$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/ee9299d0-2c15-38de-9f9a-df83ad1718a2.roa File: ee9299d0-2c15-38de-9f9a-df83ad1718a2.roa (raw, json) Hash identifier: PrBV/2QGNxT6HMQBMB1DZGxxTH3qlzaEwty642FdYco= Subject key identifier: 4D:1A:4D:1D:52:4B:CB:32:22:98:79:1D:DE:7C:E7:AD:7D:DA:77:E8 Certificate issuer: /CN=cd2e63d2-d07f-4959-8fde-569fd1767d7b Certificate serial: 010D0C9F4328584CDDCCA3B2C9CC4F8FA12C5B00 Authority key identifier: 44:1C:55:7C:61:E2:E7:B1:7E:68:1D:03:FC:47:39:9A:F5:A7:12:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/ee9299d0-2c15-38de-9f9a-df83ad1718a2.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 398493 IP address blocks: 23.142.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/cd2e63d2-d07f-4959-8fde-569fd1767d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/cd2e63d2-d07f-4959-8fde-569fd1767d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cc:a3:b2:c9:cc:4f:8f:a1:2c:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd2e63d2-d07f-4959-8fde-569fd1767d7b Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=833f88e1-fc02-4c93-9aa3-e3648ebff76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:45:ee:f9:ef:9c:00:4e:49:87:d2:a3:f5: 82:7b:af:ef:58:15:c7:9d:cf:6f:b1:fc:7b:0f:13: 38:49:33:a1:6d:5d:be:1a:5d:58:9a:bc:94:c7:31: 8d:ce:7b:5d:35:f0:d6:82:e2:ce:a1:01:a1:cd:a4: cc:e0:ca:46:69:5b:7b:39:28:7d:e6:03:6d:bc:8d: f1:84:1c:85:03:66:d9:3c:4f:53:aa:70:69:30:53: b3:ab:92:85:c7:90:2b:e1:ec:b5:45:3e:f8:b0:b7: 82:85:7a:9a:f8:18:e0:75:6e:e1:09:22:8e:69:4a: 08:11:d6:ca:69:2d:d8:55:82:57:a2:7f:5d:3b:f7: 0c:5c:3e:41:28:72:5b:8a:92:17:a7:65:5d:95:9a: c6:56:d5:53:97:1b:62:4d:ed:0d:ea:8a:ab:07:13: a7:39:c9:1b:d3:81:56:67:fb:83:84:07:3d:68:24: c0:61:ad:f8:b8:be:1b:e9:e0:18:a1:71:ad:9a:e4: 59:ed:97:0d:b9:9e:0f:a8:0a:97:48:dc:98:36:e6: 3a:ff:b7:3c:8e:1f:d2:26:db:52:42:f8:55:9d:31: 3e:b9:2e:a9:21:c4:a2:4a:21:f8:1c:13:38:12:34: 3c:55:f3:cf:08:d1:cc:c7:c5:d0:da:5a:08:94:be: 43:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1A:4D:1D:52:4B:CB:32:22:98:79:1D:DE:7C:E7:AD:7D:DA:77:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/ee9299d0-2c15-38de-9f9a-df83ad1718a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/cd2e63d2-d07f-4959-8fde-569fd1767d7b.crl X509v3 Authority Key Identifier: keyid:44:1C:55:7C:61:E2:E7:B1:7E:68:1D:03:FC:47:39:9A:F5:A7:12:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b.cer sbgp-ipAddrBlock: critical IPv4: 23.142.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:c8:93:63:07:c4:42:d0:77:8c:b8:00:55:33:a0:8a:7c:ed: c2:12:31:8b:36:3e:ba:ec:04:12:16:63:30:69:ad:aa:d2:f0: 5d:9c:39:1e:e0:20:6b:89:35:0a:6f:27:13:6f:01:b3:35:c8: c7:60:0f:31:2b:3b:f0:4e:81:e7:65:73:00:08:8f:e6:fb:f0: 0e:ee:b6:c6:1a:69:26:f2:56:d0:ed:2d:bc:59:bf:20:5d:29: 8c:2b:25:6b:31:a9:53:9e:34:e5:ec:89:b1:ef:0b:8a:b4:ed: d2:53:0d:6a:06:2e:f3:b3:70:eb:26:02:d0:39:b4:52:1e:20: 3b:41:01:b1:bb:c8:3e:90:19:80:c2:42:6e:75:d1:27:dd:dd: ae:ff:5e:ac:71:30:3c:f6:63:37:52:d1:c5:75:97:19:22:39: 9c:a2:f5:b2:60:b1:0f:00:f1:f3:d5:a6:aa:8c:e2:fe:6a:d7: e4:a8:94:22:81:ec:7d:47:00:55:72:f1:f5:5e:5f:07:5e:28: 31:22:2e:41:34:f8:35:55:4e:36:b3:7a:d3:97:81:82:ab:c2: 38:69:7a:31:37:b3:62:e2:4f:19:a8:78:69:fa:c6:c0:51:c9: 61:88:c3:b2:9a:49:cc:37:0d:33:9c:e5:d9:2b:4f:1e:39:6d: ed:f3:7e:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzKOyycxPj6EsWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QyZTYzZDItZDA3Zi00OTU5LThmZGUtNTY5ZmQxNzY3 ZDdiMB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk ODMzZjg4ZTEtZmMwMi00YzkzLTlhYTMtZTM2NDhlYmZmNzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh5F7vnvnABOSYfSo/WCe6/vWBXHnc9vsfx7 DxM4STOhbV2+Gl1YmryUxzGNzntdNfDWguLOoQGhzaTM4MpGaVt7OSh95gNtvI3x hByFA2bZPE9TqnBpMFOzq5KFx5Ar4ey1RT74sLeChXqa+BjgdW7hCSKOaUoIEdbK aS3YVYJXon9dO/cMXD5BKHJbipIXp2VdlZrGVtVTlxtiTe0N6oqrBxOnOckb04FW Z/uDhAc9aCTAYa34uL4b6eAYoXGtmuRZ7ZcNuZ4PqAqXSNyYNuY6/7c8jh/SJttS QvhVnTE+uS6pIcSiSiH4HBM4EjQ8VfPPCNHMx8XQ2loIlL5DJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0aTR1SS8syIph5Hd5856192nfoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZDJl NjNkMi1kMDdmLTQ5NTktOGZkZS01NjlmZDE3NjdkN2IvZWU5Mjk5ZDAtMmMxNS0z OGRlLTlmOWEtZGY4M2FkMTcxOGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2QyZTYzZDItZDA3Zi00OTU5LThm ZGUtNTY5ZmQxNzY3ZDdiL2NkMmU2M2QyLWQwN2YtNDk1OS04ZmRlLTU2OWZkMTc2 N2Q3Yi5jcmwwHwYDVR0jBBgwFoAURBxVfGHi57F+aB0D/Ec5mvWnEh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZDJlNjNkMi1kMDdmLTQ5NTktOGZkZS01Njlm ZDE3NjdkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF47MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMPIk2MHxELQd4y4AFUzoIp87cISMYs2PrrsBBIWYzBprarS8F2cOR7g IGuJNQpvJxNvAbM1yMdgDzErO/BOgedlcwAIj+b78A7utsYaaSbyVtDtLbxZvyBd KYwrJWsxqVOeNOXsibHvC4q07dJTDWoGLvOzcOsmAtA5tFIeIDtBAbG7yD6QGYDC Qm510Sfd3a7/XqxxMDz2YzdS0cV1lxkiOZyi9bJgsQ8A8fPVpqqM4v5q1+SolCKB 7H1HAFVy8fVeXwdeKDEiLkE0+DVVTjazetOXgYKrwjhpejE3s2LiTxmoeGn6xsBR yWGIw7KaScw3DTOc5dkrTx45be3zfkY= -----END CERTIFICATE-----Generated at Mon Mar 2 04:13:08 2026 by rpki-client