$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7/55d51c77-3557-3d87-8992-8f280225cb6d.roa File: 55d51c77-3557-3d87-8992-8f280225cb6d.roa (raw, json) Hash identifier: ExUIZeCJ7q3UbreHfx7svbGixMN4WilrwdfjeCJ+Csw= Subject key identifier: 01:52:4C:21:E1:4D:A5:F5:4A:0B:0F:F0:A0:78:2E:50:DD:B7:66:BF Certificate issuer: /CN=a1de494f-30de-436a-a9c5-418424044ca7 Certificate serial: 010D0C9F4328584CA5F74C25941884C24C07CA00 Authority key identifier: C0:EA:21:8A:30:0E:DC:42:EB:E2:E0:75:F9:50:68:AD:02:2D:C2:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7/55d51c77-3557-3d87-8992-8f280225cb6d.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 7029 IP address blocks: 23.143.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7/a1de494f-30de-436a-a9c5-418424044ca7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7/a1de494f-30de-436a-a9c5-418424044ca7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:4c:25:94:18:84:c2:4c:07:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1de494f-30de-436a-a9c5-418424044ca7 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=205ca1bf-a0f3-45a2-b9db-8e59c8d682ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:aa:33:db:d2:86:50:55:85:b8:d1:a9:cc: af:fe:61:65:74:e0:47:d5:2e:21:f5:e0:f9:6b:e5: 1c:aa:ca:5d:00:6c:29:51:c0:61:38:70:c0:d4:cc: 08:17:56:a6:df:00:ab:47:d3:0a:4a:44:78:cf:12: 59:ec:b1:ea:64:6e:ca:b0:65:1a:11:57:76:b4:eb: 88:b7:36:a6:1a:ff:05:91:28:6d:a5:23:f6:4b:e7: 28:4f:62:2d:66:91:14:aa:f6:1b:ed:db:39:ba:1c: 15:b0:61:d6:07:c8:43:3e:d2:4d:54:74:17:71:6d: 49:4f:18:82:a4:fe:69:20:98:70:92:f6:09:19:f5: 41:92:bc:e4:b6:ae:9d:c5:62:bf:1c:8b:41:35:e7: 51:02:4d:51:f0:78:9d:3e:62:9e:97:d1:df:f1:15: 27:d0:24:37:4a:3f:2d:82:b8:56:02:4c:a8:5e:01: 42:45:5b:2f:00:83:e6:89:13:60:35:6a:a9:f1:5f: cd:29:47:3d:c0:4a:20:65:e4:45:87:74:41:35:2c: 80:91:7a:fd:1c:29:42:da:da:b1:4b:79:de:02:fe: 79:10:97:be:b5:69:e3:55:ae:b4:1d:91:d7:35:8e: 18:a4:6b:09:06:79:cf:1f:b7:75:83:cb:70:bd:df: 3c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:52:4C:21:E1:4D:A5:F5:4A:0B:0F:F0:A0:78:2E:50:DD:B7:66:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7/55d51c77-3557-3d87-8992-8f280225cb6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7/a1de494f-30de-436a-a9c5-418424044ca7.crl X509v3 Authority Key Identifier: keyid:C0:EA:21:8A:30:0E:DC:42:EB:E2:E0:75:F9:50:68:AD:02:2D:C2:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7.cer sbgp-ipAddrBlock: critical IPv4: 23.143.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:31:97:01:04:35:dd:2b:9f:50:6a:1d:34:76:ff:c5:c3:da: db:f5:f2:c9:7e:c3:ed:b9:b9:3b:c9:b2:6d:d0:d2:a7:3f:ad: b9:cf:fd:be:22:fc:2c:e0:2f:dd:5e:56:c7:67:99:c1:47:90: fb:4b:ac:2a:32:08:68:03:1f:24:3c:ae:76:cb:84:c7:39:95: 0b:b5:f7:4a:8e:87:1a:f7:91:e9:2c:b6:62:fb:e3:f5:21:bf: 4e:ba:a0:6e:ef:95:46:b7:84:06:e6:39:10:ab:fc:6c:c5:4a: ba:b3:3c:ca:8d:26:2a:91:a7:85:e8:83:e7:19:55:57:3f:d2: 5d:57:5d:99:6d:c5:00:17:6d:ad:28:be:7d:2f:4b:c6:75:05: e1:d3:45:c4:2d:30:9c:96:c3:3e:71:4b:b1:65:e1:01:84:f6: 80:66:dc:e8:16:48:17:85:a2:4a:d8:23:1a:30:e0:a0:e6:07: a3:62:90:d8:66:90:67:a0:8f:ff:ff:02:aa:63:81:6d:94:c8: db:ed:67:04:d0:21:95:7e:c5:93:14:38:5e:9c:d7:80:b6:ba: e0:85:42:b6:93:55:9b:76:46:d8:98:3f:a4:f8:c8:ca:53:16: 46:59:54:6c:a5:02:3a:e4:11:d2:de:26:fe:23:46:20:b9:6b: f2:e7:e6:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl90wllBiEwkwHygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkZTQ5NGYtMzBkZS00MzZhLWE5YzUtNDE4NDI0MDQ0 Y2E3MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk MjA1Y2ExYmYtYTBmMy00NWEyLWI5ZGItOGU1OWM4ZDY4MmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3qqM9vShlBVhbjRqcyv/mFldOBH1S4h9eD5 a+UcqspdAGwpUcBhOHDA1MwIF1am3wCrR9MKSkR4zxJZ7LHqZG7KsGUaEVd2tOuI tzamGv8FkShtpSP2S+coT2ItZpEUqvYb7ds5uhwVsGHWB8hDPtJNVHQXcW1JTxiC pP5pIJhwkvYJGfVBkrzktq6dxWK/HItBNedRAk1R8HidPmKel9Hf8RUn0CQ3Sj8t grhWAkyoXgFCRVsvAIPmiRNgNWqp8V/NKUc9wEogZeRFh3RBNSyAkXr9HClC2tqx S3neAv55EJe+tWnjVa60HZHXNY4YpGsJBnnPH7d1g8twvd886wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFSTCHhTaX1SgsP8KB4LlDdt2a/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hMWRl NDk0Zi0zMGRlLTQzNmEtYTljNS00MTg0MjQwNDRjYTcvNTVkNTFjNzctMzU1Ny0z ZDg3LTg5OTItOGYyODAyMjVjYjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTFkZTQ5NGYtMzBkZS00MzZhLWE5 YzUtNDE4NDI0MDQ0Y2E3L2ExZGU0OTRmLTMwZGUtNDM2YS1hOWM1LTQxODQyNDA0 NGNhNy5jcmwwHwYDVR0jBBgwFoAUwOohijAO3ELr4uB1+VBorQItwjIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hMWRlNDk0Zi0zMGRlLTQzNmEtYTljNS00MTg0 MjQwNDRjYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0xlwEENd0rn1BqHTR2/8XD2tv18sl+w+25uTvJsm3Q0qc/rbnP/b4i /CzgL91eVsdnmcFHkPtLrCoyCGgDHyQ8rnbLhMc5lQu190qOhxr3kekstmL74/Uh v066oG7vlUa3hAbmORCr/GzFSrqzPMqNJiqRp4Xog+cZVVc/0l1XXZltxQAXba0o vn0vS8Z1BeHTRcQtMJyWwz5xS7Fl4QGE9oBm3OgWSBeFokrYIxow4KDmB6NikNhm kGegj///AqpjgW2UyNvtZwTQIZV+xZMUOF6c14C2uuCFQraTVZt2RtiYP6T4yMpT FkZZVGylAjrkEdLeJv4jRiC5a/Ln5g0= -----END CERTIFICATE-----Generated at Mon Mar 2 19:09:14 2026 by rpki-client