$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/e31bf0cb-79ff-3f22-af5e-7cd83e09f164.roa File: e31bf0cb-79ff-3f22-af5e-7cd83e09f164.roa (raw, json) Hash identifier: nEwQYPPO/1f+V/DJyQ9FelXL1EmlmVui1AQvoQvxS3o= Subject key identifier: A0:E7:B0:03:EF:51:BF:2C:85:6F:70:12:09:F0:FC:F1:BF:C6:1F:94 Certificate issuer: /CN=8cce0cef-88a2-481a-91e3-c005827c7890 Certificate serial: 010D0C9F4328584CA8C197AA3B790456E014CA00 Authority key identifier: 4A:53:07:3E:C4:1A:A8:D0:2E:E5:D2:14:65:0B:A5:AA:16:2B:CE:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/e31bf0cb-79ff-3f22-af5e-7cd83e09f164.roa Signing time: Tue 27 Jan 2026 02:00:29 +0000 ROA not before: Tue 27 Jan 2026 02:00:29 +0000 ROA not after: Mon 27 Apr 2026 01:00:29 +0000 asID: 401998 IP address blocks: 23.149.216.0/24 maxlen: 24 2602:fa96::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/8cce0cef-88a2-481a-91e3-c005827c7890.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/8cce0cef-88a2-481a-91e3-c005827c7890.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a8:c1:97:aa:3b:79:04:56:e0:14:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cce0cef-88a2-481a-91e3-c005827c7890 Validity Not Before: Jan 27 02:00:29 2026 GMT Not After : Apr 27 01:00:29 2026 GMT Subject: CN=054e892c-b75f-446b-87cc-05dd2a0ba823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:63:da:5c:d8:b0:7e:e0:23:c5:34:5a:92:e1: 0e:81:68:27:fa:9d:7b:04:85:1c:16:74:04:72:33: 22:15:f4:5e:d5:47:98:e3:a0:6d:00:83:49:f1:dd: 3a:fc:6e:08:c8:68:f3:f0:49:d9:45:48:21:48:a4: 89:7c:bd:74:33:82:c2:2d:b3:e3:b6:08:33:99:72: 20:5f:ec:a5:23:bd:6a:6c:f1:2f:69:86:c3:bc:58: 4f:91:5e:d1:48:9b:6c:7c:be:09:eb:66:0d:f7:36: a3:d2:82:92:2e:7b:d6:da:db:fd:95:44:0d:5b:3c: 59:d1:b5:d7:3b:61:ef:57:11:74:55:8d:a7:3f:93: 92:1d:5d:d0:6c:7a:fa:dd:3f:55:7a:59:75:b8:b9: 82:06:77:3d:79:6e:d1:7d:b9:3f:e2:48:ba:53:fb: 60:ed:fd:a8:d4:48:e2:df:be:55:d2:40:9a:f5:84: b0:88:72:42:af:8a:17:c1:79:1e:d9:66:ab:24:61: 4a:99:e5:c6:e4:d4:c8:a9:60:fc:94:a1:b6:da:b7: 8d:6a:d7:7d:d1:2e:a3:45:96:d9:f5:3f:fd:18:0d: 0b:77:9d:63:a2:ab:fc:ba:65:67:a5:13:3b:d1:b6: a8:80:f1:3b:67:43:d9:13:0f:4a:cd:a8:a4:04:71: cb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E7:B0:03:EF:51:BF:2C:85:6F:70:12:09:F0:FC:F1:BF:C6:1F:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/e31bf0cb-79ff-3f22-af5e-7cd83e09f164.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/8cce0cef-88a2-481a-91e3-c005827c7890.crl X509v3 Authority Key Identifier: keyid:4A:53:07:3E:C4:1A:A8:D0:2E:E5:D2:14:65:0B:A5:AA:16:2B:CE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890.cer sbgp-ipAddrBlock: critical IPv4: 23.149.216.0/24 IPv6: 2602:fa96::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:70:18:ac:22:84:b7:54:3f:f6:8f:c9:8b:75:4d:b5:b1:fc: c5:6f:7c:48:2b:a0:24:87:79:73:0f:d3:87:ca:74:3d:76:12: 0f:e1:bf:a9:d1:40:f9:46:04:59:27:9f:5b:69:fc:bb:54:47: 7a:89:aa:15:c5:5b:e4:39:dc:4d:3a:c9:66:92:4f:50:a4:fa: cf:0d:d8:aa:51:5e:1e:40:4e:5e:2d:ab:a7:40:82:43:27:9a: 25:62:2b:d5:f2:a9:23:3a:19:d8:0e:9e:b7:74:66:59:de:e2: 6d:bf:2a:81:84:dc:ab:27:66:7b:05:40:ab:5e:75:cf:ef:4d: 98:fb:91:25:c0:5b:0d:d9:5a:d0:e9:40:88:28:ba:d2:9a:cf: ca:ce:8d:f0:c3:d4:aa:fb:b0:80:5b:5a:17:f8:22:e1:2d:5b: bd:99:32:74:12:5d:98:bc:be:69:9a:11:16:75:91:97:60:20: 68:6e:f8:5a:87:90:cc:87:91:0b:dc:5f:72:5a:f7:93:fb:64: c4:79:93:e9:8e:cf:f5:73:9c:2c:d4:ed:41:60:fc:8d:a9:3d: 33:8c:b8:91:b2:11:82:1c:c3:4b:16:eb:57:fe:c4:18:4e:9c: 94:e5:bf:eb:be:84:4c:a9:f0:56:fd:9c:2a:68:a5:a0:ed:51: bd:f5:dd:17 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEyowZeqO3kEVuAUygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNjZTBjZWYtODhhMi00ODFhLTkxZTMtYzAwNTgyN2M3 ODkwMB4XDTI2MDEyNzAyMDAyOVoXDTI2MDQyNzAxMDAyOVowLzEtMCsGA1UEAxMk MDU0ZTg5MmMtYjc1Zi00NDZiLTg3Y2MtMDVkZDJhMGJhODIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GPaXNiwfuAjxTRakuEOgWgn+p17BIUcFnQE cjMiFfRe1UeY46BtAINJ8d06/G4IyGjz8EnZRUghSKSJfL10M4LCLbPjtggzmXIg X+ylI71qbPEvaYbDvFhPkV7RSJtsfL4J62YN9zaj0oKSLnvW2tv9lUQNWzxZ0bXX O2HvVxF0VY2nP5OSHV3QbHr63T9Vell1uLmCBnc9eW7Rfbk/4ki6U/tg7f2o1Eji 375V0kCa9YSwiHJCr4oXwXke2WarJGFKmeXG5NTIqWD8lKG22reNatd90S6jRZbZ 9T/9GA0Ld51joqv8umVnpRM70baogPE7Z0PZEw9KzaikBHHLEQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKDnsAPvUb8shW9wEgnw/PG/xh+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84Y2Nl MGNlZi04OGEyLTQ4MWEtOTFlMy1jMDA1ODI3Yzc4OTAvZTMxYmYwY2ItNzlmZi0z ZjIyLWFmNWUtN2NkODNlMDlmMTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGNjZTBjZWYtODhhMi00ODFhLTkx ZTMtYzAwNTgyN2M3ODkwLzhjY2UwY2VmLTg4YTItNDgxYS05MWUzLWMwMDU4Mjdj Nzg5MC5jcmwwHwYDVR0jBBgwFoAUSlMHPsQaqNAu5dIUZQulqhYrzrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84Y2NlMGNlZi04OGEyLTQ4MWEtOTFlMy1jMDA1 ODI3Yzc4OTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5XYMA4E AgACMAgDBgQmAvqWADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZcBisIoS3VD/2j8mLdU21sfzFb3xIK6Ak h3lzD9OHynQ9dhIP4b+p0UD5RgRZJ59bafy7VEd6iaoVxVvkOdxNOslmkk9QpPrP DdiqUV4eQE5eLaunQIJDJ5olYivV8qkjOhnYDp63dGZZ3uJtvyqBhNyrJ2Z7BUCr XnXP702Y+5ElwFsN2VrQ6UCIKLrSms/Kzo3ww9Sq+7CAW1oX+CLhLVu9mTJ0El2Y vL5pmhEWdZGXYCBobvhah5DMh5EL3F9yWveT+2TEeZPpjs/1c5ws1O1BYPyNqT0z jLiRshGCHMNLFutX/sQYTpyU5b/rvoRMqfBW/ZwqaKWg7VG99d0X -----END CERTIFICATE-----Generated at Mon Mar 2 04:41:22 2026 by rpki-client