$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a4696e90-da7b-3ac8-b1cf-2351e43df747.roa File: a4696e90-da7b-3ac8-b1cf-2351e43df747.roa (raw, json) Hash identifier: cshv0KrUPoAFrbXSTqbhr9cYLFX5OyMY1qa66Lifsf8= Subject key identifier: 96:64:BC:DD:E6:59:61:A4:2D:57:C6:E8:19:51:AB:73:74:E0:17:48 Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584CD13CAAF07F44523EBAB80D38 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a4696e90-da7b-3ac8-b1cf-2351e43df747.roa Signing time: Tue 10 Feb 2026 14:00:41 +0000 ROA not before: Tue 10 Feb 2026 14:00:41 +0000 ROA not after: Mon 11 May 2026 13:00:41 +0000 asID: 46432 IP address blocks: 23.139.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d1:3c:aa:f0:7f:44:52:3e:ba:b8:0d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Feb 10 14:00:41 2026 GMT Not After : May 11 13:00:41 2026 GMT Subject: CN=f8c8de1d-5a0f-45a2-a9c7-e4f2f57a7a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bf:56:bd:68:c8:86:5b:e6:0f:e0:d7:1c:2d: 39:99:de:19:1e:82:b4:0c:10:dd:75:51:c6:70:48: 41:cc:15:7b:18:c0:98:93:52:84:08:80:79:e9:80: b1:81:ca:bc:69:18:55:02:05:c7:e7:b2:9b:25:db: c9:e1:18:53:08:e6:e6:11:ca:e1:10:b5:73:ec:ba: 01:16:c4:63:10:97:c3:fc:20:80:08:9c:b4:dd:fa: 93:e8:7e:8a:a9:58:f2:40:07:5c:5e:a1:e8:36:4b: c4:98:fc:f5:81:30:ad:5f:b5:48:01:b1:06:37:8c: 44:32:7d:fc:ef:1c:ea:6c:c3:be:bb:70:79:4b:d6: fe:c6:c7:42:93:4d:ea:35:51:44:cc:4a:43:da:93: 90:03:3c:9e:a5:1e:d2:c7:3a:7e:44:b9:1a:2a:9d: 1c:69:6a:fa:dd:fd:b1:64:41:fa:33:b4:3e:62:8c: 58:63:a6:a3:b1:e5:29:1d:cf:42:73:b3:9f:91:9e: b3:7d:b1:04:87:03:93:32:a6:40:28:98:5e:72:d0: ff:30:85:14:fe:f9:04:44:65:aa:f0:af:3b:9d:3e: 9b:db:3e:5d:59:9a:66:6d:5f:e5:37:47:0d:58:01: a9:34:1e:e7:ad:66:28:e5:ec:6a:07:ad:53:42:b2: 18:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:64:BC:DD:E6:59:61:A4:2D:57:C6:E8:19:51:AB:73:74:E0:17:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a4696e90-da7b-3ac8-b1cf-2351e43df747.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 23.139.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:4e:e5:ec:68:7f:70:68:77:09:9d:0b:4a:88:7b:0b:24:d0: ec:91:9b:73:98:3b:0b:cc:b9:3e:fd:c9:e8:4d:88:41:4c:ed: c2:ea:c1:a8:47:92:22:2b:a9:9b:e7:dc:c7:70:e0:39:fc:b5: a6:07:41:3b:59:c1:6d:d0:55:f0:c9:7e:bc:83:a2:67:8a:a8: f1:45:83:9b:f0:93:05:43:c1:f6:0d:a8:f0:5f:57:fa:33:18: ad:b1:f4:fd:c5:25:e7:0d:0f:52:07:7c:ac:a6:b6:53:c1:03: 6e:47:c1:ca:d6:eb:23:07:ad:4b:0d:a5:70:f5:4d:90:a2:61: d3:88:0f:39:ba:a4:72:bf:31:3c:55:ec:3a:f0:de:58:b3:bf: c5:08:23:38:b0:6d:0c:ad:00:7e:2b:b6:f5:41:e1:0b:c9:0b: 35:88:4b:ed:56:7c:64:3e:f2:a0:b9:cd:fc:d5:0f:e8:f2:9a: 63:fc:77:70:23:ee:c7:a2:b3:e9:90:cd:1b:fe:65:2d:46:dd: 20:ed:83:cc:1f:bd:8e:05:eb:9d:eb:77:b1:ca:72:40:55:b2: 75:b8:f0:44:96:92:0e:c6:c1:5d:57:64:21:0e:04:11:7f:a9: cb:2e:e3:d6:7d:21:b0:2e:dc:0e:8b:f6:63:da:58:b5:c8:e5: 5b:16:7c:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzRPKrwf0RSPrq4DTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI2MDIxMDE0MDA0MVoXDTI2MDUxMTEzMDA0MVowLzEtMCsGA1UEAxMk ZjhjOGRlMWQtNWEwZi00NWEyLWE5YzctZTRmMmY1N2E3YTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL9WvWjIhlvmD+DXHC05md4ZHoK0DBDddVHG cEhBzBV7GMCYk1KECIB56YCxgcq8aRhVAgXH57KbJdvJ4RhTCObmEcrhELVz7LoB FsRjEJfD/CCACJy03fqT6H6KqVjyQAdcXqHoNkvEmPz1gTCtX7VIAbEGN4xEMn38 7xzqbMO+u3B5S9b+xsdCk03qNVFEzEpD2pOQAzyepR7Sxzp+RLkaKp0caWr63f2x ZEH6M7Q+YoxYY6ajseUpHc9Cc7OfkZ6zfbEEhwOTMqZAKJhectD/MIUU/vkERGWq 8K87nT6b2z5dWZpmbV/lN0cNWAGpNB7nrWYo5exqB61TQrIYcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZkvN3mWWGkLVfG6BlRq3N04BdIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvYTQ2OTZlOTAtZGE3Yi0z YWM4LWIxY2YtMjM1MWU0M2RmNzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4tgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdO5exof3BodwmdC0qIewsk0OyRm3OYOwvMuT79yehNiEFM7cLqwahH kiIrqZvn3Mdw4Dn8taYHQTtZwW3QVfDJfryDomeKqPFFg5vwkwVDwfYNqPBfV/oz GK2x9P3FJecND1IHfKymtlPBA25HwcrW6yMHrUsNpXD1TZCiYdOIDzm6pHK/MTxV 7Drw3lizv8UIIziwbQytAH4rtvVB4QvJCzWIS+1WfGQ+8qC5zfzVD+jymmP8d3Aj 7seis+mQzRv+ZS1G3SDtg8wfvY4F653rd7HKckBVsnW48ESWkg7GwV1XZCEOBBF/ qcsu49Z9IbAu3A6L9mPaWLXI5VsWfL0= -----END CERTIFICATE-----Generated at Mon Mar 2 16:48:50 2026 by rpki-client