$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21ef2631-7095-3964-83b6-6ac40b6fb023.roa File: 21ef2631-7095-3964-83b6-6ac40b6fb023.roa (raw, json) Hash identifier: eIemP9UjRi4tXp8HYApWbRFOnni2JdekjcH+mxH7tfI= Subject key identifier: 73:DE:55:D8:48:2B:2D:F3:F7:69:8E:D0:F0:F7:28:6C:07:76:F0:C6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CFC8230CF652B3CE79415E680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21ef2631-7095-3964-83b6-6ac40b6fb023.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.43.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:30:cf:65:2b:3c:e7:94:15:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=8b6d61a9-f339-4866-9a31-10fc435c05d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b1:a8:47:be:4b:fa:1b:2d:c1:61:62:17:90: f5:d0:67:9c:d4:04:3e:a9:fd:ca:3d:c2:b3:82:11: 74:ed:f9:6a:58:b4:cd:52:e7:85:db:dc:7e:e7:2d: 3e:3d:a5:53:10:48:33:b0:8f:2d:3a:2b:12:2a:d2: 08:4a:af:c9:30:a8:34:c6:68:90:b0:df:da:3a:2c: 6d:45:b7:c4:79:8e:92:53:a8:4c:a3:4c:cf:a0:1b: 83:ad:4b:9b:27:24:8c:9d:8b:f9:bd:69:d0:ab:01: 8c:ec:f6:a0:01:78:bb:58:e2:0b:db:4d:a8:ea:7d: a9:b3:1e:83:e6:da:c0:88:44:be:15:3b:8e:fa:56: 14:1e:e2:44:f2:cc:2a:ef:9b:1d:58:a4:69:23:49: f1:ed:28:cb:5e:aa:0e:33:72:7d:f2:1f:d8:4b:4d: a0:f4:ef:f4:1d:f0:0d:9d:51:8a:77:46:cd:f9:d1: 17:5c:ba:d5:dd:39:26:ac:b2:12:10:eb:d2:82:df: 43:e1:b8:e5:6f:2d:d8:4a:ec:d2:ec:07:1e:a2:ae: d1:05:b4:27:76:9b:3c:66:64:bf:aa:5c:ed:dd:47: 66:d3:45:61:3a:1c:aa:90:4c:d1:55:8e:87:5e:4d: b9:b6:93:24:fc:ee:97:f2:19:10:ff:91:95:b9:53: 84:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DE:55:D8:48:2B:2D:F3:F7:69:8E:D0:F0:F7:28:6C:07:76:F0:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21ef2631-7095-3964-83b6-6ac40b6fb023.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:7a:12:b8:54:e2:a1:57:a8:ff:5b:a6:38:9b:cd:6b:96:01: ee:99:54:55:c8:33:af:fa:0d:52:f0:ea:2f:5a:7f:8d:ee:e2: 05:7c:0b:be:0d:f2:d8:15:a9:a1:d0:bb:69:74:ba:b0:6c:3b: 02:79:22:97:bb:31:1b:60:06:de:e1:84:f8:96:0a:d5:cb:de: c6:a4:23:5e:81:29:db:5d:43:dc:45:9c:3f:f3:39:e8:dd:c8: 27:cf:57:00:e6:ce:4b:38:47:86:54:cb:64:92:2d:a2:e7:a6: 31:3e:58:60:14:aa:87:ce:b3:b2:52:3c:19:6c:cf:78:76:ed: 01:55:42:d3:a3:9e:cb:97:a6:76:11:28:7f:7c:13:e4:13:fd: 09:e3:42:d1:a3:90:d4:ea:a3:ad:e9:38:1b:30:95:e1:10:e7: 1c:ad:07:97:7d:7c:39:22:b1:d1:a8:00:80:e2:12:2c:8b:18: e5:b0:00:b9:53:c7:83:f2:24:83:ec:9e:40:07:b1:cf:18:b5: 54:9a:9e:7a:05:64:89:92:30:a4:0f:09:9d:88:fc:02:78:32: 9d:21:0b:ba:5e:0c:30:8d:30:2d:08:fe:c1:8f:fe:ae:4f:44: ef:df:03:ea:51:da:61:32:42:1f:be:46:20:98:25:79:a1:63: 98:e9:85:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gjDPZSs855QV5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk OGI2ZDYxYTktZjMzOS00ODY2LTlhMzEtMTBmYzQzNWMwNWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobGoR75L+hstwWFiF5D10Gec1AQ+qf3KPcKz ghF07flqWLTNUueF29x+5y0+PaVTEEgzsI8tOisSKtIISq/JMKg0xmiQsN/aOixt RbfEeY6SU6hMo0zPoBuDrUubJySMnYv5vWnQqwGM7PagAXi7WOIL202o6n2psx6D 5trAiES+FTuO+lYUHuJE8swq75sdWKRpI0nx7SjLXqoOM3J98h/YS02g9O/0HfAN nVGKd0bN+dEXXLrV3TkmrLISEOvSgt9D4bjlby3YSuzS7Aceoq7RBbQndps8ZmS/ qlzt3Udm00VhOhyqkEzRVY6HXk25tpMk/O6X8hkQ/5GVuVOEPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPeVdhIKy3z92mO0PD3KGwHdvDGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjFlZjI2MzEtNzA5NS0z OTY0LTgzYjYtNmFjNDBiNmZiMDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyv5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD96ErhU4qFXqP9bpjibzWuWAe6ZVFXIM6/6DVLw6i9af43u4gV8C74N 8tgVqaHQu2l0urBsOwJ5Ipe7MRtgBt7hhPiWCtXL3sakI16BKdtdQ9xFnD/zOejd yCfPVwDmzks4R4ZUy2SSLaLnpjE+WGAUqofOs7JSPBlsz3h27QFVQtOjnsuXpnYR KH98E+QT/QnjQtGjkNTqo63pOBswleEQ5xytB5d9fDkisdGoAIDiEiyLGOWwALlT x4PyJIPsnkAHsc8YtVSannoFZImSMKQPCZ2I/AJ4Mp0hC7peDDCNMC0I/sGP/q5P RO/fA+pR2mEyQh++RiCYJXmhY5jphSY= -----END CERTIFICATE-----Generated at Mon Mar 2 13:24:42 2026 by rpki-client