$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/5130bef9-5e24-3975-9914-0892f8dec7d1.roa File: 5130bef9-5e24-3975-9914-0892f8dec7d1.roa (raw, json) Hash identifier: qFlFWJgIsWLsEvjGxtJD8g4m91bNPicFH+UqZrpDlkg= Subject key identifier: CE:6A:A9:9D:09:4A:11:14:71:1C:BE:35:C3:6E:4F:43:2F:94:BE:E8 Certificate issuer: /CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Certificate serial: 010D0C9F4328584CDC678E2977477355B25C96C0 Authority key identifier: 85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/5130bef9-5e24-3975-9914-0892f8dec7d1.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 401560 IP address blocks: 23.131.252.0/24 maxlen: 24 2602:f744::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:8e:29:77:47:73:55:b2:5c:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=599fd267-1bfd-417f-b9f1-c0da36fdd733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:44:e7:63:64:a8:02:3a:ac:a2:2c:71:bc:e2: c2:b4:94:27:1a:3c:4e:6f:0a:c7:a4:5e:ca:34:2f: 0f:be:cf:98:35:c6:ed:77:d2:c5:28:77:3d:86:63: 14:8f:11:6e:82:e3:bf:b0:2a:fc:22:2a:91:23:04: 86:c2:db:a9:3a:15:fb:74:f7:30:06:7b:c6:44:d9: d6:e9:43:9c:67:f2:f5:d4:73:0a:21:26:80:02:15: 57:23:26:ae:7b:aa:ac:65:0f:26:b7:07:f5:a9:b3: 32:75:49:b8:b5:c8:ef:36:ee:dd:cd:15:c6:7d:61: 05:63:7c:e2:94:e4:16:0b:1d:5e:4f:0e:91:a0:51: 56:b5:f0:0d:09:d8:92:34:59:20:fb:35:35:2a:9d: ef:fc:58:13:79:0c:53:0d:fc:95:89:9c:ea:d8:6d: 7c:77:cb:24:45:f7:db:a9:ea:f3:e9:f2:91:3f:05: 78:bc:f9:bd:64:c7:f3:60:22:f4:bf:e2:3b:2a:05: 49:8e:14:50:2a:a1:69:c4:a8:5d:c1:e5:08:d7:ab: af:2a:d7:0c:f4:b5:d7:16:0c:44:2c:4c:4a:2c:d5: 36:af:95:12:25:00:de:64:b4:3a:74:60:88:a5:f0: 78:f1:3d:79:16:a0:a4:c7:3a:c7:0a:a9:b4:53:ce: 55:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6A:A9:9D:09:4A:11:14:71:1C:BE:35:C3:6E:4F:43:2F:94:BE:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/5130bef9-5e24-3975-9914-0892f8dec7d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl X509v3 Authority Key Identifier: keyid:85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer sbgp-ipAddrBlock: critical IPv4: 23.131.252.0/24 IPv6: 2602:f744::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:bd:f9:85:a8:59:9e:0c:73:10:67:58:93:b1:7e:ac:ae:7d: 04:ff:b9:c2:49:2c:cd:6e:b2:6a:7b:cc:7e:a4:19:a9:6a:4c: f4:0f:a0:02:dd:71:44:bd:85:28:c9:bd:a3:ef:c7:3d:85:46: d7:af:7b:25:3f:b7:61:c3:71:4c:9d:e0:80:08:f0:3e:0a:51: f0:dc:d2:fb:46:fc:00:8a:5a:b7:dd:82:18:ed:e2:45:79:75: 58:05:df:15:62:bd:c7:b5:4c:72:d4:54:e6:ec:55:60:be:15: 74:87:0c:41:90:65:bd:a3:8a:04:24:52:f2:29:29:7d:4c:fe: 5d:eb:d7:b9:df:05:d4:0c:2f:72:22:56:16:a3:e3:ad:a1:67: ee:ee:aa:15:df:0e:cd:c1:80:d5:26:bd:7f:1a:94:16:aa:59: 75:48:d0:2b:0e:88:0f:a3:f1:bb:35:73:03:5a:65:41:5a:44: 75:28:79:af:16:e9:14:34:f9:6c:55:b3:f0:9d:ed:56:9a:04: 89:33:2c:51:69:b1:7c:64:b2:22:0e:02:a4:66:26:bd:59:5c: 37:e4:10:ab:fe:bf:2d:4e:04:49:fc:92:6d:ee:c5:32:b0:27: 4c:19:4c:f0:9e:9e:aa:b9:26:b0:87:81:5f:51:d0:cf:5b:34: 12:3a:28:32 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEzcZ44pd0dzVbJclsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0YTQ0MWYtNWQwYi00ODEzLTgzNmUtMmFlZmQ1NGIw Y2ExMB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk NTk5ZmQyNjctMWJmZC00MTdmLWI5ZjEtYzBkYTM2ZmRkNzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUTnY2SoAjqsoixxvOLCtJQnGjxObwrHpF7K NC8Pvs+YNcbtd9LFKHc9hmMUjxFuguO/sCr8IiqRIwSGwtupOhX7dPcwBnvGRNnW 6UOcZ/L11HMKISaAAhVXIyaue6qsZQ8mtwf1qbMydUm4tcjvNu7dzRXGfWEFY3zi lOQWCx1eTw6RoFFWtfANCdiSNFkg+zU1Kp3v/FgTeQxTDfyViZzq2G18d8skRffb qerz6fKRPwV4vPm9ZMfzYCL0v+I7KgVJjhRQKqFpxKhdweUI16uvKtcM9LXXFgxE LExKLNU2r5USJQDeZLQ6dGCIpfB48T15FqCkxzrHCqm0U85VZwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFM5qqZ0JShEUcRy+NcNuT0MvlL7oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYjRh NDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVmZDU0YjBjYTEvNTEzMGJlZjktNWUyNC0z OTc1LTk5MTQtMDg5MmY4ZGVjN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2I0YTQ0MWYtNWQwYi00ODEzLTgz NmUtMmFlZmQ1NGIwY2ExLzNiNGE0NDFmLTVkMGItNDgxMy04MzZlLTJhZWZkNTRi MGNhMS5jcmwwHwYDVR0jBBgwFoAUhTTrezt86zcuUquQjp/L/T4KFp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYjRhNDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVm ZDU0YjBjYTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4P8MA4E AgACMAgDBgAmAvdEADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKvfmFqFmeDHMQZ1iTsX6srn0E/7nCSSzN brJqe8x+pBmpakz0D6AC3XFEvYUoyb2j78c9hUbXr3slP7dhw3FMneCACPA+ClHw 3NL7RvwAilq33YIY7eJFeXVYBd8VYr3HtUxy1FTm7FVgvhV0hwxBkGW9o4oEJFLy KSl9TP5d69e53wXUDC9yIlYWo+OtoWfu7qoV3w7NwYDVJr1/GpQWqll1SNArDogP o/G7NXMDWmVBWkR1KHmvFukUNPlsVbPwne1WmgSJMyxRabF8ZLIiDgKkZia9WVw3 5BCr/r8tTgRJ/JJt7sUysCdMGUzwnp6quSawh4FfUdDPWzQSOigy -----END CERTIFICATE-----Generated at Mon Mar 2 06:18:09 2026 by rpki-client