$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/29949da6-8cb5-3545-95c6-65e47a0cc103.roa File: 29949da6-8cb5-3545-95c6-65e47a0cc103.roa (raw, json) Hash identifier: Wy+rBvLs7kQpbQPriEopyOzaIBhArYcmZpbpxdzq3Ic= Subject key identifier: 58:4D:F3:3B:E0:5B:FF:2B:4E:F3:1D:88:FA:74:8A:C0:76:8C:3E:4B Certificate issuer: /CN=68e273c1-e39f-464b-8c1f-b45c8df2b148 Certificate serial: 010D0C9F4328584CF2BD0DB8879E14CB21898400 Authority key identifier: 4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/29949da6-8cb5-3545-95c6-65e47a0cc103.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 26886 IP address blocks: 23.167.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bd:0d:b8:87:9e:14:cb:21:89:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e273c1-e39f-464b-8c1f-b45c8df2b148 Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=42ca07bf-31e1-42e3-9bce-6cd46691d31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2c:63:f5:70:a9:86:36:a1:d9:97:0a:50:c2: 94:46:dc:a9:a6:57:af:bb:b8:68:e3:72:a3:c0:29: 74:de:5d:bc:c3:5b:67:1d:3a:80:3a:38:a1:3e:3a: 2f:9b:32:20:70:3a:69:95:3d:b1:ec:22:4f:e6:9e: fb:1c:4a:31:10:26:f0:c7:e6:c1:4f:51:25:89:65: 9c:75:dd:e3:79:17:e6:56:08:ea:f7:7c:ae:d2:15: 2c:f9:04:5a:0a:3e:0d:ef:9a:a2:0b:17:9a:97:59: db:3b:a5:c7:19:f9:a8:86:c3:c4:cb:22:51:56:17: 5d:de:ca:5b:ae:30:b1:2f:08:a2:5c:f3:62:5d:1c: 03:8a:83:bc:8a:c1:2d:d4:dd:29:a5:9c:ab:e6:21: 96:d1:2e:a5:e0:e9:51:ab:dd:bf:97:79:d8:29:e0: 47:32:08:fd:9b:19:de:af:b1:98:03:ab:c3:0b:cd: 36:c6:e9:32:f5:15:ab:92:4b:68:ae:5d:a4:b2:24: 46:98:87:38:1e:82:f6:8a:15:ab:f9:cf:3a:f8:b0: 41:4c:78:3d:38:13:5e:09:e8:e3:21:a3:ab:0d:ef: 0e:f8:d6:42:16:e9:da:0c:82:62:f7:86:ec:c2:a0: df:6f:4a:ee:55:ea:28:cd:5d:52:ae:13:f4:eb:48: 80:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4D:F3:3B:E0:5B:FF:2B:4E:F3:1D:88:FA:74:8A:C0:76:8C:3E:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/29949da6-8cb5-3545-95c6-65e47a0cc103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.crl X509v3 Authority Key Identifier: keyid:4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer sbgp-ipAddrBlock: critical IPv4: 23.167.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:0b:61:f2:bd:0e:ad:cd:67:e4:da:36:1e:c1:83:1b:90:cc: a3:fd:e6:bf:0d:6f:e5:9c:94:22:2a:6c:a1:19:88:57:b0:ea: b1:ee:4b:de:0f:f4:2f:99:2c:68:22:e8:8a:5a:ea:40:56:f4: f3:fa:8e:d5:f1:9e:c9:79:ef:ed:54:fc:b9:c7:c6:81:d6:87: 78:46:cc:34:71:25:e6:06:94:8d:5f:01:f0:34:92:48:bb:18: 90:61:4d:7a:32:af:e2:52:73:ac:19:99:73:e6:d8:6d:a3:d7: 28:ef:64:64:bd:45:e5:bb:3d:80:f6:19:f5:60:18:c6:ea:f8: a6:c7:fc:60:af:70:f8:fa:0a:1f:d2:29:0d:91:cc:c3:3a:df: 02:45:e7:92:06:b2:f7:25:54:85:81:0e:cc:76:dd:ec:83:fc: 2b:47:e5:cf:b3:98:14:80:6d:ba:57:56:cf:5a:8f:23:03:f4: 25:75:f7:2a:6e:c4:8b:e4:dc:28:41:52:77:f9:ac:3e:08:6d: 3a:a4:43:22:85:df:22:30:1c:9f:8a:9d:31:0b:72:46:e5:23: cc:90:bc:8f:8a:f9:a5:48:92:10:52:0e:b4:b3:9e:7c:31:49: e5:b6:12:78:c5:a4:89:06:7c:46:ea:fd:be:54:43:44:2c:74: 03:30:3f:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvQ24h54UyyGJhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhlMjczYzEtZTM5Zi00NjRiLThjMWYtYjQ1YzhkZjJi MTQ4MB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk NDJjYTA3YmYtMzFlMS00MmUzLTliY2UtNmNkNDY2OTFkMzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlixj9XCphjah2ZcKUMKURtypplevu7ho43Kj wCl03l28w1tnHTqAOjihPjovmzIgcDpplT2x7CJP5p77HEoxECbwx+bBT1EliWWc dd3jeRfmVgjq93yu0hUs+QRaCj4N75qiCxeal1nbO6XHGfmohsPEyyJRVhdd3spb rjCxLwiiXPNiXRwDioO8isEt1N0ppZyr5iGW0S6l4OlRq92/l3nYKeBHMgj9mxne r7GYA6vDC802xuky9RWrkktorl2ksiRGmIc4HoL2ihWr+c86+LBBTHg9OBNeCejj IaOrDe8O+NZCFunaDIJi94bswqDfb0ruVeoozV1SrhP060iA2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhN8zvgW/8rTvMdiPp0isB2jD5LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82OGUy NzNjMS1lMzlmLTQ2NGItOGMxZi1iNDVjOGRmMmIxNDgvMjk5NDlkYTYtOGNiNS0z NTQ1LTk1YzYtNjVlNDdhMGNjMTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjhlMjczYzEtZTM5Zi00NjRiLThj MWYtYjQ1YzhkZjJiMTQ4LzY4ZTI3M2MxLWUzOWYtNDY0Yi04YzFmLWI0NWM4ZGYy YjE0OC5jcmwwHwYDVR0jBBgwFoAUTS+LfVGd0REBVTtzG9uaer5iv6UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82OGUyNzNjMS1lMzlmLTQ2NGItOGMxZi1iNDVj OGRmMmIxNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6eIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8LYfK9Dq3NZ+TaNh7BgxuQzKP95r8Nb+WclCIqbKEZiFew6rHuS94P 9C+ZLGgi6Ipa6kBW9PP6jtXxnsl57+1U/LnHxoHWh3hGzDRxJeYGlI1fAfA0kki7 GJBhTXoyr+JSc6wZmXPm2G2j1yjvZGS9ReW7PYD2GfVgGMbq+KbH/GCvcPj6Ch/S KQ2RzMM63wJF55IGsvclVIWBDsx23eyD/CtH5c+zmBSAbbpXVs9ajyMD9CV19ypu xIvk3ChBUnf5rD4IbTqkQyKF3yIwHJ+KnTELckblI8yQvI+K+aVIkhBSDrSznnwx SeW2EnjFpIkGfEbq/b5UQ0QsdAMwPz0= -----END CERTIFICATE-----Generated at Mon Mar 2 08:19:46 2026 by rpki-client