$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f43c145-7001-3200-a840-f7cabef5ed3b.roa File: 3f43c145-7001-3200-a840-f7cabef5ed3b.roa (raw, json) Hash identifier: RXttAa4sT8a6DNAJK8HP3wfuJApBcQ392OexEH+luy8= Subject key identifier: 02:0E:F8:CD:F9:E9:E0:18:75:17:5E:AD:56:3F:84:71:16:60:90:2F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D037D34D92FF8A1D670F2D5C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f43c145-7001-3200-a840-f7cabef5ed3b.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16625 IP address blocks: 23.195.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:34:d9:2f:f8:a1:d6:70:f2:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=3b09e2a9-bed6-4a63-ba40-dd8423f9fdae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:68:5f:fe:62:6d:27:de:e9:57:4f:60:e1:58: fc:b6:1d:ef:9f:0f:e7:bb:3b:55:09:42:46:e0:11: 27:86:d9:25:c2:1b:ea:44:e5:dc:60:d6:d1:34:3e: 41:a6:4c:eb:c9:90:ae:1c:a4:82:3e:36:dd:a7:9e: 0e:f1:52:56:34:66:7f:16:9d:0b:fa:81:be:f6:e4: 15:12:63:b8:3a:fd:1a:ed:55:da:77:5c:18:1d:19: 8d:60:b2:62:02:7f:74:1a:a4:cd:b7:9c:3f:cb:04: a5:2b:42:37:3f:f7:51:51:60:98:06:fb:d4:28:a8: 88:ac:f3:ad:7f:60:27:28:0d:c1:ff:81:66:9c:69: 38:f0:19:4b:70:74:76:70:12:af:a8:4f:21:2d:ae: 3d:73:f6:7a:6c:d8:5d:ce:56:a5:1c:5e:25:1d:17: ff:e4:da:2c:12:80:b0:b8:33:6f:49:b9:77:8c:55: 69:bd:6a:8f:bd:c7:13:72:43:f2:f2:c2:72:bd:c7: e1:13:dc:b1:51:06:2f:77:cb:c2:ff:3c:55:94:7f: f0:72:60:15:80:fc:d6:71:c7:d0:68:a1:5d:b5:95: a2:b6:69:87:11:e1:3c:1c:83:67:77:d0:2a:f8:4c: 8f:7f:1d:c2:59:5c:b3:67:6d:26:be:28:82:39:0e: 07:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0E:F8:CD:F9:E9:E0:18:75:17:5E:AD:56:3F:84:71:16:60:90:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f43c145-7001-3200-a840-f7cabef5ed3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:f9:08:a6:d4:c5:82:39:77:58:a4:cd:60:e3:3b:28:f9:45: 8a:e6:4d:bc:9c:4e:6d:3c:e5:af:a9:fd:e0:92:23:cf:a7:45: f3:7f:a5:1a:7a:59:cb:a5:59:fb:f5:a2:d3:46:bd:e5:b4:fe: b1:f1:c2:a9:14:e8:5c:ff:c8:46:81:18:75:db:57:59:39:bf: 37:cb:04:54:60:b4:aa:25:89:df:6f:7b:57:ef:5d:56:98:a9: f9:c8:04:4e:ae:1b:02:8d:6d:6c:ca:ff:68:55:55:12:0f:d1: d8:5a:54:95:75:82:e8:56:fb:54:f7:34:ea:90:b5:e4:d7:69: 84:a7:01:79:32:cf:70:0e:f2:3e:06:cd:85:d9:fc:2d:19:b8: 5d:3e:4f:0e:c8:93:ab:00:67:54:bc:a5:0f:75:df:e3:d0:73: 9d:a5:94:e9:95:2e:79:b9:af:8e:6c:a9:6c:50:ff:98:6d:b3: a7:37:96:53:a8:a0:78:5c:1d:c4:37:f4:43:02:42:df:6d:cc: 10:1a:28:b3:a3:43:c8:70:c9:a7:c1:e5:2f:c2:b0:03:46:ca: 57:11:e7:6c:98:59:2d:40:62:03:a5:fc:35:6e:48:d3:76:3d: e0:52:9b:f9:9c:f3:d6:c8:a3:4a:00:fa:fd:ad:33:75:b6:96: f2:01:68:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfTTZL/ih1nDy1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk M2IwOWUyYTktYmVkNi00YTYzLWJhNDAtZGQ4NDIzZjlmZGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mhf/mJtJ97pV09g4Vj8th3vnw/nuztVCUJG 4BEnhtklwhvqROXcYNbRND5BpkzryZCuHKSCPjbdp54O8VJWNGZ/Fp0L+oG+9uQV EmO4Ov0a7VXad1wYHRmNYLJiAn90GqTNt5w/ywSlK0I3P/dRUWCYBvvUKKiIrPOt f2AnKA3B/4FmnGk48BlLcHR2cBKvqE8hLa49c/Z6bNhdzlalHF4lHRf/5NosEoCw uDNvSbl3jFVpvWqPvccTckPy8sJyvcfhE9yxUQYvd8vC/zxVlH/wcmAVgPzWccfQ aKFdtZWitmmHEeE8HINnd9Aq+EyPfx3CWVyzZ20mviiCOQ4HqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIO+M356eAYdRderVY/hHEWYJAvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Y0M2MxNDUtNzAwMS0z MjAwLWE4NDAtZjdjYWJlZjVlZDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8MMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFT5CKbUxYI5d1ikzWDjOyj5RYrmTbycTm085a+p/eCSI8+nRfN/pRp6 WculWfv1otNGveW0/rHxwqkU6Fz/yEaBGHXbV1k5vzfLBFRgtKolid9ve1fvXVaY qfnIBE6uGwKNbWzK/2hVVRIP0dhaVJV1guhW+1T3NOqQteTXaYSnAXkyz3AO8j4G zYXZ/C0ZuF0+Tw7Ik6sAZ1S8pQ913+PQc52llOmVLnm5r45sqWxQ/5hts6c3llOo oHhcHcQ39EMCQt9tzBAaKLOjQ8hwyafB5S/CsANGylcR52yYWS1AYgOl/DVuSNN2 PeBSm/mc89bIo0oA+v2tM3W2lvIBaH8= -----END CERTIFICATE-----Generated at Mon Mar 2 12:26:43 2026 by rpki-client