$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28d65aad-6b71-3872-aa61-8aadd2447825.roa File: 28d65aad-6b71-3872-aa61-8aadd2447825.roa (raw, json) Hash identifier: yx4Pom5PCtIqK1NlxI9SnLrzcP8Abd5q/GgimKrj7nM= Subject key identifier: 64:F6:56:73:5F:AA:8E:EC:97:1B:EE:05:D6:EE:03:DC:13:FD:44:CA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CF587A20D4BF20E660531FA1C Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28d65aad-6b71-3872-aa61-8aadd2447825.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 7713 IP address blocks: 23.219.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:a2:0d:4b:f2:0e:66:05:31:fa:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=65f7a6fe-19d4-4167-adb9-48ddfddce6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:69:2d:ff:da:56:20:77:67:21:73:65:bc:63: 74:94:1b:9e:05:d7:46:2e:fa:2b:85:01:16:ed:60: 40:18:ba:ba:88:85:96:76:dc:e1:9e:fe:d4:99:94: 83:82:5b:5d:b5:59:0c:1e:9c:38:60:d6:6c:8e:a3: 05:85:98:c4:fa:de:64:95:cb:9e:be:34:c6:9c:95: 24:0e:5b:c5:50:dd:6e:42:0f:ac:1f:5b:20:9b:00: bd:5d:b2:49:e4:13:39:a9:b8:c4:1e:57:d1:f8:29: f0:05:9b:a2:2e:5d:34:00:0b:7c:c9:79:ac:d7:33: 69:0e:c9:f8:7f:e9:d6:8e:f0:a7:15:93:05:28:05: 36:0c:00:e4:2c:84:5c:1d:16:05:da:cc:f2:24:80: 1c:a7:c7:a5:f6:6d:37:67:37:ef:d7:0d:e1:fc:99: 6b:0f:0e:e7:f2:0b:37:69:89:b1:8b:08:aa:c4:7c: 05:21:6d:e1:6d:78:d7:4a:6a:5f:d2:6d:d5:dd:9d: 30:ac:ee:66:6c:91:3c:79:c9:c7:90:a7:a2:e9:0d: d4:27:75:7e:2e:69:13:e4:5b:9b:e2:e8:90:9d:e0: 90:2f:c1:37:1e:b2:c5:93:4e:9c:95:58:dd:00:a0: 47:11:31:82:61:d1:0b:06:e1:49:06:cb:d6:8d:40: 88:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F6:56:73:5F:AA:8E:EC:97:1B:EE:05:D6:EE:03:DC:13:FD:44:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28d65aad-6b71-3872-aa61-8aadd2447825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:2d:1f:84:1f:40:33:1d:53:20:99:d6:6f:e5:7b:56:81:97: 91:c0:6d:d3:1e:3c:09:75:4f:01:68:ce:70:a1:a2:66:f8:f2: fa:6b:9a:0b:8e:a2:f0:a0:4d:0e:8d:ae:cd:57:7d:21:b3:da: 4e:bc:1c:9b:d0:a0:e4:e9:6f:98:85:cd:3e:99:32:57:1c:0a: 62:56:04:80:61:09:78:e0:96:fb:3c:4d:dc:ca:fb:6f:4b:3d: 7e:1d:9d:05:d3:e3:f6:b2:70:1d:59:3b:1b:89:cd:41:8a:ca: bf:2f:bb:d6:d9:2f:c1:03:b1:90:05:f0:3f:f5:de:f1:9a:f0: 11:84:04:b8:0c:f6:a8:4b:8a:7d:6a:23:27:20:23:f3:0c:d6: 6f:62:09:ed:78:da:83:cc:4d:04:43:07:de:cd:c4:6f:d3:e0: 38:4e:8e:27:98:e8:eb:d6:d7:3a:48:a9:db:55:2f:6a:03:5f: 64:5c:36:fc:45:68:aa:4a:71:c1:71:16:6a:96:e1:dc:c7:a5: cc:b0:f3:a1:19:2b:67:5f:44:bd:d8:ee:5b:e0:0a:ca:09:17: 20:b7:8f:0f:93:7f:a8:f7:f9:78:d7:92:9d:cb:62:1f:d7:53: d8:d3:03:d7:a3:5c:51:8a:87:d3:35:23:10:80:49:13:d9:f0: a9:ed:19:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h6INS/IOZgUx+hwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk NjVmN2E2ZmUtMTlkNC00MTY3LWFkYjktNDhkZGZkZGNlNmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmkt/9pWIHdnIXNlvGN0lBueBddGLvorhQEW 7WBAGLq6iIWWdtzhnv7UmZSDgltdtVkMHpw4YNZsjqMFhZjE+t5klcuevjTGnJUk DlvFUN1uQg+sH1sgmwC9XbJJ5BM5qbjEHlfR+CnwBZuiLl00AAt8yXms1zNpDsn4 f+nWjvCnFZMFKAU2DADkLIRcHRYF2szyJIAcp8el9m03Zzfv1w3h/JlrDw7n8gs3 aYmxiwiqxHwFIW3hbXjXSmpf0m3V3Z0wrO5mbJE8ecnHkKei6Q3UJ3V+LmkT5Fub 4uiQneCQL8E3HrLFk06clVjdAKBHETGCYdELBuFJBsvWjUCIKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGT2VnNfqo7slxvuBdbuA9wT/UTKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjhkNjVhYWQtNmI3MS0z ODcyLWFhNjEtOGFhZGQyNDQ3ODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9vNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4tH4QfQDMdUyCZ1m/le1aBl5HAbdMePAl1TwFoznChomb48vprmguO ovCgTQ6Nrs1XfSGz2k68HJvQoOTpb5iFzT6ZMlccCmJWBIBhCXjglvs8TdzK+29L PX4dnQXT4/aycB1ZOxuJzUGKyr8vu9bZL8EDsZAF8D/13vGa8BGEBLgM9qhLin1q IycgI/MM1m9iCe142oPMTQRDB97NxG/T4DhOjieY6OvW1zpIqdtVL2oDX2RcNvxF aKpKccFxFmqW4dzHpcyw86EZK2dfRL3Y7lvgCsoJFyC3jw+Tf6j3+XjXkp3LYh/X U9jTA9ejXFGKh9M1IxCASRPZ8KntGZA= -----END CERTIFICATE-----Generated at Mon Mar 2 05:00:20 2026 by rpki-client