$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03d43504-6de6-33b2-a607-18ad4ab1c63a.roa File: 03d43504-6de6-33b2-a607-18ad4ab1c63a.roa (raw, json) Hash identifier: h7L/AlDTVw/QX3DtfcmSugePekOFiVPhg88QuEDRGik= Subject key identifier: F4:CF:29:F2:C3:F2:6F:35:3C:04:C7:08:20:C6:D5:FE:9C:90:95:BE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CDB022683ACB3694EC9CF3900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03d43504-6de6-33b2-a607-18ad4ab1c63a.roa Signing time: Sat 14 Feb 2026 02:00:32 +0000 ROA not before: Sat 14 Feb 2026 02:00:32 +0000 ROA not after: Fri 15 May 2026 01:00:32 +0000 asID: 16625 IP address blocks: 23.38.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:db:02:26:83:ac:b3:69:4e:c9:cf:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 14 02:00:32 2026 GMT Not After : May 15 01:00:32 2026 GMT Subject: CN=3ef114bb-ef7c-4099-9741-de8f0ef8b747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:db:2f:81:94:4b:4a:0a:38:a6:03:3c:6a:42: 5c:e6:99:73:cd:d2:1c:01:26:7b:df:cd:a3:45:03: ef:df:fb:04:83:8c:b6:86:7c:fc:33:85:db:20:5f: 63:82:da:6e:13:98:c6:54:c0:a2:6d:a4:47:7b:cb: 9a:d3:4f:98:37:c4:9b:a9:0f:fa:c2:1d:e4:85:d3: bd:32:37:bc:d2:6c:d8:05:8a:23:6c:61:1b:4e:ab: 3e:8d:14:7a:bb:c0:40:42:3e:04:2d:3e:2d:d1:3e: 56:90:5e:17:90:b6:33:ac:bd:11:ee:49:d4:26:21: 88:a7:e3:48:5c:cd:6f:fb:9d:9f:2c:f5:2c:51:95: d8:12:75:64:7e:40:d6:79:13:87:66:15:2f:95:5a: 9d:5e:0a:7a:32:82:19:83:45:22:e1:b9:a4:69:98: 14:28:42:6d:a2:f9:e3:83:81:b6:de:fb:50:1e:c8: 86:09:3d:eb:21:f4:88:1d:a4:22:5c:f5:98:a9:56: c0:86:24:1f:46:b0:e4:2c:e4:6a:19:ec:bc:ca:1f: 12:cb:92:e6:23:0a:1c:02:9c:1c:44:4d:d9:54:83: 63:04:37:5e:bd:12:15:b8:44:bb:bc:28:d9:56:5b: 4c:ac:b6:bc:d7:e3:6f:dc:fc:74:75:10:3f:43:e4: 9d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CF:29:F2:C3:F2:6F:35:3C:04:C7:08:20:C6:D5:FE:9C:90:95:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03d43504-6de6-33b2-a607-18ad4ab1c63a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:c9:54:21:10:0b:7e:9d:41:9f:5e:73:75:fd:62:ae:21:5c: 91:50:2f:14:83:f4:2e:af:82:fb:f1:37:2e:1c:87:bd:61:bf: 59:58:55:bd:d2:48:45:7c:65:5f:9f:8c:b7:63:0d:55:34:04: 9a:f6:42:58:b1:a5:07:b5:04:dd:d2:80:d2:a7:50:06:97:e8: 23:1c:42:23:cc:54:6d:88:9f:67:13:4a:fc:04:59:01:51:70: fe:1f:b1:7e:91:00:f8:9f:b5:57:e4:1f:d7:a1:97:8f:c9:02: 3d:c7:e2:5e:de:79:17:c4:f3:f5:d1:27:93:4c:a0:2d:dc:25: 8f:47:b2:85:b6:54:68:bf:b3:2e:2b:8c:32:58:f5:41:d8:29: 1f:c9:11:df:fe:2a:3c:45:21:c0:e2:01:48:96:6e:3e:62:b0: 94:82:b7:65:dc:95:86:84:4d:7d:5c:58:41:eb:46:66:9b:67: 36:8a:8c:58:0f:a3:dd:74:82:b7:73:08:89:03:ce:4c:25:d0: 4f:51:de:39:d9:c2:01:e9:37:b9:04:da:c1:5f:1e:7c:23:d0: 44:ca:04:68:25:de:de:32:c2:6a:6d:85:ef:47:62:8f:3c:23: 40:63:9c:58:ed:a4:36:18:0c:db:0b:be:ce:f8:10:2b:cc:7f: 20:0f:36:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzbAiaDrLNpTsnPOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIxNDAyMDAzMloXDTI2MDUxNTAxMDAzMlowLzEtMCsGA1UEAxMk M2VmMTE0YmItZWY3Yy00MDk5LTk3NDEtZGU4ZjBlZjhiNzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9svgZRLSgo4pgM8akJc5plzzdIcASZ7382j RQPv3/sEg4y2hnz8M4XbIF9jgtpuE5jGVMCibaRHe8ua00+YN8SbqQ/6wh3khdO9 Mje80mzYBYojbGEbTqs+jRR6u8BAQj4ELT4t0T5WkF4XkLYzrL0R7knUJiGIp+NI XM1v+52fLPUsUZXYEnVkfkDWeROHZhUvlVqdXgp6MoIZg0Ui4bmkaZgUKEJtovnj g4G23vtQHsiGCT3rIfSIHaQiXPWYqVbAhiQfRrDkLORqGey8yh8Sy5LmIwocApwc RE3ZVINjBDdevRIVuES7vCjZVltMrLa81+Nv3Px0dRA/Q+SdJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTPKfLD8m81PATHCCDG1f6ckJW+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDNkNDM1MDQtNmRlNi0z M2IyLWE2MDctMThhZDRhYjFjNjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyb8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbJVCEQC36dQZ9ec3X9Yq4hXJFQLxSD9C6vgvvxNy4ch71hv1lYVb3S SEV8ZV+fjLdjDVU0BJr2QlixpQe1BN3SgNKnUAaX6CMcQiPMVG2In2cTSvwEWQFR cP4fsX6RAPiftVfkH9ehl4/JAj3H4l7eeRfE8/XRJ5NMoC3cJY9HsoW2VGi/sy4r jDJY9UHYKR/JEd/+KjxFIcDiAUiWbj5isJSCt2XclYaETX1cWEHrRmabZzaKjFgP o910grdzCIkDzkwl0E9R3jnZwgHpN7kE2sFfHnwj0ETKBGgl3t4ywmpthe9HYo88 I0BjnFjtpDYYDNsLvs74ECvMfyAPNgw= -----END CERTIFICATE-----Generated at Mon Mar 2 11:02:34 2026 by rpki-client