$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/b1573bdb-5902-3ac6-9c53-69941ae15029.roa File: b1573bdb-5902-3ac6-9c53-69941ae15029.roa (raw, json) Hash identifier: yQKvMJoSlvfLY9X13FISIOhxsNccF03yg6wbcItZBPU= Subject key identifier: DE:D4:CE:F8:38:49:68:4B:B0:1B:C4:82:69:D2:85:0A:79:AC:3B:01 Certificate issuer: /CN=ac21a503-f3b0-48ad-b925-50edbd303108 Certificate serial: 010D0C9F4328584CF6ECE1ADF1F22983352A2370 Authority key identifier: DF:3F:C9:5D:28:C8:1E:12:25:AA:6C:A1:B6:E3:F8:3A:22:3B:B0:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/b1573bdb-5902-3ac6-9c53-69941ae15029.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 32561 IP address blocks: 23.153.104.0/24 maxlen: 32 2602:faa0::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/ac21a503-f3b0-48ad-b925-50edbd303108.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/ac21a503-f3b0-48ad-b925-50edbd303108.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:e1:ad:f1:f2:29:83:35:2a:23:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac21a503-f3b0-48ad-b925-50edbd303108 Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=49582b89-f5af-4f51-b3b6-c16eb3b4bee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e2:26:20:a3:35:a1:b7:c6:a6:78:10:fc:4b: 98:b4:6b:89:95:99:db:92:6e:70:60:02:b2:cb:28: 15:3f:a5:10:b0:e0:6e:63:14:fc:fb:f0:0f:28:ae: 57:31:9a:14:3c:0c:0e:3b:fe:dc:28:b7:b6:f9:10: 2a:dc:93:03:78:38:5b:4a:7f:8c:06:b3:6e:e6:35: bf:8b:b3:d8:a0:fc:24:bb:1b:ba:30:9c:db:ab:3d: 71:ea:37:37:8e:b4:ae:ac:bd:33:33:4a:80:c9:4e: 49:9f:15:f4:c4:76:3e:4d:00:72:27:37:65:39:77: e6:08:47:d5:d7:b0:01:09:c9:6b:51:80:54:96:b5: f4:e8:5c:6a:ce:24:9a:ac:44:e3:0c:f3:6b:28:05: be:30:96:60:99:a6:0d:5b:47:8a:bf:94:10:50:1d: 59:a4:67:90:5e:02:3b:56:e0:eb:8c:4c:a7:37:66: 79:7a:15:0f:f5:fb:ea:ac:c9:7d:b4:5f:06:f2:18: de:97:44:3e:19:80:a4:51:d9:49:7d:10:b6:d8:52: 78:a4:b8:6d:eb:cb:dc:fa:2a:78:57:46:53:f2:f5: ec:ad:91:a9:9e:0f:7b:fe:0c:aa:e9:fd:ac:e3:fd: 3a:bd:9f:3d:82:6b:2c:86:6d:ab:bc:8d:3b:83:42: 25:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D4:CE:F8:38:49:68:4B:B0:1B:C4:82:69:D2:85:0A:79:AC:3B:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/b1573bdb-5902-3ac6-9c53-69941ae15029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/ac21a503-f3b0-48ad-b925-50edbd303108.crl X509v3 Authority Key Identifier: keyid:DF:3F:C9:5D:28:C8:1E:12:25:AA:6C:A1:B6:E3:F8:3A:22:3B:B0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108.cer sbgp-ipAddrBlock: critical IPv4: 23.153.104.0/24 IPv6: 2602:faa0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ef:5c:f1:6c:bf:6e:27:0e:65:5f:d9:94:e5:e0:39:e4:e9: 96:27:24:bd:bc:6c:f4:00:43:35:b4:ec:a8:b1:95:e9:f4:ab: f9:2a:41:f3:19:f8:2d:ba:0e:8e:4c:0d:22:db:3f:73:83:e2: 64:84:24:83:07:6a:69:53:64:43:2c:0f:01:dc:c1:34:f0:0f: 2a:96:59:20:67:07:a7:3d:b4:7d:c3:42:4b:43:53:cc:1e:51: e5:66:b4:dc:cb:b5:63:db:d7:ab:d8:b4:a4:f0:c9:8f:44:5b: 06:95:19:be:e3:af:98:fa:8f:db:03:3b:16:8b:ac:b6:1a:70: f4:b9:be:af:40:72:a0:0f:7b:69:6b:6a:75:2a:47:ac:a8:df: 9b:94:f4:b6:7c:36:cb:71:5e:22:04:ed:8b:a7:78:a3:ef:0a: 32:50:ed:8b:b0:9b:9c:35:1a:f6:34:79:49:90:5d:39:63:1d: 8b:09:9f:f7:fc:bd:f7:3d:55:79:26:20:a9:d2:ae:1f:f0:df: aa:41:96:06:d4:fb:64:7e:0f:c4:bb:b8:61:8e:7f:7d:45:67: e6:87:9b:7b:1e:bd:5f:c7:c0:d3:c9:f4:f7:a5:01:2b:25:7f: 7e:0f:37:c9:2a:e0:f0:9d:c4:b2:45:6b:24:81:94:18:7a:4e: 92:9b:10:ac -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEz27OGt8fIpgzUqI3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyMWE1MDMtZjNiMC00OGFkLWI5MjUtNTBlZGJkMzAz MTA4MB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk NDk1ODJiODktZjVhZi00ZjUxLWIzYjYtYzE2ZWIzYjRiZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOImIKM1obfGpngQ/EuYtGuJlZnbkm5wYAKy yygVP6UQsOBuYxT8+/APKK5XMZoUPAwOO/7cKLe2+RAq3JMDeDhbSn+MBrNu5jW/ i7PYoPwkuxu6MJzbqz1x6jc3jrSurL0zM0qAyU5JnxX0xHY+TQByJzdlOXfmCEfV 17ABCclrUYBUlrX06FxqziSarETjDPNrKAW+MJZgmaYNW0eKv5QQUB1ZpGeQXgI7 VuDrjEynN2Z5ehUP9fvqrMl9tF8G8hjel0Q+GYCkUdlJfRC22FJ4pLht68vc+ip4 V0ZT8vXsrZGpng97/gyq6f2s4/06vZ89gmsshm2rvI07g0IlQwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFN7Uzvg4SWhLsBvEgmnShQp5rDsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYzIx YTUwMy1mM2IwLTQ4YWQtYjkyNS01MGVkYmQzMDMxMDgvYjE1NzNiZGItNTkwMi0z YWM2LTljNTMtNjk5NDFhZTE1MDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWMyMWE1MDMtZjNiMC00OGFkLWI5 MjUtNTBlZGJkMzAzMTA4L2FjMjFhNTAzLWYzYjAtNDhhZC1iOTI1LTUwZWRiZDMw MzEwOC5jcmwwHwYDVR0jBBgwFoAU3z/JXSjIHhIlqmyhtuP4OiI7sN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYzIxYTUwMy1mM2IwLTQ4YWQtYjkyNS01MGVk YmQzMDMxMDguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5loMA4E AgACMAgDBgAmAvqgADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/71zxbL9uJw5lX9mU5eA55OmWJyS9vGz0 AEM1tOyosZXp9Kv5KkHzGfgtug6OTA0i2z9zg+JkhCSDB2ppU2RDLA8B3ME08A8q llkgZwenPbR9w0JLQ1PMHlHlZrTcy7Vj29er2LSk8MmPRFsGlRm+46+Y+o/bAzsW i6y2GnD0ub6vQHKgD3tpa2p1KkesqN+blPS2fDbLcV4iBO2Lp3ij7woyUO2LsJuc NRr2NHlJkF05Yx2LCZ/3/L33PVV5JiCp0q4f8N+qQZYG1Ptkfg/Eu7hhjn99RWfm h5t7Hr1fx8DTyfT3pQErJX9+DzfJKuDwncSyRWskgZQYek6SmxCs -----END CERTIFICATE-----Generated at Mon Mar 2 21:44:47 2026 by rpki-client