$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa File: cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa (raw, json) Hash identifier: OWMv4CDeRy2CqSZdpvj+cq/31g6dMHkfH7UfqBx54As= Subject key identifier: C1:77:81:EB:CF:C8:62:7A:44:DF:F0:53:FE:AB:F1:18:C7:5E:B3:B1 Certificate issuer: /CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Certificate serial: 010D0C9F4328584C85DC254D5A13055C77726E00 Authority key identifier: 74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa Signing time: Wed 14 Jan 2026 14:00:38 +0000 ROA not before: Wed 14 Jan 2026 14:00:38 +0000 ROA not after: Tue 14 Apr 2026 13:00:38 +0000 asID: 2914 IP address blocks: 23.133.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Feb 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:85:dc:25:4d:5a:13:05:5c:77:72:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Validity Not Before: Jan 14 14:00:38 2026 GMT Not After : Apr 14 13:00:38 2026 GMT Subject: CN=a52dd920-6803-4b3c-a1ab-05555ffa1526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f9:ef:3a:89:f4:db:00:ed:43:99:89:26:20: 28:0e:29:37:2d:e6:f6:4f:80:3c:a8:93:29:1a:e0: d1:9f:d8:68:c1:1c:96:92:ac:33:93:4d:67:06:d9: d7:f5:fb:be:03:4c:d4:ad:94:ee:3c:60:26:b4:08: 8b:27:e4:c0:9b:09:44:60:63:10:31:94:7b:80:4f: 4b:b2:c2:f0:19:c3:31:64:25:39:cc:ab:90:1a:65: 0d:70:ec:d5:5c:b4:b8:0a:f5:9d:04:91:85:54:3d: c6:0d:1d:14:61:bd:5a:75:a9:88:09:20:54:ff:42: 80:09:b1:8b:0a:c6:5c:15:21:eb:b9:88:88:89:73: 7a:c4:db:b6:18:64:36:c4:36:c4:1b:81:10:b5:1a: b9:5b:0b:e2:30:eb:c4:af:d2:ae:08:1f:55:b2:91: ef:91:7f:dc:58:94:15:4a:5b:4f:c1:00:ef:e1:d0: 21:40:20:6a:ed:58:80:71:c0:fb:3d:59:16:87:b5: 48:b1:cb:9c:ee:94:85:9e:7e:74:e5:28:ea:dc:ba: 89:8f:33:89:fe:23:d0:60:6c:0a:29:81:39:53:79: 6d:bf:11:50:fe:75:46:0b:bf:14:c1:14:54:c5:70: d6:a8:5f:5c:30:c1:7f:e8:d1:b4:f1:70:9f:57:ce: 42:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:77:81:EB:CF:C8:62:7A:44:DF:F0:53:FE:AB:F1:18:C7:5E:B3:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl X509v3 Authority Key Identifier: keyid:74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer sbgp-ipAddrBlock: critical IPv4: 23.133.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:b4:92:7e:76:51:3c:52:37:9b:0d:f5:3a:12:6e:f9:d4:af: 1c:4b:c1:d8:dd:53:8e:85:4c:43:52:32:33:6d:15:9b:2e:25: 3c:de:26:eb:55:51:04:df:d7:fd:d5:6a:a0:b9:12:53:c0:ea: 64:b7:01:c3:26:8c:b0:16:35:f6:ba:5d:f8:dd:4a:3f:90:48: 2c:50:a9:e3:c0:69:0a:f6:82:ce:b2:3f:cf:20:ba:d7:18:b7: 5e:35:b4:8f:17:94:51:57:1f:ce:dd:d4:46:0f:98:e9:7f:58: 09:18:92:bf:ea:93:94:0d:19:44:14:a7:1f:1b:3d:8c:d8:2f: fb:ad:e0:ce:53:ed:2d:52:e0:74:d4:75:8e:17:d6:24:cc:8a: 01:a4:5b:74:c6:bb:01:0d:92:bf:d9:b7:f3:44:d3:58:e1:41: b3:ba:bf:dc:0f:2d:f8:84:38:8f:14:f9:22:fe:de:5f:ba:91: a1:f2:76:21:39:07:1a:46:45:00:19:c1:86:a9:c1:22:f6:a5: da:d8:be:1c:8f:3d:70:48:34:78:ff:95:5b:27:6d:09:ba:3e: 0d:23:a0:cb:47:99:bb:41:17:f5:6a:fa:75:d6:b1:fa:24:44: bd:6b:ca:a5:7d:bd:4c:d6:58:24:dc:63:cd:00:81:90:7c:2a: 20:c5:f5:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyF3CVNWhMFXHdybgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2OGMyMTktOGU3MS00MTUxLThkNWMtZDUwNGZkMTJi NWZiMB4XDTI2MDExNDE0MDAzOFoXDTI2MDQxNDEzMDAzOFowLzEtMCsGA1UEAxMk YTUyZGQ5MjAtNjgwMy00YjNjLWExYWItMDU1NTVmZmExNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfnvOon02wDtQ5mJJiAoDik3Leb2T4A8qJMp GuDRn9howRyWkqwzk01nBtnX9fu+A0zUrZTuPGAmtAiLJ+TAmwlEYGMQMZR7gE9L ssLwGcMxZCU5zKuQGmUNcOzVXLS4CvWdBJGFVD3GDR0UYb1adamICSBU/0KACbGL CsZcFSHruYiIiXN6xNu2GGQ2xDbEG4EQtRq5WwviMOvEr9KuCB9VspHvkX/cWJQV SltPwQDv4dAhQCBq7ViAccD7PVkWh7VIscuc7pSFnn505Sjq3LqJjzOJ/iPQYGwK KYE5U3ltvxFQ/nVGC78UwRRUxXDWqF9cMMF/6NG08XCfV85CjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMF3gevPyGJ6RN/wU/6r8RjHXrOxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYzY4 YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0ZmQxMmI1ZmIvY2I5NGY0MWMtYzg4Ny0z NjNjLWJmNDEtOGRkMDRlMjhkOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2M2OGMyMTktOGU3MS00MTUxLThk NWMtZDUwNGZkMTJiNWZiLzNjNjhjMjE5LThlNzEtNDE1MS04ZDVjLWQ1MDRmZDEy YjVmYi5jcmwwHwYDVR0jBBgwFoAUdGY0HBQ2LZSV3PdtiT6NIp7XSSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYzY4YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0 ZmQxMmI1ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4V0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKW0kn52UTxSN5sN9ToSbvnUrxxLwdjdU46FTENSMjNtFZsuJTzeJutV UQTf1/3VaqC5ElPA6mS3AcMmjLAWNfa6XfjdSj+QSCxQqePAaQr2gs6yP88gutcY t141tI8XlFFXH87d1EYPmOl/WAkYkr/qk5QNGUQUpx8bPYzYL/ut4M5T7S1S4HTU dY4X1iTMigGkW3TGuwENkr/Zt/NE01jhQbO6v9wPLfiEOI8U+SL+3l+6kaHydiE5 BxpGRQAZwYapwSL2pdrYvhyPPXBINHj/lVsnbQm6Pg0joMtHmbtBF/Vq+nXWsfok RL1ryqV9vUzWWCTcY80AgZB8KiDF9dw= -----END CERTIFICATE-----Generated at Sun Feb 22 14:11:28 2026 by rpki-client