$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/a956b36d-e614-3d36-8858-e52b12457b81.roa File: a956b36d-e614-3d36-8858-e52b12457b81.roa (raw, json) Hash identifier: CfN5MxcRcoiPcEWPGRe4TuWjtGN7OpF0nJIPOGon/zQ= Subject key identifier: 2C:65:DA:7D:35:EB:DF:88:E6:F8:A6:E5:95:AF:55:03:63:CB:9D:BE Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CA5F74D482007ED12002D65C0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/a956b36d-e614-3d36-8858-e52b12457b81.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 150.230.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:4d:48:20:07:ed:12:00:2d:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=1b4a5eba-968a-470d-91de-f4096d2e1c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:37:61:7c:f9:69:08:e4:24:f4:f4:42:83:84: 2c:00:4e:c7:52:f2:d5:f8:d9:da:29:8a:fe:8a:60: 68:70:3d:1a:6e:db:17:16:eb:ac:8a:f1:c4:f4:e4: 6e:07:64:bd:53:56:39:ca:7c:f5:7c:ae:bf:00:26: 39:6a:5e:f1:6d:d7:7f:4f:68:06:21:ea:7a:11:e9: 4f:38:83:d2:e2:be:73:d2:55:62:4d:6e:87:28:97: 3c:23:6b:cf:1a:66:2e:83:e0:33:66:d1:11:c2:7c: b7:7e:7c:66:89:43:2e:3f:0c:63:f2:7c:81:bf:d7: 13:69:4e:e9:ed:c5:7c:69:64:aa:4f:d4:61:2f:5a: 68:a5:2b:64:0d:9d:29:26:d2:a4:b2:2a:e3:95:ff: 63:42:cc:4b:5e:85:bb:28:96:b5:5b:52:88:65:ea: 15:e0:ef:00:48:b7:11:d8:b6:99:78:4d:47:51:4d: 54:4c:fd:5c:76:17:bb:7c:b9:12:23:25:33:b6:04: f5:68:51:ed:49:fb:2f:ef:a9:1c:b6:67:39:21:4c: 37:c1:1e:87:3e:f0:a7:eb:04:b5:72:2e:f0:0c:00: 1e:4f:c9:a1:93:ce:18:4e:39:92:7c:46:bb:27:37: b8:fb:5e:6f:91:c9:79:c7:7c:d0:fa:43:a7:e9:2a: 8a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:65:DA:7D:35:EB:DF:88:E6:F8:A6:E5:95:AF:55:03:63:CB:9D:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/a956b36d-e614-3d36-8858-e52b12457b81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 150.230.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:a3:3b:80:1e:f1:7e:b6:2b:e7:2e:ae:f1:a1:c4:c1:e3:5c: 93:c1:db:78:cc:6a:a3:02:42:71:32:83:70:29:c0:b1:a0:3c: 04:87:11:6a:94:29:b7:ff:9c:18:22:58:85:1a:51:f6:e6:c9: 3d:b8:0e:05:0a:da:82:2c:3b:92:c3:4a:0f:c0:c8:8a:1b:4a: 22:16:83:7a:78:fd:59:03:13:d1:64:77:b8:e5:3f:16:0b:ae: 6a:ac:03:19:89:90:70:d3:3e:dc:41:bc:be:00:e1:65:15:f6: 90:00:c0:83:45:f2:80:1b:f3:7e:a4:bd:0b:51:e5:a8:96:e3: c0:42:ea:23:0a:78:a7:ab:c6:45:43:ef:8c:d1:2a:21:8e:d1: ab:59:13:ed:ff:f8:99:e3:2c:d0:41:34:34:31:9b:94:24:f7: 29:05:a5:b1:7f:5c:bd:49:49:e9:2d:3b:9b:4f:29:04:cd:7f: f7:f8:1e:d7:a4:36:1f:51:b2:68:8e:5f:e9:28:fd:ad:40:09: 6d:30:39:36:9f:5d:08:f2:5c:05:08:21:40:a1:e2:a4:f6:68: 3f:97:7e:60:f4:5d:3c:0a:87:fa:66:20:49:17:c6:83:45:aa: 94:78:44:8a:df:b9:55:85:5e:68:ec:29:1d:68:a3:20:ba:08: ea:42:05:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl901IIAftEgAtZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk MWI0YTVlYmEtOTY4YS00NzBkLTkxZGUtZjQwOTZkMmUxYzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTdhfPlpCOQk9PRCg4QsAE7HUvLV+NnaKYr+ imBocD0abtsXFuusivHE9ORuB2S9U1Y5ynz1fK6/ACY5al7xbdd/T2gGIep6EelP OIPS4r5z0lViTW6HKJc8I2vPGmYug+AzZtERwny3fnxmiUMuPwxj8nyBv9cTaU7p 7cV8aWSqT9RhL1popStkDZ0pJtKksirjlf9jQsxLXoW7KJa1W1KIZeoV4O8ASLcR 2LaZeE1HUU1UTP1cdhe7fLkSIyUztgT1aFHtSfsv76kctmc5IUw3wR6HPvCn6wS1 ci7wDAAeT8mhk84YTjmSfEa7Jze4+15vkcl5x3zQ+kOn6SqKQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxl2n0169+I5vim5ZWvVQNjy52+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYTk1NmIzNmQtZTYxNC0z ZDM2LTg4NTgtZTUyYjEyNDU3YjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDluYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmjO4Ae8X62K+curvGhxMHjXJPB23jMaqMCQnEyg3ApwLGgPASHEWqU Kbf/nBgiWIUaUfbmyT24DgUK2oIsO5LDSg/AyIobSiIWg3p4/VkDE9Fkd7jlPxYL rmqsAxmJkHDTPtxBvL4A4WUV9pAAwINF8oAb836kvQtR5aiW48BC6iMKeKerxkVD 74zRKiGO0atZE+3/+JnjLNBBNDQxm5Qk9ykFpbF/XL1JSektO5tPKQTNf/f4Htek Nh9RsmiOX+ko/a1ACW0wOTafXQjyXAUIIUCh4qT2aD+XfmD0XTwKh/pmIEkXxoNF qpR4RIrfuVWFXmjsKR1ooyC6COpCBRg= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:09 2026 by rpki-client