$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fabe5ec0-db19-498e-8f66-9403e18ddf6e/2a49c8f8-ec66-36f0-9d4a-c860db3e8078.roa File: 2a49c8f8-ec66-36f0-9d4a-c860db3e8078.roa (raw, json) Hash identifier: iHSAkxdpzni+xdvujMV9M776NrxOLfamOiPtIek4b1A= Subject key identifier: 57:E2:BA:7F:C2:C8:32:57:C9:14:44:38:DB:E8:8F:9B:A3:69:30:39 Certificate issuer: /CN=fabe5ec0-db19-498e-8f66-9403e18ddf6e Certificate serial: 010D0C9F4328584CD661F36F1C9A93F0BC305400 Authority key identifier: 66:8B:75:72:6D:6A:DF:E1:D5:F7:84:16:FD:FE:A6:8C:8F:6F:D3:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fabe5ec0-db19-498e-8f66-9403e18ddf6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fabe5ec0-db19-498e-8f66-9403e18ddf6e/2a49c8f8-ec66-36f0-9d4a-c860db3e8078.roa Signing time: Thu 12 Feb 2026 10:14:59 +0000 ROA not before: Thu 12 Feb 2026 10:14:59 +0000 ROA not after: Wed 13 May 2026 09:14:59 +0000 asID: 152179 IP address blocks: 23.150.132.0/24 maxlen: 24 2602:f4b7::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fabe5ec0-db19-498e-8f66-9403e18ddf6e/fabe5ec0-db19-498e-8f66-9403e18ddf6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fabe5ec0-db19-498e-8f66-9403e18ddf6e/fabe5ec0-db19-498e-8f66-9403e18ddf6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fabe5ec0-db19-498e-8f66-9403e18ddf6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:61:f3:6f:1c:9a:93:f0:bc:30:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fabe5ec0-db19-498e-8f66-9403e18ddf6e Validity Not Before: Feb 12 10:14:59 2026 GMT Not After : May 13 09:14:59 2026 GMT Subject: CN=029adfd7-6bc6-4a33-9c0c-5c61e9118558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3e:5d:06:25:21:5a:be:83:0f:d0:f2:fa:20: 72:93:49:ad:e5:f0:a5:1b:87:bc:21:97:30:d1:1d: 0c:94:0d:43:f3:5f:99:b9:a7:f9:b0:aa:ec:ec:51: 04:8f:46:ec:0f:55:01:83:21:e3:64:fb:53:c9:1f: 62:97:8d:5c:9f:02:48:75:27:ce:1b:e5:45:4f:47: 89:ef:5f:6e:ac:5c:e6:5a:47:b1:96:d6:15:ad:8c: 62:41:50:e2:50:0d:de:6f:0e:b5:6c:d0:a5:0d:58: 47:94:f6:99:d2:0e:fc:af:b7:62:62:c1:43:0a:ea: 9d:a4:b3:85:8c:35:e0:2d:f0:95:5d:92:16:30:19: b4:b9:3e:df:65:3b:6e:80:7c:b8:3c:0c:39:61:11: 23:8d:84:fc:ef:93:5e:87:19:68:a5:30:6c:73:c6: f3:cf:cb:0e:65:e9:f6:2c:e4:06:9b:33:4c:a2:b6: 94:09:2c:05:c3:f1:cc:f9:68:a7:78:0a:31:2e:38: 4e:4c:5a:52:7a:c1:78:44:da:e7:38:7f:53:5e:d7: 2a:45:eb:77:03:02:60:78:03:11:55:98:1e:df:e2: 77:77:8b:d2:27:cf:0f:95:55:b1:85:d0:bf:fb:13: c3:e3:c1:19:28:63:2d:e8:ad:cc:0a:39:d8:2c:bd: 87:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E2:BA:7F:C2:C8:32:57:C9:14:44:38:DB:E8:8F:9B:A3:69:30:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fabe5ec0-db19-498e-8f66-9403e18ddf6e/2a49c8f8-ec66-36f0-9d4a-c860db3e8078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fabe5ec0-db19-498e-8f66-9403e18ddf6e/fabe5ec0-db19-498e-8f66-9403e18ddf6e.crl X509v3 Authority Key Identifier: keyid:66:8B:75:72:6D:6A:DF:E1:D5:F7:84:16:FD:FE:A6:8C:8F:6F:D3:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fabe5ec0-db19-498e-8f66-9403e18ddf6e.cer sbgp-ipAddrBlock: critical IPv4: 23.150.132.0/24 IPv6: 2602:f4b7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:12:7f:87:23:14:f3:fc:a1:36:1f:92:98:aa:27:62:29:05: 69:03:06:44:1b:8f:f1:4a:4e:c0:f5:b5:29:8b:85:49:f4:b2: b1:4d:8c:bf:9e:c1:cb:e7:99:43:ae:44:6a:64:d6:08:9d:90: 90:f5:c9:e9:40:00:14:51:cd:c1:83:c1:9a:1b:d9:d0:d6:e8: a4:9f:f6:6b:7b:45:8d:52:ba:44:32:3c:80:3b:63:aa:88:bf: 7c:9b:85:b4:50:4c:63:82:1a:42:64:cd:6d:d4:bc:12:d0:1a: 84:26:d0:a5:ba:cc:b5:76:5d:2b:78:df:9a:51:8b:3d:8e:56: 9e:00:e7:96:b2:d3:67:e5:75:67:61:6b:99:c3:8f:e8:47:53: 00:dc:fc:76:5b:07:2a:48:91:4e:61:37:5c:af:a0:0e:12:a6: f5:7d:3b:7b:4a:b0:ad:db:d1:5b:18:94:e6:cf:d5:af:bd:2c: 06:bd:e5:0a:43:2e:77:32:55:48:19:bd:a0:58:e3:e5:84:da: 2c:cb:a2:c9:41:8b:99:5f:a6:ed:ad:24:48:90:cf:59:f1:8b: a1:7a:d6:76:82:41:9e:1e:24:bf:9e:3b:50:a6:a6:21:05:c4: b9:c0:54:ed:55:f8:c2:c4:5f:bd:00:33:a5:ab:57:d1:a1:92: 0f:3f:a3:28 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEzWYfNvHJqT8LwwVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFiZTVlYzAtZGIxOS00OThlLThmNjYtOTQwM2UxOGRk ZjZlMB4XDTI2MDIxMjEwMTQ1OVoXDTI2MDUxMzA5MTQ1OVowLzEtMCsGA1UEAxMk MDI5YWRmZDctNmJjNi00YTMzLTljMGMtNWM2MWU5MTE4NTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz5dBiUhWr6DD9Dy+iByk0mt5fClG4e8IZcw 0R0MlA1D81+Zuaf5sKrs7FEEj0bsD1UBgyHjZPtTyR9il41cnwJIdSfOG+VFT0eJ 719urFzmWkexltYVrYxiQVDiUA3ebw61bNClDVhHlPaZ0g78r7diYsFDCuqdpLOF jDXgLfCVXZIWMBm0uT7fZTtugHy4PAw5YREjjYT875NehxlopTBsc8bzz8sOZen2 LOQGmzNMoraUCSwFw/HM+WineAoxLjhOTFpSesF4RNrnOH9TXtcqRet3AwJgeAMR VZge3+J3d4vSJ88PlVWxhdC/+xPD48EZKGMt6K3MCjnYLL2HVQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFfiun/CyDJXyRREONvoj5ujaTA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mYWJl NWVjMC1kYjE5LTQ5OGUtOGY2Ni05NDAzZTE4ZGRmNmUvMmE0OWM4ZjgtZWM2Ni0z NmYwLTlkNGEtYzg2MGRiM2U4MDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZmFiZTVlYzAtZGIxOS00OThlLThm NjYtOTQwM2UxOGRkZjZlL2ZhYmU1ZWMwLWRiMTktNDk4ZS04ZjY2LTk0MDNlMThk ZGY2ZS5jcmwwHwYDVR0jBBgwFoAUZot1cm1q3+HV94QW/f6mjI9v09EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mYWJlNWVjMC1kYjE5LTQ5OGUtOGY2Ni05NDAz ZTE4ZGRmNmUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5aEMA4E AgACMAgDBgAmAvS3ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJEn+HIxTz/KE2H5KYqidiKQVpAwZEG4/x Sk7A9bUpi4VJ9LKxTYy/nsHL55lDrkRqZNYInZCQ9cnpQAAUUc3Bg8GaG9nQ1uik n/Zre0WNUrpEMjyAO2OqiL98m4W0UExjghpCZM1t1LwS0BqEJtClusy1dl0reN+a UYs9jlaeAOeWstNn5XVnYWuZw4/oR1MA3Px2WwcqSJFOYTdcr6AOEqb1fTt7SrCt 29FbGJTmz9WvvSwGveUKQy53MlVIGb2gWOPlhNosy6LJQYuZX6btrSRIkM9Z8Yuh etZ2gkGeHiS/njtQpqYhBcS5wFTtVfjCxF+9ADOlq1fRoZIPP6Mo -----END CERTIFICATE-----Generated at Thu Feb 26 22:49:11 2026 by rpki-client