$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56355e88-f9ac-3cf1-a195-fb5786b5dc80.roa File: 56355e88-f9ac-3cf1-a195-fb5786b5dc80.roa (raw, json) Hash identifier: xavgW/DmCpTywURY2LUUCsB5VepD/KZ7fjnO1o6duE4= Subject key identifier: 90:FD:02:D9:12:E1:A5:7C:47:51:87:BC:6F:41:50:C9:7B:58:7A:FA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CED27AF88337B20C9720F8380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56355e88-f9ac-3cf1-a195-fb5786b5dc80.roa Signing time: Fri 20 Feb 2026 14:00:41 +0000 ROA not before: Fri 20 Feb 2026 14:00:41 +0000 ROA not after: Thu 21 May 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.58.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:27:af:88:33:7b:20:c9:72:0f:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 20 14:00:41 2026 GMT Not After : May 21 13:00:41 2026 GMT Subject: CN=5a1a9212-0ae5-40cf-9299-7a37100e5110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:72:fc:ec:46:50:59:2d:a6:47:dc:81:cd:4a: 88:bc:a4:68:d8:6a:e2:e2:d1:05:66:8d:0b:7c:cb: aa:a6:d5:08:07:be:3f:f5:9b:83:b9:10:93:21:57: 28:32:8d:89:a2:a4:80:33:1b:67:c2:f2:25:93:4d: 82:5a:63:ac:80:51:46:ad:97:ec:54:3a:f6:a7:a0: c2:6d:b1:21:19:d6:08:10:4c:86:e6:cf:c6:58:00: dd:ac:83:33:96:2c:0f:9a:10:f4:f4:fd:82:b0:e4: 52:e6:15:65:8f:20:43:95:7e:85:7b:5f:9d:ee:0f: 19:eb:62:d1:d6:7c:25:91:6c:8e:23:4f:22:3f:c1: 38:15:f9:85:b8:39:fe:50:a3:35:38:bd:7c:e2:23: 41:fe:76:f6:31:38:ff:b6:32:c3:87:3a:f4:59:29: 96:1e:2f:f0:76:5b:21:32:f8:8b:10:0a:af:56:d8: a4:4d:e0:6b:4b:16:8d:3a:fc:4e:ef:2d:9b:0d:f0: e2:08:03:e6:bf:96:3b:5f:1a:f7:94:3b:dd:a9:01: a3:4a:89:d5:fe:69:b9:4a:17:1b:b8:6e:b9:6e:0e: a5:6d:c2:f3:9e:9a:01:fc:61:f5:73:2e:ba:7d:4d: 05:89:67:25:aa:ea:54:4f:bc:5e:8c:2c:c7:95:17: 04:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FD:02:D9:12:E1:A5:7C:47:51:87:BC:6F:41:50:C9:7B:58:7A:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56355e88-f9ac-3cf1-a195-fb5786b5dc80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ae:af:03:e7:c2:2f:ac:20:39:73:66:e4:3b:01:c2:03:e9: 6d:75:0c:57:06:50:16:b6:cf:5d:74:9b:8e:0f:81:73:19:b5: cd:17:5d:da:71:f8:dd:81:a6:13:17:6e:1b:45:00:c5:dd:81: 9b:ae:80:05:a3:f8:7c:73:31:09:c6:b1:ae:db:ee:24:06:43: 3d:0f:2a:13:54:ba:9d:30:52:66:b0:67:db:73:19:28:ce:a5: a3:7c:98:30:f8:a2:9c:4e:0d:87:a6:2e:7b:17:dc:e4:46:2b: 17:a2:42:8c:0d:88:1a:28:b7:c7:cd:c9:ff:4e:67:64:3d:87: 2e:02:4b:6e:79:57:94:05:98:ae:46:37:82:f2:64:2a:5a:e2: c4:f6:5c:d3:2b:3e:3b:68:65:7c:7e:43:d4:e3:79:98:fd:64: b9:88:07:f8:34:be:bf:f3:c5:b7:13:88:39:fb:08:b9:25:cc: b2:9d:e6:35:1a:86:12:34:f3:9d:9a:3e:82:bc:6f:27:cd:a8: 97:22:6d:4e:c8:3c:f7:8a:7f:39:6e:26:e6:88:21:77:ec:c3: 84:b2:77:87:a0:4f:9c:39:03:75:f5:5e:a8:3f:ca:0a:ae:51: b5:56:93:2d:4a:d9:36:50:44:2c:bd:06:16:ca:c5:c7:83:1d: ab:af:71:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ6+IM3sgyXIPg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk NWExYTkyMTItMGFlNS00MGNmLTkyOTktN2EzNzEwMGU1MTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63L87EZQWS2mR9yBzUqIvKRo2Gri4tEFZo0L fMuqptUIB74/9ZuDuRCTIVcoMo2JoqSAMxtnwvIlk02CWmOsgFFGrZfsVDr2p6DC bbEhGdYIEEyG5s/GWADdrIMzliwPmhD09P2CsORS5hVljyBDlX6Fe1+d7g8Z62LR 1nwlkWyOI08iP8E4FfmFuDn+UKM1OL184iNB/nb2MTj/tjLDhzr0WSmWHi/wdlsh MviLEAqvVtikTeBrSxaNOvxO7y2bDfDiCAPmv5Y7Xxr3lDvdqQGjSonV/mm5Shcb uG65bg6lbcLznpoB/GH1cy66fU0FiWclqupUT7xejCzHlRcEjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJD9AtkS4aV8R1GHvG9BUMl7WHr6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTYzNTVlODgtZjlhYy0z Y2YxLWExOTUtZmI1Nzg2YjVkYzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaurwPnwi+sIDlzZuQ7AcID6W11DFcGUBa2z110m44PgXMZtc0XXdpx +N2BphMXbhtFAMXdgZuugAWj+HxzMQnGsa7b7iQGQz0PKhNUup0wUmawZ9tzGSjO paN8mDD4opxODYemLnsX3ORGKxeiQowNiBoot8fNyf9OZ2Q9hy4CS255V5QFmK5G N4LyZCpa4sT2XNMrPjtoZXx+Q9TjeZj9ZLmIB/g0vr/zxbcTiDn7CLklzLKd5jUa hhI0852aPoK8byfNqJcibU7IPPeKfzluJuaIIXfsw4Syd4egT5w5A3X1Xqg/ygqu UbVWky1K2TZQRCy9BhbKxceDHauvcWc= -----END CERTIFICATE-----Generated at Mon Mar 2 11:47:43 2026 by rpki-client