$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f2ce524-0520-3497-921c-db0a2701112b.roa File: 1f2ce524-0520-3497-921c-db0a2701112b.roa (raw, json) Hash identifier: 5SV+2g4/azehYusx5QDKLciGRG5U/kIY98NDBhGL2hc= Subject key identifier: 3D:21:01:64:DF:F7:B3:93:50:41:41:E1:B6:B3:66:34:79:A8:72:26 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CE4C7AD25A7CFF2ECC4F10000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f2ce524-0520-3497-921c-db0a2701112b.roa Signing time: Tue 17 Feb 2026 14:00:41 +0000 ROA not before: Tue 17 Feb 2026 14:00:41 +0000 ROA not after: Mon 18 May 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.52.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e4:c7:ad:25:a7:cf:f2:ec:c4:f1:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 17 14:00:41 2026 GMT Not After : May 18 13:00:41 2026 GMT Subject: CN=19b94a7c-2bf5-4af0-ba38-aea232b48073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:06:38:a8:91:cd:f7:3c:33:05:18:57:d0:62: d3:e6:f5:bc:f2:c1:26:80:05:a0:48:9f:06:a0:fc: 8d:11:a2:7e:be:dc:0b:7b:b4:86:5f:1b:14:96:75: 30:ac:38:5d:88:38:02:83:9a:d3:10:2c:98:ae:dd: a0:9b:71:90:0d:00:29:54:25:e3:33:3e:05:9f:9f: b4:06:34:8d:94:68:f8:4c:94:32:6b:17:29:de:a4: c4:39:86:b5:3d:91:b0:98:fe:f8:a2:d5:db:80:41: e7:ed:ae:91:7d:d0:58:5d:ec:cd:a4:85:b0:4c:a2: 5b:ab:2d:1a:5e:7a:e6:fe:88:2c:a6:a6:59:07:97: e0:17:b1:d7:56:cb:31:02:48:04:1f:b2:7e:68:6e: 84:54:25:07:16:82:7a:52:84:63:2c:e9:16:72:bd: bf:49:25:dd:91:f6:19:11:a1:a0:f2:fd:8b:3c:67: d7:9a:0f:93:dc:2f:12:ad:33:28:da:20:ea:c0:cf: ec:6e:eb:bf:cf:4f:e4:90:4f:76:84:04:16:02:f6: b2:af:a3:52:ac:70:80:77:b6:36:18:4f:23:fe:33: b0:26:42:84:1c:64:8f:40:83:dd:ea:b7:d0:23:d5: 69:1d:fe:1c:1a:dd:75:75:62:0f:9c:3d:e4:c4:6a: 32:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:21:01:64:DF:F7:B3:93:50:41:41:E1:B6:B3:66:34:79:A8:72:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f2ce524-0520-3497-921c-db0a2701112b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:3c:1d:db:5b:43:8b:58:72:af:6d:e6:cd:71:f1:ac:b3:f3: 8e:82:cc:ca:0d:20:b3:59:0c:c1:c8:6a:4a:98:bd:fa:2b:7e: 86:c7:7b:5c:bb:79:b4:e3:11:ac:c9:b0:7c:12:b1:3e:0d:38: 7b:c8:aa:33:14:e3:5f:db:53:bf:a3:d8:25:9d:0c:42:02:ae: e6:94:a1:33:13:4a:cb:b7:ef:b8:3d:c6:78:35:d2:64:92:20: d5:d8:41:3d:a5:0a:5d:af:8f:54:a4:d0:5a:90:97:48:5f:4c: ac:1c:52:73:32:2f:be:b1:c0:77:a7:08:e6:db:1e:41:05:88: 5b:e6:5c:89:6b:e6:48:77:25:9d:54:fa:8e:45:cc:fe:d6:ea: 0b:cb:db:77:8b:2a:b1:ee:d1:60:bf:fd:b3:4c:09:a0:24:a4: fd:73:c1:07:cc:87:bc:ed:5f:64:d9:03:e5:57:e2:b8:b0:04: 96:4d:bd:59:81:75:36:cf:00:77:04:61:27:44:87:e9:bf:12: 3e:e6:1a:73:e5:2c:fc:14:d3:91:18:41:3e:aa:7b:c9:bc:6f: 97:eb:15:70:4c:6b:1c:a4:88:00:01:65:b7:9f:56:08:62:84: b7:8a:3a:0f:e6:9a:50:33:a9:ee:50:73:7b:79:61:b3:c9:31: 0b:48:7b:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzkx60lp8/y7MTxAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIxNzE0MDA0MVoXDTI2MDUxODEzMDA0MVowLzEtMCsGA1UEAxMk MTliOTRhN2MtMmJmNS00YWYwLWJhMzgtYWVhMjMyYjQ4MDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwY4qJHN9zwzBRhX0GLT5vW88sEmgAWgSJ8G oPyNEaJ+vtwLe7SGXxsUlnUwrDhdiDgCg5rTECyYrt2gm3GQDQApVCXjMz4Fn5+0 BjSNlGj4TJQyaxcp3qTEOYa1PZGwmP74otXbgEHn7a6RfdBYXezNpIWwTKJbqy0a Xnrm/ogspqZZB5fgF7HXVssxAkgEH7J+aG6EVCUHFoJ6UoRjLOkWcr2/SSXdkfYZ EaGg8v2LPGfXmg+T3C8SrTMo2iDqwM/sbuu/z0/kkE92hAQWAvayr6NSrHCAd7Y2 GE8j/jOwJkKEHGSPQIPd6rfQI9VpHf4cGt11dWIPnD3kxGoybwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0hAWTf97OTUEFB4bazZjR5qHImMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWYyY2U1MjQtMDUyMC0z NDk3LTkyMWMtZGIwYTI3MDExMTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzSqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC88HdtbQ4tYcq9t5s1x8ayz846CzMoNILNZDMHIakqYvforfobHe1y7 ebTjEazJsHwSsT4NOHvIqjMU41/bU7+j2CWdDEICruaUoTMTSsu377g9xng10mSS INXYQT2lCl2vj1Sk0FqQl0hfTKwcUnMyL76xwHenCObbHkEFiFvmXIlr5kh3JZ1U +o5FzP7W6gvL23eLKrHu0WC//bNMCaAkpP1zwQfMh7ztX2TZA+VX4riwBJZNvVmB dTbPAHcEYSdEh+m/Ej7mGnPlLPwU05EYQT6qe8m8b5frFXBMaxykiAABZbefVghi hLeKOg/mmlAzqe5Qc3t5YbPJMQtIezk= -----END CERTIFICATE-----Generated at Mon Mar 2 09:22:52 2026 by rpki-client