$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10d4bcf7-f1d6-3c24-a1e7-ba3183e6692c.roa File: 10d4bcf7-f1d6-3c24-a1e7-ba3183e6692c.roa (raw, json) Hash identifier: RQQ7DvZmf8pvcjXlNZmyPpapQ4pL0U9vqwnD1lXL4Wo= Subject key identifier: E4:E1:49:C6:4B:6F:73:49:C7:BD:00:3B:6D:50:E8:46:3B:11:21:07 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CCE7208145B02F55E4AA086C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10d4bcf7-f1d6-3c24-a1e7-ba3183e6692c.roa Signing time: Mon 09 Feb 2026 14:00:39 +0000 ROA not before: Mon 09 Feb 2026 14:00:39 +0000 ROA not after: Sun 10 May 2026 13:00:39 +0000 asID: 20940 IP address blocks: 23.33.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ce:72:08:14:5b:02:f5:5e:4a:a0:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 9 14:00:39 2026 GMT Not After : May 10 13:00:39 2026 GMT Subject: CN=d46771d9-aba4-4cfc-ac3e-442418a0efb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a1:fc:94:79:dc:47:29:34:f1:e6:6d:ff:bb: 99:5b:cc:dc:f0:3b:f3:5d:a4:d9:67:1d:c2:78:68: 00:46:c6:8d:32:09:ce:49:bd:94:06:25:6d:31:9c: ce:0f:23:b3:01:c3:85:60:9c:ae:ae:dd:e5:8c:29: 4b:de:e3:fc:6f:60:5f:3a:13:d8:24:8e:75:5d:73: a2:39:de:c4:b8:39:d0:b0:92:bf:39:9c:ca:9f:25: bb:dc:e4:f3:50:eb:c1:c7:2d:71:34:57:8c:73:64: cc:2a:b0:a2:a8:8d:b8:e5:90:83:5d:21:c1:20:82: 0c:2d:6d:cc:64:1a:c1:0a:de:70:43:43:9a:37:77: 0e:6a:12:e4:24:79:1c:80:b3:b0:a4:1c:f5:a7:45: 36:b1:04:e8:51:83:0a:28:89:14:50:71:eb:79:ff: d0:c2:22:ea:1a:63:6e:49:f1:27:e8:86:1a:e8:05: e4:ec:6b:b8:0f:64:20:4c:4d:5f:07:fa:7a:99:d8: 15:cb:28:2e:73:3b:0b:13:f3:87:65:5b:cd:04:1a: 51:11:f8:e8:ab:ed:60:e7:b6:7c:f0:c3:f2:86:cc: 9c:5b:cc:f1:80:6c:51:39:6e:e5:ab:2d:d3:36:a5: 42:d7:b7:7a:0b:c7:03:d2:be:8b:6c:0a:62:06:51: f3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E1:49:C6:4B:6F:73:49:C7:BD:00:3B:6D:50:E8:46:3B:11:21:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10d4bcf7-f1d6-3c24-a1e7-ba3183e6692c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:0f:c8:17:74:45:63:b1:85:0f:03:a6:b6:eb:50:2a:f3:76: 23:55:03:ec:7a:4b:48:77:2d:16:33:b3:ea:0b:aa:61:2c:80: 82:f4:00:6f:17:84:23:07:5a:16:4d:40:84:2f:f5:ac:a0:88: 15:32:ca:34:33:df:37:17:4a:7d:a4:c4:9a:b4:6c:11:2d:64: 73:c4:10:26:23:3c:21:52:70:29:aa:61:8a:9b:87:90:b9:45: a8:a5:29:93:67:95:b8:d3:d3:71:c7:fe:ab:49:26:39:ea:be: fe:8c:86:15:54:00:a1:e8:c5:0c:f0:37:da:bf:00:6f:5f:27: 6a:51:a0:16:7b:f7:c2:c1:50:4b:93:53:d8:79:b5:c4:56:2b: 85:4b:d6:7d:14:58:4e:fb:67:28:48:17:57:ff:7b:07:18:8e: b4:f2:a0:2f:88:bc:51:04:44:09:62:d5:bb:f8:25:1d:20:9c: 00:83:35:1b:07:5a:7c:d3:57:13:04:71:e0:c7:ad:6b:4c:44: f4:72:7f:bb:d1:f2:69:4f:ac:b2:c8:26:10:02:80:5d:34:a6: a5:63:cb:08:d3:f7:96:7e:78:3f:88:0e:ad:cf:3e:5a:ea:3c: 96:13:78:33:fe:7d:af:59:81:87:ea:36:de:9e:05:c5:fb:66: 36:23:57:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzOcggUWwL1XkqghsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIwOTE0MDAzOVoXDTI2MDUxMDEzMDAzOVowLzEtMCsGA1UEAxMk ZDQ2NzcxZDktYWJhNC00Y2ZjLWFjM2UtNDQyNDE4YTBlZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaH8lHncRyk08eZt/7uZW8zc8DvzXaTZZx3C eGgARsaNMgnOSb2UBiVtMZzODyOzAcOFYJyurt3ljClL3uP8b2BfOhPYJI51XXOi Od7EuDnQsJK/OZzKnyW73OTzUOvBxy1xNFeMc2TMKrCiqI245ZCDXSHBIIIMLW3M ZBrBCt5wQ0OaN3cOahLkJHkcgLOwpBz1p0U2sQToUYMKKIkUUHHref/QwiLqGmNu SfEn6IYa6AXk7Gu4D2QgTE1fB/p6mdgVyyguczsLE/OHZVvNBBpREfjoq+1g57Z8 8MPyhsycW8zxgGxROW7lqy3TNqVC17d6C8cD0r6LbApiBlHznQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOThScZLb3NJx70AO21Q6EY7ESEHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTBkNGJjZjctZjFkNi0z YzI0LWExZTctYmEzMTgzZTY2OTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyEsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAPyBd0RWOxhQ8DprbrUCrzdiNVA+x6S0h3LRYzs+oLqmEsgIL0AG8X hCMHWhZNQIQv9aygiBUyyjQz3zcXSn2kxJq0bBEtZHPEECYjPCFScCmqYYqbh5C5 RailKZNnlbjT03HH/qtJJjnqvv6MhhVUAKHoxQzwN9q/AG9fJ2pRoBZ798LBUEuT U9h5tcRWK4VL1n0UWE77ZyhIF1f/ewcYjrTyoC+IvFEERAli1bv4JR0gnACDNRsH WnzTVxMEceDHrWtMRPRyf7vR8mlPrLLIJhACgF00pqVjywjT95Z+eD+IDq3PPlrq PJYTeDP+fa9ZgYfqNt6eBcX7ZjYjV58= -----END CERTIFICATE-----Generated at Mon Mar 2 11:39:53 2026 by rpki-client