$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa23f28c-5ddd-3ae7-870b-1bd38021c84e.roa File: aa23f28c-5ddd-3ae7-870b-1bd38021c84e.roa (raw, json) Hash identifier: 17v56M6e1JfnAM9nHuoZ6ictfUMW3rGUzDnVxEm3Dlc= Subject key identifier: 11:AF:B9:71:45:5A:4A:63:80:F2:07:C8:C5:50:2E:80:11:FC:AB:5B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584C9EFC6B536F20826B9F36E9A0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa23f28c-5ddd-3ae7-870b-1bd38021c84e.roa Signing time: Fri 23 Jan 2026 14:00:38 +0000 ROA not before: Fri 23 Jan 2026 14:00:38 +0000 ROA not after: Thu 23 Apr 2026 13:00:38 +0000 asID: 40934 IP address blocks: 140.174.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9e:fc:6b:53:6f:20:82:6b:9f:36:e9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jan 23 14:00:38 2026 GMT Not After : Apr 23 13:00:38 2026 GMT Subject: CN=d232f85c-ed7d-4df6-a414-c166f5927534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:50:0e:95:66:c7:d9:7b:af:78:91:43:ce:de: ac:8d:90:17:e9:a6:53:b1:5d:41:47:44:f3:b1:0c: 14:d6:39:8d:e4:5d:48:7d:69:c2:f4:47:d3:2a:4a: 51:fd:fe:d3:5c:2c:52:eb:34:3a:10:f3:9c:f4:ab: 12:e8:17:1f:95:95:56:28:97:90:a1:f5:19:f2:a8: 01:02:78:a9:4b:4b:f2:ea:16:5b:d2:dc:a4:af:21: 59:05:90:9b:e2:2e:54:5c:3a:73:bb:57:58:d4:80: d1:99:7e:b6:9b:a6:c2:0c:b8:7c:9b:0d:95:d4:c5: f6:20:60:10:10:25:ca:70:75:80:52:42:af:7d:86: 7d:a6:9b:9b:9b:72:9c:c1:2d:c2:7b:61:fc:09:b0: 97:17:c5:07:21:39:68:29:52:10:3d:ff:37:65:e1: f9:e0:74:9e:3f:b1:07:5e:d9:e3:98:3f:48:63:51: 58:64:e6:c3:31:9e:7c:ca:35:a0:55:57:d5:80:a0: ee:1a:d3:87:c3:ec:52:fa:63:f2:af:53:08:0d:b3: 1c:83:a0:d0:d8:f4:a3:32:9b:48:30:74:33:8d:6e: d1:43:1b:a1:a9:69:fa:a0:b6:2f:97:02:bf:66:b9: 71:35:31:e9:83:b8:ab:76:b9:7e:28:d4:a4:92:52: ac:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AF:B9:71:45:5A:4A:63:80:F2:07:C8:C5:50:2E:80:11:FC:AB:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa23f28c-5ddd-3ae7-870b-1bd38021c84e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:8b:af:91:2c:62:3e:98:5c:67:1e:b6:c2:75:35:f1:bf:64: 72:84:83:b9:ff:33:a0:46:c6:32:13:5e:67:a6:69:1c:dd:d8: 78:8e:e9:42:73:9e:b5:88:44:4b:b9:89:12:d9:34:2e:b0:92: 4f:8a:61:b4:56:ef:b5:5d:3a:a0:86:8d:41:29:84:80:ed:7f: 53:6f:cd:c5:f2:70:78:26:fc:18:ff:18:22:b6:26:ee:44:8f: 50:be:4c:99:53:c2:9d:44:cd:82:47:35:9f:ec:fa:84:37:23: b8:8c:f0:41:18:ff:9f:6f:38:8a:65:3f:ca:bd:de:a2:00:d9: 54:65:8d:3e:98:ad:18:a7:7e:3e:50:87:68:98:bf:dc:1b:c7: bb:b0:50:1b:26:64:b0:fa:85:08:fe:b0:b0:2d:c6:da:2f:63: a7:34:ce:c2:08:7d:8f:4c:1c:7c:df:74:7b:58:66:1f:c1:28: 65:6f:0d:29:6f:41:6d:04:f2:4c:d1:25:60:2e:9b:ce:04:1e: 95:19:94:88:8f:19:31:1a:41:eb:b0:d2:1c:1c:1c:69:3d:eb: ee:b3:7b:d7:d5:d2:61:c7:fd:e0:35:2a:36:4d:f1:9b:e0:ec: f0:25:5f:4d:c3:29:c0:98:73:60:28:9f:0f:fd:1e:1f:24:46: 37:9c:6d:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEye/GtTbyCCa5826aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDEyMzE0MDAzOFoXDTI2MDQyMzEzMDAzOFowLzEtMCsGA1UEAxMk ZDIzMmY4NWMtZWQ3ZC00ZGY2LWE0MTQtYzE2NmY1OTI3NTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglAOlWbH2XuveJFDzt6sjZAX6aZTsV1BR0Tz sQwU1jmN5F1IfWnC9EfTKkpR/f7TXCxS6zQ6EPOc9KsS6BcflZVWKJeQofUZ8qgB AnipS0vy6hZb0tykryFZBZCb4i5UXDpzu1dY1IDRmX62m6bCDLh8mw2V1MX2IGAQ ECXKcHWAUkKvfYZ9ppubm3KcwS3Ce2H8CbCXF8UHITloKVIQPf83ZeH54HSeP7EH XtnjmD9IY1FYZObDMZ58yjWgVVfVgKDuGtOHw+xS+mPyr1MIDbMcg6DQ2PSjMptI MHQzjW7RQxuhqWn6oLYvlwK/ZrlxNTHpg7irdrl+KNSkklKsxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGvuXFFWkpjgPIHyMVQLoAR/KtbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYWEyM2YyOGMtNWRkZC0z YWU3LTg3MGItMWJkMzgwMjFjODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjK4XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6Lr5EsYj6YXGcetsJ1NfG/ZHKEg7n/M6BGxjITXmemaRzd2HiO6UJz nrWIREu5iRLZNC6wkk+KYbRW77VdOqCGjUEphIDtf1NvzcXycHgm/Bj/GCK2Ju5E j1C+TJlTwp1EzYJHNZ/s+oQ3I7iM8EEY/59vOIplP8q93qIA2VRljT6YrRinfj5Q h2iYv9wbx7uwUBsmZLD6hQj+sLAtxtovY6c0zsIIfY9MHHzfdHtYZh/BKGVvDSlv QW0E8kzRJWAum84EHpUZlIiPGTEaQeuw0hwcHGk96+6ze9fV0mHH/eA1KjZN8Zvg 7PAlX03DKcCYc2Aonw/9Hh8kRjecbbE= -----END CERTIFICATE-----Generated at Sun Mar 1 20:37:02 2026 by rpki-client