$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d893a598-2191-39e4-ab6f-df13d27172ac.roa File: d893a598-2191-39e4-ab6f-df13d27172ac.roa (raw, json) Hash identifier: y1zNupkWuFIUmJfyJbpyfkkkam77L5l/R2eDOzo2JDE= Subject key identifier: 22:DE:5A:ED:E2:60:10:45:85:0B:7D:83:92:A4:AF:66:9E:10:12:23 Certificate issuer: /CN=d2d9ab86-95d4-4f26-ade6-52bcaa29d66c Certificate serial: 010D0C9F4328584D00B270ACAFCA7983019D34E0 Authority key identifier: 21:4B:BB:2C:0C:AC:B4:3E:99:AF:88:4E:C2:F7:74:77:C5:2E:3A:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d893a598-2191-39e4-ab6f-df13d27172ac.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 399029 IP address blocks: 23.144.216.0/24 maxlen: 24 2607:dc0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:70:ac:af:ca:79:83:01:9d:34:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2d9ab86-95d4-4f26-ade6-52bcaa29d66c Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=038b961f-59ba-4ff6-9dee-a0678bf311cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:03:0e:cb:1a:b3:49:11:12:9e:3c:2e:b4:fa: b4:34:4a:1b:9c:fd:1c:c4:72:23:9d:ae:fa:44:59: f7:43:22:17:98:37:5d:c4:37:cb:32:7c:55:c1:9d: 9d:8b:40:d5:cf:0e:28:aa:3f:02:32:a8:62:e5:37: e1:46:14:ab:86:cc:cc:27:9b:4b:6e:bd:6f:11:0d: 80:81:5a:c0:ea:1f:7e:f4:20:ae:d3:4e:b3:e8:80: 2d:02:3c:25:43:e8:55:86:dc:37:80:20:73:b0:7a: ed:b9:73:22:9d:37:52:fb:82:f8:58:fd:f4:ee:aa: dc:c7:4d:6a:cc:5e:c3:b1:17:e6:da:90:89:cb:6b: a1:58:f1:bc:0d:33:1e:b9:34:dc:2a:45:62:ac:0c: bd:c9:0d:61:cf:af:af:b7:76:06:d9:6a:53:5a:81: 5a:2d:5c:97:df:c6:c4:ee:48:8b:26:17:ec:3c:76: aa:7c:9f:8a:49:d0:ff:02:e0:43:71:14:12:2c:da: 3e:bb:d2:13:37:ce:00:f2:34:55:44:5a:c6:0f:a3: f4:c6:e2:ee:05:ba:5c:ea:b3:3f:f1:47:1c:fa:9d: 0e:1e:46:fd:1f:1f:3b:b9:3c:a2:77:4d:09:8e:2c: 27:71:40:cf:a2:48:5b:62:1a:8d:f3:ea:81:a0:39: 67:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DE:5A:ED:E2:60:10:45:85:0B:7D:83:92:A4:AF:66:9E:10:12:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d893a598-2191-39e4-ab6f-df13d27172ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.crl X509v3 Authority Key Identifier: keyid:21:4B:BB:2C:0C:AC:B4:3E:99:AF:88:4E:C2:F7:74:77:C5:2E:3A:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer sbgp-ipAddrBlock: critical IPv4: 23.144.216.0/24 IPv6: 2607:dc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a4:eb:4a:67:8d:71:eb:da:34:86:a0:67:dc:27:00:a8:e7: 10:0d:92:44:04:6f:d5:5c:4c:84:76:42:cd:4f:f4:68:98:98: dd:e4:56:64:7c:85:b9:2d:7f:9f:1b:e7:91:be:d7:68:c0:5b: 74:8f:77:92:95:e8:f6:15:02:c5:bc:81:c9:08:32:12:97:f4: 27:57:a0:b8:56:61:ac:c5:89:e3:32:75:f9:74:35:62:ea:84: 41:d1:57:41:3b:2d:2a:e0:22:91:51:fd:af:b8:5f:50:e9:fc: 1b:f5:6e:a2:09:7c:d3:ac:1b:ac:eb:25:2c:52:47:54:4b:95: 42:c2:fd:fe:b2:be:29:00:2c:08:65:0d:32:07:85:43:9a:79: 18:59:87:8a:fe:88:5b:c5:bf:1c:88:d8:e5:c0:6b:54:c8:f2: 25:b4:99:40:f7:27:9d:8e:50:05:6d:77:94:d7:1b:3b:52:c0: 7c:f4:e4:90:50:fa:d3:e4:b9:a4:82:a3:85:29:2a:b6:be:83: dc:bb:a7:9d:45:15:df:6a:0b:35:8d:dd:31:28:d8:37:c8:68: a5:25:51:8c:a9:71:ff:82:7e:c3:d6:6a:78:ef:15:e2:10:45: 2b:49:00:33:8a:ee:28:4a:bf:d9:b2:b6:81:cd:42:a5:fa:ed: a9:15:d0:9e -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE0AsnCsr8p5gwGdNOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDJkOWFiODYtOTVkNC00ZjI2LWFkZTYtNTJiY2FhMjlk NjZjMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk MDM4Yjk2MWYtNTliYS00ZmY2LTlkZWUtYTA2NzhiZjMxMWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AMOyxqzSRESnjwutPq0NEobnP0cxHIjna76 RFn3QyIXmDddxDfLMnxVwZ2di0DVzw4oqj8CMqhi5TfhRhSrhszMJ5tLbr1vEQ2A gVrA6h9+9CCu006z6IAtAjwlQ+hVhtw3gCBzsHrtuXMinTdS+4L4WP307qrcx01q zF7DsRfm2pCJy2uhWPG8DTMeuTTcKkVirAy9yQ1hz6+vt3YG2WpTWoFaLVyX38bE 7kiLJhfsPHaqfJ+KSdD/AuBDcRQSLNo+u9ITN84A8jRVRFrGD6P0xuLuBbpc6rM/ 8Ucc+p0OHkb9Hx87uTyid00JjiwncUDPokhbYhqN8+qBoDlnVwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFCLeWu3iYBBFhQt9g5Kkr2aeEBIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMmQ5 YWI4Ni05NWQ0LTRmMjYtYWRlNi01MmJjYWEyOWQ2NmMvZDg5M2E1OTgtMjE5MS0z OWU0LWFiNmYtZGYxM2QyNzE3MmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDJkOWFiODYtOTVkNC00ZjI2LWFk ZTYtNTJiY2FhMjlkNjZjL2QyZDlhYjg2LTk1ZDQtNGYyNi1hZGU2LTUyYmNhYTI5 ZDY2Yy5jcmwwHwYDVR0jBBgwFoAUIUu7LAystD6Zr4hOwvd0d8UuOm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMmQ5YWI4Ni05NWQ0LTRmMjYtYWRlNi01MmJj YWEyOWQ2NmMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5DYMA0E AgACMAcDBQAmBw3AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAGOk60pnjXHr2jSGoGfcJwCo5xANkkQEb9Vc TIR2Qs1P9GiYmN3kVmR8hbktf58b55G+12jAW3SPd5KV6PYVAsW8gckIMhKX9CdX oLhWYazFieMydfl0NWLqhEHRV0E7LSrgIpFR/a+4X1Dp/Bv1bqIJfNOsG6zrJSxS R1RLlULC/f6yvikALAhlDTIHhUOaeRhZh4r+iFvFvxyI2OXAa1TI8iW0mUD3J52O UAVtd5TXGztSwHz05JBQ+tPkuaSCo4UpKra+g9y7p51FFd9qCzWN3TEo2DfIaKUl UYypcf+CfsPWanjvFeIQRStJADOK7ihKv9mytoHNQqX67akV0J4= -----END CERTIFICATE-----Generated at Mon Mar 2 12:41:06 2026 by rpki-client