$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/409cf6f8-483a-3c61-a454-9e18624649fa.roa File: 409cf6f8-483a-3c61-a454-9e18624649fa.roa (raw, json) Hash identifier: 2jlTmnExmclis+OB5nk+ZmtFmwpc/qfsYVcTAUdfCkY= Subject key identifier: 7D:DF:96:5F:B5:BE:A2:2B:8C:57:53:E2:1D:65:A1:9B:51:72:6A:49 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584CAE5721A28338453385112D00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/409cf6f8-483a-3c61-a454-9e18624649fa.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 393560 IP address blocks: 168.143.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:21:a2:83:38:45:33:85:11:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e5ceffe0-a24d-4e44-8d31-267f63c08a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c9:5d:fb:ce:4c:78:fb:f2:43:d4:55:ec:b1: 74:90:21:4d:55:5a:78:e3:2f:1d:74:8a:dc:87:55: e6:f4:93:30:b2:38:bb:73:e8:54:ac:27:7e:f0:4f: 55:fd:ba:5a:83:c6:0d:dc:db:74:05:b9:3d:66:bf: 18:fe:0d:b4:e3:19:5e:e1:64:91:5e:fa:de:47:5f: d4:f3:68:79:ac:f3:7b:3a:81:0d:f3:76:9b:d6:9a: ea:5f:dd:30:a1:31:08:e8:33:1c:ec:23:a2:d5:b3: 35:69:fe:df:a8:72:db:41:2a:4d:47:d1:90:5f:c6: 87:c8:62:97:b3:43:74:d3:ae:7a:eb:c5:c2:99:b9: a9:fd:73:63:0b:dd:79:d0:e8:4e:aa:e9:ed:87:db: aa:cb:7b:16:66:1d:32:80:16:c3:33:7f:bc:ee:65: 34:7e:e8:af:82:eb:dd:3c:1f:c6:50:2a:8d:15:64: e8:b4:8b:d9:ed:01:26:c4:33:9b:7b:f7:07:25:5c: e9:27:8f:8d:ba:b2:97:f4:de:1e:49:33:69:db:90: e9:83:38:e0:88:a1:d7:c1:f9:49:89:68:08:03:f2: 0e:6b:8e:fa:c0:33:b1:60:1c:d6:c9:9f:35:c5:0c: 9d:72:8a:34:8b:58:f2:8e:3e:ab:93:eb:55:0a:2b: 9f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DF:96:5F:B5:BE:A2:2B:8C:57:53:E2:1D:65:A1:9B:51:72:6A:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/409cf6f8-483a-3c61-a454-9e18624649fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 168.143.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:dd:fc:f3:c8:a2:b0:64:f8:7a:a4:e0:19:6b:63:3c:63:f1: 2e:fe:d6:9f:19:70:08:af:43:3c:be:bd:24:b9:80:83:43:c5: 3b:76:8f:09:a2:18:21:3a:c9:3f:58:40:de:2b:63:5b:1e:44: b1:c4:04:75:6f:ff:3d:b2:96:62:b6:df:cc:bb:ff:76:8f:32: 5c:7f:f1:c3:af:3e:75:0d:61:7f:29:a2:2d:a8:b4:12:11:31: f8:87:63:d5:d3:c5:6d:2a:c9:87:c8:83:8a:79:52:c4:08:a9: 36:3b:59:86:ce:be:5c:45:6c:17:3f:6b:07:ff:4e:6d:62:72: ea:4b:e6:e6:29:f5:26:91:28:d1:0c:be:12:8c:12:c0:a3:69: 9b:32:73:85:b8:b8:95:d4:19:95:c9:bf:a2:c9:7d:60:2c:f8: 3b:fc:c1:ec:a4:ff:2c:05:07:10:f2:df:95:6a:08:98:1a:dd: c5:0f:47:b5:c4:f4:68:a5:93:2e:f7:49:be:4e:98:14:19:e3: 87:da:ad:e8:65:81:53:c5:49:91:b4:02:07:56:b1:89:f6:f2: 34:91:ec:8c:c9:80:8f:f6:72:33:22:0f:a4:0b:5d:47:3f:a7: b9:6c:6d:37:a9:9e:0c:7d:6d:7a:e6:ae:84:da:0d:58:c3:a6: 38:dd:a5:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVyGigzhFM4URLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTVjZWZmZTAtYTI0ZC00ZTQ0LThkMzEtMjY3ZjYzYzA4YTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Mld+85MePvyQ9RV7LF0kCFNVVp44y8ddIrc h1Xm9JMwsji7c+hUrCd+8E9V/bpag8YN3Nt0Bbk9Zr8Y/g204xle4WSRXvreR1/U 82h5rPN7OoEN83ab1prqX90woTEI6DMc7COi1bM1af7fqHLbQSpNR9GQX8aHyGKX s0N0065668XCmbmp/XNjC9150OhOqunth9uqy3sWZh0ygBbDM3+87mU0fuivguvd PB/GUCqNFWTotIvZ7QEmxDObe/cHJVzpJ4+NurKX9N4eSTNp25DpgzjgiKHXwflJ iWgIA/IOa476wDOxYBzWyZ81xQydcoo0i1jyjj6rk+tVCiuftQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3fll+1vqIrjFdT4h1loZtRcmpJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDA5Y2Y2ZjgtNDgzYS0z YzYxLWE0NTQtOWUxODYyNDY0OWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqI/+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTd/PPIorBk+Hqk4BlrYzxj8S7+1p8ZcAivQzy+vSS5gINDxTt2jwmi GCE6yT9YQN4rY1seRLHEBHVv/z2ylmK238y7/3aPMlx/8cOvPnUNYX8poi2otBIR MfiHY9XTxW0qyYfIg4p5UsQIqTY7WYbOvlxFbBc/awf/Tm1icupL5uYp9SaRKNEM vhKMEsCjaZsyc4W4uJXUGZXJv6LJfWAs+Dv8weyk/ywFBxDy35VqCJga3cUPR7XE 9Gilky73Sb5OmBQZ44farehlgVPFSZG0AgdWsYn28jSR7IzJgI/2cjMiD6QLXUc/ p7lsbTepngx9bXrmroTaDVjDpjjdpR4= -----END CERTIFICATE-----Generated at Mon Feb 23 11:54:35 2026 by rpki-client