$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/1ced46d9-deba-3ac1-8e78-128041a51194.roa File: 1ced46d9-deba-3ac1-8e78-128041a51194.roa (raw, json) Hash identifier: 2MsvUB7eJ+5fKOnWK+BLsHWqOtPyVX4vyPTxk5ZGel0= Subject key identifier: 98:2F:03:9A:C2:4F:19:D5:15:51:66:5C:23:36:B9:80:3A:CB:19:F0 Certificate issuer: /CN=8cce0cef-88a2-481a-91e3-c005827c7890 Certificate serial: 010D0C9F4328584D07ACF2C1342C8DD042998F20 Authority key identifier: 4A:53:07:3E:C4:1A:A8:D0:2E:E5:D2:14:65:0B:A5:AA:16:2B:CE:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/1ced46d9-deba-3ac1-8e78-128041a51194.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 18935 IP address blocks: 23.149.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/8cce0cef-88a2-481a-91e3-c005827c7890.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/8cce0cef-88a2-481a-91e3-c005827c7890.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:f2:c1:34:2c:8d:d0:42:99:8f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cce0cef-88a2-481a-91e3-c005827c7890 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=56cd8c1a-1479-4f15-a4ce-f04fee447d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:37:76:04:a1:19:36:fa:1d:fb:56:34:d5:6c: 5e:c4:f8:5c:f4:fd:35:a4:5c:70:dd:2a:8b:01:f5: cf:74:e1:94:c7:23:21:f4:6d:c0:be:ce:dd:c6:49: b4:90:02:3f:f1:a9:d5:c4:3f:c8:9a:8e:2d:dc:29: fe:ad:74:40:de:1a:c3:85:65:0b:bd:4c:c9:f1:96: 7d:78:2a:40:ff:f5:35:ab:c0:29:3f:ea:c5:0a:5c: 77:2c:b2:40:ae:04:c1:ee:5d:cb:56:48:99:8e:3c: 40:ac:19:5d:7b:e7:91:7f:2d:2a:d3:6a:2b:46:4c: b8:db:5f:ab:d5:22:f7:f3:1e:09:98:d2:6e:7b:a7: d4:f5:a7:62:f4:16:e9:8b:34:79:e4:4c:9f:67:a2: a5:1d:55:44:d6:1b:fe:d2:47:bc:74:00:71:25:93: e2:59:57:a8:1f:ed:57:68:09:07:d6:3d:17:cc:a6: de:9e:3d:3f:98:6c:6a:6e:72:aa:77:67:5d:0a:88: fe:5b:77:4d:02:00:6b:79:33:6d:9a:7c:78:48:79: eb:b1:0c:e4:eb:3c:e9:9c:e1:20:b9:f4:1f:83:06: 80:27:6c:46:90:7a:98:ef:af:79:47:49:b6:f7:6d: dc:b6:03:03:12:cc:df:36:09:3b:11:13:7d:72:96: 9a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2F:03:9A:C2:4F:19:D5:15:51:66:5C:23:36:B9:80:3A:CB:19:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/1ced46d9-deba-3ac1-8e78-128041a51194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/8cce0cef-88a2-481a-91e3-c005827c7890.crl X509v3 Authority Key Identifier: keyid:4A:53:07:3E:C4:1A:A8:D0:2E:E5:D2:14:65:0B:A5:AA:16:2B:CE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890.cer sbgp-ipAddrBlock: critical IPv4: 23.149.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:61:b1:40:95:fc:e7:11:ec:b7:59:8c:75:92:90:35:39:ea: 86:67:98:71:be:cc:27:82:92:75:ae:13:90:14:f8:23:8f:4a: 4f:a8:34:cf:cc:d4:ec:e5:56:ef:95:67:3f:b8:5c:db:ff:45: c8:fe:6b:79:1f:69:47:48:2f:c5:49:12:15:81:f7:6d:60:af: fb:62:a8:99:bd:37:e3:90:f5:d8:96:f0:03:0c:87:35:2f:d5: 53:6f:30:13:53:bb:0a:79:0c:34:96:62:26:4c:41:47:ea:be: 74:2f:9b:08:60:d5:e9:86:92:d6:00:d3:ca:d5:3d:29:ae:5d: 80:66:bf:c9:5d:84:24:a5:07:13:39:01:11:e9:4f:ae:e0:ac: 6b:39:b8:cc:ab:5e:fd:eb:a5:0c:f1:a2:9e:6b:10:14:33:11: 6d:0c:b7:14:a2:52:df:cb:04:85:36:ec:2b:2a:ea:97:d4:2c: 7c:b0:68:4f:16:44:7c:0f:e8:f1:d4:e6:e4:18:26:c3:91:28: 77:98:e0:5a:fb:de:4f:2e:9f:35:8f:51:94:5e:1f:4d:10:98: 93:73:b7:cc:61:60:a7:98:b9:18:d2:d4:64:64:f9:cd:36:9c: b0:82:b7:2c:60:f0:5f:22:51:8d:73:6d:3a:03:2d:9e:f6:33: 90:e8:6f:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrPLBNCyN0EKZjyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNjZTBjZWYtODhhMi00ODFhLTkxZTMtYzAwNTgyN2M3 ODkwMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk NTZjZDhjMWEtMTQ3OS00ZjE1LWE0Y2UtZjA0ZmVlNDQ3ZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzd2BKEZNvod+1Y01WxexPhc9P01pFxw3SqL AfXPdOGUxyMh9G3Avs7dxkm0kAI/8anVxD/Imo4t3Cn+rXRA3hrDhWULvUzJ8ZZ9 eCpA//U1q8ApP+rFClx3LLJArgTB7l3LVkiZjjxArBlde+eRfy0q02orRky421+r 1SL38x4JmNJue6fU9adi9BbpizR55EyfZ6KlHVVE1hv+0ke8dABxJZPiWVeoH+1X aAkH1j0XzKbenj0/mGxqbnKqd2ddCoj+W3dNAgBreTNtmnx4SHnrsQzk6zzpnOEg ufQfgwaAJ2xGkHqY7695R0m2923ctgMDEszfNgk7ERN9cpaadQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgvA5rCTxnVFVFmXCM2uYA6yxnwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84Y2Nl MGNlZi04OGEyLTQ4MWEtOTFlMy1jMDA1ODI3Yzc4OTAvMWNlZDQ2ZDktZGViYS0z YWMxLThlNzgtMTI4MDQxYTUxMTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGNjZTBjZWYtODhhMi00ODFhLTkx ZTMtYzAwNTgyN2M3ODkwLzhjY2UwY2VmLTg4YTItNDgxYS05MWUzLWMwMDU4Mjdj Nzg5MC5jcmwwHwYDVR0jBBgwFoAUSlMHPsQaqNAu5dIUZQulqhYrzrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84Y2NlMGNlZi04OGEyLTQ4MWEtOTFlMy1jMDA1 ODI3Yzc4OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5XYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABphsUCV/OcR7LdZjHWSkDU56oZnmHG+zCeCknWuE5AU+COPSk+oNM/M 1OzlVu+VZz+4XNv/Rcj+a3kfaUdIL8VJEhWB921gr/tiqJm9N+OQ9diW8AMMhzUv 1VNvMBNTuwp5DDSWYiZMQUfqvnQvmwhg1emGktYA08rVPSmuXYBmv8ldhCSlBxM5 ARHpT67grGs5uMyrXv3rpQzxop5rEBQzEW0MtxSiUt/LBIU27Csq6pfULHywaE8W RHwP6PHU5uQYJsORKHeY4Fr73k8unzWPUZReH00QmJNzt8xhYKeYuRjS1GRk+c02 nLCCtyxg8F8iUY1zbToDLZ72M5Dob1o= -----END CERTIFICATE-----Generated at Mon Mar 2 12:27:50 2026 by rpki-client