$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/59645cd8-9633-3577-8cc6-4685bcbd83f2.roa File: 59645cd8-9633-3577-8cc6-4685bcbd83f2.roa (raw, json) Hash identifier: FujKUeF0NoEGrmnw4u60rfCvPhifJgfnR8Zbh2QZFDc= Subject key identifier: 14:DD:BD:9D:17:33:AA:05:98:CA:A5:F5:14:00:49:AC:54:9B:F4:B8 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584CE1FCCCE93B21D0756E35A680 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/59645cd8-9633-3577-8cc6-4685bcbd83f2.roa Signing time: Mon 16 Feb 2026 14:00:40 +0000 ROA not before: Mon 16 Feb 2026 14:00:40 +0000 ROA not after: Sun 17 May 2026 13:00:40 +0000 asID: 11105 IP address blocks: 207.23.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e1:fc:cc:e9:3b:21:d0:75:6e:35:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Feb 16 14:00:40 2026 GMT Not After : May 17 13:00:40 2026 GMT Subject: CN=fa644f12-dc35-4580-b788-dfdbdd943151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:87:b4:10:70:10:85:11:a2:70:4c:5b:a6:e9: a9:62:a6:d5:ae:0f:ac:d6:d6:23:58:0b:37:1f:3d: db:1e:43:d7:78:c4:4e:33:4f:78:bc:1a:e9:47:66: c0:94:7e:12:67:0c:1c:9f:09:cf:c3:a3:95:f8:ff: 1b:93:65:9f:5c:a5:ae:b2:cc:86:f5:64:bf:62:aa: c8:48:73:0a:ad:f8:ea:df:17:6b:0e:8d:f8:1c:27: 97:c7:c1:b6:1d:67:5d:43:4d:29:03:b0:2b:f2:37: b3:19:dc:92:80:0a:35:7b:5e:55:10:d4:2f:38:30: 8e:c6:b4:2f:ea:99:7c:1c:ff:09:10:0d:d3:44:a0: 4e:02:75:35:a5:f5:10:b6:6e:7e:ef:8a:1e:22:3b: 52:f7:6d:05:f8:44:e8:22:cf:0e:63:ba:39:19:52: 0b:82:53:75:ee:5b:9c:15:a3:97:2c:39:80:0a:a6: 4b:f9:04:95:49:a9:fa:16:68:e4:e6:f8:99:01:e2: a1:d3:12:94:a2:95:f9:e6:53:78:ad:4d:d0:b8:50: 6a:9b:ee:cb:6e:aa:98:26:5c:2c:63:dd:30:bf:56: bb:6e:40:c7:e2:fa:2a:86:1c:b2:25:32:d6:bc:21: 75:b7:f9:ca:72:0a:30:d3:0d:ae:ed:91:27:a4:cc: 31:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DD:BD:9D:17:33:AA:05:98:CA:A5:F5:14:00:49:AC:54:9B:F4:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/59645cd8-9633-3577-8cc6-4685bcbd83f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 207.23.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:69:80:17:e0:0e:a7:83:80:84:d8:20:3a:ea:f9:55:a0:d8: 8b:80:55:f8:eb:fc:7b:c9:45:b5:6c:36:84:c9:e4:b6:f2:a9: ed:08:85:c9:bc:9b:b1:b2:79:cb:99:77:b7:0c:1a:c1:66:81: 93:23:62:ee:d4:40:37:48:07:a8:16:01:9e:49:d1:3f:5e:53: fc:d3:db:e6:1d:6c:29:7d:3a:63:65:6d:e6:d5:5a:33:cb:52: fd:e7:b2:0b:ee:e0:89:f1:1f:2f:ed:cb:bf:0a:e6:9c:0f:2b: 42:ef:4c:20:86:ab:8d:f2:fa:7b:74:d1:f8:06:03:84:44:0b: 4e:da:43:64:ba:f8:50:ac:04:91:59:46:24:e2:36:47:23:fd: a9:34:84:5f:48:5d:61:c8:bb:58:f9:1a:54:3f:a4:68:d2:18: df:5a:90:e0:3e:05:ae:4f:35:1e:47:12:81:79:8a:ca:f9:07: 06:b2:ed:74:0c:1c:5d:8c:da:c5:c1:cb:12:ce:d9:1f:7c:21: f5:73:9c:2f:0d:02:a8:40:57:56:ad:70:fc:84:e7:d2:de:45: 7d:4e:15:df:37:8d:ac:4c:44:f6:34:88:95:79:0a:56:d2:48: 8b:8d:75:65:c0:c4:f5:95:f5:eb:a6:8e:33:52:21:ee:5f:ba: 40:8d:97:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzh/MzpOyHQdW41poAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDIxNjE0MDA0MFoXDTI2MDUxNzEzMDA0MFowLzEtMCsGA1UEAxMk ZmE2NDRmMTItZGMzNS00NTgwLWI3ODgtZGZkYmRkOTQzMTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4e0EHAQhRGicExbpumpYqbVrg+s1tYjWAs3 Hz3bHkPXeMROM094vBrpR2bAlH4SZwwcnwnPw6OV+P8bk2WfXKWussyG9WS/YqrI SHMKrfjq3xdrDo34HCeXx8G2HWddQ00pA7Ar8jezGdySgAo1e15VENQvODCOxrQv 6pl8HP8JEA3TRKBOAnU1pfUQtm5+74oeIjtS920F+EToIs8OY7o5GVILglN17luc FaOXLDmACqZL+QSVSan6Fmjk5viZAeKh0xKUopX55lN4rU3QuFBqm+7LbqqYJlws Y90wv1a7bkDH4voqhhyyJTLWvCF1t/nKcgow0w2u7ZEnpMwxtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTdvZ0XM6oFmMql9RQASaxUm/S4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNTk2NDVjZDgtOTYzMy0z NTc3LThjYzYtNDY4NWJjYmQ4M2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxdVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFpgBfgDqeDgITYIDrq+VWg2IuAVfjr/HvJRbVsNoTJ5Lbyqe0Ihcm8 m7GyecuZd7cMGsFmgZMjYu7UQDdIB6gWAZ5J0T9eU/zT2+YdbCl9OmNlbebVWjPL Uv3nsgvu4InxHy/ty78K5pwPK0LvTCCGq43y+nt00fgGA4REC07aQ2S6+FCsBJFZ RiTiNkcj/ak0hF9IXWHIu1j5GlQ/pGjSGN9akOA+Ba5PNR5HEoF5isr5Bway7XQM HF2M2sXByxLO2R98IfVznC8NAqhAV1atcPyE59LeRX1OFd83jaxMRPY0iJV5ClbS SIuNdWXAxPWV9eumjjNSIe5fukCNl+o= -----END CERTIFICATE-----Generated at Mon Mar 2 16:48:03 2026 by rpki-client