$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/7b07ff38-005d-377c-95d7-6ce9da3de600.roa File: 7b07ff38-005d-377c-95d7-6ce9da3de600.roa (raw, json) Hash identifier: fHC3lUtjh0XN/qe0ojjPP4p7EZqrVqGZKaw9B2gQDAY= Subject key identifier: CC:15:39:67:40:22:E3:46:14:80:E6:FD:90:54:54:0F:22:60:40:B6 Certificate issuer: /CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Certificate serial: 010D0C9F4328584CD6D212D2106F9FFCCE83F700 Authority key identifier: 27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/7b07ff38-005d-377c-95d7-6ce9da3de600.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 11776 IP address blocks: 23.152.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:12:d2:10:6f:9f:fc:ce:83:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=4608dc57-9e05-4aa7-a7bc-23f07e4d8e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:06:7c:87:f2:87:cd:01:3a:c5:e0:28:0a:31: 25:eb:f7:5c:e4:98:2e:d4:17:45:8a:69:ac:ba:73: aa:1c:b0:64:7b:45:58:74:b3:59:96:de:9b:92:e1: 2e:2f:6b:28:d2:67:51:9f:a7:9c:b8:f8:4d:55:21: ca:e0:75:c0:1a:2a:39:d2:b0:52:a4:38:f8:a8:e7: 27:04:b1:7d:b6:75:bd:45:d8:8b:ed:cc:3d:e5:7b: 96:8b:2f:34:df:ef:69:20:a7:fb:00:16:10:1d:f8: 11:ac:91:c7:c6:27:f2:f6:96:9b:1c:6d:8b:37:6f: b8:e8:da:a2:6c:de:45:df:f8:e4:fe:0e:79:99:c0: d9:00:d3:b7:ee:ca:f3:94:fb:43:59:96:4c:01:d6: d1:cd:0a:85:a5:a6:79:c3:38:1a:9f:97:14:89:da: 0f:4b:e8:20:77:ba:3e:9a:bb:42:46:80:51:56:e5: 72:a6:86:e5:c5:eb:97:fe:bc:33:1f:2d:de:cf:61: 64:6c:53:73:e5:7c:d7:b7:fc:a4:82:08:ff:d8:9c: cc:6f:d4:ca:9f:e5:0b:26:05:17:d2:5f:0a:53:ee: 0a:78:22:74:19:0c:ec:94:d2:1a:0a:45:8c:f5:70: 93:6e:38:9b:26:51:e9:2c:43:ce:e8:42:18:86:54: 6e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:15:39:67:40:22:E3:46:14:80:E6:FD:90:54:54:0F:22:60:40:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/7b07ff38-005d-377c-95d7-6ce9da3de600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl X509v3 Authority Key Identifier: keyid:27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer sbgp-ipAddrBlock: critical IPv4: 23.152.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:0f:36:74:15:5f:b8:f2:c3:d1:ec:1a:c9:cd:db:71:07:5c: ea:c8:91:66:e6:a7:01:bd:e8:b1:e0:b8:ea:62:bd:b8:5d:00: aa:ce:f1:28:a3:35:61:d2:71:40:1e:e6:34:c6:ec:e7:e9:7a: d8:84:be:60:03:41:93:31:9f:e4:b5:9f:1e:67:07:14:b7:54: 2d:c5:61:dd:9a:41:99:a1:55:3d:3a:3c:77:c8:4a:f3:6a:b0: 35:cd:bf:24:40:b3:92:c8:e1:8a:ac:bd:29:e9:7b:34:e6:b4: 87:27:b5:84:61:d5:b0:d4:10:68:52:b7:f8:bf:c3:94:2f:c2: b7:7f:a1:ed:c8:3a:31:0d:13:7e:a9:5e:ca:b5:aa:aa:2b:0f: 7e:c8:e5:20:b5:f7:45:02:8e:bb:df:8a:db:be:e7:ac:63:32: 0f:0e:c6:65:2a:ce:72:83:91:5d:66:df:0a:69:7a:56:eb:f5: 73:19:da:eb:36:bc:0e:3c:cd:1c:05:b3:1c:5d:14:37:5e:06: ba:62:9a:64:7d:5c:4c:8a:86:73:32:f5:e3:55:bb:ba:a7:29: 51:fe:b6:92:e9:2e:70:38:12:cf:26:5f:1b:fa:e6:c6:2e:82: 8c:4a:a3:0f:4a:3c:de:4b:a4:61:f6:e8:6a:94:a7:30:03:91: 8e:f7:5f:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0hLSEG+f/M6D9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZhZjdhMTItMDE3Ni00NGY5LTk5MzgtN2JiY2NhYzNk MjM4MB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk NDYwOGRjNTctOWUwNS00YWE3LWE3YmMtMjNmMDdlNGQ4ZTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwZ8h/KHzQE6xeAoCjEl6/dc5Jgu1BdFimms unOqHLBke0VYdLNZlt6bkuEuL2so0mdRn6ecuPhNVSHK4HXAGio50rBSpDj4qOcn BLF9tnW9RdiL7cw95XuWiy803+9pIKf7ABYQHfgRrJHHxify9pabHG2LN2+46Nqi bN5F3/jk/g55mcDZANO37srzlPtDWZZMAdbRzQqFpaZ5wzgan5cUidoPS+ggd7o+ mrtCRoBRVuVypoblxeuX/rwzHy3ez2FkbFNz5XzXt/ykggj/2JzMb9TKn+ULJgUX 0l8KU+4KeCJ0GQzslNIaCkWM9XCTbjibJlHpLEPO6EIYhlRuWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwVOWdAIuNGFIDm/ZBUVA8iYEC2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZmFm N2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJjY2FjM2QyMzgvN2IwN2ZmMzgtMDA1ZC0z NzdjLTk1ZDctNmNlOWRhM2RlNjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWZhZjdhMTItMDE3Ni00NGY5LTk5 MzgtN2JiY2NhYzNkMjM4LzlmYWY3YTEyLTAxNzYtNDRmOS05OTM4LTdiYmNjYWMz ZDIzOC5jcmwwHwYDVR0jBBgwFoAUJ/U0n4yx/TMHVZN2zLxFmMEutRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZmFmN2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJj Y2FjM2QyMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5goMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMPNnQVX7jyw9HsGsnN23EHXOrIkWbmpwG96LHguOpivbhdAKrO8Sij NWHScUAe5jTG7OfpetiEvmADQZMxn+S1nx5nBxS3VC3FYd2aQZmhVT06PHfISvNq sDXNvyRAs5LI4YqsvSnpezTmtIcntYRh1bDUEGhSt/i/w5Qvwrd/oe3IOjENE36p Xsq1qqorD37I5SC190UCjrvfitu+56xjMg8OxmUqznKDkV1m3wppelbr9XMZ2us2 vA48zRwFsxxdFDdeBrpimmR9XEyKhnMy9eNVu7qnKVH+tpLpLnA4Es8mXxv65sYu goxKow9KPN5LpGH26GqUpzADkY73XzE= -----END CERTIFICATE-----Generated at Sun Mar 1 23:08:00 2026 by rpki-client