$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31b1eb2b-5d53-3a19-bf47-b6c9eea6ac3e.roa File: 31b1eb2b-5d53-3a19-bf47-b6c9eea6ac3e.roa (raw, json) Hash identifier: k4EG/oTdaEQ6POu8fe7zuqsE5LxUeKkGLCy5re/1Y7c= Subject key identifier: 5A:AC:30:4A:A1:F1:EE:87:67:23:AD:1A:2E:A5:8D:A2:01:D5:E8:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CF2BCFEAD7236AFE979DED680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31b1eb2b-5d53-3a19-bf47-b6c9eea6ac3e.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.209.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bc:fe:ad:72:36:af:e9:79:de:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=d767f612-2491-4fba-bf64-67e4d137628e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7f:cc:11:dd:23:3e:38:2f:d3:7e:1a:d4:42: 53:2b:01:8e:d6:8e:ec:d2:39:0a:0d:87:27:32:c5: 6d:80:c3:14:13:92:52:1e:92:ee:43:db:f1:85:8f: 38:c1:3c:af:fc:64:ec:d3:ae:c7:19:90:d5:a7:f5: c3:32:93:7f:61:33:01:7d:27:78:5e:40:55:2b:e8: c4:fb:79:c0:a6:ed:1a:94:b1:7b:c9:b2:9c:41:4d: 4c:ec:82:b9:ad:b2:82:06:6a:d3:61:42:d1:cd:c0: 53:66:97:68:b0:8a:ef:39:05:33:d7:e4:89:46:14: 88:7d:35:5f:8f:26:94:74:31:73:bd:a5:d6:c0:65: 8c:27:0a:d4:d4:d3:e0:98:af:80:b8:d5:0e:c6:42: b0:f8:66:3c:54:fa:32:d7:30:b1:f5:b3:3a:3d:14: 85:ed:d9:e2:57:bb:94:96:f1:c7:fd:19:86:05:00: 28:fc:94:28:cd:bd:fa:27:18:16:e0:bc:86:50:bf: 5e:fc:f4:58:45:94:1d:a2:21:3e:44:73:d6:71:4d: 4d:c8:f2:c7:fb:fa:0e:eb:e2:a2:6b:9d:2f:9a:a6: 2d:c4:fc:74:de:77:b6:fe:25:ad:bf:b7:32:e9:89: 10:a2:e4:9c:a6:6f:73:a0:b1:3e:ff:0a:0f:f3:c1: 32:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AC:30:4A:A1:F1:EE:87:67:23:AD:1A:2E:A5:8D:A2:01:D5:E8:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31b1eb2b-5d53-3a19-bf47-b6c9eea6ac3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:2f:dc:46:24:12:33:b6:9a:24:f0:56:eb:67:b7:a0:51:2e: 12:61:80:43:45:11:96:19:e5:8d:e8:54:91:ad:33:d5:13:cd: 7c:b4:77:be:a0:5a:fe:17:00:f8:03:e9:be:06:4d:bb:64:a8: 47:be:8b:d2:e9:53:ac:f1:25:6a:11:d8:ed:22:d3:55:f5:c2: 1f:55:a1:18:22:07:b6:39:cc:3f:95:9c:d8:df:89:be:f6:f5: 11:5b:9a:e2:ee:a9:d6:00:44:b1:29:df:48:9a:09:3b:68:e0: 33:55:ce:0a:2e:d7:88:32:30:d6:15:cc:0e:d4:cc:2c:f7:0e: fb:ee:d2:52:8f:2b:3d:d1:0f:9d:58:79:08:0e:1d:6b:c7:ec: 44:39:d1:83:65:46:94:8c:16:75:90:04:1f:59:e1:bf:10:68: 7e:13:80:48:87:b8:85:7b:8b:13:25:df:e1:b5:0d:90:f5:3c: f5:c4:d4:ea:73:28:41:3e:31:bc:12:d0:5e:a3:b8:fb:75:77: f1:84:0b:07:f0:33:4a:07:fd:bc:52:28:57:eb:a4:42:be:c0: 02:26:69:6b:5d:d2:71:bf:53:dc:00:dd:86:e0:11:83:29:89: e8:08:e6:e2:e4:26:62:af:4a:e7:4e:c0:02:1f:3f:12:84:ae: 09:26:af:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvP6tcjav6Xne1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZDc2N2Y2MTItMjQ5MS00ZmJhLWJmNjQtNjdlNGQxMzc2MjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH/MEd0jPjgv034a1EJTKwGO1o7s0jkKDYcn MsVtgMMUE5JSHpLuQ9vxhY84wTyv/GTs067HGZDVp/XDMpN/YTMBfSd4XkBVK+jE +3nApu0alLF7ybKcQU1M7IK5rbKCBmrTYULRzcBTZpdosIrvOQUz1+SJRhSIfTVf jyaUdDFzvaXWwGWMJwrU1NPgmK+AuNUOxkKw+GY8VPoy1zCx9bM6PRSF7dniV7uU lvHH/RmGBQAo/JQozb36JxgW4LyGUL9e/PRYRZQdoiE+RHPWcU1NyPLH+/oO6+Ki a50vmqYtxPx03ne2/iWtv7cy6YkQouScpm9zoLE+/woP88Ey5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqsMEqh8e6HZyOtGi6ljaIB1ejAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzFiMWViMmItNWQ1My0z YTE5LWJmNDctYjZjOWVlYTZhYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0v3EYkEjO2miTwVutnt6BRLhJhgENFEZYZ5Y3oVJGtM9UTzXy0d76g Wv4XAPgD6b4GTbtkqEe+i9LpU6zxJWoR2O0i01X1wh9VoRgiB7Y5zD+VnNjfib72 9RFbmuLuqdYARLEp30iaCTto4DNVzgou14gyMNYVzA7UzCz3Dvvu0lKPKz3RD51Y eQgOHWvH7EQ50YNlRpSMFnWQBB9Z4b8QaH4TgEiHuIV7ixMl3+G1DZD1PPXE1Opz KEE+MbwS0F6juPt1d/GECwfwM0oH/bxSKFfrpEK+wAImaWtd0nG/U9wA3YbgEYMp iegI5uLkJmKvSudOwAIfPxKErgkmr50= -----END CERTIFICATE-----Generated at Mon Mar 2 00:39:13 2026 by rpki-client