:a6:ab:07:89:0d:63:da:4c:0a: 2d:f1:0b:a2:bf:ed:3d:d3:e5:e6:71:b1:c9:b2:eb: ba:a4:e5:9d:05:6f:f8:29:4e:4e:28:fb:66:b0:8a: 45:6c:6e:78:cd:90:97:7f:9b:00:0d:e3:4d:3a:30: 96:76:55:55:6c:88:d9:63:0b:ee:58:68:77:b6:b4: a3:2a:28:5d:c2:8c:da:5f:ff:0a:c3:53:be:e4:56: 0a:db:e3:34:1a:72:93:e7:7b:cd:54:b0:1e:fb:ff: 15:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A1:FC:BE:B9:81:AB:37:05:EA:53:E6:F1:B9:79:61:69:87:E2:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/de5dd76f-259a-3d52-a142-5fb9a1245fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 147.53.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:63:ac:10:c9:73:5c:9c:b5:4b:63:48:1a:4a:ca:30:a4:a8: 8f:94:f9:c5:8b:e9:02:2b:b4:ad:5c:9e:76:16:99:3a:3c:0f: dc:24:40:11:e2:c3:4a:4e:10:25:95:d1:fc:1e:a9:ea:83:eb: a6:b5:53:0e:47:95:6e:4b:1e:f9:02:64:3e:e1:e2:30:30:be: 2e:79:f9:7e:12:4c:27:d7:7e:48:3f:ca:a3:7f:6f:0d:4f:b7: fe:bd:42:2f:16:7a:9a:7b:76:31:b5:28:28:79:9e:8d:28:0b: 84:9d:36:0e:be:ad:f5:fb:31:93:cc:9e:f8:23:51:1e:36:b1: 01:f3:96:03:ce:37:71:d7:1f:3b:8c:98:5c:ae:7a:40:96:bb: 87:90:0a:3e:2c:b3:05:aa:1d:b1:cd:bd:6a:d1:42:19:c2:75: d7:38:61:be:6d:f0:90:01:89:47:ae:82:d2:69:14:96:9d:5c: 0b:00:23:07:d4:71:08:fe:90:e8:45:b3:97:9d:81:78:ef:67: 01:22:ce:16:93:42:e7:cb:6a:20:ae:5a:40:6d:71:f9:bc:b0: 1a:8a:d7:cb:35:de:a1:0f:c3:d7:63:7b:b5:80:8f:35:97:07: a6:20:69:3d:80:ab:eb:8d:cb:1a:80:5b:71:08:8d:67:ba:b3: 78:67:32:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXQFKvrYSmqx6JEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk MmEzYTUwNjctYjRmZC00YjIxLTk2NmYtOTRiOTQxZDZkZTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EKmRyeOAFp7nBC7Ncfas1QaG+EJEXirBgGo 7x197e/lByMtUV1TJoIaPbRnkqJmeRiXsSD+OCUgCyNyPKl+UR6ikFlZ1iQRPadM bC8RzMwiDj/jgpsxzCMzuoM4mgCHMCGi19cwyFu3NA3HIh0Q9C9xnp8B5M45Te8/ rXEEa4aZFv/XEXDBsAGUgERn7maP92CS16SYPLK3gnymqweJDWPaTAot8Quiv+09 0+XmcbHJsuu6pOWdBW/4KU5OKPtmsIpFbG54zZCXf5sADeNNOjCWdlVVbIjZYwvu WGh3trSjKihdwozaX/8Kw1O+5FYK2+M0GnKT53vNVLAe+/8VIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSh/L65gas3BepT5vG5eWFph+JMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZGU1ZGQ3NmYtMjU5YS0z ZDUyLWExNDItNWZiOWExMjQ1ZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkzV7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFjrBDJc1yctUtjSBpKyjCkqI+U+cWL6QIrtK1cnnYWmTo8D9wkQBHi w0pOECWV0fweqeqD66a1Uw5HlW5LHvkCZD7h4jAwvi55+X4STCfXfkg/yqN/bw1P t/69Qi8Wepp7djG1KCh5no0oC4SdNg6+rfX7MZPMnvgjUR42sQHzlgPON3HXHzuM mFyuekCWu4eQCj4sswWqHbHNvWrRQhnCddc4Yb5t8JABiUeugtJpFJadXAsAIwfU cQj+kOhFs5edgXjvZwEizhaTQufLaiCuWkBtcfm8sBqK18s13qEPw9dje7WAjzWX B6YgaT2Aq+uNyxqAW3EIjWe6s3hnMrA= -----END CERTIFICATE-----Generated at Mon Mar 2 10:15:28 2026 by rpki-client