$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/087748f0-1dfe-3009-a1dc-390079e6b5d8.roa File: 087748f0-1dfe-3009-a1dc-390079e6b5d8.roa (raw, json) Hash identifier: Lmk8vMHr+PvOtuS4XANyzw6+QEr/+DutW/Z6pCDNar4= Subject key identifier: 84:2E:58:E0:55:B3:06:75:1F:27:BA:D5:96:38:B8:39:20:C3:04:FF Certificate issuer: /CN=25a4f200-c007-4476-b7c6-b306830b991d Certificate serial: 010D0C9F4328584CAA2705B303665FCB1435EC00 Authority key identifier: A0:D9:04:58:93:D9:D7:A8:E8:A0:7A:B2:03:B4:16:8A:D8:17:22:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/087748f0-1dfe-3009-a1dc-390079e6b5d8.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 36303 IP address blocks: 23.169.104.0/24 maxlen: 24 167.253.29.0/24 maxlen: 24 2602:fabe::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:05:b3:03:66:5f:cb:14:35:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a4f200-c007-4476-b7c6-b306830b991d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=3d63eb8f-dbc7-4473-b3a8-aa4e8736f439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:19:ea:4b:a6:8a:95:d4:a0:72:30:92:d2:03: ed:8f:45:ed:d3:38:c7:32:a9:41:d8:8c:b9:93:cb: d8:fc:7d:b5:d9:a5:1f:d2:26:78:2b:6e:29:f0:cd: 4c:0a:60:de:0c:4a:53:b8:26:12:66:33:4c:31:61: 95:5f:84:c7:22:04:3f:f0:30:b2:87:be:c9:e9:22: 8a:a9:83:02:59:3a:c5:d2:ae:2d:c5:48:0d:dc:c9: fb:4e:5e:8b:32:c7:94:b3:d3:cc:f7:83:0f:fb:86: ca:4c:51:b5:17:c2:84:2d:19:7e:58:df:3f:f7:3a: de:7a:c7:84:fc:ac:9b:52:20:29:f9:59:42:e4:b6: 1d:f4:5a:5c:23:16:70:56:00:e5:d4:6f:94:11:72: 2c:a7:52:c0:8d:57:a9:80:60:60:0c:ce:8c:1a:5d: 97:15:74:4e:4b:23:46:fc:f5:ed:90:0b:5c:f4:13: e8:0d:65:84:fa:5b:9e:c8:35:97:a7:ac:33:60:d9: 53:7b:ef:1f:65:a4:54:9b:ea:15:d4:f9:99:7e:ef: 1e:23:78:29:7e:fe:13:26:68:db:c5:c3:ba:f7:b6: 86:cc:bd:3e:9b:09:44:6d:57:b7:ed:97:a7:f0:3a: f4:cf:d0:8b:b8:89:2e:90:d2:15:41:00:92:22:84: ad:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2E:58:E0:55:B3:06:75:1F:27:BA:D5:96:38:B8:39:20:C3:04:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/087748f0-1dfe-3009-a1dc-390079e6b5d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.crl X509v3 Authority Key Identifier: keyid:A0:D9:04:58:93:D9:D7:A8:E8:A0:7A:B2:03:B4:16:8A:D8:17:22:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer sbgp-ipAddrBlock: critical IPv4: 23.169.104.0/24 167.253.29.0/24 IPv6: 2602:fabe::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:07:2d:9e:cb:70:d8:cf:e4:70:ea:76:89:5a:51:a2:68:dc: 42:c7:6b:16:ca:4a:90:ba:02:38:cd:c6:15:ee:58:27:c4:ff: f1:5b:1a:5e:e7:d8:aa:00:cb:b5:71:3e:52:eb:a3:15:3c:c0: cc:b4:21:94:17:ba:ac:4a:a5:cc:7e:bc:77:48:76:1e:b5:4c: bf:a9:a1:76:39:48:5a:34:81:d5:e0:95:e1:8a:d7:48:45:60: 0d:c4:db:0d:c6:5c:43:14:55:47:b8:8d:26:ee:da:30:a0:91: 2a:25:0f:11:fb:e6:0b:f5:f6:1f:ea:df:60:3f:a5:03:ea:20: 44:ac:2d:d6:43:cf:70:c2:d0:56:5f:1f:66:9c:fd:54:2f:e2: 12:0a:d9:b9:17:0d:3c:00:75:f7:ad:ed:70:ff:60:7d:16:0f: d1:0a:cb:40:c3:60:93:54:0d:50:e4:16:ee:35:59:9a:bc:53: f7:3c:98:aa:09:1e:3d:de:6d:5c:eb:78:7f:69:96:52:93:03: 34:10:91:19:b7:31:2b:2b:99:f0:90:f6:15:26:04:8b:c5:b6: e9:e5:87:dd:4f:21:dc:48:9f:d0:fb:0d:c1:f5:b3:0e:b1:e2: c6:64:00:df:dd:b0:24:6e:d7:c6:44:a0:a5:22:c3:98:c0:8d: 27:40:76:82 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEyqJwWzA2ZfyxQ17AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVhNGYyMDAtYzAwNy00NDc2LWI3YzYtYjMwNjgzMGI5 OTFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk M2Q2M2ViOGYtZGJjNy00NDczLWIzYTgtYWE0ZTg3MzZmNDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihnqS6aKldSgcjCS0gPtj0Xt0zjHMqlB2Iy5 k8vY/H212aUf0iZ4K24p8M1MCmDeDEpTuCYSZjNMMWGVX4THIgQ/8DCyh77J6SKK qYMCWTrF0q4txUgN3Mn7Tl6LMseUs9PM94MP+4bKTFG1F8KELRl+WN8/9zreeseE /KybUiAp+VlC5LYd9FpcIxZwVgDl1G+UEXIsp1LAjVepgGBgDM6MGl2XFXROSyNG /PXtkAtc9BPoDWWE+lueyDWXp6wzYNlTe+8fZaRUm+oV1PmZfu8eI3gpfv4TJmjb xcO697aGzL0+mwlEbVe37Zen8Dr0z9CLuIkukNIVQQCSIoStCQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFIQuWOBVswZ1Hye61ZY4uDkgwwT/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNWE0 ZjIwMC1jMDA3LTQ0NzYtYjdjNi1iMzA2ODMwYjk5MWQvMDg3NzQ4ZjAtMWRmZS0z MDA5LWExZGMtMzkwMDc5ZTZiNWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjVhNGYyMDAtYzAwNy00NDc2LWI3 YzYtYjMwNjgzMGI5OTFkLzI1YTRmMjAwLWMwMDctNDQ3Ni1iN2M2LWIzMDY4MzBi OTkxZC5jcmwwHwYDVR0jBBgwFoAUoNkEWJPZ16jooHqyA7QWitgXIuwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNWE0ZjIwMC1jMDA3LTQ0NzYtYjdjNi1iMzA2 ODMwYjk5MWQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6loAwQA p/0dMA4EAgACMAgDBgAmAvq+ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0By2ey3DYz+Rw6naJWlGiaNxC x2sWykqQugI4zcYV7lgnxP/xWxpe59iqAMu1cT5S66MVPMDMtCGUF7qsSqXMfrx3 SHYetUy/qaF2OUhaNIHV4JXhitdIRWANxNsNxlxDFFVHuI0m7towoJEqJQ8R++YL 9fYf6t9gP6UD6iBErC3WQ89wwtBWXx9mnP1UL+ISCtm5Fw08AHX3re1w/2B9Fg/R CstAw2CTVA1Q5BbuNVmavFP3PJiqCR493m1c63h/aZZSkwM0EJEZtzErK5nwkPYV JgSLxbbp5YfdTyHcSJ/Q+w3B9bMOseLGZADf3bAkbtfGRKClIsOYwI0nQHaC -----END CERTIFICATE-----Generated at Mon Mar 2 07:47:10 2026 by rpki-client