$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/3669ecca-f135-306c-9018-d762944294a1.roa File: 3669ecca-f135-306c-9018-d762944294a1.roa (raw, json) Hash identifier: MoAkdQ98BqcQa+EQrwc8mnHO0RYJX8RvMRLQGglXzHU= Subject key identifier: 7E:68:1D:B1:67:3D:47:C1:60:75:04:52:65:6E:47:56:C6:71:61:16 Certificate issuer: /CN=0cf2fac2-d352-4204-9b53-f2d7e4684cce Certificate serial: 010D0C9F4328584CFC822FBEBF8CBF09BD13D600 Authority key identifier: EE:6F:64:C0:61:C7:EA:EB:7B:12:8B:45:2F:7F:93:BE:D5:36:CD:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/3669ecca-f135-306c-9018-d762944294a1.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 401990 IP address blocks: 23.145.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/0cf2fac2-d352-4204-9b53-f2d7e4684cce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/0cf2fac2-d352-4204-9b53-f2d7e4684cce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:2f:be:bf:8c:bf:09:bd:13:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cf2fac2-d352-4204-9b53-f2d7e4684cce Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=3b4c1f13-de36-4d43-a86e-9e1898920be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5f:3c:cb:fd:c9:2d:73:40:4b:fa:59:03:58: c2:16:07:f5:4f:1e:68:b3:e0:52:00:0d:f1:3e:e5: c1:9a:ea:ad:e1:4d:13:3d:22:d3:68:1f:63:ee:d2: 80:8e:42:2e:56:2c:80:32:f1:68:2c:f2:01:14:84: 7b:75:29:7d:ea:86:c8:e1:3e:af:27:3d:a4:0c:cb: 9e:d9:5f:1b:b5:d9:55:55:43:de:f2:6b:3b:4c:54: b2:e9:5c:1e:e8:26:cd:8a:4e:b2:65:d2:7f:c1:31: 31:0a:53:ea:5d:1f:bf:50:04:70:a6:02:f2:d7:8e: c8:53:a0:58:81:96:33:96:a4:16:ad:b0:da:89:02: 5b:9b:53:68:52:da:1c:dd:4b:11:15:31:69:c9:84: 08:98:56:76:b2:67:17:a9:72:24:c8:08:f9:74:12: d6:14:97:69:6a:de:b8:e4:93:f3:16:a2:a7:31:af: b6:fc:58:90:e9:a9:8c:42:52:26:7b:3f:76:e0:5c: b8:ee:7b:aa:0d:4a:d7:6a:3b:b2:a4:82:93:c9:e6: 16:9f:ba:b8:e6:e1:5f:f9:65:08:f6:31:e5:1f:27: ad:81:fa:33:60:03:ab:18:18:02:1a:02:0b:7f:1e: 5c:c3:7a:ba:26:90:cf:f8:22:58:e0:e5:93:98:0a: 51:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:68:1D:B1:67:3D:47:C1:60:75:04:52:65:6E:47:56:C6:71:61:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/3669ecca-f135-306c-9018-d762944294a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/0cf2fac2-d352-4204-9b53-f2d7e4684cce.crl X509v3 Authority Key Identifier: keyid:EE:6F:64:C0:61:C7:EA:EB:7B:12:8B:45:2F:7F:93:BE:D5:36:CD:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce.cer sbgp-ipAddrBlock: critical IPv4: 23.145.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:23:d1:02:a9:e7:87:a4:60:23:26:44:9e:dd:02:de:22:df: 01:bc:bf:90:50:35:2e:1d:8a:55:9e:ca:b9:b4:ed:f1:02:bf: c8:64:01:42:cc:39:ea:40:bd:30:71:43:11:91:f5:c3:fe:e4: cf:62:84:9c:bb:ee:bb:8d:a3:c9:67:a0:a1:68:bc:bd:ed:96: e0:a3:f5:8f:61:34:24:cf:3a:94:f1:04:c9:4f:03:40:ad:cd: e8:11:df:e0:5a:a7:c8:d4:36:42:85:4c:64:35:c9:d6:f9:94: 8b:25:92:b6:e9:9a:88:9b:00:cc:e8:19:ce:ee:e5:f2:69:b8: 37:c7:0c:cf:9d:c4:92:28:39:ed:72:76:70:bf:52:1c:90:ce: 0b:9a:b6:09:de:fe:0f:7c:e0:44:8c:1d:d1:ee:53:5b:53:ab: 2b:c8:48:8a:80:ae:d7:f3:04:88:56:8a:5a:01:04:d0:5e:c0: 37:f8:60:f1:87:2c:54:f8:38:d1:ff:d3:08:6d:19:06:a0:ad: 75:c3:0c:67:00:76:cc:d2:a0:59:9f:76:8a:2c:57:c5:66:c4: 5c:af:cd:8a:7c:e6:db:40:bc:79:13:56:12:b2:ab:a7:2f:22: a4:c3:81:9f:20:81:77:81:6a:4b:79:6b:52:5f:d7:88:cb:cd: 33:de:0e:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gi++v4y/Cb0T1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNmMmZhYzItZDM1Mi00MjA0LTliNTMtZjJkN2U0Njg0 Y2NlMB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk M2I0YzFmMTMtZGUzNi00ZDQzLWE4NmUtOWUxODk4OTIwYmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV88y/3JLXNAS/pZA1jCFgf1Tx5os+BSAA3x PuXBmuqt4U0TPSLTaB9j7tKAjkIuViyAMvFoLPIBFIR7dSl96obI4T6vJz2kDMue 2V8btdlVVUPe8ms7TFSy6Vwe6CbNik6yZdJ/wTExClPqXR+/UARwpgLy147IU6BY gZYzlqQWrbDaiQJbm1NoUtoc3UsRFTFpyYQImFZ2smcXqXIkyAj5dBLWFJdpat64 5JPzFqKnMa+2/FiQ6amMQlImez924Fy47nuqDUrXajuypIKTyeYWn7q45uFf+WUI 9jHlHyetgfozYAOrGBgCGgILfx5cw3q6JpDP+CJY4OWTmApRHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5oHbFnPUfBYHUEUmVuR1bGcWEWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wY2Yy ZmFjMi1kMzUyLTQyMDQtOWI1My1mMmQ3ZTQ2ODRjY2UvMzY2OWVjY2EtZjEzNS0z MDZjLTkwMTgtZDc2Mjk0NDI5NGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGNmMmZhYzItZDM1Mi00MjA0LTli NTMtZjJkN2U0Njg0Y2NlLzBjZjJmYWMyLWQzNTItNDIwNC05YjUzLWYyZDdlNDY4 NGNjZS5jcmwwHwYDVR0jBBgwFoAU7m9kwGHH6ut7EotFL3+TvtU2zRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wY2YyZmFjMi1kMzUyLTQyMDQtOWI1My1mMmQ3 ZTQ2ODRjY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5HUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMj0QKp54ekYCMmRJ7dAt4i3wG8v5BQNS4dilWeyrm07fECv8hkAULM OepAvTBxQxGR9cP+5M9ihJy77ruNo8lnoKFovL3tluCj9Y9hNCTPOpTxBMlPA0Ct zegR3+Bap8jUNkKFTGQ1ydb5lIslkrbpmoibAMzoGc7u5fJpuDfHDM+dxJIoOe1y dnC/UhyQzguatgne/g984ESMHdHuU1tTqyvISIqArtfzBIhWiloBBNBewDf4YPGH LFT4ONH/0whtGQagrXXDDGcAdszSoFmfdoosV8VmxFyvzYp85ttAvHkTVhKyq6cv IqTDgZ8ggXeBakt5a1Jf14jLzTPeDkI= -----END CERTIFICATE-----Generated at Thu Feb 26 13:30:21 2026 by rpki-client