$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ac27858-388a-3d35-be99-292c759ab34a.roa File: 2ac27858-388a-3d35-be99-292c759ab34a.roa (raw, json) Hash identifier: 2D99fu38pqWvhOZFhdiZzS/DJ6D/QWThPNyorpZOv4A= Subject key identifier: 09:0D:74:12:55:33:FC:43:6E:49:7B:B9:40:F3:1C:58:41:E9:32:75 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CEFF258335338A7E326E06F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ac27858-388a-3d35-be99-292c759ab34a.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.197.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:58:33:53:38:a7:e3:26:e0:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=c4b97a1f-c0cd-41d4-ada6-78d0ad85f0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e8:5b:7c:7c:10:56:98:43:c2:df:85:ab:48: 10:a4:f4:39:65:3b:f3:01:06:ce:29:d8:eb:ce:d6: d4:ff:95:92:14:42:b1:d3:7b:19:ab:ac:5c:9f:46: 33:5f:7b:42:fa:29:fc:03:03:cc:89:2d:11:cc:32: e8:82:1e:53:7f:e8:8d:34:0d:5c:03:0a:d9:3f:1f: c9:83:8d:96:46:c0:e3:e9:3b:72:42:25:60:a2:a2: f4:e5:69:b7:2b:fd:73:ea:44:ec:79:93:d5:8f:24: 75:b5:75:ea:bd:98:3d:ae:6f:6e:71:70:a8:84:e4: 64:3f:91:d6:d2:46:dd:a8:fa:db:58:36:aa:c9:cd: c7:ea:df:e4:bf:ed:ec:6b:42:01:d4:e1:14:1a:2e: 53:d1:c1:95:54:ac:82:83:1d:8a:11:70:a5:57:7d: be:24:af:ac:94:04:ae:b2:28:5f:25:a7:94:76:49: cb:4d:ff:d1:97:48:4e:b6:a5:e8:8c:cb:e8:5c:cc: f2:f8:7d:19:da:86:0d:a0:4a:57:00:cd:04:35:03: a4:94:39:85:12:f4:36:bd:e4:5b:b4:f0:a4:1c:c6: 3d:35:cb:90:a6:5a:43:2c:8d:1b:db:8e:5f:2a:ac: a7:39:8e:7a:42:ef:45:89:56:65:bc:4f:c3:46:52: 57:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0D:74:12:55:33:FC:43:6E:49:7B:B9:40:F3:1C:58:41:E9:32:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ac27858-388a-3d35-be99-292c759ab34a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:34:2a:a5:22:1a:b3:06:d6:dc:e1:ba:9e:fa:47:e1:ea:77: 46:bf:c0:1d:e2:a9:ca:bb:0b:93:a8:6f:33:d4:3d:ae:5c:fe: 97:c0:d7:6b:fc:0e:91:47:56:7b:ec:f8:21:89:f0:80:01:06: f2:64:a6:69:b5:68:2f:dd:7d:a2:a2:39:74:e0:3c:02:02:52: d4:d6:a7:15:7e:f8:28:b9:ee:20:07:a0:cd:07:e0:63:49:51: 29:58:c7:fa:ef:c8:13:c7:02:10:fd:01:d8:bf:9b:07:63:ef: ee:73:6e:1d:e0:60:2a:fe:ef:2a:c2:8f:03:c6:fd:16:2b:44: 64:10:65:bb:5e:5e:33:3e:df:69:ba:dd:a4:b4:bb:25:72:8c: 39:d9:0e:d5:df:63:3e:10:f4:b1:6a:31:ad:c8:5c:78:ff:25: cd:51:e9:6f:f4:c2:46:a2:51:5e:e5:d4:66:99:58:0d:97:43: 15:50:20:1a:d3:12:52:12:1e:d1:b5:73:8a:9d:6b:b7:09:f6: 82:b4:74:03:af:02:ed:03:5a:1f:bf:4b:ea:4d:2a:53:a9:3e: 7f:e0:df:78:eb:a0:bf:f7:41:4d:06:24:72:e8:3a:65:10:82: 10:47:81:be:90:95:f7:dd:26:e1:6b:e3:22:49:3d:e0:b3:0e: d9:77:94:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8lgzUzin4ybgbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk YzRiOTdhMWYtYzBjZC00MWQ0LWFkYTYtNzhkMGFkODVmMGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+hbfHwQVphDwt+Fq0gQpPQ5ZTvzAQbOKdjr ztbU/5WSFEKx03sZq6xcn0YzX3tC+in8AwPMiS0RzDLogh5Tf+iNNA1cAwrZPx/J g42WRsDj6TtyQiVgoqL05Wm3K/1z6kTseZPVjyR1tXXqvZg9rm9ucXCohORkP5HW 0kbdqPrbWDaqyc3H6t/kv+3sa0IB1OEUGi5T0cGVVKyCgx2KEXClV32+JK+slASu sihfJaeUdknLTf/Rl0hOtqXojMvoXMzy+H0Z2oYNoEpXAM0ENQOklDmFEvQ2veRb tPCkHMY9NcuQplpDLI0b245fKqynOY56Qu9FiVZlvE/DRlJXGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkNdBJVM/xDbkl7uUDzHFhB6TJ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmFjMjc4NTgtMzg4YS0z ZDM1LWJlOTktMjkyYzc1OWFiMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8VHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH80KqUiGrMG1tzhup76R+Hqd0a/wB3iqcq7C5OobzPUPa5c/pfA12v8 DpFHVnvs+CGJ8IABBvJkpmm1aC/dfaKiOXTgPAICUtTWpxV++Ci57iAHoM0H4GNJ USlYx/rvyBPHAhD9Adi/mwdj7+5zbh3gYCr+7yrCjwPG/RYrRGQQZbteXjM+32m6 3aS0uyVyjDnZDtXfYz4Q9LFqMa3IXHj/Jc1R6W/0wkaiUV7l1GaZWA2XQxVQIBrT ElISHtG1c4qda7cJ9oK0dAOvAu0DWh+/S+pNKlOpPn/g33jroL/3QU0GJHLoOmUQ ghBHgb6QlffdJuFr4yJJPeCzDtl3lBA= -----END CERTIFICATE-----Generated at Mon Mar 2 15:02:19 2026 by rpki-client