$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/04820b76-4425-3cac-b7e3-17376625637b.roa File: 04820b76-4425-3cac-b7e3-17376625637b.roa (raw, json) Hash identifier: Yc/ZojtIDJGrNFL3auRHhCCDhwrQZM4VJIs4AfFuFYI= Subject key identifier: 5A:92:83:38:6B:CB:F6:F5:F1:99:B0:C4:FC:1B:0B:EC:B6:9D:00:D9 Certificate issuer: /CN=260cabab-b89d-4556-b9b1-e5a87b9523b9 Certificate serial: 010D0C9F4328584CF4222BE7C558138BA9DEA800 Authority key identifier: 80:87:C3:C4:10:0E:F3:6D:64:9B:3F:AC:82:67:48:43:74:E5:EE:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/04820b76-4425-3cac-b7e3-17376625637b.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 12119 IP address blocks: 23.249.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:2b:e7:c5:58:13:8b:a9:de:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=260cabab-b89d-4556-b9b1-e5a87b9523b9 Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=823e700d-b110-430b-ab00-25c2c4e9aea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2d:fe:1d:d4:1e:08:dd:76:48:a1:f1:67:7c: 0e:e1:29:01:ef:00:f4:9a:c7:33:1a:6d:f3:80:c4: 92:41:29:27:3b:11:ff:60:0b:b9:bc:11:d3:2c:90: 0c:d6:d4:9f:76:7a:b2:e6:89:98:95:9a:7b:c3:53: ce:6e:00:59:35:38:f0:53:bd:13:cf:0f:70:24:2e: 75:98:3c:b0:66:38:ad:ce:30:69:d7:83:c6:66:69: 33:d1:46:17:6d:f0:a5:f1:7d:39:ed:4f:39:3c:d9: 50:c9:aa:45:8d:b4:97:f1:52:12:4e:71:7f:16:d8: 88:81:fa:97:ef:bc:ad:cb:e5:f8:59:6d:ad:c4:b7: 77:db:86:3e:c4:be:ea:f6:21:d5:99:99:0e:ce:1e: 27:9d:ba:1f:67:d9:58:01:59:0a:14:16:3f:eb:ef: fb:5d:35:56:c8:3a:52:c4:a1:23:6b:8f:1c:61:56: 59:5f:b8:a4:f6:52:17:86:b9:ae:1f:d0:5d:f0:bb: d5:67:78:59:04:e8:e8:8c:58:d7:06:38:33:3d:8d: c2:f9:ae:7a:3f:ad:02:7e:85:13:12:9f:d5:94:1a: bc:5f:30:34:28:92:09:8c:37:b7:71:d2:01:15:3c: d8:12:bb:dc:0b:75:02:57:4b:34:16:9d:85:57:20: f2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:92:83:38:6B:CB:F6:F5:F1:99:B0:C4:FC:1B:0B:EC:B6:9D:00:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/04820b76-4425-3cac-b7e3-17376625637b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.crl X509v3 Authority Key Identifier: keyid:80:87:C3:C4:10:0E:F3:6D:64:9B:3F:AC:82:67:48:43:74:E5:EE:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer sbgp-ipAddrBlock: critical IPv4: 23.249.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:22:e1:90:ad:86:87:2b:51:30:7f:80:0d:d5:4d:0a:38:fc: 07:1d:86:05:6b:cf:3a:4d:4f:6c:13:03:fa:f1:ee:84:69:ce: 3f:b0:56:8c:85:56:2a:09:ad:bd:96:54:98:ad:ef:ef:79:ff: 30:9c:55:6b:c6:80:3b:1b:1f:9e:64:a9:e3:35:72:1f:28:7b: 14:64:b9:12:f0:36:7d:d9:fc:3f:49:fb:73:2d:41:73:0c:6f: 07:86:59:a3:fd:00:a1:0c:3b:d5:42:e5:c1:03:71:2e:0f:74: d9:98:c7:e8:60:30:95:a2:55:0c:8f:80:9c:63:00:d8:50:b2: b4:52:59:e6:70:88:db:00:97:d6:58:af:ca:ec:0c:18:40:f6: 6f:6c:9f:47:f2:bc:d4:65:15:e3:dd:3a:4d:5b:d5:75:a5:47: 8a:c5:fa:1a:52:c4:64:33:d3:6e:55:cf:da:61:b1:bf:a8:9d: 32:14:d5:ab:b9:ea:11:f2:df:43:6b:60:fe:37:10:c5:c9:a5: 62:a2:c1:3d:f2:38:f7:dd:53:b4:4c:bd:7b:ca:62:b9:16:e5: 05:d4:36:26:6f:72:47:c1:1f:bf:62:78:0d:b6:b8:75:4f:69: 89:96:3a:0d:1e:a0:54:7b:a7:27:ac:5e:b2:d6:29:e4:1f:78: c2:30:09:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0IivnxVgTi6neqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjYwY2FiYWItYjg5ZC00NTU2LWI5YjEtZTVhODdiOTUy M2I5MB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk ODIzZTcwMGQtYjExMC00MzBiLWFiMDAtMjVjMmM0ZTlhZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS3+HdQeCN12SKHxZ3wO4SkB7wD0msczGm3z gMSSQSknOxH/YAu5vBHTLJAM1tSfdnqy5omYlZp7w1PObgBZNTjwU70Tzw9wJC51 mDywZjitzjBp14PGZmkz0UYXbfCl8X057U85PNlQyapFjbSX8VISTnF/FtiIgfqX 77yty+X4WW2txLd324Y+xL7q9iHVmZkOzh4nnbofZ9lYAVkKFBY/6+/7XTVWyDpS xKEja48cYVZZX7ik9lIXhrmuH9Bd8LvVZ3hZBOjojFjXBjgzPY3C+a56P60CfoUT Ep/VlBq8XzA0KJIJjDe3cdIBFTzYErvcC3UCV0s0Fp2FVyDyWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqSgzhry/b18ZmwxPwbC+y2nQDZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yNjBj YWJhYi1iODlkLTQ1NTYtYjliMS1lNWE4N2I5NTIzYjkvMDQ4MjBiNzYtNDQyNS0z Y2FjLWI3ZTMtMTczNzY2MjU2MzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjYwY2FiYWItYjg5ZC00NTU2LWI5 YjEtZTVhODdiOTUyM2I5LzI2MGNhYmFiLWI4OWQtNDU1Ni1iOWIxLWU1YTg3Yjk1 MjNiOS5jcmwwHwYDVR0jBBgwFoAUgIfDxBAO821kmz+sgmdIQ3Tl7u4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yNjBjYWJhYi1iODlkLTQ1NTYtYjliMS1lNWE4 N2I5NTIzYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/kgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoi4ZCthocrUTB/gA3VTQo4/AcdhgVrzzpNT2wTA/rx7oRpzj+wVoyF VioJrb2WVJit7+95/zCcVWvGgDsbH55kqeM1ch8oexRkuRLwNn3Z/D9J+3MtQXMM bweGWaP9AKEMO9VC5cEDcS4PdNmYx+hgMJWiVQyPgJxjANhQsrRSWeZwiNsAl9ZY r8rsDBhA9m9sn0fyvNRlFePdOk1b1XWlR4rF+hpSxGQz025Vz9phsb+onTIU1au5 6hHy30NrYP43EMXJpWKiwT3yOPfdU7RMvXvKYrkW5QXUNiZvckfBH79ieA22uHVP aYmWOg0eoFR7pyesXrLWKeQfeMIwCbY= -----END CERTIFICATE-----Generated at Mon Mar 2 18:27:51 2026 by rpki-client