$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227/d8524c93-eeea-3bbb-8d8c-4aa1ab072bdc.roa File: d8524c93-eeea-3bbb-8d8c-4aa1ab072bdc.roa (raw, json) Hash identifier: kLUVzsZPDtzlNg5yhAx43T1PE7y/kiO8iRxmtWqqZTk= Subject key identifier: E0:3E:59:A5:00:DE:89:7D:5C:01:8A:6C:05:7A:7C:1C:AB:F4:0B:99 Certificate issuer: /CN=25c105b2-b3c3-4913-b15d-64cbbad1f227 Certificate serial: 010D0C9F4328584CBE496D5BB7C18E83B4A6D8C0 Authority key identifier: 8E:60:53:3C:4D:49:4E:C6:BB:A7:D4:5D:A2:53:4F:46:4D:F6:AD:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227/d8524c93-eeea-3bbb-8d8c-4aa1ab072bdc.roa Signing time: Tue 03 Feb 2026 19:06:10 +0000 ROA not before: Tue 03 Feb 2026 19:06:10 +0000 ROA not after: Mon 04 May 2026 18:06:10 +0000 asID: 214483 IP address blocks: 23.149.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227/25c105b2-b3c3-4913-b15d-64cbbad1f227.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227/25c105b2-b3c3-4913-b15d-64cbbad1f227.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:be:49:6d:5b:b7:c1:8e:83:b4:a6:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25c105b2-b3c3-4913-b15d-64cbbad1f227 Validity Not Before: Feb 3 19:06:10 2026 GMT Not After : May 4 18:06:10 2026 GMT Subject: CN=b22c6516-a496-411c-bdef-6f24392e91e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5a:75:9b:a4:31:a2:2c:0b:6c:ff:01:63:d8: 15:08:0b:83:6a:c4:ab:aa:e2:65:7a:40:c4:a7:78: 72:e0:ad:c4:fa:dc:df:e1:32:12:97:e8:27:6a:69: 67:1c:a5:33:71:21:75:8c:dc:49:b4:2c:13:ff:0f: cb:84:53:09:6d:98:59:d3:79:6a:7a:28:97:91:cf: 6c:8e:e6:c3:bc:aa:3e:e5:99:6f:1c:0a:e0:6b:41: f3:76:ab:ae:83:0d:f3:c4:eb:37:42:b7:b4:d9:84: 26:a4:74:88:38:ff:ef:93:a5:1e:21:0d:8c:02:20: 85:11:16:3f:34:06:5f:2c:03:d0:b4:79:a7:33:6e: 26:e6:c6:8c:bd:bc:c1:a4:6a:41:6b:59:74:da:48: c8:82:c2:22:75:0f:64:3e:9b:9e:2b:14:3b:c0:b7: 80:ad:79:4f:34:9f:93:7e:08:dd:c5:ee:3a:8e:ce: a8:0b:86:7f:9d:f1:50:92:56:f6:94:e0:9a:a6:bf: cb:d2:37:2e:0e:93:34:63:06:b4:f6:14:37:1d:46: d1:8e:97:b8:c0:cf:a2:28:86:88:ef:24:5c:c4:c3: e6:34:aa:3d:2f:43:50:dc:46:fb:a8:ec:74:b8:5c: 23:c1:33:23:86:0d:2d:27:a0:61:9f:66:65:ba:fc: b0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3E:59:A5:00:DE:89:7D:5C:01:8A:6C:05:7A:7C:1C:AB:F4:0B:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227/d8524c93-eeea-3bbb-8d8c-4aa1ab072bdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227/25c105b2-b3c3-4913-b15d-64cbbad1f227.crl X509v3 Authority Key Identifier: keyid:8E:60:53:3C:4D:49:4E:C6:BB:A7:D4:5D:A2:53:4F:46:4D:F6:AD:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/25c105b2-b3c3-4913-b15d-64cbbad1f227.cer sbgp-ipAddrBlock: critical IPv4: 23.149.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:42:9f:98:be:cf:44:c3:f4:39:6b:13:a5:a7:44:62:35:2d: ef:11:b9:8b:ec:d8:5a:c5:4a:08:03:39:9c:95:e1:49:0b:6a: 01:61:a2:e0:cf:e1:a2:71:ac:c0:ad:55:db:3b:26:63:03:81: 8e:6c:53:dc:39:5c:b6:79:05:ff:d0:e6:5f:43:57:a1:1f:56: 0e:b2:eb:41:4d:5d:22:1c:7b:aa:d2:0f:9e:22:4e:e1:bf:90: a0:06:a4:4b:c2:cf:5c:41:12:4f:8e:b9:08:0d:a0:1a:3e:3e: b8:a1:d0:32:d6:89:62:95:e9:3d:94:15:d8:1a:f7:3c:06:e9: 6d:2a:a8:0e:9c:27:da:4c:8e:4a:27:a0:42:fa:f8:d4:57:2e: 17:7d:c7:37:8e:88:b0:20:ee:26:97:60:e1:cb:fb:51:d8:fa: 60:92:9e:d9:8f:05:88:db:8a:bb:f9:45:f3:21:0b:a3:21:db: 99:88:0d:55:24:c6:fa:20:ac:bd:c2:e4:95:26:56:89:23:f1: 89:7d:aa:84:8f:29:3a:cd:d0:78:6e:8d:86:08:3a:4e:96:b8: 56:79:5c:a6:8f:01:5f:1f:5f:15:d2:42:70:6e:88:b2:79:78: 83:c0:c9:81:a2:48:13:34:75:0f:71:bd:5d:10:d4:a5:16:9e: 53:03:96:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy+SW1bt8GOg7Sm2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVjMTA1YjItYjNjMy00OTEzLWIxNWQtNjRjYmJhZDFm MjI3MB4XDTI2MDIwMzE5MDYxMFoXDTI2MDUwNDE4MDYxMFowLzEtMCsGA1UEAxMk YjIyYzY1MTYtYTQ5Ni00MTFjLWJkZWYtNmYyNDM5MmU5MWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVp1m6QxoiwLbP8BY9gVCAuDasSrquJlekDE p3hy4K3E+tzf4TISl+gnamlnHKUzcSF1jNxJtCwT/w/LhFMJbZhZ03lqeiiXkc9s jubDvKo+5ZlvHArga0Hzdquugw3zxOs3Qre02YQmpHSIOP/vk6UeIQ2MAiCFERY/ NAZfLAPQtHmnM24m5saMvbzBpGpBa1l02kjIgsIidQ9kPpueKxQ7wLeArXlPNJ+T fgjdxe46js6oC4Z/nfFQklb2lOCapr/L0jcuDpM0Ywa09hQ3HUbRjpe4wM+iKIaI 7yRcxMPmNKo9L0NQ3Eb7qOx0uFwjwTMjhg0tJ6Bhn2ZluvywAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOA+WaUA3ol9XAGKbAV6fByr9AuZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNWMx MDViMi1iM2MzLTQ5MTMtYjE1ZC02NGNiYmFkMWYyMjcvZDg1MjRjOTMtZWVlYS0z YmJiLThkOGMtNGFhMWFiMDcyYmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjVjMTA1YjItYjNjMy00OTEzLWIx NWQtNjRjYmJhZDFmMjI3LzI1YzEwNWIyLWIzYzMtNDkxMy1iMTVkLTY0Y2JiYWQx ZjIyNy5jcmwwHwYDVR0jBBgwFoAUjmBTPE1JTsa7p9RdolNPRk32rRwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNWMxMDViMi1iM2MzLTQ5MTMtYjE1ZC02NGNi YmFkMWYyMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5WUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1Cn5i+z0TD9DlrE6WnRGI1Le8RuYvs2FrFSggDOZyV4UkLagFhouDP 4aJxrMCtVds7JmMDgY5sU9w5XLZ5Bf/Q5l9DV6EfVg6y60FNXSIce6rSD54iTuG/ kKAGpEvCz1xBEk+OuQgNoBo+Prih0DLWiWKV6T2UFdga9zwG6W0qqA6cJ9pMjkon oEL6+NRXLhd9xzeOiLAg7iaXYOHL+1HY+mCSntmPBYjbirv5RfMhC6Mh25mIDVUk xvogrL3C5JUmVokj8Yl9qoSPKTrN0HhujYYIOk6WuFZ5XKaPAV8fXxXSQnBuiLJ5 eIPAyYGiSBM0dQ9xvV0Q1KUWnlMDlmA= -----END CERTIFICATE-----Generated at Thu Feb 26 22:49:13 2026 by rpki-client