$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e98f558-c835-3c54-8ae1-bcac60d0473b.roa File: 2e98f558-c835-3c54-8ae1-bcac60d0473b.roa (raw, json) Hash identifier: j4UhnWhvlIVDRZBYZXWH4q2RW5LORKYGo126+1fA4JY= Subject key identifier: 4C:42:5B:0B:BE:10:C3:35:C5:D4:5E:1E:AC:D3:53:57:A3:FD:5A:34 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D037D3748A0645CF51D0A3EC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e98f558-c835-3c54-8ae1-bcac60d0473b.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16625 IP address blocks: 23.196.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:37:48:a0:64:5c:f5:1d:0a:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=5a82b91e-121e-4399-8810-1d5c3c9f175c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:11:d9:96:b9:e0:b5:e0:dc:4e:ca:43:88:0d: 56:32:0e:13:7f:30:a6:18:9e:be:6f:14:01:02:1b: 42:9e:e6:94:95:fe:1d:be:44:0b:67:f3:79:b7:15: f7:4c:03:2a:10:b5:41:ed:0b:d4:6a:50:dd:1d:c8: 01:fc:d5:7d:c7:2e:7e:f8:50:05:74:1d:33:bd:01: 45:5e:01:76:27:f9:1d:f2:b7:64:43:d2:74:4d:13: 25:2a:86:d5:88:14:f6:56:5c:3d:57:00:98:93:f8: 87:9b:0f:fc:54:83:7d:b6:9f:5c:5f:af:cf:76:3a: f8:3c:0f:d3:d6:2b:ed:df:1e:2d:e9:17:67:2c:c7: 37:dc:b1:ba:10:b7:53:8c:7d:ba:21:b1:60:7f:0b: bc:03:49:9e:36:2f:fe:8b:43:72:6e:46:cf:d6:59: 98:20:f6:18:52:46:7b:9e:bc:1c:1e:58:cf:ef:52: 6e:b7:f8:89:5a:d0:9c:3e:e3:62:78:d6:06:89:04: 09:86:1b:81:cc:8f:ad:07:59:15:ac:8a:b2:de:51: 27:d9:90:96:83:46:9e:3e:2a:c7:22:bc:09:b3:6f: 40:49:5c:22:21:09:ea:15:d5:41:98:2f:4e:8d:9d: af:74:1b:07:8c:c2:9e:0f:79:3d:7a:8f:27:1d:2e: df:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:42:5B:0B:BE:10:C3:35:C5:D4:5E:1E:AC:D3:53:57:A3:FD:5A:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e98f558-c835-3c54-8ae1-bcac60d0473b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ab:5c:a9:02:be:09:4a:b0:04:6e:f1:b0:13:32:4d:d0:c1: 7f:71:61:42:83:1f:3a:1f:e4:22:57:cb:30:c3:be:b5:b7:be: 0f:3b:35:5b:d1:3a:75:0b:82:84:8d:fc:f4:30:7e:fe:f0:2a: 89:9d:4d:2b:00:03:57:42:70:b6:8f:67:16:fd:32:e1:9b:1c: 8a:14:29:b0:09:db:8a:ed:cd:59:61:a2:59:be:40:f0:ea:23: d0:69:9e:1e:89:5c:8c:45:bf:86:b5:b1:4f:55:4c:29:fb:77: 1e:d6:99:c1:fe:0f:2f:de:a8:6c:a4:14:4a:bf:9f:29:3c:15: 62:2a:4f:a5:55:f5:89:90:92:81:9c:57:f7:5a:87:6f:9b:c7: 75:ac:ce:d5:3e:f0:b9:11:ff:d2:1b:c6:bf:1f:28:eb:be:c5: 01:9e:88:a0:65:17:99:b7:81:cd:01:a4:d5:1a:cc:9d:7b:ec: bf:51:57:8a:dc:eb:03:15:0e:dd:22:da:c7:d3:34:fe:b7:fc: 16:9f:b1:d5:89:86:5f:12:01:d1:3d:7f:57:6f:ed:23:f5:c2: f2:12:08:5c:cd:49:99:78:84:9c:5f:99:f9:d2:3a:2c:e7:c7: 0b:4d:d5:71:fa:66:ea:33:89:13:7d:a8:a4:a3:a1:be:f0:b4: 0f:5b:96:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfTdIoGRc9R0KPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk NWE4MmI5MWUtMTIxZS00Mzk5LTg4MTAtMWQ1YzNjOWYxNzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxHZlrngteDcTspDiA1WMg4TfzCmGJ6+bxQB AhtCnuaUlf4dvkQLZ/N5txX3TAMqELVB7QvUalDdHcgB/NV9xy5++FAFdB0zvQFF XgF2J/kd8rdkQ9J0TRMlKobViBT2Vlw9VwCYk/iHmw/8VIN9tp9cX6/Pdjr4PA/T 1ivt3x4t6RdnLMc33LG6ELdTjH26IbFgfwu8A0meNi/+i0NybkbP1lmYIPYYUkZ7 nrwcHljP71Jut/iJWtCcPuNieNYGiQQJhhuBzI+tB1kVrIqy3lEn2ZCWg0aePirH IrwJs29ASVwiIQnqFdVBmC9OjZ2vdBsHjMKeD3k9eo8nHS7fRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExCWwu+EMM1xdReHqzTU1ej/Vo0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmU5OGY1NTgtYzgzNS0z YzU0LThhZTEtYmNhYzYwZDA0NzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF8SAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWrXKkCvglKsARu8bATMk3QwX9xYUKDHzof5CJXyzDDvrW3vg87NVvR OnULgoSN/PQwfv7wKomdTSsAA1dCcLaPZxb9MuGbHIoUKbAJ24rtzVlholm+QPDq I9Bpnh6JXIxFv4a1sU9VTCn7dx7WmcH+Dy/eqGykFEq/nyk8FWIqT6VV9YmQkoGc V/dah2+bx3WsztU+8LkR/9Ibxr8fKOu+xQGeiKBlF5m3gc0BpNUazJ177L9RV4rc 6wMVDt0i2sfTNP63/BafsdWJhl8SAdE9f1dv7SP1wvISCFzNSZl4hJxfmfnSOizn xwtN1XH6ZuoziRN9qKSjob7wtA9bltA= -----END CERTIFICATE-----Generated at Sun Mar 1 23:01:04 2026 by rpki-client