$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/680b978c-6ac9-3387-a654-ff6c93642931.roa File: 680b978c-6ac9-3387-a654-ff6c93642931.roa (raw, json) Hash identifier: zFhdI6OkiFrSkt54HKWcph2XcoSiPGstYqFznlq0yeY= Subject key identifier: AA:A1:93:2E:95:6B:9A:DC:50:9F:68:63:CD:22:54:DA:65:55:7A:73 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CEFF2598ED251702D201061C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/680b978c-6ac9-3387-a654-ff6c93642931.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.193.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:59:8e:d2:51:70:2d:20:10:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=5f84af2d-4334-49e5-9c0b-f803876a0fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8f:16:9a:0d:8c:ac:36:f6:04:fc:90:ef:04: c4:59:f0:e0:5e:22:9c:5a:de:df:19:01:2b:89:fe: 7b:7e:ec:84:6f:68:62:09:09:7a:bb:d6:1f:d9:6b: a2:b6:25:32:57:67:4e:66:03:e0:24:c1:1e:b1:f2: 2d:56:74:a0:a3:c6:2e:b9:80:03:d6:46:e3:2f:96: 94:38:72:8d:db:d5:ab:f1:b2:a9:30:18:8d:a8:4d: b9:ce:04:88:ab:c0:f3:e7:ab:d4:15:15:95:58:5c: 29:ed:61:6c:43:c8:d4:d6:be:09:42:10:f3:e7:d0: 55:09:0b:58:ee:9c:88:ac:61:44:ae:c3:3b:52:1f: 44:6a:78:9d:51:50:35:c8:fa:56:e8:17:ee:b0:da: 29:8d:52:94:40:04:a1:13:7c:0c:99:2e:b1:7d:30: d4:e8:6a:7a:82:54:d9:99:d8:32:fb:c4:4a:4f:77: ab:db:15:58:25:03:08:53:11:ff:e8:12:67:bc:77: a5:51:9a:07:67:a5:f4:5a:e3:fd:50:0f:67:ee:3c: 91:23:9e:ae:e7:5e:86:f2:13:a8:3a:39:6d:96:2e: 59:56:73:cd:0f:1d:b4:8c:07:0b:76:33:ef:79:ab: ce:e5:fa:33:41:4e:72:69:db:db:a2:0b:f7:c3:d5: 3a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A1:93:2E:95:6B:9A:DC:50:9F:68:63:CD:22:54:DA:65:55:7A:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/680b978c-6ac9-3387-a654-ff6c93642931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.193.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:63:f5:d7:be:60:4e:a0:93:8b:b8:3c:93:4d:8a:d6:37:73: f2:e7:8d:7f:f4:27:ac:a1:dc:23:bc:c7:70:83:9f:75:ed:bb: e7:2e:77:ea:eb:e7:72:82:81:04:a4:eb:d5:0c:c8:39:17:e8: 7f:f1:73:9e:49:01:9c:44:1e:67:d4:c1:b9:9f:d0:8e:eb:58: 82:31:42:2b:60:95:c0:15:0c:53:04:f6:5e:e8:00:8a:d8:59: a2:bd:58:ea:f8:29:33:19:cd:43:14:78:b4:6b:2d:79:40:26: 32:af:f8:ab:54:3c:63:eb:b7:c7:4c:1b:db:2b:b1:20:17:43: 58:61:26:02:de:4c:4c:b2:13:c9:a8:40:ba:dc:ea:3b:38:12: 77:41:2c:76:9b:0f:fe:78:9f:db:5a:e4:f1:38:8e:5f:10:12: 49:12:5f:85:4b:6e:59:e0:cf:74:9b:c5:ce:49:54:59:c3:b7: 01:4b:76:6c:e8:07:b5:df:49:ab:fb:08:cf:1b:5a:5a:d4:5f: bc:30:53:7e:4f:97:53:a5:f3:51:83:93:90:dc:4e:31:71:ad: d5:5a:e8:78:e2:60:f0:bf:3f:a3:1a:7d:67:80:b8:5d:ce:91: 94:e9:be:15:e8:68:db:2b:4f:4c:d0:bf:40:2a:f6:cd:01:6b: bf:66:9a:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8lmO0lFwLSAQYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk NWY4NGFmMmQtNDMzNC00OWU1LTljMGItZjgwMzg3NmEwZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY8Wmg2MrDb2BPyQ7wTEWfDgXiKcWt7fGQEr if57fuyEb2hiCQl6u9Yf2WuitiUyV2dOZgPgJMEesfItVnSgo8YuuYAD1kbjL5aU OHKN29Wr8bKpMBiNqE25zgSIq8Dz56vUFRWVWFwp7WFsQ8jU1r4JQhDz59BVCQtY 7pyIrGFErsM7Uh9EanidUVA1yPpW6BfusNopjVKUQAShE3wMmS6xfTDU6Gp6glTZ mdgy+8RKT3er2xVYJQMIUxH/6BJnvHelUZoHZ6X0WuP9UA9n7jyRI56u516G8hOo Ojltli5ZVnPNDx20jAcLdjPveavO5fozQU5yadvbogv3w9U62wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqhky6Va5rcUJ9oY80iVNplVXpzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjgwYjk3OGMtNmFjOS0z Mzg3LWE2NTQtZmY2YzkzNjQyOTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8FgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9j9de+YE6gk4u4PJNNitY3c/LnjX/0J6yh3CO8x3CDn3Xtu+cud+rr 53KCgQSk69UMyDkX6H/xc55JAZxEHmfUwbmf0I7rWIIxQitglcAVDFME9l7oAIrY WaK9WOr4KTMZzUMUeLRrLXlAJjKv+KtUPGPrt8dMG9srsSAXQ1hhJgLeTEyyE8mo QLrc6js4EndBLHabD/54n9ta5PE4jl8QEkkSX4VLblngz3Sbxc5JVFnDtwFLdmzo B7XfSav7CM8bWlrUX7wwU35Pl1Ol81GDk5DcTjFxrdVa6HjiYPC/P6MafWeAuF3O kZTpvhXoaNsrT0zQv0Aq9s0Ba79mmrA= -----END CERTIFICATE-----Generated at Mon Mar 2 11:09:56 2026 by rpki-client