$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68411e85-9e3d-3498-8379-62706668bebe.roa File: 68411e85-9e3d-3498-8379-62706668bebe.roa (raw, json) Hash identifier: puLgGE3SPCEioALX0htdPC1iuOrvM2HIcBaauWdwqi0= Subject key identifier: 6A:45:82:F4:6B:BF:A1:52:75:F0:36:DB:77:63:C8:C8:4E:CB:35:34 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D037D369D57271DFBEC448D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68411e85-9e3d-3498-8379-62706668bebe.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16625 IP address blocks: 23.195.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:36:9d:57:27:1d:fb:ec:44:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=8e6e8635-2d3a-4b6e-9dea-96f0d170d94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7b:47:26:e1:7d:af:28:2a:6f:33:d1:b8:b3: 88:b4:d9:ed:b6:46:55:ad:ca:c8:45:2d:40:bb:29: 99:46:a3:8e:07:fb:78:5a:34:0a:67:78:53:99:6a: 7e:b3:79:4f:8a:8f:50:61:bc:77:95:31:01:8b:82: 10:b0:72:0e:d1:27:e7:a4:c3:72:17:48:3e:da:36: f5:60:b0:7f:9d:2a:12:f2:80:aa:c2:39:13:b2:3b: 32:02:eb:e7:25:ef:6d:ba:da:a9:61:71:b8:1e:41: 03:b4:6a:4d:cf:38:7f:5f:9d:74:5c:0e:13:e3:ce: e9:2e:b9:b2:61:34:88:0c:d2:04:b4:cb:17:6e:c7: 85:91:b9:bf:2b:0d:96:92:84:b3:86:ef:d9:c1:be: 7f:e5:31:ee:84:dd:0a:71:c2:0b:23:bf:23:9d:31: 1a:14:23:3b:98:5f:25:ca:48:1d:99:37:94:9f:9a: 7c:b4:8f:1c:ff:95:c2:ad:0d:b4:3b:10:4b:60:aa: 64:7c:9b:9e:79:4e:85:d2:e7:b8:d5:71:be:ce:1c: e4:a9:c7:22:ac:d5:6a:3a:3e:b2:dd:96:a2:39:01: 73:cb:fe:a7:b4:9b:c3:70:71:32:b8:cf:94:9e:38: c7:7d:15:f5:a1:6e:8a:ed:c9:ab:a4:05:0e:45:cb: 5e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:45:82:F4:6B:BF:A1:52:75:F0:36:DB:77:63:C8:C8:4E:CB:35:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68411e85-9e3d-3498-8379-62706668bebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:a1:a2:d9:84:68:e6:0a:f8:f8:dd:0c:99:3a:de:05:22:86: 9e:87:4a:15:14:a8:f2:f4:74:c8:93:ce:c3:c3:10:53:56:fb: 69:64:b1:f0:ac:2f:62:98:4e:d4:90:e4:21:9a:53:96:80:0b: 1e:62:33:a2:86:c5:87:4b:5e:a7:23:20:e5:12:74:65:47:fd: 01:af:2d:b9:45:de:0d:ec:5f:8d:d0:3f:eb:fd:68:c4:13:e3: 49:45:cc:ed:57:fc:b8:52:d5:4d:c2:ef:5e:9f:3f:76:ea:38: b9:94:79:ac:21:3b:42:ff:a5:12:71:0c:10:a9:0f:93:0b:c2: 55:19:5f:4d:84:49:77:00:c4:fb:3b:dd:cd:60:58:5d:db:2c: e5:0f:c7:ac:1a:ff:8b:2d:15:2d:d5:87:20:9b:88:93:59:f3: 52:81:25:37:66:26:f9:e9:f9:9d:de:a6:3b:13:f4:db:61:dd: e0:ff:c9:56:01:3f:0c:94:cd:33:31:3d:8f:56:b2:47:3e:64: cd:a2:57:77:ff:e6:de:50:ed:9c:49:0c:c5:8d:83:7f:95:a0: a8:32:72:02:a3:bb:37:d8:c3:23:f9:05:69:6f:e0:a5:fc:ac: b8:77:3a:c7:20:1d:88:88:69:f3:26:82:a7:b7:2c:3d:af:67: 7d:d5:ea:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfTadVycd++xEjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk OGU2ZTg2MzUtMmQzYS00YjZlLTlkZWEtOTZmMGQxNzBkOTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHtHJuF9rygqbzPRuLOItNnttkZVrcrIRS1A uymZRqOOB/t4WjQKZ3hTmWp+s3lPio9QYbx3lTEBi4IQsHIO0SfnpMNyF0g+2jb1 YLB/nSoS8oCqwjkTsjsyAuvnJe9tutqpYXG4HkEDtGpNzzh/X510XA4T487pLrmy YTSIDNIEtMsXbseFkbm/Kw2WkoSzhu/Zwb5/5THuhN0KccILI78jnTEaFCM7mF8l ykgdmTeUn5p8tI8c/5XCrQ20OxBLYKpkfJueeU6F0ue41XG+zhzkqccirNVqOj6y 3ZaiOQFzy/6ntJvDcHEyuM+UnjjHfRX1oW6K7cmrpAUORcteyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpFgvRrv6FSdfA223djyMhOyzU0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjg0MTFlODUtOWUzZC0z NDk4LTgzNzktNjI3MDY2NjhiZWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8OYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+hotmEaOYK+PjdDJk63gUihp6HShUUqPL0dMiTzsPDEFNW+2lksfCs L2KYTtSQ5CGaU5aACx5iM6KGxYdLXqcjIOUSdGVH/QGvLblF3g3sX43QP+v9aMQT 40lFzO1X/LhS1U3C716fP3bqOLmUeawhO0L/pRJxDBCpD5MLwlUZX02ESXcAxPs7 3c1gWF3bLOUPx6wa/4stFS3VhyCbiJNZ81KBJTdmJvnp+Z3epjsT9Nth3eD/yVYB PwyUzTMxPY9Wskc+ZM2iV3f/5t5Q7ZxJDMWNg3+VoKgycgKjuzfYwyP5BWlv4KX8 rLh3OscgHYiIafMmgqe3LD2vZ33V6ro= -----END CERTIFICATE-----Generated at Mon Mar 2 12:50:11 2026 by rpki-client