$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/41f690aa-9b57-3b7e-8232-c49b539a6d86.roa File: 41f690aa-9b57-3b7e-8232-c49b539a6d86.roa (raw, json) Hash identifier: bBEuQC5qr3XM39kgJZ1+n9jfw5oe3oM8oBtHvtKrcy0= Subject key identifier: 5F:1F:5D:DB:32:C2:97:A2:AE:10:1C:AC:76:62:AC:CE:E7:62:A5:06 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584CDC676DDB2D4B0270393FF100 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/41f690aa-9b57-3b7e-8232-c49b539a6d86.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 11135 IP address blocks: 65.59.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:6d:db:2d:4b:02:70:39:3f:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=f1583093-391e-4ec5-8eac-4d14091f9b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f1:8e:28:46:3e:2c:50:e9:1c:92:38:a8:6c: da:0c:7b:e3:d4:14:c7:1f:ae:68:7b:87:38:8a:87: a6:5f:8b:e1:a1:84:35:05:33:94:7a:6b:8f:13:72: da:00:dc:3a:70:08:7b:ae:58:fc:c6:33:dd:4f:18: 9b:de:3c:e8:d5:b1:16:ae:57:1f:5a:ca:9f:be:1f: c6:10:3c:57:5b:80:80:01:f6:c4:34:0e:7c:31:e9: dd:f2:73:20:e9:c5:75:cb:0b:3e:57:3a:91:a3:8e: 7c:a8:b2:e6:7b:3b:95:4b:9f:43:a4:4c:f9:1c:67: 24:bd:0a:92:a3:52:c9:6a:c8:65:52:c1:75:d0:fc: e3:a1:ce:9d:9a:9a:f9:60:7a:1a:04:8d:28:4a:e0: 95:cc:8b:37:45:b3:78:35:bc:8d:38:26:e0:15:7c: 35:b1:de:44:0d:61:dd:6b:8f:e7:19:e9:03:31:5e: 49:bf:c8:e2:7c:f6:11:d7:a1:31:5e:cf:d2:c7:13: ec:de:3f:dd:f8:bc:d2:ac:f1:62:df:b8:25:2c:2f: 34:cd:df:45:ad:90:9b:b0:77:07:42:bc:17:b6:70: 60:d4:60:12:47:15:27:d9:cd:7a:c7:16:2e:84:eb: 62:fd:2f:b0:24:82:e9:e8:b6:14:0c:92:81:0c:65: ac:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1F:5D:DB:32:C2:97:A2:AE:10:1C:AC:76:62:AC:CE:E7:62:A5:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/41f690aa-9b57-3b7e-8232-c49b539a6d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 65.59.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:4f:e1:92:f7:5c:ce:ed:1d:b4:37:ff:75:28:c9:43:40:c6: f8:34:cb:46:ae:73:61:9d:c9:fd:e7:e6:09:ce:38:86:ab:fc: 89:48:9e:fc:bc:34:cc:83:02:4b:21:24:ba:0e:0c:1d:69:38: 60:bc:52:c6:7e:62:91:c4:c4:35:85:24:8b:e5:80:14:13:95: 95:c0:cb:b2:a7:4c:d9:d6:af:3d:4e:9a:f9:49:a0:e4:dd:86: e3:4e:d3:5d:21:a6:d4:dd:e5:bf:ed:71:08:fa:b9:ee:6f:bc: da:25:f7:f2:b1:61:c0:6b:b7:b7:36:e6:c4:a6:33:f4:da:3f: 02:8a:3c:75:e0:69:69:99:96:13:45:48:46:0f:b1:94:00:34: 04:58:59:24:76:fa:f3:c2:9c:ef:51:7f:87:13:10:a0:c5:85: 30:d4:9e:97:a6:07:31:1b:4c:8f:85:8f:72:30:28:f8:93:8c: a8:1b:d6:f0:4e:01:91:9c:f6:d5:28:06:4c:ad:eb:cb:f5:bc: 63:b5:ca:8a:c4:cd:c1:ef:4b:4e:86:13:d8:58:61:94:c7:34: 90:b6:9c:9f:aa:97:8a:6d:43:1c:b0:ae:a0:e7:ce:e7:a0:b2: 1c:8f:57:7a:2e:80:e0:a5:be:ad:57:a4:a2:cf:98:2c:34:bc: c3:db:c1:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ23bLUsCcDk/8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk ZjE1ODMwOTMtMzkxZS00ZWM1LThlYWMtNGQxNDA5MWY5YjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/GOKEY+LFDpHJI4qGzaDHvj1BTHH65oe4c4 ioemX4vhoYQ1BTOUemuPE3LaANw6cAh7rlj8xjPdTxib3jzo1bEWrlcfWsqfvh/G EDxXW4CAAfbENA58Mend8nMg6cV1yws+VzqRo458qLLmezuVS59DpEz5HGckvQqS o1LJashlUsF10Pzjoc6dmpr5YHoaBI0oSuCVzIs3RbN4NbyNOCbgFXw1sd5EDWHd a4/nGekDMV5Jv8jifPYR16ExXs/SxxPs3j/d+LzSrPFi37glLC80zd9FrZCbsHcH QrwXtnBg1GASRxUn2c16xxYuhOti/S+wJILp6LYUDJKBDGWswQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8fXdsywpeirhAcrHZirM7nYqUGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNDFmNjkwYWEtOWI1Ny0z YjdlLTgyMzItYzQ5YjUzOWE2ZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTv3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENP4ZL3XM7tHbQ3/3UoyUNAxvg0y0auc2Gdyf3n5gnOOIar/IlInvy8 NMyDAkshJLoODB1pOGC8UsZ+YpHExDWFJIvlgBQTlZXAy7KnTNnWrz1OmvlJoOTd huNO010hptTd5b/tcQj6ue5vvNol9/KxYcBrt7c25sSmM/TaPwKKPHXgaWmZlhNF SEYPsZQANARYWSR2+vPCnO9Rf4cTEKDFhTDUnpemBzEbTI+Fj3IwKPiTjKgb1vBO AZGc9tUoBkyt68v1vGO1yorEzcHvS06GE9hYYZTHNJC2nJ+ql4ptQxywrqDnzueg shyPV3ougOClvq1XpKLPmCw0vMPbwWk= -----END CERTIFICATE-----Generated at Mon Mar 2 18:34:19 2026 by rpki-client