$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431/f9acfb91-84a4-3f30-be71-5feb1d187251.roa File: f9acfb91-84a4-3f30-be71-5feb1d187251.roa (raw, json) Hash identifier: XDjOzBO+IRuT0viWOQtPTc+rwoTkWMi73f94+U9SNsY= Subject key identifier: EE:32:6D:14:76:8F:DD:CF:CD:ED:90:9D:27:C6:70:76:CA:31:D7:03 Certificate issuer: /CN=cda2dd6b-7ad6-4c49-80a2-5ab58364f431 Certificate serial: 010D0C9F4328584CD3E2342D015885825CC88260 Authority key identifier: 48:4C:07:42:A3:06:64:E2:4A:CA:BF:C1:42:46:3A:CF:54:53:C6:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431/f9acfb91-84a4-3f30-be71-5feb1d187251.roa Signing time: Wed 11 Feb 2026 12:45:58 +0000 ROA not before: Wed 11 Feb 2026 12:45:58 +0000 ROA not after: Tue 12 May 2026 11:45:58 +0000 asID: 402187 IP address blocks: 23.153.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431/cda2dd6b-7ad6-4c49-80a2-5ab58364f431.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431/cda2dd6b-7ad6-4c49-80a2-5ab58364f431.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d3:e2:34:2d:01:58:85:82:5c:c8:82:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cda2dd6b-7ad6-4c49-80a2-5ab58364f431 Validity Not Before: Feb 11 12:45:58 2026 GMT Not After : May 12 11:45:58 2026 GMT Subject: CN=0512d6ac-a52c-49d7-87cb-186732a3608e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a5:03:21:2b:7f:5d:cb:1c:0c:48:ff:95:1c: 41:3a:76:0d:96:3b:2d:22:a5:d1:67:ec:ea:a7:2b: 28:d6:c7:22:05:b1:46:7d:46:49:fc:77:bd:d2:1b: 01:3d:40:db:d4:23:20:f5:8a:01:c3:92:4e:99:de: e3:a8:ef:a4:ec:16:77:e6:e4:8c:7a:01:e1:df:8c: 39:69:d1:54:e3:0d:a2:59:84:bf:ef:2b:e2:8d:3d: 75:26:aa:a8:6f:e3:9c:d1:82:a2:b2:a8:4d:e7:10: 51:8a:14:e7:da:bd:70:5f:40:df:43:81:03:8c:29: 74:39:c2:d1:50:b6:fc:6a:ca:34:ff:c8:85:ab:9b: 86:a0:d3:fa:12:d0:cc:28:1d:22:17:d5:15:a9:fb: 2c:3a:46:3b:a0:9b:d9:89:a7:b0:3e:ec:d4:ff:37: bf:a0:33:a7:08:c8:6f:3f:e0:34:2c:0c:8e:3c:c7: 34:fa:8c:24:12:37:0b:8a:57:e1:73:9a:7d:8d:cd: 43:5e:80:92:c2:72:2a:10:d0:b4:7c:c0:36:7b:a1: a0:b6:95:59:5a:ff:cc:c9:b0:7b:c7:b4:d3:4b:57: df:d3:c7:bd:61:62:86:d0:17:83:6d:bf:37:ac:33: 9d:ee:e3:1e:9e:ea:16:ea:41:a9:a6:db:16:c3:7a: ad:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:32:6D:14:76:8F:DD:CF:CD:ED:90:9D:27:C6:70:76:CA:31:D7:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431/f9acfb91-84a4-3f30-be71-5feb1d187251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431/cda2dd6b-7ad6-4c49-80a2-5ab58364f431.crl X509v3 Authority Key Identifier: keyid:48:4C:07:42:A3:06:64:E2:4A:CA:BF:C1:42:46:3A:CF:54:53:C6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431.cer sbgp-ipAddrBlock: critical IPv4: 23.153.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:41:a7:86:b6:34:71:10:21:68:e3:2b:a2:29:6e:71:73:83: 6a:6e:58:16:4b:ce:ca:8f:2e:f0:22:d2:89:ec:2e:b0:95:c7: 60:84:14:29:8c:c3:bf:20:be:01:d6:1a:e8:fa:88:16:dc:52: c9:24:9d:f6:27:24:b0:f3:e3:dc:09:6f:03:ef:56:f2:c3:95: 7c:5b:62:f8:eb:01:ce:ba:92:dd:b7:4c:87:2b:52:21:e2:48: 80:ab:08:8f:29:ce:81:fe:e3:92:68:9d:38:cf:97:7a:e4:3d: 14:cb:cf:c7:45:fd:97:3f:e1:49:15:c2:40:b0:a3:b7:54:96: b3:69:1b:0b:7a:a7:c0:31:a1:b8:ce:73:6d:d6:7b:63:9e:ef: 25:17:73:f2:43:08:54:22:7f:f9:7a:db:d6:6a:ba:bd:36:d0: c2:00:bf:12:4f:d8:41:6d:c3:33:b4:ad:39:7c:39:9a:06:53: 55:a6:e8:b0:ba:ca:17:b5:6a:14:6b:55:f5:3c:81:6a:a3:7d: 0c:f8:e2:48:53:50:9d:67:e2:82:ac:ca:d2:e2:fe:e6:be:f0: dc:84:90:fe:34:d6:39:b4:7f:76:ab:2c:5b:44:fa:94:85:69: 97:15:87:f2:d5:69:c0:2a:4b:12:17:eb:29:f7:0f:7d:43:3e: 18:3c:53:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzT4jQtAViFglzIgmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RhMmRkNmItN2FkNi00YzQ5LTgwYTItNWFiNTgzNjRm NDMxMB4XDTI2MDIxMTEyNDU1OFoXDTI2MDUxMjExNDU1OFowLzEtMCsGA1UEAxMk MDUxMmQ2YWMtYTUyYy00OWQ3LTg3Y2ItMTg2NzMyYTM2MDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKUDISt/XcscDEj/lRxBOnYNljstIqXRZ+zq pyso1sciBbFGfUZJ/He90hsBPUDb1CMg9YoBw5JOmd7jqO+k7BZ35uSMegHh34w5 adFU4w2iWYS/7yvijT11Jqqob+Oc0YKisqhN5xBRihTn2r1wX0DfQ4EDjCl0OcLR ULb8aso0/8iFq5uGoNP6EtDMKB0iF9UVqfssOkY7oJvZiaewPuzU/ze/oDOnCMhv P+A0LAyOPMc0+owkEjcLilfhc5p9jc1DXoCSwnIqENC0fMA2e6GgtpVZWv/MybB7 x7TTS1ff08e9YWKG0BeDbb83rDOd7uMenuoW6kGpptsWw3qtGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4ybRR2j93Pze2QnSfGcHbKMdcDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jZGEy ZGQ2Yi03YWQ2LTRjNDktODBhMi01YWI1ODM2NGY0MzEvZjlhY2ZiOTEtODRhNC0z ZjMwLWJlNzEtNWZlYjFkMTg3MjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvY2RhMmRkNmItN2FkNi00YzQ5LTgw YTItNWFiNTgzNjRmNDMxL2NkYTJkZDZiLTdhZDYtNGM0OS04MGEyLTVhYjU4MzY0 ZjQzMS5jcmwwHwYDVR0jBBgwFoAUSEwHQqMGZOJKyr/BQkY6z1RTxmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jZGEyZGQ2Yi03YWQ2LTRjNDktODBhMi01YWI1 ODM2NGY0MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5l8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxBp4a2NHEQIWjjK6IpbnFzg2puWBZLzsqPLvAi0onsLrCVx2CEFCmM w78gvgHWGuj6iBbcUskknfYnJLDz49wJbwPvVvLDlXxbYvjrAc66kt23TIcrUiHi SICrCI8pzoH+45JonTjPl3rkPRTLz8dF/Zc/4UkVwkCwo7dUlrNpGwt6p8AxobjO c23We2Oe7yUXc/JDCFQif/l629Zqur020MIAvxJP2EFtwzO0rTl8OZoGU1Wm6LC6 yhe1ahRrVfU8gWqjfQz44khTUJ1n4oKsytLi/ua+8NyEkP401jm0f3arLFtE+pSF aZcVh/LVacAqSxIX6yn3D31DPhg8U3o= -----END CERTIFICATE-----Generated at Mon Mar 2 00:49:38 2026 by rpki-client