$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/9fdf1578-2d9a-3898-b19c-fb3ca0e1cf8e.roa File: 9fdf1578-2d9a-3898-b19c-fb3ca0e1cf8e.roa (raw, json) Hash identifier: PyNYmMD+ndJGkOjkLtsTUnyM/DUvvSWqrp6VIw4bl8M= Subject key identifier: 16:8E:E1:34:45:48:F7:D5:26:26:6B:2C:BE:BF:B8:AA:15:BB:70:E1 Certificate issuer: /CN=9c74a627-7577-4f11-89e0-589500621344 Certificate serial: 010D0C9F4328584C85DC1C0FA203D1E5C3816600 Authority key identifier: D6:44:B8:32:E0:03:37:FD:A1:6A:62:DE:AE:42:CF:56:27:4A:A1:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/9fdf1578-2d9a-3898-b19c-fb3ca0e1cf8e.roa Signing time: Wed 14 Jan 2026 14:00:38 +0000 ROA not before: Wed 14 Jan 2026 14:00:38 +0000 ROA not after: Tue 14 Apr 2026 13:00:38 +0000 asID: 2914 IP address blocks: 23.133.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/9c74a627-7577-4f11-89e0-589500621344.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/9c74a627-7577-4f11-89e0-589500621344.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:85:dc:1c:0f:a2:03:d1:e5:c3:81:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c74a627-7577-4f11-89e0-589500621344 Validity Not Before: Jan 14 14:00:38 2026 GMT Not After : Apr 14 13:00:38 2026 GMT Subject: CN=cac330f4-a5e0-4e85-834e-ca49d7f68844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cd:21:ef:67:8a:36:be:c7:10:99:f5:4f:2e: 88:48:0f:0e:f1:91:26:64:fb:fe:56:ba:a9:2c:36: f5:cb:fb:1d:64:c4:6d:ab:e5:45:ef:cb:da:29:66: de:d6:8a:28:85:18:a6:b1:dd:ce:71:4b:bd:80:ae: ab:18:e0:cd:85:04:74:5f:14:1c:b6:3c:dd:9d:ed: fe:c7:b6:71:f0:ca:bb:9c:e0:06:37:62:a1:d1:6a: 01:8d:50:e9:e1:21:a0:53:9a:a5:5f:1f:aa:cf:a2: d4:fe:2e:76:21:96:66:88:26:87:c0:e9:46:aa:31: 69:50:61:9f:16:3a:a9:a8:fa:25:99:46:5f:f1:86: 2a:98:df:5f:02:16:e2:89:63:7c:ed:6b:fd:30:28: 4f:f8:9e:d7:ce:04:7f:ba:53:13:7c:9d:7c:7c:e7: 1e:d8:4c:6d:9f:63:54:92:93:d4:22:38:8a:90:36: 17:ca:76:07:64:8d:7a:68:97:91:4c:38:d6:96:06: b9:0f:e8:60:f5:57:1c:f7:18:e6:eb:7b:17:2c:84: ad:21:38:08:4c:29:52:0f:d5:46:f6:c4:d8:6c:1e: e9:a3:99:82:0f:89:db:e0:ac:a7:d8:61:49:1f:aa: 83:61:8c:e5:4e:0f:76:d6:be:ac:09:23:0a:2d:41: cd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8E:E1:34:45:48:F7:D5:26:26:6B:2C:BE:BF:B8:AA:15:BB:70:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/9fdf1578-2d9a-3898-b19c-fb3ca0e1cf8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/9c74a627-7577-4f11-89e0-589500621344.crl X509v3 Authority Key Identifier: keyid:D6:44:B8:32:E0:03:37:FD:A1:6A:62:DE:AE:42:CF:56:27:4A:A1:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344.cer sbgp-ipAddrBlock: critical IPv4: 23.133.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:56:b0:7e:4d:e9:2b:ea:fd:ba:de:96:e0:d0:af:65:69:9d: b1:d9:db:b4:fb:6e:ab:ac:6b:13:fa:3f:eb:30:e1:5d:8c:ab: 58:f5:f0:e4:28:d3:8d:21:a2:ae:21:cd:63:96:f7:34:1f:c9: 4e:7a:3e:d7:d9:9c:66:15:02:d5:20:36:68:cd:cb:c3:a7:83: 75:d0:26:43:85:41:0c:dc:d1:63:b5:5f:ba:e5:1f:43:80:d2: e4:f9:20:a1:30:f4:c5:6e:a2:43:73:08:47:6e:8f:74:63:90: ab:4a:f5:3a:2c:f4:30:11:09:1a:6d:84:10:01:83:8f:d6:28: 34:10:34:78:94:2a:03:3d:ef:e9:6f:75:03:b1:cf:3c:0a:fa: 94:3b:01:4d:d3:2d:34:69:13:57:52:99:1a:da:51:b2:87:aa: ca:d9:96:e8:09:1d:54:d6:17:95:de:70:15:c3:56:60:45:5d: 6c:08:04:78:9f:ba:68:95:12:45:2e:cb:9e:92:56:9c:9e:31: 85:74:9c:6a:1d:75:39:10:0c:92:b6:b9:9c:39:ac:0f:4d:cd: 8d:ab:8f:e0:fc:c2:38:ec:8b:2e:8a:59:52:08:6f:c9:6d:ae: d9:80:01:9d:33:1f:0e:20:44:b3:46:97:a1:e9:3c:f0:93:0c: ef:90:f1:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyF3BwPogPR5cOBZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM3NGE2MjctNzU3Ny00ZjExLTg5ZTAtNTg5NTAwNjIx MzQ0MB4XDTI2MDExNDE0MDAzOFoXDTI2MDQxNDEzMDAzOFowLzEtMCsGA1UEAxMk Y2FjMzMwZjQtYTVlMC00ZTg1LTgzNGUtY2E0OWQ3ZjY4ODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos0h72eKNr7HEJn1Ty6ISA8O8ZEmZPv+Vrqp LDb1y/sdZMRtq+VF78vaKWbe1ooohRimsd3OcUu9gK6rGODNhQR0XxQctjzdne3+ x7Zx8Mq7nOAGN2Kh0WoBjVDp4SGgU5qlXx+qz6LU/i52IZZmiCaHwOlGqjFpUGGf FjqpqPolmUZf8YYqmN9fAhbiiWN87Wv9MChP+J7XzgR/ulMTfJ18fOce2Extn2NU kpPUIjiKkDYXynYHZI16aJeRTDjWlga5D+hg9Vcc9xjm63sXLIStITgITClSD9VG 9sTYbB7po5mCD4nb4Kyn2GFJH6qDYYzlTg921r6sCSMKLUHNSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaO4TRFSPfVJiZrLL6/uKoVu3DhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85Yzc0 YTYyNy03NTc3LTRmMTEtODllMC01ODk1MDA2MjEzNDQvOWZkZjE1NzgtMmQ5YS0z ODk4LWIxOWMtZmIzY2EwZTFjZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWM3NGE2MjctNzU3Ny00ZjExLTg5 ZTAtNTg5NTAwNjIxMzQ0LzljNzRhNjI3LTc1NzctNGYxMS04OWUwLTU4OTUwMDYy MTM0NC5jcmwwHwYDVR0jBBgwFoAU1kS4MuADN/2hamLerkLPVidKobgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85Yzc0YTYyNy03NTc3LTRmMTEtODllMC01ODk1 MDA2MjEzNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhWsH5N6Svq/breluDQr2VpnbHZ27T7bqusaxP6P+sw4V2Mq1j18OQo 040hoq4hzWOW9zQfyU56PtfZnGYVAtUgNmjNy8Ong3XQJkOFQQzc0WO1X7rlH0OA 0uT5IKEw9MVuokNzCEduj3RjkKtK9Tos9DARCRpthBABg4/WKDQQNHiUKgM97+lv dQOxzzwK+pQ7AU3TLTRpE1dSmRraUbKHqsrZlugJHVTWF5XecBXDVmBFXWwIBHif umiVEkUuy56SVpyeMYV0nGoddTkQDJK2uZw5rA9NzY2rj+D8wjjsiy6KWVIIb8lt rtmAAZ0zHw4gRLNGl6HpPPCTDO+Q8U8= -----END CERTIFICATE-----Generated at Sun Feb 22 14:11:42 2026 by rpki-client