$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b687924c-51a5-413f-9750-830cbccb097d/c05b0787-ea39-389f-a689-ac7fea5a3f16.roa File: c05b0787-ea39-389f-a689-ac7fea5a3f16.roa (raw, json) Hash identifier: 0PZkB2uCSMA8d+gcjYDvh5ACiQm9aL3oWcCk0mk+Phw= Subject key identifier: F5:67:8D:BE:EB:B2:B3:19:45:01:E8:41:0A:F8:87:1D:8D:11:29:B2 Certificate issuer: /CN=b687924c-51a5-413f-9750-830cbccb097d Certificate serial: 010D0C9F4328584CA5F745CE8D8E1ED9A532EA80 Authority key identifier: 49:CD:A1:B9:BC:7E:B6:C9:A1:8A:2B:29:62:CE:82:6C:22:2A:F6:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b687924c-51a5-413f-9750-830cbccb097d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b687924c-51a5-413f-9750-830cbccb097d/c05b0787-ea39-389f-a689-ac7fea5a3f16.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 401928 IP address blocks: 23.144.36.0/24 maxlen: 24 2602:f593::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b687924c-51a5-413f-9750-830cbccb097d/b687924c-51a5-413f-9750-830cbccb097d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b687924c-51a5-413f-9750-830cbccb097d/b687924c-51a5-413f-9750-830cbccb097d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b687924c-51a5-413f-9750-830cbccb097d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:45:ce:8d:8e:1e:d9:a5:32:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b687924c-51a5-413f-9750-830cbccb097d Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=2594361b-c4a8-4108-a585-4654754cd5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:95:37:a7:49:89:c5:c4:3e:62:99:54:0c:52: da:0e:3b:e4:dd:80:0e:28:af:c3:c0:6b:66:6f:60: e3:64:23:5d:f5:76:71:8c:ab:82:0b:41:f7:6c:3b: 67:e8:98:a4:64:63:69:4f:55:1d:a4:02:b1:ef:03: 4b:79:b9:9c:59:7a:17:65:f7:61:62:a4:86:7e:fa: 32:bb:7c:3e:cb:85:58:23:76:af:04:48:9c:fe:1c: 27:a7:4b:07:aa:fc:d2:bd:18:ee:99:45:6e:82:ed: 48:4d:e9:57:fb:25:d5:b4:61:69:43:09:d7:79:7a: 02:aa:3f:71:51:d8:6b:c2:fd:40:40:34:dd:33:76: 0e:68:a2:30:3a:07:75:21:68:f8:fe:26:a1:61:3d: 13:9e:cd:70:7f:5d:67:1c:b7:95:68:9b:24:7f:26: 65:be:52:82:34:79:7f:a9:2e:33:cf:40:4c:91:14: 1f:85:d9:50:d0:53:fa:e0:10:10:ca:81:d5:62:b6: 00:a7:60:1d:a1:57:9f:cc:f2:fa:5e:1a:54:4e:56: f1:0e:c8:60:14:31:31:44:71:30:82:da:28:cb:26: 71:a9:ab:dd:7a:86:44:0b:de:a0:00:34:25:d5:69: 90:0f:5b:71:11:08:07:cd:19:c3:c0:5a:39:83:0d: c4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:67:8D:BE:EB:B2:B3:19:45:01:E8:41:0A:F8:87:1D:8D:11:29:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b687924c-51a5-413f-9750-830cbccb097d/c05b0787-ea39-389f-a689-ac7fea5a3f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b687924c-51a5-413f-9750-830cbccb097d/b687924c-51a5-413f-9750-830cbccb097d.crl X509v3 Authority Key Identifier: keyid:49:CD:A1:B9:BC:7E:B6:C9:A1:8A:2B:29:62:CE:82:6C:22:2A:F6:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b687924c-51a5-413f-9750-830cbccb097d.cer sbgp-ipAddrBlock: critical IPv4: 23.144.36.0/24 IPv6: 2602:f593::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:4d:2e:0f:d5:7c:58:1c:e4:94:3f:cd:c1:82:65:20:89:22: 2b:21:7c:3a:12:71:d7:39:70:45:57:01:60:56:f8:0c:18:30: 77:a5:cd:7d:df:aa:ec:1c:36:61:dc:8f:ab:2b:e5:13:da:02: cc:14:f0:2a:c0:38:7e:29:e9:f0:63:b1:c3:05:ff:d0:e8:bb: a2:72:c8:2d:98:0b:0c:0b:45:34:fa:31:ea:69:dc:68:14:43: fb:34:a8:55:d0:cc:3e:0c:5e:75:0c:d9:d5:88:30:49:38:b3: e2:47:0a:d4:51:cd:da:d7:f5:f0:d5:16:c0:9a:c1:5e:f0:c2: e3:25:1d:45:29:de:d9:bf:f5:82:5e:a6:51:44:c6:59:74:e9: e2:29:7c:b9:f2:f6:05:1a:c3:03:c3:b6:a1:54:2f:b3:37:94: 79:c3:fc:c1:bc:67:b7:db:a5:19:30:e7:ca:c9:86:3f:18:ed: 53:43:a1:97:80:65:91:08:91:d2:9d:a2:51:c2:d2:c4:94:c0: 67:69:f9:f8:17:4d:60:c6:42:39:86:83:a5:f7:98:8a:6a:a6: 0b:d5:2b:ff:b0:6c:b9:a4:64:89:e3:44:1f:8c:67:95:0e:8d: 7b:60:a2:3a:0b:da:b0:f9:f1:06:5b:13:0d:e3:1d:f5:fb:87: 8c:87:67:6a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEyl90XOjY4e2aUy6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjY4NzkyNGMtNTFhNS00MTNmLTk3NTAtODMwY2JjY2Iw OTdkMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk MjU5NDM2MWItYzRhOC00MTA4LWE1ODUtNDY1NDc1NGNkNWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5U3p0mJxcQ+YplUDFLaDjvk3YAOKK/DwGtm b2DjZCNd9XZxjKuCC0H3bDtn6JikZGNpT1UdpAKx7wNLebmcWXoXZfdhYqSGfvoy u3w+y4VYI3avBEic/hwnp0sHqvzSvRjumUVugu1ITelX+yXVtGFpQwnXeXoCqj9x Udhrwv1AQDTdM3YOaKIwOgd1IWj4/iahYT0Tns1wf11nHLeVaJskfyZlvlKCNHl/ qS4zz0BMkRQfhdlQ0FP64BAQyoHVYrYAp2AdoVefzPL6XhpUTlbxDshgFDExRHEw gtooyyZxqavdeoZEC96gADQl1WmQD1txEQgHzRnDwFo5gw3EdwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPVnjb7rsrMZRQHoQQr4hx2NESmyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iNjg3 OTI0Yy01MWE1LTQxM2YtOTc1MC04MzBjYmNjYjA5N2QvYzA1YjA3ODctZWEzOS0z ODlmLWE2ODktYWM3ZmVhNWEzZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjY4NzkyNGMtNTFhNS00MTNmLTk3 NTAtODMwY2JjY2IwOTdkL2I2ODc5MjRjLTUxYTUtNDEzZi05NzUwLTgzMGNiY2Ni MDk3ZC5jcmwwHwYDVR0jBBgwFoAUSc2hubx+tsmhiispYs6CbCIq9tQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iNjg3OTI0Yy01MWE1LTQxM2YtOTc1MC04MzBj YmNjYjA5N2QuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5AkMA4E AgACMAgDBgAmAvWTADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLTS4P1XxYHOSUP83BgmUgiSIrIXw6EnHX OXBFVwFgVvgMGDB3pc1936rsHDZh3I+rK+UT2gLMFPAqwDh+KenwY7HDBf/Q6Lui csgtmAsMC0U0+jHqadxoFEP7NKhV0Mw+DF51DNnViDBJOLPiRwrUUc3a1/Xw1RbA msFe8MLjJR1FKd7Zv/WCXqZRRMZZdOniKXy58vYFGsMDw7ahVC+zN5R5w/zBvGe3 26UZMOfKyYY/GO1TQ6GXgGWRCJHSnaJRwtLElMBnafn4F01gxkI5hoOl95iKaqYL 1Sv/sGy5pGSJ40QfjGeVDo17YKI6C9qw+fEGWxMN4x31+4eMh2dq -----END CERTIFICATE-----Generated at Mon Mar 2 02:37:49 2026 by rpki-client