$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/f16089a5-8d85-3a5a-a46b-0c9f13b76e8d.roa File: f16089a5-8d85-3a5a-a46b-0c9f13b76e8d.roa (raw, json) Hash identifier: gI2sPR0WgCVFPhi4HMccSUe8xSYDmFBDbcj/OyXMl0k= Subject key identifier: A3:3A:0F:AC:AD:F6:18:DF:C5:9E:BE:3C:9D:56:38:9D:0A:45:D2:C3 Certificate issuer: /CN=843d051d-a734-4f3d-9544-a5ed8b60c976 Certificate serial: 010D0C9F4328584CA9A8145BF5F55666DFFDD500 Authority key identifier: FC:FE:3F:F0:23:F4:A4:22:8F:75:9F:AD:23:3F:81:99:70:42:B4:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/f16089a5-8d85-3a5a-a46b-0c9f13b76e8d.roa Signing time: Tue 27 Jan 2026 09:44:54 +0000 ROA not before: Tue 27 Jan 2026 09:44:54 +0000 ROA not after: Mon 27 Apr 2026 08:44:54 +0000 asID: 35930 IP address blocks: 23.149.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a9:a8:14:5b:f5:f5:56:66:df:fd:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843d051d-a734-4f3d-9544-a5ed8b60c976 Validity Not Before: Jan 27 09:44:54 2026 GMT Not After : Apr 27 08:44:54 2026 GMT Subject: CN=5009727f-8c0f-4af7-a83b-2f41fa4c212a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:97:8d:91:ea:4f:71:8c:10:21:03:73:9b:46: c2:4f:5f:75:18:52:df:87:99:0a:c8:26:ec:04:1a: 6e:46:6c:c0:ec:65:68:5f:c9:1a:67:7d:7d:5f:2c: 19:68:ee:a3:10:59:15:b9:37:df:8f:39:b7:2d:86: eb:e7:db:16:34:f1:ec:6f:96:18:f2:09:c4:af:a4: 38:d2:f0:95:aa:96:0c:46:1a:a6:8d:54:7a:57:89: 00:15:e0:36:38:b5:88:68:cf:95:be:eb:be:a1:24: c3:8d:38:1e:42:7d:02:82:8e:c3:f7:90:20:fe:b8: d8:d6:2c:39:62:fe:ee:39:20:ad:ce:f3:0f:01:b2: 43:88:2c:67:8e:22:44:ca:b3:24:0d:3b:9d:24:ed: 42:67:b8:21:2b:82:fc:2a:32:c1:44:3d:7c:91:04: cf:ef:1b:5b:cf:01:9e:b9:a8:78:4c:9e:0a:2e:f2: cc:88:a6:ba:d2:2b:89:78:cd:45:cb:a7:86:d0:14: f6:b5:91:49:ac:14:09:59:fe:23:2f:5c:3e:9c:45: e3:d8:ff:96:bc:a7:59:7c:bf:f1:29:2a:89:99:39: b4:e4:ae:2b:27:da:ff:d2:24:21:cb:76:6b:c0:07: 75:b0:a2:4e:73:94:03:ea:0b:5f:bc:2e:d1:59:c2: f7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3A:0F:AC:AD:F6:18:DF:C5:9E:BE:3C:9D:56:38:9D:0A:45:D2:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/f16089a5-8d85-3a5a-a46b-0c9f13b76e8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.crl X509v3 Authority Key Identifier: keyid:FC:FE:3F:F0:23:F4:A4:22:8F:75:9F:AD:23:3F:81:99:70:42:B4:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer sbgp-ipAddrBlock: critical IPv4: 23.149.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ae:f4:b6:e8:c7:5a:3d:11:c0:54:05:4f:54:e3:f9:f4:9f: e4:de:ba:c9:82:44:f8:83:8a:ce:8b:11:da:88:fe:c8:b6:82: 7e:e6:45:f8:18:60:53:6a:41:4e:f8:0d:36:5e:3d:8e:6d:1e: 07:ab:a9:8a:df:11:28:a3:2f:2c:46:dc:2b:94:af:38:e2:5f: f1:1b:63:16:2a:e5:a3:31:8b:57:4c:24:57:58:91:dc:31:87: 24:81:69:d2:39:71:b9:ce:9a:f7:46:e6:1e:8f:0c:3a:04:a7: d4:19:e6:eb:10:44:dc:05:34:46:a1:13:26:4a:d2:a7:80:d7: ad:0c:f1:47:e2:85:ed:51:2e:49:e9:80:ea:bd:e8:23:3c:dc: 9d:fc:fe:79:16:e4:14:b9:65:ab:9f:da:a4:bb:b2:3a:13:24: 07:c4:6e:59:85:75:f4:15:88:7f:7b:a8:9b:e7:3c:c1:9e:ee: 18:79:c0:91:d1:ac:41:ce:d3:df:ba:39:e0:84:f4:95:f4:20: 53:87:f4:4c:4b:73:37:9c:d3:73:f6:1c:fd:f3:53:ea:24:2c: 22:77:66:43:3b:2f:45:8c:f3:3a:6f:85:90:47:86:53:5d:24: 1e:ef:55:c5:e9:86:79:f2:95:df:73:31:0c:9e:55:45:6c:c4: 39:c7:3e:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEypqBRb9fVWZt/91QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQzZDA1MWQtYTczNC00ZjNkLTk1NDQtYTVlZDhiNjBj OTc2MB4XDTI2MDEyNzA5NDQ1NFoXDTI2MDQyNzA4NDQ1NFowLzEtMCsGA1UEAxMk NTAwOTcyN2YtOGMwZi00YWY3LWE4M2ItMmY0MWZhNGMyMTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZeNkepPcYwQIQNzm0bCT191GFLfh5kKyCbs BBpuRmzA7GVoX8kaZ319XywZaO6jEFkVuTffjzm3LYbr59sWNPHsb5YY8gnEr6Q4 0vCVqpYMRhqmjVR6V4kAFeA2OLWIaM+Vvuu+oSTDjTgeQn0Cgo7D95Ag/rjY1iw5 Yv7uOSCtzvMPAbJDiCxnjiJEyrMkDTudJO1CZ7ghK4L8KjLBRD18kQTP7xtbzwGe uah4TJ4KLvLMiKa60iuJeM1Fy6eG0BT2tZFJrBQJWf4jL1w+nEXj2P+WvKdZfL/x KSqJmTm05K4rJ9r/0iQhy3ZrwAd1sKJOc5QD6gtfvC7RWcL33QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKM6D6yt9hjfxZ6+PJ1WOJ0KRdLDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NDNk MDUxZC1hNzM0LTRmM2QtOTU0NC1hNWVkOGI2MGM5NzYvZjE2MDg5YTUtOGQ4NS0z YTVhLWE0NmItMGM5ZjEzYjc2ZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODQzZDA1MWQtYTczNC00ZjNkLTk1 NDQtYTVlZDhiNjBjOTc2Lzg0M2QwNTFkLWE3MzQtNGYzZC05NTQ0LWE1ZWQ4YjYw Yzk3Ni5jcmwwHwYDVR0jBBgwFoAU/P4/8CP0pCKPdZ+tIz+BmXBCtJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NDNkMDUxZC1hNzM0LTRmM2QtOTU0NC1hNWVk OGI2MGM5NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5UIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyu9Lbox1o9EcBUBU9U4/n0n+TeusmCRPiDis6LEdqI/si2gn7mRfgY YFNqQU74DTZePY5tHgerqYrfESijLyxG3CuUrzjiX/EbYxYq5aMxi1dMJFdYkdwx hySBadI5cbnOmvdG5h6PDDoEp9QZ5usQRNwFNEahEyZK0qeA160M8Ufihe1RLknp gOq96CM83J38/nkW5BS5Zauf2qS7sjoTJAfEblmFdfQViH97qJvnPMGe7hh5wJHR rEHO09+6OeCE9JX0IFOH9ExLczec03P2HP3zU+okLCJ3ZkM7L0WM8zpvhZBHhlNd JB7vVcXphnnyld9zMQyeVUVsxDnHPhQ= -----END CERTIFICATE-----Generated at Sun Feb 22 19:17:13 2026 by rpki-client