$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/2973c52c-5659-3596-8301-dc3e576e7381.roa File: 2973c52c-5659-3596-8301-dc3e576e7381.roa (raw, json) Hash identifier: PnfzR2EVc0vXbwSbdXCYM8tyQIB6q2vFXM3LnNHy4jo= Subject key identifier: F4:F1:0E:F4:C3:C5:2D:A9:C1:DE:11:E9:CE:C5:A1:37:FD:93:22:64 Certificate issuer: /CN=c857cadf-4120-46e1-8a77-61ed14f8dbc9 Certificate serial: 010D0C9F4328584CC611F789DBD731296361AD00 Authority key identifier: FB:6E:81:0E:25:AB:93:AF:83:03:2C:44:28:84:70:32:89:84:AD:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/2973c52c-5659-3596-8301-dc3e576e7381.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 216435 IP address blocks: 23.157.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:11:f7:89:db:d7:31:29:63:61:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c857cadf-4120-46e1-8a77-61ed14f8dbc9 Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=9a1bb166-2264-4f7a-bfc0-64c9aff6da2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:02:85:2a:15:7c:38:1b:0f:47:27:3b:d8:10: a4:c0:0d:d1:3f:8e:35:37:49:8f:96:8a:db:3a:c2: 28:f8:90:9b:ee:53:e1:b3:eb:a5:b7:b8:78:2e:8a: 3b:ad:60:41:dc:8f:90:16:be:06:a4:6a:1a:31:89: 0e:cb:8c:c4:37:e5:f2:f0:09:67:fd:6b:d8:a2:86: d9:4c:66:1c:b6:df:74:03:c1:e6:39:4c:b5:e2:ce: 0d:bc:97:2e:95:6d:75:86:c7:32:af:17:5a:7b:aa: 52:5c:0d:57:47:14:c9:ed:1c:e5:03:05:fe:cc:6a: 0f:ce:b7:54:a5:eb:96:e7:96:37:eb:44:cf:c1:6b: 91:23:47:65:61:4a:ba:16:5f:6e:7f:b8:72:4d:5d: 56:77:3e:78:ba:da:b8:49:08:13:2a:e5:09:d6:cf: cd:51:33:b3:4e:70:2b:e7:e5:ca:bc:79:01:4c:e1: 00:ca:19:6f:87:1a:78:8b:ba:c1:d3:93:85:4d:9c: e8:56:2f:b6:40:57:02:45:06:26:60:b9:47:e5:af: b1:b7:ce:a3:9e:63:40:fb:33:2b:97:4d:66:38:23: bf:5c:81:53:49:12:46:ca:86:76:6d:3d:8b:25:b7: d0:5b:e4:60:44:97:74:3f:50:ee:9c:de:99:78:57: a8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F1:0E:F4:C3:C5:2D:A9:C1:DE:11:E9:CE:C5:A1:37:FD:93:22:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/2973c52c-5659-3596-8301-dc3e576e7381.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl X509v3 Authority Key Identifier: keyid:FB:6E:81:0E:25:AB:93:AF:83:03:2C:44:28:84:70:32:89:84:AD:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer sbgp-ipAddrBlock: critical IPv4: 23.157.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:fb:c9:70:30:93:15:c4:a3:1e:f1:53:af:1a:a3:ff:c7:0d: 22:79:32:c5:4b:0b:2f:74:2d:3c:4d:5c:f1:1f:75:99:a0:23: b3:60:cd:b3:6a:8d:70:1f:f3:10:d8:f2:5d:3e:46:c2:cb:bf: b0:54:84:ee:46:cf:c3:34:39:57:b5:c1:aa:6e:a6:e1:d6:c1: 18:72:2e:7e:64:17:62:5c:2d:22:45:bd:8a:2b:47:ee:ce:6a: 46:a7:1a:36:53:71:12:13:3e:f3:14:c6:cc:5b:fb:80:5d:98: 82:b9:a1:70:24:86:63:36:6b:41:0c:6b:f6:04:b8:6f:22:4e: ee:f7:bd:63:9e:e6:56:c0:45:58:1d:3c:02:39:06:71:6c:1c: 70:32:71:3f:5f:2b:c9:94:12:da:6c:c9:b0:52:9a:28:ed:6b: 08:3e:77:16:39:a0:6a:b7:fd:3c:23:f8:a2:bc:d6:32:a3:cd: 29:0a:8c:d2:5c:fd:2c:e5:ae:b6:5d:f0:28:93:ae:f3:dd:58: da:7e:77:52:41:bd:dc:b3:94:32:2c:01:3b:d5:84:ef:97:40: 0e:cd:0e:42:e7:a4:a6:a7:2f:43:16:71:41:1d:7c:e7:06:32: ed:af:42:0d:b0:ac:b0:e3:8e:0f:a0:41:c0:04:d6:69:60:b3: cb:ca:24:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEfeJ29cxKWNhrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1N2NhZGYtNDEyMC00NmUxLThhNzctNjFlZDE0Zjhk YmM5MB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk OWExYmIxNjYtMjI2NC00ZjdhLWJmYzAtNjRjOWFmZjZkYTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQKFKhV8OBsPRyc72BCkwA3RP441N0mPlorb OsIo+JCb7lPhs+ult7h4Loo7rWBB3I+QFr4GpGoaMYkOy4zEN+Xy8Aln/WvYoobZ TGYctt90A8HmOUy14s4NvJculW11hscyrxdae6pSXA1XRxTJ7RzlAwX+zGoPzrdU peuW55Y360TPwWuRI0dlYUq6Fl9uf7hyTV1Wdz54utq4SQgTKuUJ1s/NUTOzTnAr 5+XKvHkBTOEAyhlvhxp4i7rB05OFTZzoVi+2QFcCRQYmYLlH5a+xt86jnmNA+zMr l01mOCO/XIFTSRJGyoZ2bT2LJbfQW+RgRJd0P1DunN6ZeFeoJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTxDvTDxS2pwd4R6c7FoTf9kyJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jODU3 Y2FkZi00MTIwLTQ2ZTEtOGE3Ny02MWVkMTRmOGRiYzkvMjk3M2M1MmMtNTY1OS0z NTk2LTgzMDEtZGMzZTU3NmU3MzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzg1N2NhZGYtNDEyMC00NmUxLThh NzctNjFlZDE0ZjhkYmM5L2M4NTdjYWRmLTQxMjAtNDZlMS04YTc3LTYxZWQxNGY4 ZGJjOS5jcmwwHwYDVR0jBBgwFoAU+26BDiWrk6+DAyxEKIRwMomEra0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jODU3Y2FkZi00MTIwLTQ2ZTEtOGE3Ny02MWVk MTRmOGRiYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF525MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABr7yXAwkxXEox7xU68ao//HDSJ5MsVLCy90LTxNXPEfdZmgI7NgzbNq jXAf8xDY8l0+RsLLv7BUhO5Gz8M0OVe1wapupuHWwRhyLn5kF2JcLSJFvYorR+7O akanGjZTcRITPvMUxsxb+4BdmIK5oXAkhmM2a0EMa/YEuG8iTu73vWOe5lbARVgd PAI5BnFsHHAycT9fK8mUEtpsybBSmijtawg+dxY5oGq3/Twj+KK81jKjzSkKjNJc /SzlrrZd8CiTrvPdWNp+d1JBvdyzlDIsATvVhO+XQA7NDkLnpKanL0MWcUEdfOcG Mu2vQg2wrLDjjg+gQcAE1mlgs8vKJPw= -----END CERTIFICATE-----Generated at Mon Mar 2 07:52:30 2026 by rpki-client