$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/74cca517-9428-314a-9bf6-c27e43608e8b.roa File: 74cca517-9428-314a-9bf6-c27e43608e8b.roa (raw, json) Hash identifier: DnwUFnJ8O71DoIw4wUfX3LKuMGPlI6cO8J21A2xNCGc= Subject key identifier: D8:B1:07:45:4A:5D:64:15:F2:70:0D:1D:B3:06:DA:A4:43:B6:9A:44 Certificate issuer: /CN=09a828ed-c9e2-481b-8715-41b4d5f5fa54 Certificate serial: 010D0C9F4328584CAE1761EA244415D4C93E9780 Authority key identifier: F4:37:B6:C3:2A:81:32:7F:7E:ED:33:F6:79:7C:DA:6C:75:71:13:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/74cca517-9428-314a-9bf6-c27e43608e8b.roa Signing time: Wed 28 Jan 2026 23:52:24 +0000 ROA not before: Wed 28 Jan 2026 23:52:24 +0000 ROA not after: Tue 28 Apr 2026 22:52:24 +0000 asID: 394935 IP address blocks: 23.136.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/09a828ed-c9e2-481b-8715-41b4d5f5fa54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/09a828ed-c9e2-481b-8715-41b4d5f5fa54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:17:61:ea:24:44:15:d4:c9:3e:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a828ed-c9e2-481b-8715-41b4d5f5fa54 Validity Not Before: Jan 28 23:52:24 2026 GMT Not After : Apr 28 22:52:24 2026 GMT Subject: CN=607273aa-cfd6-4635-bf19-644a2aa58c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:93:a4:6b:f5:c3:3b:01:be:b8:7e:22:47:bc: 31:46:e4:8a:2e:c3:7b:11:7e:e7:15:28:b0:4c:62: fa:ea:fb:5b:73:d1:fb:0e:56:75:a5:e5:a3:da:16: 70:5f:22:37:e3:3e:1b:9d:23:07:84:1c:fd:76:99: 4d:03:00:12:83:20:60:1f:ac:b2:3b:22:7d:b2:1f: 77:43:49:54:65:17:9f:93:35:4d:0b:e3:33:e3:8b: a2:a8:39:68:36:bf:6a:40:6f:54:4e:5b:76:03:8f: f6:a4:38:c8:9a:e1:8f:da:03:75:bd:14:1b:2b:f3: 41:6e:13:ee:a8:a3:35:be:f8:97:f6:36:d8:1c:6f: 35:48:da:14:0a:7a:49:8c:51:be:84:fc:71:b8:b4: 57:b6:0e:ab:81:42:59:a7:d4:3f:c4:2b:8b:63:90: c3:40:69:2c:99:f4:78:d6:b4:bd:54:63:1b:af:35: 64:1e:e0:17:60:e2:ce:75:21:e8:a6:c0:68:37:fc: ae:09:3b:50:c7:64:e9:33:cc:93:af:88:ed:62:ff: 4e:56:97:72:3f:cf:11:f8:09:02:87:f5:94:2e:fd: 39:1e:9d:1a:21:ab:7a:e0:2e:06:80:de:c3:2f:5c: cc:09:00:44:ed:70:6b:19:14:a0:a3:35:69:e7:a6: a7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B1:07:45:4A:5D:64:15:F2:70:0D:1D:B3:06:DA:A4:43:B6:9A:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/74cca517-9428-314a-9bf6-c27e43608e8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/09a828ed-c9e2-481b-8715-41b4d5f5fa54.crl X509v3 Authority Key Identifier: keyid:F4:37:B6:C3:2A:81:32:7F:7E:ED:33:F6:79:7C:DA:6C:75:71:13:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54.cer sbgp-ipAddrBlock: critical IPv4: 23.136.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:02:10:81:d1:aa:d8:d8:95:42:46:b6:55:0e:ed:81:ab:6a: 0e:b5:c7:e6:2e:eb:2a:22:15:63:31:72:ce:2d:99:ab:c6:fb: a4:3b:36:e7:eb:9e:14:78:ed:8a:03:01:a7:44:35:a2:6c:46: ed:28:db:a7:9f:e6:3c:48:6a:ac:9d:a2:b6:5e:b7:bf:35:6b: 91:e6:b2:f1:1e:20:92:24:0d:b9:a0:5b:2d:b8:e1:f3:58:c1: f4:9e:40:de:59:eb:86:78:92:46:49:91:4e:7d:59:64:c4:83: 8e:09:31:fa:a2:69:01:cb:fb:5c:d3:85:d4:04:b1:1f:59:4a: cb:0a:b2:02:26:86:5f:15:3e:2e:79:2b:bf:98:ec:6c:a1:50: a8:1f:c3:4d:6f:70:6c:32:f2:eb:e6:a8:75:31:04:2f:ff:0b: 21:e1:da:f6:65:77:c6:0f:c3:a8:1b:cb:3c:3e:1e:82:a9:e3: c6:3d:b0:01:73:a3:2f:46:51:86:7a:7e:f1:dd:13:a7:49:6b: 8d:36:21:aa:aa:89:4c:ee:fa:80:a4:95:0b:08:e9:6d:ea:ed: 92:de:91:a5:fc:08:e1:f5:c9:21:f2:ce:d5:62:12:8b:cc:06: 45:7c:5e:7c:d5:a5:ef:67:67:e3:1a:b4:7f:19:c7:4a:ec:aa: e3:74:ae:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuF2HqJEQV1Mk+l4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhODI4ZWQtYzllMi00ODFiLTg3MTUtNDFiNGQ1ZjVm YTU0MB4XDTI2MDEyODIzNTIyNFoXDTI2MDQyODIyNTIyNFowLzEtMCsGA1UEAxMk NjA3MjczYWEtY2ZkNi00NjM1LWJmMTktNjQ0YTJhYTU4YzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJOka/XDOwG+uH4iR7wxRuSKLsN7EX7nFSiw TGL66vtbc9H7DlZ1peWj2hZwXyI34z4bnSMHhBz9dplNAwASgyBgH6yyOyJ9sh93 Q0lUZRefkzVNC+Mz44uiqDloNr9qQG9UTlt2A4/2pDjImuGP2gN1vRQbK/NBbhPu qKM1vviX9jbYHG81SNoUCnpJjFG+hPxxuLRXtg6rgUJZp9Q/xCuLY5DDQGksmfR4 1rS9VGMbrzVkHuAXYOLOdSHopsBoN/yuCTtQx2TpM8yTr4jtYv9OVpdyP88R+AkC h/WULv05Hp0aIat64C4GgN7DL1zMCQBE7XBrGRSgozVp56anUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNixB0VKXWQV8nANHbMG2qRDtppEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wOWE4 MjhlZC1jOWUyLTQ4MWItODcxNS00MWI0ZDVmNWZhNTQvNzRjY2E1MTctOTQyOC0z MTRhLTliZjYtYzI3ZTQzNjA4ZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDlhODI4ZWQtYzllMi00ODFiLTg3 MTUtNDFiNGQ1ZjVmYTU0LzA5YTgyOGVkLWM5ZTItNDgxYi04NzE1LTQxYjRkNWY1 ZmE1NC5jcmwwHwYDVR0jBBgwFoAU9De2wyqBMn9+7TP2eXzabHVxEzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wOWE4MjhlZC1jOWUyLTQ4MWItODcxNS00MWI0 ZDVmNWZhNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4jcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHICEIHRqtjYlUJGtlUO7YGrag61x+Yu6yoiFWMxcs4tmavG+6Q7Nufr nhR47YoDAadENaJsRu0o26ef5jxIaqydorZet781a5HmsvEeIJIkDbmgWy244fNY wfSeQN5Z64Z4kkZJkU59WWTEg44JMfqiaQHL+1zThdQEsR9ZSssKsgImhl8VPi55 K7+Y7GyhUKgfw01vcGwy8uvmqHUxBC//CyHh2vZld8YPw6gbyzw+HoKp48Y9sAFz oy9GUYZ6fvHdE6dJa402IaqqiUzu+oCklQsI6W3q7ZLekaX8COH1ySHyztViEovM BkV8XnzVpe9nZ+MatH8Zx0rsquN0rnY= -----END CERTIFICATE-----Generated at Thu Feb 26 22:49:25 2026 by rpki-client