$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24/ab896d97-33c9-3a23-be0e-51523a030893.roa File: ab896d97-33c9-3a23-be0e-51523a030893.roa (raw, json) Hash identifier: INIiNQEEm7E8afl0rLn9UKaZZXD4rpYL+oT+DOWLM7o= Subject key identifier: 36:61:1A:AE:07:C7:A8:72:5C:3E:C7:7A:FA:DE:FC:0A:44:1D:73:1B Certificate issuer: /CN=d6aca04b-8aac-451b-b19d-c3675177ed24 Certificate serial: 010D0C9F4328584CEBC23D022AEF110BBDC5F780 Authority key identifier: F4:ED:4E:95:83:27:9C:61:70:F4:06:E4:26:5E:D9:9B:B6:F8:E2:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24/ab896d97-33c9-3a23-be0e-51523a030893.roa Signing time: Fri 20 Feb 2026 02:00:32 +0000 ROA not before: Fri 20 Feb 2026 02:00:32 +0000 ROA not after: Thu 21 May 2026 01:00:32 +0000 asID: 6079 IP address blocks: 23.145.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24/d6aca04b-8aac-451b-b19d-c3675177ed24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24/d6aca04b-8aac-451b-b19d-c3675177ed24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:eb:c2:3d:02:2a:ef:11:0b:bd:c5:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aca04b-8aac-451b-b19d-c3675177ed24 Validity Not Before: Feb 20 02:00:32 2026 GMT Not After : May 21 01:00:32 2026 GMT Subject: CN=5f1fef26-1e6d-4754-9df0-88462e6338df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5b:0a:be:a2:70:b9:f1:f7:dd:80:d9:ae:5c: d9:53:54:ba:3f:ef:7c:bd:eb:fb:b2:01:57:0f:3e: 9b:49:71:f1:d8:4f:0b:a7:78:cf:06:4c:c0:92:d7: e6:d4:eb:14:5f:5f:56:b8:9c:c3:aa:ee:f2:c9:a2: ff:78:f9:c3:bd:ef:02:13:8d:cb:46:55:67:0e:6c: 0d:1b:f7:e6:84:bd:1d:e3:64:6f:fc:6d:26:86:87: 64:14:52:cf:32:59:1c:8d:87:de:46:16:71:a8:61: c0:60:ed:a0:a4:0c:1a:b5:7b:7b:f2:75:1a:db:eb: 56:bd:bb:a7:c8:98:9c:86:2b:57:38:3a:d5:29:05: 2c:4c:bb:56:da:fa:df:bc:b5:45:91:39:46:d7:b4: af:fc:49:84:52:2d:63:e2:14:f9:33:97:a7:89:b5: ed:f9:de:22:d0:44:85:9d:fa:06:02:84:7a:a8:63: 77:e6:5d:a2:b1:c0:a8:5e:0c:e6:07:37:01:4d:d0: 6e:49:c1:2a:e2:b6:a6:55:77:ba:74:18:c6:b3:bd: d1:e3:82:21:02:e2:8a:75:4e:d0:d8:6c:99:1b:e5: 1b:56:23:bc:72:57:17:5d:ef:99:ef:c5:98:2b:b1: 87:f9:33:de:05:79:8a:36:4d:74:67:e7:a7:4d:2e: 43:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:61:1A:AE:07:C7:A8:72:5C:3E:C7:7A:FA:DE:FC:0A:44:1D:73:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24/ab896d97-33c9-3a23-be0e-51523a030893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24/d6aca04b-8aac-451b-b19d-c3675177ed24.crl X509v3 Authority Key Identifier: keyid:F4:ED:4E:95:83:27:9C:61:70:F4:06:E4:26:5E:D9:9B:B6:F8:E2:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24.cer sbgp-ipAddrBlock: critical IPv4: 23.145.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d1:8a:04:d6:02:45:a2:f9:5c:2f:ee:fe:38:0f:5e:77:f0: 09:29:ad:72:89:01:cc:45:1a:20:6f:42:48:ae:29:2c:f8:0d: 87:3b:73:fe:c6:f2:58:4b:ba:12:77:c4:d9:5d:cb:b5:29:c6: 7b:e4:6e:7f:16:ad:58:d5:e4:2a:58:00:36:3d:37:36:ef:99: a3:76:32:b3:1e:cf:6e:3a:07:61:32:f6:ed:f7:6e:5d:74:47: 01:92:b9:1f:ca:7c:8b:c3:21:06:30:c2:d9:b8:97:14:60:86: ed:6f:ac:c2:85:cf:33:a1:48:99:e2:05:ed:6e:a7:22:69:7e: 4e:13:ee:47:2a:7c:e4:b0:f4:49:37:9b:d9:55:c3:bd:15:92: 98:f8:93:44:6f:43:ec:51:97:ec:09:07:a6:84:12:d9:30:59: 8d:9d:76:36:71:8f:d0:2c:0f:39:08:e3:f3:76:8d:02:3e:8d: b2:19:39:23:dd:19:8f:85:5c:62:1b:ed:9c:a2:00:21:10:b1: 10:6b:6c:58:fb:a4:7e:dd:80:c4:aa:b5:9b:92:0d:84:24:7e: be:fd:27:2d:b4:ea:d4:d3:47:fe:22:4a:17:fb:a0:d9:e8:74: b3:cd:8c:ef:4a:da:d8:c1:5e:fc:0a:f3:4d:3e:94:3a:d3:e1: 84:e3:51:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwj0CKu8RC73F94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZhY2EwNGItOGFhYy00NTFiLWIxOWQtYzM2NzUxNzdl ZDI0MB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk NWYxZmVmMjYtMWU2ZC00NzU0LTlkZjAtODg0NjJlNjMzOGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1sKvqJwufH33YDZrlzZU1S6P+98vev7sgFX Dz6bSXHx2E8Lp3jPBkzAktfm1OsUX19WuJzDqu7yyaL/ePnDve8CE43LRlVnDmwN G/fmhL0d42Rv/G0mhodkFFLPMlkcjYfeRhZxqGHAYO2gpAwatXt78nUa2+tWvbun yJichitXODrVKQUsTLtW2vrfvLVFkTlG17Sv/EmEUi1j4hT5M5enibXt+d4i0ESF nfoGAoR6qGN35l2iscCoXgzmBzcBTdBuScEq4ramVXe6dBjGs73R44IhAuKKdU7Q 2GyZG+UbViO8clcXXe+Z78WYK7GH+TPeBXmKNk10Z+enTS5DdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZhGq4Hx6hyXD7Hevre/ApEHXMbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNmFj YTA0Yi04YWFjLTQ1MWItYjE5ZC1jMzY3NTE3N2VkMjQvYWI4OTZkOTctMzNjOS0z YTIzLWJlMGUtNTE1MjNhMDMwODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDZhY2EwNGItOGFhYy00NTFiLWIx OWQtYzM2NzUxNzdlZDI0L2Q2YWNhMDRiLThhYWMtNDUxYi1iMTlkLWMzNjc1MTc3 ZWQyNC5jcmwwHwYDVR0jBBgwFoAU9O1OlYMnnGFw9AbkJl7Zm7b44oQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kNmFjYTA0Yi04YWFjLTQ1MWItYjE5ZC1jMzY3 NTE3N2VkMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5F8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfRigTWAkWi+Vwv7v44D1538AkprXKJAcxFGiBvQkiuKSz4DYc7c/7G 8lhLuhJ3xNldy7Upxnvkbn8WrVjV5CpYADY9NzbvmaN2MrMez246B2Ey9u33bl10 RwGSuR/KfIvDIQYwwtm4lxRghu1vrMKFzzOhSJniBe1upyJpfk4T7kcqfOSw9Ek3 m9lVw70Vkpj4k0RvQ+xRl+wJB6aEEtkwWY2ddjZxj9AsDzkI4/N2jQI+jbIZOSPd GY+FXGIb7ZyiACEQsRBrbFj7pH7dgMSqtZuSDYQkfr79Jy206tTTR/4iShf7oNno dLPNjO9K2tjBXvwK800+lDrT4YTjUas= -----END CERTIFICATE-----Generated at Mon Mar 2 15:32:54 2026 by rpki-client