$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/f86d50b4-8dd3-39e0-b952-412aff84b82f.roa File: f86d50b4-8dd3-39e0-b952-412aff84b82f.roa (raw, json) Hash identifier: XZVSBJ33fpjnpFFk+My/woCNvyVpTtGcg21eAqP5W2o= Subject key identifier: 16:E7:AC:D5:63:2E:3F:BB:DA:0A:D7:80:09:AD:D0:E9:3D:F5:CF:8C Certificate issuer: /CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Certificate serial: 010D0C9F4328584CBDB1DDA9C00235AEC9D9D4B0 Authority key identifier: 12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/f86d50b4-8dd3-39e0-b952-412aff84b82f.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 31898 IP address blocks: 162.223.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b1:dd:a9:c0:02:35:ae:c9:d9:d4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=11e6d455-e56e-42b0-a9cb-1dc840cc817d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ee:8c:0a:d5:56:af:fb:5c:b2:9c:26:34:01: 47:2e:1e:2c:a3:52:14:eb:13:69:19:1b:48:f2:59: dc:01:f0:0b:77:86:33:46:25:13:ec:d4:2f:87:3e: 7e:be:d6:42:a4:45:0b:12:d4:9f:d4:de:d9:91:97: 0d:f6:53:d7:3c:5e:0a:32:11:77:9a:8f:30:85:87: 2c:2c:17:dc:2e:8b:7e:1a:5c:91:0e:81:2c:d1:f9: 6e:b6:21:7e:d4:6e:d3:2c:ca:36:6b:0a:6e:c9:2b: 4e:a6:62:d2:55:85:53:a6:ff:fc:36:19:65:59:2b: f2:53:a0:af:25:b4:fc:c7:10:c8:25:04:44:a3:3e: 54:98:97:ce:d6:b8:a6:26:1b:bf:e7:c8:90:71:16: 65:99:b0:20:55:6a:12:07:44:a5:9d:65:4f:96:b5: 16:ca:8b:02:33:a3:e4:05:d4:d4:1b:28:be:0a:c9: 90:50:df:af:98:86:93:88:37:8f:bd:b0:e3:77:d4: a0:72:5e:64:9c:5a:72:6f:ba:f1:db:4e:0d:3a:1c: 7e:24:29:3e:2f:55:5e:c9:96:78:4a:20:37:29:35: 61:9a:8e:93:9d:3c:bf:17:1c:d1:4f:63:4d:0d:ea: 98:88:49:df:7e:52:66:ed:f0:08:09:8c:91:3a:66: 22:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E7:AC:D5:63:2E:3F:BB:DA:0A:D7:80:09:AD:D0:E9:3D:F5:CF:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/f86d50b4-8dd3-39e0-b952-412aff84b82f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl X509v3 Authority Key Identifier: keyid:12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer sbgp-ipAddrBlock: critical IPv4: 162.223.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:d2:1c:86:cf:92:6a:18:05:5b:32:f7:3a:1d:28:f4:61:5c: 45:94:71:af:a6:0f:8b:a2:07:6e:5c:22:f6:4d:98:84:bf:16: 56:83:94:9a:fa:72:28:84:2a:14:14:7b:83:5f:36:2c:35:e1: bb:ef:47:bb:1f:d3:11:c8:63:dd:c2:07:0b:29:35:50:b7:b2: 35:7d:ee:29:36:43:d8:47:a9:c1:34:5f:da:1c:29:2d:92:71: 6a:6c:3f:16:51:d7:32:03:31:4d:20:ea:9e:fb:ea:ca:7d:d3: 57:9f:2c:ec:60:3e:91:35:72:2a:7d:1a:8f:2d:ec:60:2b:51: 6b:0a:55:73:6c:78:23:24:d7:ad:8e:28:4e:eb:f6:58:58:cf: 3b:ff:c0:2c:75:6e:97:26:f5:2f:6b:c8:ee:b5:5b:10:59:32: f2:4e:33:c5:cf:96:32:a6:b0:09:c8:c4:8c:4e:f4:4e:ca:97: 93:c9:4d:85:58:b3:f4:de:ad:c2:87:65:1a:6f:1b:7e:8b:e3: 39:01:0f:d7:b4:99:d1:1e:74:4c:e2:de:d6:4b:a7:95:ff:fb: 33:82:7d:13:66:6d:6e:ec:89:9d:59:10:ea:75:82:05:39:71: c0:09:d8:f9:84:bd:e4:4f:db:80:be:f6:34:b8:39:94:06:8a: 17:a9:03:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9sd2pwAI1rsnZ1LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IwZTRlN2UtMmM3NS00NTQxLThkNjctZWQyNTQzYWZk NWYzMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk MTFlNmQ0NTUtZTU2ZS00MmIwLWE5Y2ItMWRjODQwY2M4MTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju6MCtVWr/tcspwmNAFHLh4so1IU6xNpGRtI 8lncAfALd4YzRiUT7NQvhz5+vtZCpEULEtSf1N7ZkZcN9lPXPF4KMhF3mo8whYcs LBfcLot+GlyRDoEs0flutiF+1G7TLMo2awpuyStOpmLSVYVTpv/8NhllWSvyU6Cv JbT8xxDIJQREoz5UmJfO1rimJhu/58iQcRZlmbAgVWoSB0SlnWVPlrUWyosCM6Pk BdTUGyi+CsmQUN+vmIaTiDePvbDjd9Sgcl5knFpyb7rx204NOhx+JCk+L1VeyZZ4 SiA3KTVhmo6TnTy/FxzRT2NNDeqYiEnfflJm7fAICYyROmYidwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbnrNVjLj+72grXgAmt0Ok99c+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBl NGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1NDNhZmQ1ZjMvZjg2ZDUwYjQtOGRkMy0z OWUwLWI5NTItNDEyYWZmODRiODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2IwZTRlN2UtMmM3NS00NTQxLThk NjctZWQyNTQzYWZkNWYzL2NiMGU0ZTdlLTJjNzUtNDU0MS04ZDY3LWVkMjU0M2Fm ZDVmMy5jcmwwHwYDVR0jBBgwFoAUEo+D87ZQ0uUfXUICoFXWshTPrMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBlNGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1 NDNhZmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrSHIbPkmoYBVsy9zodKPRhXEWUca+mD4uiB25cIvZNmIS/FlaDlJr6 ciiEKhQUe4NfNiw14bvvR7sf0xHIY93CBwspNVC3sjV97ik2Q9hHqcE0X9ocKS2S cWpsPxZR1zIDMU0g6p776sp901efLOxgPpE1cip9Go8t7GArUWsKVXNseCMk162O KE7r9lhYzzv/wCx1bpcm9S9ryO61WxBZMvJOM8XPljKmsAnIxIxO9E7Kl5PJTYVY s/TercKHZRpvG36L4zkBD9e0mdEedEzi3tZLp5X/+zOCfRNmbW7siZ1ZEOp1ggU5 ccAJ2PmEveRP24C+9jS4OZQGihepA04= -----END CERTIFICATE-----Generated at Thu Feb 26 03:26:32 2026 by rpki-client