$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a4baa0e-317f-3e0c-908d-3701b6aa5d7f.roa File: 1a4baa0e-317f-3e0c-908d-3701b6aa5d7f.roa (raw, json) Hash identifier: h9Iv7ZhpLI6blrNnHv1u5lSV2nsO4/51heAr4XZBstA= Subject key identifier: D3:50:99:40:D2:C9:8D:D9:32:58:74:2F:22:53:5E:62:8A:6A:C7:F5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CDB0227300AD06648B69F7A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a4baa0e-317f-3e0c-908d-3701b6aa5d7f.roa Signing time: Sat 14 Feb 2026 02:00:32 +0000 ROA not before: Sat 14 Feb 2026 02:00:32 +0000 ROA not after: Fri 15 May 2026 01:00:32 +0000 asID: 16625 IP address blocks: 23.39.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:db:02:27:30:0a:d0:66:48:b6:9f:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 14 02:00:32 2026 GMT Not After : May 15 01:00:32 2026 GMT Subject: CN=3d4e08aa-76fe-47fd-b0f3-110444abac99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c3:9f:54:ca:e7:39:ee:61:f8:fc:82:b4:87: a8:05:81:39:1d:3d:9c:0c:74:4e:87:28:47:60:48: 1d:89:48:dc:be:2e:bf:f2:e6:60:d7:ab:bc:a5:af: e4:bc:b8:07:c9:6c:2f:8c:2e:a5:19:cb:b9:cb:42: 12:c8:5d:92:37:76:75:49:91:35:dd:5b:0c:fd:2d: 71:b8:8b:ca:d0:a4:00:cd:e0:0a:d5:b1:ea:a5:9e: 89:df:1a:77:57:dc:62:66:07:32:e3:09:30:74:1c: 4b:99:01:dd:a3:83:a0:2f:4e:1b:bf:51:71:10:1e: 6f:b0:61:72:17:03:7a:48:5f:8c:5f:34:50:ca:ad: 7b:5a:2a:65:ee:d5:2f:b4:06:1c:ad:b9:3d:69:67: 26:51:95:a7:8f:50:09:a4:5f:00:a2:ac:0d:45:e4: 89:3e:2d:db:c6:ea:65:04:f4:0e:f6:29:b5:05:68: 18:c3:f8:76:06:0c:87:7b:38:a1:96:b5:c7:85:a3: bb:b5:3b:de:db:97:cc:39:48:aa:41:c2:1c:3d:ff: 3c:3f:f9:b1:1e:cd:26:fd:95:bb:12:97:5f:93:5c: db:55:84:95:a3:11:c6:f4:ed:ba:f4:7d:d6:0f:17: 8d:ca:3d:cb:21:c7:a1:bd:7a:75:09:75:74:09:db: 3e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:50:99:40:D2:C9:8D:D9:32:58:74:2F:22:53:5E:62:8A:6A:C7:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a4baa0e-317f-3e0c-908d-3701b6aa5d7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:bf:c0:db:71:8f:7e:51:9e:cd:d7:c0:a4:c6:4f:18:4f:a0: 52:55:3b:82:64:7f:40:f2:26:76:b9:09:43:85:3a:78:82:48: 0e:8f:7f:61:7e:43:b4:4c:56:4c:6e:57:e5:dd:01:6e:6e:19: 03:d9:6a:7f:c8:dc:b9:89:4e:a0:16:1b:82:27:a3:cf:93:75: a6:44:6f:c2:1d:5e:97:f7:29:c1:29:c2:1c:1e:45:0b:9d:f2: 2f:50:d7:84:e5:69:6d:8f:96:16:5c:8a:59:59:c6:ff:ce:5c: 2a:5e:8f:06:a6:52:c4:45:bd:cd:9f:76:f4:da:00:df:4a:ef: 51:01:5c:d7:06:6b:42:a0:8d:16:34:51:b4:f4:1b:30:2b:80: b4:c5:dd:6a:2e:8a:f2:91:28:f0:99:98:4d:ea:2d:b4:24:dd: 97:05:bf:17:3c:3b:1c:85:dc:8f:b1:e5:3e:b8:e6:b9:3a:7f: 3e:06:f8:c6:0f:e2:13:88:90:b6:c9:a0:58:d7:f4:5a:9b:6b: d7:74:68:a9:0b:2d:03:63:62:2a:a1:8e:cc:c8:6b:0e:b1:8e: d4:cb:57:61:0b:a1:48:54:a8:a4:3e:30:06:8d:fa:08:0f:f8: 3d:2d:05:d0:a6:c4:ff:0d:97:f4:c5:fa:ef:bc:e5:25:5b:d1: 2d:3a:aa:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzbAicwCtBmSLafeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIxNDAyMDAzMloXDTI2MDUxNTAxMDAzMlowLzEtMCsGA1UEAxMk M2Q0ZTA4YWEtNzZmZS00N2ZkLWIwZjMtMTEwNDQ0YWJhYzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncOfVMrnOe5h+PyCtIeoBYE5HT2cDHROhyhH YEgdiUjcvi6/8uZg16u8pa/kvLgHyWwvjC6lGcu5y0ISyF2SN3Z1SZE13VsM/S1x uIvK0KQAzeAK1bHqpZ6J3xp3V9xiZgcy4wkwdBxLmQHdo4OgL04bv1FxEB5vsGFy FwN6SF+MXzRQyq17Wipl7tUvtAYcrbk9aWcmUZWnj1AJpF8AoqwNReSJPi3bxupl BPQO9im1BWgYw/h2BgyHezihlrXHhaO7tTve25fMOUiqQcIcPf88P/mxHs0m/ZW7 Epdfk1zbVYSVoxHG9O269H3WDxeNyj3LIcehvXp1CXV0Cds+0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNQmUDSyY3ZMlh0LyJTXmKKasf1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWE0YmFhMGUtMzE3Zi0z ZTBjLTkwOGQtMzcwMWI2YWE1ZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADS/wNtxj35Rns3XwKTGTxhPoFJVO4Jkf0DyJna5CUOFOniCSA6Pf2F+ Q7RMVkxuV+XdAW5uGQPZan/I3LmJTqAWG4Ino8+TdaZEb8IdXpf3KcEpwhweRQud 8i9Q14TlaW2PlhZcillZxv/OXCpejwamUsRFvc2fdvTaAN9K71EBXNcGa0KgjRY0 UbT0GzArgLTF3WouivKRKPCZmE3qLbQk3ZcFvxc8OxyF3I+x5T645rk6fz4G+MYP 4hOIkLbJoFjX9Fqba9d0aKkLLQNjYiqhjszIaw6xjtTLV2ELoUhUqKQ+MAaN+ggP +D0tBdCmxP8Nl/TF+u+85SVb0S06qkc= -----END CERTIFICATE-----Generated at Mon Mar 2 02:33:06 2026 by rpki-client