$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa File: 04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa (raw, json) Hash identifier: 3+ribmAnjzvUtF9/xdz6p+Y6qeK1O3eRhYsDRc1rsFU= Subject key identifier: 54:45:5E:F4:08:65:7C:AB:6E:20:BE:E6:90:FE:2E:6D:30:33:72:A1 Certificate issuer: /CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Certificate serial: 010D0C9F4328584D00B2706524C8BA50D039D5C0 Authority key identifier: C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 49585 IP address blocks: 23.149.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:70:65:24:c8:ba:50:d0:39:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=edcb1df5-2abd-484e-b180-2ac7ab30a1de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:bc:92:f8:87:1e:6a:bb:1e:04:18:c5:34: e7:88:22:96:43:d3:64:74:75:7d:ca:83:b1:c4:0c: 67:aa:cc:e0:ba:e3:e6:4e:ff:fe:8f:d4:83:d7:7c: fb:5a:c0:35:ed:63:82:88:1d:a3:58:3d:3e:78:0d: 91:11:f8:56:b2:01:5f:9f:7c:5d:5c:23:53:0c:cd: 8a:e5:57:24:33:ed:3a:c6:0b:6f:f7:28:b8:b8:fb: 8a:b2:e0:2f:e8:b1:72:51:92:50:a0:92:29:e8:32: 40:ac:96:83:25:74:8c:38:d4:88:8a:75:8d:fa:94: 5c:e0:7a:77:5a:58:dc:68:a1:64:e8:3f:7e:f8:03: 81:e2:88:db:f9:02:ce:24:fd:db:b7:70:0a:f6:5b: 99:5c:5e:04:94:cc:a2:da:a8:5b:8a:a3:47:84:72: db:79:6c:3b:a9:ee:f7:ac:c9:c4:04:86:7d:2f:21: 53:b8:18:d6:09:4e:f8:d7:1c:27:bd:18:89:2f:68: 3f:6a:dd:0d:69:ae:17:d4:68:cd:80:a4:1f:62:f8: 4e:c3:47:39:89:f8:8b:06:42:90:e6:31:a4:ad:50: 8a:dc:34:20:a1:99:94:9c:08:69:5b:f7:8a:e9:26: c9:d0:46:82:de:2d:11:5b:1b:37:b9:04:d8:76:05: ca:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:45:5E:F4:08:65:7C:AB:6E:20:BE:E6:90:FE:2E:6D:30:33:72:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl X509v3 Authority Key Identifier: keyid:C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer sbgp-ipAddrBlock: critical IPv4: 23.149.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ce:27:46:43:b5:b2:c4:63:40:af:39:09:77:44:74:53:3d: 6b:4b:cb:81:f8:19:d0:1e:b4:21:eb:c9:be:78:ab:d6:0f:48: ee:45:60:a2:67:40:56:a6:cf:fc:70:d4:5b:f2:38:43:4f:8f: d0:b3:a1:83:e8:cf:5c:5e:31:ca:2b:bf:38:b5:4a:d6:74:45: 18:98:f7:21:dc:fc:57:b6:f2:92:01:b3:cb:27:9c:dc:06:d2: 8f:81:f6:62:30:15:5b:99:cb:b0:1c:40:d4:2c:fa:cb:42:d1: 4d:13:7a:fd:74:bd:e3:bd:2d:1d:02:fc:04:d1:38:a3:b2:4c: b9:b8:60:07:45:3d:9c:8a:c3:b4:f1:81:1d:01:eb:f0:67:f3: 0d:38:0d:b1:2c:ab:c6:dc:81:b1:25:69:7a:96:6f:74:07:a1: 41:03:ea:40:52:90:66:7e:5f:25:ba:13:ba:02:79:ca:bd:bf: d7:76:c5:aa:36:33:90:ec:50:fb:ab:7a:07:4b:17:1e:0a:9f: 4d:1d:8e:86:17:a7:91:67:95:e6:18:d7:68:6d:25:5d:95:0f: 18:97:04:61:2e:fe:54:84:ca:0b:70:13:55:b2:16:3a:ca:f1: 58:6b:f7:37:5c:2e:20:d3:95:dc:cc:73:1e:84:8a:dc:b8:52: e3:4a:fb:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AsnBlJMi6UNA51cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE4NzNlNWEtYTE2ZC00ODkwLThkZmUtYzI4MWJmNmUw MjBlMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk ZWRjYjFkZjUtMmFiZC00ODRlLWIxODAtMmFjN2FiMzBhMWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNW8kviHHmq7HgQYxTTniCKWQ9NkdHV9yoOx xAxnqszguuPmTv/+j9SD13z7WsA17WOCiB2jWD0+eA2REfhWsgFfn3xdXCNTDM2K 5VckM+06xgtv9yi4uPuKsuAv6LFyUZJQoJIp6DJArJaDJXSMONSIinWN+pRc4Hp3 WljcaKFk6D9++AOB4ojb+QLOJP3bt3AK9luZXF4ElMyi2qhbiqNHhHLbeWw7qe73 rMnEBIZ9LyFTuBjWCU741xwnvRiJL2g/at0Naa4X1GjNgKQfYvhOw0c5ifiLBkKQ 5jGkrVCK3DQgoZmUnAhpW/eK6SbJ0EaC3i0RWxs3uQTYdgXKfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRFXvQIZXyrbiC+5pD+Lm0wM3KhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3 M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgxYmY2ZTAyMGUvMDRiMzViNDItYTA3Yy0z NGVmLTlmM2EtYzJmNmU1YmZiOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjE4NzNlNWEtYTE2ZC00ODkwLThk ZmUtYzI4MWJmNmUwMjBlLzIxODczZTVhLWExNmQtNDg5MC04ZGZlLWMyODFiZjZl MDIwZS5jcmwwHwYDVR0jBBgwFoAUx3mnxj/aW1dVPvxCh5HuGzfxwqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgx YmY2ZTAyMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5UoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbOJ0ZDtbLEY0CvOQl3RHRTPWtLy4H4GdAetCHryb54q9YPSO5FYKJn QFamz/xw1FvyOENPj9CzoYPoz1xeMcorvzi1StZ0RRiY9yHc/Fe28pIBs8snnNwG 0o+B9mIwFVuZy7AcQNQs+stC0U0Tev10veO9LR0C/ATROKOyTLm4YAdFPZyKw7Tx gR0B6/Bn8w04DbEsq8bcgbElaXqWb3QHoUED6kBSkGZ+XyW6E7oCecq9v9d2xao2 M5DsUPuregdLFx4Kn00djoYXp5FnleYY12htJV2VDxiXBGEu/lSEygtwE1WyFjrK 8Vhr9zdcLiDTldzMcx6Eity4UuNK++s= -----END CERTIFICATE-----Generated at Mon Mar 2 04:06:52 2026 by rpki-client