$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2259e3a5-4def-301b-b3af-d1ad97496f2b.roa File: 2259e3a5-4def-301b-b3af-d1ad97496f2b.roa (raw, json) Hash identifier: LkJ0xYJMEmsijJAloF6GCJ7zpzbyEqA5Mg5awu8SjFI= Subject key identifier: 39:BF:94:17:9D:CA:30:56:94:F5:18:7A:FA:C3:01:7A:89:C4:E8:B1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D037D1FBA46FA65A8E0712BA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2259e3a5-4def-301b-b3af-d1ad97496f2b.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 20940 IP address blocks: 23.196.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:1f:ba:46:fa:65:a8:e0:71:2b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=dccaecee-b43c-4f0b-a4fb-f386d31feb99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c9:bf:ec:a8:06:5b:5e:b1:45:8c:2e:70:66: 42:82:e3:9c:4f:7d:a7:6e:6b:37:a7:2c:80:82:3d: 6a:53:8b:c3:e6:23:60:46:9b:5e:1c:e5:2c:65:5a: fb:57:c3:f7:15:84:57:4c:b0:b3:4d:db:c8:c0:62: 14:a3:86:ae:42:3f:ee:60:fc:1c:d8:83:c2:85:10: ed:97:cc:16:29:ba:12:ec:6b:9c:77:69:79:66:55: e2:f9:bd:29:c8:b3:14:a0:0e:ec:04:76:7f:4a:5f: 0f:32:b5:c1:c7:dc:20:ae:fb:58:e4:63:4b:9e:42: 5f:3c:7e:ff:49:b3:aa:d2:68:2c:4d:75:9c:2d:5b: ca:74:34:6d:70:e9:79:69:ac:3b:69:81:4b:71:df: 68:94:da:e4:b4:95:44:95:4d:ea:3a:b1:a4:59:69: da:c9:43:f6:21:72:c9:ff:03:7c:65:c6:91:2d:3a: 0f:d7:c2:8f:63:6a:4d:cb:81:7f:48:70:e3:05:9b: 51:de:bd:23:b9:b2:96:0f:82:6f:9e:ed:d1:6c:77: 5a:9c:f2:06:e7:fe:4d:81:83:5c:9c:65:ae:80:da: a1:91:51:ae:ea:09:a0:5e:b8:e5:df:11:d5:9c:4d: 80:23:35:ed:42:68:9b:75:69:a2:74:68:f8:5e:37: 14:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BF:94:17:9D:CA:30:56:94:F5:18:7A:FA:C3:01:7A:89:C4:E8:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2259e3a5-4def-301b-b3af-d1ad97496f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:02:27:ca:6c:cd:9b:25:3f:b9:54:8b:35:6e:d8:74:9a:31: 5f:2d:5f:55:45:f5:9f:45:69:ae:a9:34:ee:d6:06:b6:c3:e6: ed:cb:05:f0:c7:98:3b:cd:2d:e8:a0:93:94:4d:05:ca:2e:68: 06:e2:f9:27:ed:3f:a2:99:91:6b:d8:91:37:4f:57:0e:4e:a1: e2:4a:2d:55:2e:9c:3c:e7:96:63:4e:0a:81:c4:15:cb:63:7b: 2d:fb:58:27:a9:e7:e3:c8:5c:16:5a:4c:e6:59:e3:4b:e3:7c: 22:24:a2:7f:44:e4:03:ed:d8:90:52:ee:ea:42:c9:51:dd:13: f8:ee:ad:88:96:be:e8:75:81:77:5d:7a:59:27:88:b8:b4:c0: ae:d0:0f:f5:8d:68:3e:4a:80:18:87:0d:ee:58:6d:38:22:a3: 9f:15:2a:e0:c8:06:6a:4c:95:0d:e7:53:d0:a3:46:3b:e7:92: d8:a4:ca:a8:3b:fc:8a:84:de:7d:ea:8c:fe:c1:b0:72:00:1f: bb:3a:ee:8b:4e:a9:64:d5:42:7f:ba:ff:f7:a0:c2:83:b4:03: e8:cb:35:29:c9:4b:54:97:e4:56:f9:2e:b2:e4:f2:5d:1a:77: 11:b4:01:4d:a7:a7:a4:2a:66:43:14:e5:20:e3:96:41:0c:03: 31:ef:94:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfR+6RvplqOBxK6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk ZGNjYWVjZWUtYjQzYy00ZjBiLWE0ZmItZjM4NmQzMWZlYjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18m/7KgGW16xRYwucGZCguOcT32nbms3pyyA gj1qU4vD5iNgRpteHOUsZVr7V8P3FYRXTLCzTdvIwGIUo4auQj/uYPwc2IPChRDt l8wWKboS7Gucd2l5ZlXi+b0pyLMUoA7sBHZ/Sl8PMrXBx9wgrvtY5GNLnkJfPH7/ SbOq0mgsTXWcLVvKdDRtcOl5aaw7aYFLcd9olNrktJVElU3qOrGkWWnayUP2IXLJ /wN8ZcaRLToP18KPY2pNy4F/SHDjBZtR3r0jubKWD4Jvnu3RbHdanPIG5/5NgYNc nGWugNqhkVGu6gmgXrjl3xHVnE2AIzXtQmibdWmidGj4XjcUTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDm/lBedyjBWlPUYevrDAXqJxOixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjI1OWUzYTUtNGRlZi0z MDFiLWIzYWYtZDFhZDk3NDk2ZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8QDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgCJ8pszZslP7lUizVu2HSaMV8tX1VF9Z9Faa6pNO7WBrbD5u3LBfDH mDvNLeigk5RNBcouaAbi+SftP6KZkWvYkTdPVw5OoeJKLVUunDznlmNOCoHEFctj ey37WCep5+PIXBZaTOZZ40vjfCIkon9E5APt2JBS7upCyVHdE/jurYiWvuh1gXdd elkniLi0wK7QD/WNaD5KgBiHDe5YbTgio58VKuDIBmpMlQ3nU9CjRjvnktikyqg7 /IqE3n3qjP7BsHIAH7s67otOqWTVQn+6//egwoO0A+jLNSnJS1SX5Fb5LrLk8l0a dxG0AU2np6QqZkMU5SDjlkEMAzHvlAI= -----END CERTIFICATE-----Generated at Sun Mar 1 23:13:53 2026 by rpki-client