$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/fca970f0-c6bb-3cc0-86c9-062c585e335e.roa File: fca970f0-c6bb-3cc0-86c9-062c585e335e.roa (raw, json) Hash identifier: w7r2sy0x9aVe7/wY9rVHf/QNtM2t/ociWMrZMTG8yO8= Subject key identifier: F4:93:7D:7A:3C:4E:E8:CD:BD:AE:D7:EC:1F:A9:A1:47:92:4D:21:8A Certificate issuer: /CN=8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e Certificate serial: 010D0C9F4328584CD9979D2E937319E335EB1E40 Authority key identifier: 0C:7F:51:3A:CA:E6:89:01:EF:B6:04:40:C6:22:EB:65:05:EC:5B:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/fca970f0-c6bb-3cc0-86c9-062c585e335e.roa Signing time: Thu 12 Feb 2026 04:16:51 +0000 ROA not before: Thu 12 Feb 2026 04:16:51 +0000 ROA not after: Wed 13 May 2026 03:16:51 +0000 asID: 402163 IP address blocks: 23.153.212.0/24 maxlen: 24 2602:f464::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d9:97:9d:2e:93:73:19:e3:35:eb:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e Validity Not Before: Feb 12 04:16:51 2026 GMT Not After : May 13 03:16:51 2026 GMT Subject: CN=8a0ca362-b21a-4e48-a457-cbe93aa7a68b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:43:54:8a:24:5b:af:2d:21:69:f4:b8:a0:0c: 04:10:e7:e4:9d:68:bc:56:ac:e1:d7:1d:e3:27:4b: 57:eb:29:94:bb:6c:fd:b8:e9:ad:88:ec:13:d4:3b: 16:20:b1:74:db:65:f5:25:fe:e3:4b:9f:48:db:94: e0:42:73:cd:c4:4e:2a:e3:40:f9:6b:82:38:32:db: 7d:9f:b7:6c:c3:3c:68:a5:ce:f6:83:e8:8d:d4:13: 89:0b:94:84:c4:d7:62:c1:d1:dc:b9:e6:df:28:d9: 8d:c6:be:09:71:d6:e6:2c:5b:a0:db:e9:99:c0:79: e2:6f:a8:ae:c7:14:c2:3d:8a:e3:34:92:ac:76:bd: 30:47:17:e3:46:83:69:a0:64:d5:f2:29:bf:ca:66: ca:bf:62:82:a6:8f:74:a8:38:ee:c5:3d:c8:95:8a: 05:91:d1:14:78:f5:8e:e1:01:09:5d:ff:a2:ad:0c: bb:45:4b:a5:c4:f9:dd:38:e4:a8:03:62:ea:cf:1f: 43:c8:2c:80:c2:60:cd:b9:e8:e9:0b:3f:fc:8c:55: bc:04:2d:70:7d:c9:19:2e:f3:6d:1d:f6:07:36:1c: 32:b4:87:fc:6d:db:35:5c:1f:f6:ef:5b:48:4a:f9: c8:97:f4:e4:94:51:f5:5a:12:9d:02:a2:6b:11:c2: 3d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:93:7D:7A:3C:4E:E8:CD:BD:AE:D7:EC:1F:A9:A1:47:92:4D:21:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/fca970f0-c6bb-3cc0-86c9-062c585e335e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.crl X509v3 Authority Key Identifier: keyid:0C:7F:51:3A:CA:E6:89:01:EF:B6:04:40:C6:22:EB:65:05:EC:5B:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.cer sbgp-ipAddrBlock: critical IPv4: 23.153.212.0/24 IPv6: 2602:f464::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:13:ac:dc:36:f0:9d:bd:55:c1:6e:7b:d9:71:17:b5:8b:6e: 30:b7:5c:2d:cd:51:9d:fa:d4:be:52:0c:84:39:01:1d:d0:fe: d5:31:bf:d9:c3:ef:62:2e:5c:65:da:e1:1e:90:24:36:71:9c: 74:69:b8:3d:3c:c0:e6:44:79:65:45:8c:1f:a8:98:63:87:0a: 43:8f:bf:83:ae:99:49:c7:2b:9a:68:c7:7a:c7:b9:b5:3a:a1: 11:31:57:65:f8:17:38:eb:22:71:17:df:b0:7e:2e:7f:d4:b8: e0:fe:03:29:cf:2d:15:ee:78:12:51:5c:b7:06:aa:11:20:7a: 0c:2c:57:70:9e:2f:6b:2a:c2:01:6d:1d:7e:c4:6b:01:24:cd: 36:a3:35:37:b2:cd:51:64:4f:1c:7d:9b:4f:78:5f:07:e6:ed: 59:9b:a2:aa:25:4b:98:81:61:ad:1a:0e:b3:5e:b8:e2:a2:c7: b3:c4:39:97:c8:a7:5e:a0:ce:f4:b5:91:ba:30:14:ff:19:60: fa:34:2a:f1:7f:2c:79:1b:01:27:3d:f6:17:c9:1a:8d:60:3d: 13:f5:d6:f9:f3:b3:89:da:fd:e2:2f:24:e0:48:63:da:d8:fe: 5d:84:8a:2d:f7:42:e8:17:ab:de:68:5f:f8:79:e0:d8:90:b9: 9f:42:5e:1a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEzZl50uk3MZ4zXrHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZmZDg2NzktZTljZi00ZmQ0LTgzYjMtZDk3YWE3MGVj YzNlMB4XDTI2MDIxMjA0MTY1MVoXDTI2MDUxMzAzMTY1MVowLzEtMCsGA1UEAxMk OGEwY2EzNjItYjIxYS00ZTQ4LWE0NTctY2JlOTNhYTdhNjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUNUiiRbry0hafS4oAwEEOfknWi8Vqzh1x3j J0tX6ymUu2z9uOmtiOwT1DsWILF022X1Jf7jS59I25TgQnPNxE4q40D5a4I4Mtt9 n7dswzxopc72g+iN1BOJC5SExNdiwdHcuebfKNmNxr4JcdbmLFug2+mZwHnib6iu xxTCPYrjNJKsdr0wRxfjRoNpoGTV8im/ymbKv2KCpo90qDjuxT3IlYoFkdEUePWO 4QEJXf+irQy7RUulxPndOOSoA2Lqzx9DyCyAwmDNuejpCz/8jFW8BC1wfckZLvNt HfYHNhwytIf8bds1XB/271tISvnIl/TklFH1WhKdAqJrEcI9ewIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPSTfXo8TujNva7X7B+poUeSTSGKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84ZmZk ODY3OS1lOWNmLTRmZDQtODNiMy1kOTdhYTcwZWNjM2UvZmNhOTcwZjAtYzZiYi0z Y2MwLTg2YzktMDYyYzU4NWUzMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGZmZDg2NzktZTljZi00ZmQ0LTgz YjMtZDk3YWE3MGVjYzNlLzhmZmQ4Njc5LWU5Y2YtNGZkNC04M2IzLWQ5N2FhNzBl Y2MzZS5jcmwwHwYDVR0jBBgwFoAUDH9ROsrmiQHvtgRAxiLrZQXsW0owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84ZmZkODY3OS1lOWNmLTRmZDQtODNiMy1kOTdh YTcwZWNjM2UuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5nUMA4E AgACMAgDBgAmAvRkADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrE6zcNvCdvVXBbnvZcRe1i24wt1wtzVGd +tS+UgyEOQEd0P7VMb/Zw+9iLlxl2uEekCQ2cZx0abg9PMDmRHllRYwfqJhjhwpD j7+DrplJxyuaaMd6x7m1OqERMVdl+Bc46yJxF9+wfi5/1Ljg/gMpzy0V7ngSUVy3 BqoRIHoMLFdwni9rKsIBbR1+xGsBJM02ozU3ss1RZE8cfZtPeF8H5u1Zm6KqJUuY gWGtGg6zXrjiosezxDmXyKdeoM70tZG6MBT/GWD6NCrxfyx5GwEnPfYXyRqNYD0T 9db587OJ2v3iLyTgSGPa2P5dhIot90LoF6veaF/4eeDYkLmfQl4a -----END CERTIFICATE-----Generated at Sun Mar 1 23:43:21 2026 by rpki-client