$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17f5970d-36e4-3b44-a225-2f83a9437273.roa File: 17f5970d-36e4-3b44-a225-2f83a9437273.roa (raw, json) Hash identifier: 23Njj6yDTgD6eIVI/m3vAGI8Bs7zifI7McrtyxTkHAg= Subject key identifier: 3F:CA:1B:73:2A:1B:CF:0A:8F:1B:52:F6:42:BE:92:56:82:26:E4:49 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CF587A294DDDE593B16E24100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17f5970d-36e4-3b44-a225-2f83a9437273.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 35994 IP address blocks: 23.223.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:a2:94:dd:de:59:3b:16:e2:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=333b0442-a9d9-45f4-89cf-61488a42c364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bc:2d:0b:4b:37:75:7a:4b:4e:48:a4:7c:26: 58:51:4c:e3:c6:4c:70:d1:36:86:6a:36:9c:92:02: f8:fe:e0:31:fe:75:86:66:83:31:6d:34:05:d6:e2: a8:41:e2:4c:99:cf:2b:34:8e:76:a7:cb:f5:01:37: 58:a8:f2:73:c7:c9:55:ae:65:58:b7:1e:43:2b:bf: 09:40:14:91:66:06:0b:52:2e:ed:42:5f:8e:c2:5c: 29:9c:2f:3b:c2:72:cb:6c:3e:ba:36:8b:1f:3f:e5: cf:e6:f0:9e:13:ce:75:dc:f9:78:fe:bc:90:37:3e: 2d:1a:61:74:1e:9e:a5:93:36:c5:44:03:17:f2:0d: 36:08:04:c9:43:64:69:6d:22:c4:5c:98:50:92:ac: 4e:1f:f9:fa:62:4e:8d:3b:cf:20:9c:ce:8c:bc:91: 50:b4:52:0f:83:2c:99:71:00:ea:79:82:f8:df:5c: 55:c9:b1:97:d4:44:af:1d:43:81:6e:d3:f6:4b:e6: 7c:57:16:ce:87:32:6a:8a:b7:f9:0d:ac:b6:62:55: 9b:59:dc:97:8a:f0:e8:1d:9f:9f:e3:13:94:bf:8d: c5:7b:28:e6:44:b2:6a:df:e5:5b:b7:75:a3:15:d8: 98:dc:a8:8e:01:a8:d9:94:a9:2e:ba:4e:48:b8:f8: e4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CA:1B:73:2A:1B:CF:0A:8F:1B:52:F6:42:BE:92:56:82:26:E4:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17f5970d-36e4-3b44-a225-2f83a9437273.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:8e:44:70:51:0b:0b:bd:39:cc:6c:04:da:02:7a:26:cf:08: 27:c7:87:31:c1:cf:02:0f:80:f5:9d:c9:73:f5:5b:ce:4a:bd: 1f:b0:35:1b:8c:c9:74:0f:a6:db:ec:40:2b:43:f6:8e:77:d2: 35:64:88:26:27:55:f2:42:f9:f1:66:12:20:16:ea:eb:d8:3a: 65:0d:94:b0:01:24:a4:dd:ea:f5:43:9d:6e:90:9a:01:71:e1: 6b:a6:b6:4c:f4:14:a6:6e:30:de:47:65:49:b9:7f:c2:12:6b: 06:78:1c:88:7a:c6:a2:9e:82:5d:34:5c:b1:96:1c:fa:29:97: 21:72:2d:81:6b:33:1c:50:82:cf:98:27:2c:85:a3:6f:87:bf: ff:6d:f7:b2:7f:b6:bb:78:1e:a2:4a:80:48:73:b8:81:32:86: 37:c9:00:42:a5:83:85:c0:56:1f:21:c5:2e:f5:b8:ba:50:60: e8:6e:f9:50:b0:d6:39:7d:cb:6b:a1:63:29:76:52:cf:f4:0b: 32:32:05:ba:7d:58:f4:b2:4d:98:4f:df:f0:e1:e1:ac:cb:1c: 1e:d8:a1:14:8c:cb:87:f6:ac:3f:36:db:1f:23:c7:ee:29:6d: ee:57:be:4d:4d:32:6d:1f:e9:a5:04:8d:16:f6:b0:fb:0d:7a: c3:dd:b7:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h6KU3d5ZOxbiQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk MzMzYjA0NDItYTlkOS00NWY0LTg5Y2YtNjE0ODhhNDJjMzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLwtC0s3dXpLTkikfCZYUUzjxkxw0TaGajac kgL4/uAx/nWGZoMxbTQF1uKoQeJMmc8rNI52p8v1ATdYqPJzx8lVrmVYtx5DK78J QBSRZgYLUi7tQl+OwlwpnC87wnLLbD66NosfP+XP5vCeE8513Pl4/ryQNz4tGmF0 Hp6lkzbFRAMX8g02CATJQ2RpbSLEXJhQkqxOH/n6Yk6NO88gnM6MvJFQtFIPgyyZ cQDqeYL431xVybGX1ESvHUOBbtP2S+Z8VxbOhzJqirf5Day2YlWbWdyXivDoHZ+f 4xOUv43FeyjmRLJq3+Vbt3WjFdiY3KiOAajZlKkuuk5IuPjk2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/KG3MqG88KjxtS9kK+klaCJuRJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTdmNTk3MGQtMzZlNC0z YjQ0LWEyMjUtMmY4M2E5NDM3MjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6ORHBRCwu9OcxsBNoCeibPCCfHhzHBzwIPgPWdyXP1W85KvR+wNRuM yXQPptvsQCtD9o530jVkiCYnVfJC+fFmEiAW6uvYOmUNlLABJKTd6vVDnW6QmgFx 4Wumtkz0FKZuMN5HZUm5f8ISawZ4HIh6xqKegl00XLGWHPoplyFyLYFrMxxQgs+Y JyyFo2+Hv/9t97J/trt4HqJKgEhzuIEyhjfJAEKlg4XAVh8hxS71uLpQYOhu+VCw 1jl9y2uhYyl2Us/0CzIyBbp9WPSyTZhP3/Dh4azLHB7YoRSMy4f2rD822x8jx+4p be5Xvk1NMm0f6aUEjRb2sPsNesPdt3U= -----END CERTIFICATE-----Generated at Mon Mar 2 10:16:24 2026 by rpki-client