$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8/20d8ae8f-d3e9-3830-99ce-6c904dcf4a7b.roa File: 20d8ae8f-d3e9-3830-99ce-6c904dcf4a7b.roa (raw, json) Hash identifier: w1fLvXs2fT7IDSOMekXQuizV5Ie8n/G7GOwEcJvGQqs= Subject key identifier: 4C:6F:4B:BB:E6:D1:9C:C7:67:0F:F4:24:F6:76:79:BE:2C:BE:54:8B Certificate issuer: /CN=03b593fc-7488-4247-a974-e98b5e2cd5b8 Certificate serial: 010D0C9F4328584CFC823F2D086253E75ABDFD00 Authority key identifier: 8E:AB:9E:26:3D:94:DA:D5:03:63:A4:EF:C3:46:CF:03:FF:B8:8E:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8/20d8ae8f-d3e9-3830-99ce-6c904dcf4a7b.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 401990 IP address blocks: 23.145.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8/03b593fc-7488-4247-a974-e98b5e2cd5b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8/03b593fc-7488-4247-a974-e98b5e2cd5b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:3f:2d:08:62:53:e7:5a:bd:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b593fc-7488-4247-a974-e98b5e2cd5b8 Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=5cfa0089-023f-45e3-a140-bf1bc8d56996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:84:02:17:96:37:84:4b:69:67:ea:c5:63:96: 37:b3:da:36:f5:ce:8a:75:f8:42:87:07:44:5c:e3: 63:54:86:48:53:93:6d:bd:46:3d:6e:c9:25:9e:06: cb:13:93:dc:a1:b5:3a:e6:6c:3b:c0:da:b7:72:e6: da:1f:41:07:e1:f4:50:78:7c:ea:23:15:be:5d:1d: 70:8d:16:e3:fe:6e:d7:8a:be:b2:8a:bc:11:6b:e0: 03:e1:c3:46:1b:3b:e6:ea:1d:fb:3f:3a:c0:0b:d3: 0b:a0:44:d8:f6:d6:50:1e:59:16:2c:09:df:63:51: 44:4a:b3:2a:f8:b7:16:da:34:a0:db:91:b5:3f:14: bc:31:50:61:09:dd:82:2a:cf:9f:f8:23:b3:76:bb: 44:86:7c:86:13:db:68:57:d0:93:a7:53:25:9d:a7: 48:21:cf:6a:c6:c8:b5:22:d8:b4:16:93:38:e1:31: 41:00:64:aa:7c:3b:8b:3e:30:c6:53:4d:bf:10:6e: 45:57:b1:a7:b9:6a:28:d0:01:90:5f:94:75:ce:5a: 84:63:2b:ac:16:d6:09:66:cc:b0:dc:b1:54:99:45: ca:81:b0:dc:7d:d6:76:85:03:b3:32:70:7b:3d:bb: 1f:84:12:ee:fb:3b:65:3c:f9:a3:44:4d:cf:40:14: 84:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6F:4B:BB:E6:D1:9C:C7:67:0F:F4:24:F6:76:79:BE:2C:BE:54:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8/20d8ae8f-d3e9-3830-99ce-6c904dcf4a7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8/03b593fc-7488-4247-a974-e98b5e2cd5b8.crl X509v3 Authority Key Identifier: keyid:8E:AB:9E:26:3D:94:DA:D5:03:63:A4:EF:C3:46:CF:03:FF:B8:8E:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8.cer sbgp-ipAddrBlock: critical IPv4: 23.145.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:9f:97:82:3a:5b:8d:e4:94:19:e2:af:c0:88:cd:be:21:2e: af:a6:f3:3b:f2:c9:e0:08:6b:17:82:79:6e:f4:22:f3:1b:42: 5e:ae:41:92:97:c3:78:93:ff:e3:af:45:2e:40:de:1e:64:bc: 59:7d:87:72:34:f1:44:27:9d:c2:e4:12:52:28:35:ba:77:55: 87:a8:2c:f6:82:34:59:ec:fa:da:fa:9e:59:9d:75:cc:dd:65: b8:ad:7a:64:09:dc:89:3b:1a:6d:b9:a0:07:57:9d:17:ef:9a: 69:b7:5b:20:b3:fe:d7:a2:fa:93:c3:7e:f0:b7:02:a3:a8:1f: 84:48:a2:81:1f:e5:e8:8d:5f:20:57:74:34:ba:f1:91:80:15: 19:f6:4c:76:be:c6:1f:18:a3:90:ec:b6:d7:dd:92:b4:e3:6b: b9:48:c2:a5:fc:e0:09:94:62:47:19:2e:ff:20:57:06:f7:80: e7:b9:e1:68:33:7c:2e:69:a2:e1:07:10:55:0e:35:13:1e:4f: 61:65:73:e3:83:fe:70:80:9e:e1:52:0d:b5:a5:9a:66:c1:10: 0c:89:b6:b9:ff:35:64:d9:72:50:19:c7:bd:24:a1:2c:f0:6b: 53:39:30:9f:06:73:3b:fa:1f:03:ab:f0:32:f8:61:f3:4f:00: f1:b1:a1:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gj8tCGJT51q9/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTkzZmMtNzQ4OC00MjQ3LWE5NzQtZTk4YjVlMmNk NWI4MB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk NWNmYTAwODktMDIzZi00NWUzLWExNDAtYmYxYmM4ZDU2OTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYQCF5Y3hEtpZ+rFY5Y3s9o29c6KdfhChwdE XONjVIZIU5NtvUY9bsklngbLE5PcobU65mw7wNq3cubaH0EH4fRQeHzqIxW+XR1w jRbj/m7Xir6yirwRa+AD4cNGGzvm6h37PzrAC9MLoETY9tZQHlkWLAnfY1FESrMq +LcW2jSg25G1PxS8MVBhCd2CKs+f+COzdrtEhnyGE9toV9CTp1MlnadIIc9qxsi1 Iti0FpM44TFBAGSqfDuLPjDGU02/EG5FV7GnuWoo0AGQX5R1zlqEYyusFtYJZsyw 3LFUmUXKgbDcfdZ2hQOzMnB7PbsfhBLu+ztlPPmjRE3PQBSEjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExvS7vm0ZzHZw/0JPZ2eb4svlSLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wM2I1 OTNmYy03NDg4LTQyNDctYTk3NC1lOThiNWUyY2Q1YjgvMjBkOGFlOGYtZDNlOS0z ODMwLTk5Y2UtNmM5MDRkY2Y0YTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMDNiNTkzZmMtNzQ4OC00MjQ3LWE5 NzQtZTk4YjVlMmNkNWI4LzAzYjU5M2ZjLTc0ODgtNDI0Ny1hOTc0LWU5OGI1ZTJj ZDViOC5jcmwwHwYDVR0jBBgwFoAUjqueJj2U2tUDY6Tvw0bPA/+4jv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wM2I1OTNmYy03NDg4LTQyNDctYTk3NC1lOThi NWUyY2Q1YjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5G8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKfl4I6W43klBnir8CIzb4hLq+m8zvyyeAIaxeCeW70IvMbQl6uQZKX w3iT/+OvRS5A3h5kvFl9h3I08UQnncLkElIoNbp3VYeoLPaCNFns+tr6nlmddczd ZbitemQJ3Ik7Gm25oAdXnRfvmmm3WyCz/tei+pPDfvC3AqOoH4RIooEf5eiNXyBX dDS68ZGAFRn2THa+xh8Yo5DsttfdkrTja7lIwqX84AmUYkcZLv8gVwb3gOe54Wgz fC5pouEHEFUONRMeT2Flc+OD/nCAnuFSDbWlmmbBEAyJtrn/NWTZclAZx70koSzw a1M5MJ8Gczv6HwOr8DL4YfNPAPGxoWE= -----END CERTIFICATE-----Generated at Thu Feb 26 13:29:09 2026 by rpki-client