$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/09f5c911-e2b2-3955-a3bf-e5b22aece251.roa File: 09f5c911-e2b2-3955-a3bf-e5b22aece251.roa (raw, json) Hash identifier: Pvky1BkkjYAC6LmTU8eaQqSoThCSnzO76ntvFI5CM7g= Subject key identifier: 2A:B0:99:26:B9:AB:25:0B:CC:DF:E8:EE:3F:44:C0:CE:0A:0B:9F:01 Certificate issuer: /CN=0002cb20-026c-453e-a998-7e9db1f7f47f Certificate serial: 010D0C9F4328584CE1FCD66295601CA87030E080 Authority key identifier: DF:84:17:17:97:D6:4F:0F:71:6E:56:32:44:E4:D6:73:BA:18:52:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/09f5c911-e2b2-3955-a3bf-e5b22aece251.roa Signing time: Mon 16 Feb 2026 14:00:40 +0000 ROA not before: Mon 16 Feb 2026 14:00:40 +0000 ROA not after: Sun 17 May 2026 13:00:40 +0000 asID: 400529 IP address blocks: 23.164.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/0002cb20-026c-453e-a998-7e9db1f7f47f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/0002cb20-026c-453e-a998-7e9db1f7f47f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e1:fc:d6:62:95:60:1c:a8:70:30:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0002cb20-026c-453e-a998-7e9db1f7f47f Validity Not Before: Feb 16 14:00:40 2026 GMT Not After : May 17 13:00:40 2026 GMT Subject: CN=19a2619c-0d00-4061-913c-4ba81ca1f71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:88:f2:dd:d5:d3:ed:43:af:c9:10:64:8a:3a: f6:b3:8b:ab:cb:b8:14:a6:ab:6d:fd:79:57:0f:14: 35:5f:d6:15:e7:db:3a:71:47:5f:4b:7e:b8:45:f4: 4d:33:c6:9c:31:44:41:b9:29:e9:32:79:b9:e7:fb: 02:3b:ae:60:e2:2f:1d:68:33:96:9a:21:7a:26:a6: 12:7f:97:a1:e2:9f:7e:f4:b0:5f:9c:cd:e7:0a:4c: bd:2e:ce:15:1b:e1:c5:d1:d6:08:4f:a7:03:45:a4: 96:2a:41:0f:27:5c:4d:cc:e8:91:ef:95:9a:73:5d: 5c:28:e6:d9:3c:61:f9:fd:89:91:20:ec:ad:9c:18: 9d:80:32:18:ed:7c:e7:0a:d4:15:13:b7:ed:44:66: c3:1e:4d:ad:31:9c:94:dd:73:92:a3:e5:c5:d7:58: a1:72:ed:fe:c5:7a:6d:98:97:d7:7e:89:cb:26:e3: 6b:e3:40:4b:b0:6f:f8:f8:4f:d3:d7:9b:68:be:f6: 73:bc:9c:50:64:22:52:77:eb:69:67:fe:dd:4e:cb: df:06:b0:de:84:8d:be:9b:ea:a8:1a:35:64:6c:d6: c3:0f:b0:5f:be:0c:77:47:24:bf:0c:45:ce:f2:7d: bf:f5:1b:1a:94:0d:8b:9a:f0:b5:77:75:36:d3:47: ad:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B0:99:26:B9:AB:25:0B:CC:DF:E8:EE:3F:44:C0:CE:0A:0B:9F:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/09f5c911-e2b2-3955-a3bf-e5b22aece251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/0002cb20-026c-453e-a998-7e9db1f7f47f.crl X509v3 Authority Key Identifier: keyid:DF:84:17:17:97:D6:4F:0F:71:6E:56:32:44:E4:D6:73:BA:18:52:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f.cer sbgp-ipAddrBlock: critical IPv4: 23.164.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:2a:1d:ec:99:3c:b1:ad:26:83:51:99:1d:9e:fc:ba:54:06: 28:80:e7:e0:26:f3:9b:5b:61:88:ea:b6:d5:de:38:88:4e:bc: d9:0f:c9:cd:ef:16:1d:70:74:a7:fb:78:67:46:f6:54:5a:4e: db:bb:f5:89:94:ca:45:9b:1a:e2:d3:80:12:cc:21:40:4f:3f: a9:ed:0e:14:60:44:ab:07:96:2c:57:ca:f8:0b:45:f6:4f:04: 43:03:db:7e:6b:15:cb:89:83:77:47:4f:d0:b6:f8:08:30:68: 13:72:5c:5d:10:c8:cf:89:55:e4:49:a7:d2:ec:02:4c:a5:22: 6b:64:05:cf:e0:84:c6:b0:d7:c3:a0:52:7d:b4:03:da:02:05: d5:89:5f:fc:ee:c5:18:8d:35:5a:4e:32:08:6b:1b:a7:33:64: 3d:86:c4:8a:41:12:3b:ac:be:69:1d:9e:d8:b0:35:3b:6c:30: 5c:32:85:f7:49:b3:70:93:8a:d2:b7:79:9a:69:7b:dd:2e:d9: be:83:ff:77:2e:c5:b4:7f:2c:7e:8d:ce:b3:61:bd:4a:49:d4: 28:8d:96:72:ef:0c:68:3d:d9:e7:bf:9c:d0:aa:9b:36:92:bb: 9c:43:13:87:d9:44:c2:92:95:ad:54:83:f5:d5:55:3b:3c:99: 66:2f:20:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzh/NZilWAcqHAw4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDAwMmNiMjAtMDI2Yy00NTNlLWE5OTgtN2U5ZGIxZjdm NDdmMB4XDTI2MDIxNjE0MDA0MFoXDTI2MDUxNzEzMDA0MFowLzEtMCsGA1UEAxMk MTlhMjYxOWMtMGQwMC00MDYxLTkxM2MtNGJhODFjYTFmNzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4jy3dXT7UOvyRBkijr2s4ury7gUpqtt/XlX DxQ1X9YV59s6cUdfS364RfRNM8acMURBuSnpMnm55/sCO65g4i8daDOWmiF6JqYS f5eh4p9+9LBfnM3nCky9Ls4VG+HF0dYIT6cDRaSWKkEPJ1xNzOiR75Wac11cKObZ PGH5/YmRIOytnBidgDIY7XznCtQVE7ftRGbDHk2tMZyU3XOSo+XF11ihcu3+xXpt mJfXfonLJuNr40BLsG/4+E/T15tovvZzvJxQZCJSd+tpZ/7dTsvfBrDehI2+m+qo GjVkbNbDD7Bfvgx3RyS/DEXO8n2/9RsalA2LmvC1d3U200etKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqwmSa5qyULzN/o7j9EwM4KC58BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDAy Y2IyMC0wMjZjLTQ1M2UtYTk5OC03ZTlkYjFmN2Y0N2YvMDlmNWM5MTEtZTJiMi0z OTU1LWEzYmYtZTViMjJhZWNlMjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDAwMmNiMjAtMDI2Yy00NTNlLWE5 OTgtN2U5ZGIxZjdmNDdmLzAwMDJjYjIwLTAyNmMtNDUzZS1hOTk4LTdlOWRiMWY3 ZjQ3Zi5jcmwwHwYDVR0jBBgwFoAU34QXF5fWTw9xblYyROTWc7oYUuAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDAyY2IyMC0wMjZjLTQ1M2UtYTk5OC03ZTlk YjFmN2Y0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6RYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkqHeyZPLGtJoNRmR2e/LpUBiiA5+Am85tbYYjqttXeOIhOvNkPyc3v Fh1wdKf7eGdG9lRaTtu79YmUykWbGuLTgBLMIUBPP6ntDhRgRKsHlixXyvgLRfZP BEMD235rFcuJg3dHT9C2+AgwaBNyXF0QyM+JVeRJp9LsAkylImtkBc/ghMaw18Og Un20A9oCBdWJX/zuxRiNNVpOMghrG6czZD2GxIpBEjusvmkdntiwNTtsMFwyhfdJ s3CTitK3eZppe90u2b6D/3cuxbR/LH6NzrNhvUpJ1CiNlnLvDGg92ee/nNCqmzaS u5xDE4fZRMKSla1Ug/XVVTs8mWYvILQ= -----END CERTIFICATE-----Generated at Mon Mar 2 04:06:15 2026 by rpki-client