$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85778b24-ab9f-3972-9d14-4abde6bc165a.roa File: 85778b24-ab9f-3972-9d14-4abde6bc165a.roa (raw, json) Hash identifier: 1TMcZipHPXEDjHi8Bd0994t3swOwS3tMgox+pqxHSYw= Subject key identifier: 72:0E:A8:02:72:62:11:53:82:10:28:AD:72:90:DE:6E:20:D9:76:30 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CED27B2B18BC3CEA4F6007A40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85778b24-ab9f-3972-9d14-4abde6bc165a.roa Signing time: Fri 20 Feb 2026 14:00:41 +0000 ROA not before: Fri 20 Feb 2026 14:00:41 +0000 ROA not after: Thu 21 May 2026 13:00:41 +0000 asID: 16625 IP address blocks: 23.61.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:27:b2:b1:8b:c3:ce:a4:f6:00:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 20 14:00:41 2026 GMT Not After : May 21 13:00:41 2026 GMT Subject: CN=849eb0c1-47e2-471e-80b5-ee3e919cf232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ba:47:c1:f7:e7:02:f4:16:d8:49:2e:19:03: 3c:52:c5:59:03:1d:d2:bf:85:fc:89:96:87:58:be: 25:79:b7:9c:28:4e:4f:b7:4a:f3:83:40:da:f0:9a: 58:e0:fe:c1:f6:fa:9e:20:59:d9:42:4d:21:31:87: 4e:9a:ba:0b:ad:33:0c:5d:bf:c4:34:05:b4:0f:d7: 0f:18:c0:60:a4:94:ba:37:f2:19:11:d0:e3:44:68: 6d:4b:34:e4:5d:b4:f3:98:6d:c0:da:4c:1d:53:68: 21:11:16:98:1c:1e:4e:7c:a9:33:6d:1a:87:5a:82: 61:f9:12:4d:a4:e5:36:83:06:f6:2e:a6:3e:27:6d: df:7e:54:8e:45:0c:5c:60:a2:c7:be:c1:82:67:a1: 2f:22:a8:94:a8:f1:af:1e:91:f9:39:f6:f0:5b:f9: c7:0b:7d:b6:9d:d1:97:04:79:47:8c:13:70:c4:cf: d5:0d:5e:78:e1:81:34:2a:71:ce:4f:39:c3:c7:56: 45:3c:99:35:08:5b:22:e8:2f:4c:5b:48:ab:66:bf: 22:45:7e:af:8b:54:c0:d2:89:50:d8:ba:d5:3e:57: 42:44:b5:02:c2:02:c8:4e:79:c9:ea:0a:33:2f:a9: d0:a9:89:6c:84:d1:c2:36:61:40:71:67:c9:75:bb: 6f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0E:A8:02:72:62:11:53:82:10:28:AD:72:90:DE:6E:20:D9:76:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85778b24-ab9f-3972-9d14-4abde6bc165a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.61.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:8a:9f:89:35:bd:97:3d:a5:42:d4:bc:bb:c1:4e:0d:26:02: ce:c5:76:5b:c2:9a:82:17:19:99:51:14:3f:2a:d5:af:d4:73: df:9e:17:fb:93:6e:49:88:9d:09:eb:81:46:34:83:c3:2d:8a: 67:68:70:ac:3f:a6:70:a7:8e:06:a6:a6:22:2f:48:92:75:cd: 7f:d3:9f:c6:0f:be:bf:94:bf:1e:35:0a:ca:83:48:3c:04:f9: 78:87:0c:9d:84:55:a8:8e:32:6e:56:fb:1d:28:31:8d:46:da: dc:c3:00:99:be:ad:b3:f9:1a:01:b7:4f:94:05:cd:5c:35:06: a7:23:7b:89:bc:97:59:cd:d1:30:da:83:51:6a:37:06:b2:d9: f4:7c:a6:c9:8f:75:98:8b:98:c3:47:b5:76:92:53:c8:c6:02: 5f:6a:be:7c:08:eb:7b:b2:07:ff:56:75:b4:ae:98:1b:51:e4: 9c:ae:8a:20:72:56:af:f9:92:04:90:17:0f:30:5e:1d:19:18: fb:8b:ec:ac:db:f3:00:5f:03:55:16:44:66:25:f5:f0:c6:95: 0e:6e:0d:36:88:26:f1:d7:74:0c:bb:63:4c:c6:ed:d2:2f:ea: b3:79:4b:cd:e7:74:be:6a:c5:38:e7:4c:18:ac:c9:ec:28:b4: c3:b9:8d:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ7Kxi8POpPYAekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk ODQ5ZWIwYzEtNDdlMi00NzFlLTgwYjUtZWUzZTkxOWNmMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLpHwffnAvQW2EkuGQM8UsVZAx3Sv4X8iZaH WL4lebecKE5Pt0rzg0Da8JpY4P7B9vqeIFnZQk0hMYdOmroLrTMMXb/ENAW0D9cP GMBgpJS6N/IZEdDjRGhtSzTkXbTzmG3A2kwdU2ghERaYHB5OfKkzbRqHWoJh+RJN pOU2gwb2LqY+J23fflSORQxcYKLHvsGCZ6EvIqiUqPGvHpH5OfbwW/nHC322ndGX BHlHjBNwxM/VDV544YE0KnHOTznDx1ZFPJk1CFsi6C9MW0irZr8iRX6vi1TA0olQ 2LrVPldCRLUCwgLITnnJ6gozL6nQqYlshNHCNmFAcWfJdbtvfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIOqAJyYhFTghAorXKQ3m4g2XYwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODU3NzhiMjQtYWI5Zi0z OTcyLTlkMTQtNGFiZGU2YmMxNjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFz18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6Kn4k1vZc9pULUvLvBTg0mAs7FdlvCmoIXGZlRFD8q1a/Uc9+eF/uT bkmInQnrgUY0g8MtimdocKw/pnCnjgampiIvSJJ1zX/Tn8YPvr+Uvx41CsqDSDwE +XiHDJ2EVaiOMm5W+x0oMY1G2tzDAJm+rbP5GgG3T5QFzVw1Bqcje4m8l1nN0TDa g1FqNway2fR8psmPdZiLmMNHtXaSU8jGAl9qvnwI63uyB/9WdbSumBtR5JyuiiBy Vq/5kgSQFw8wXh0ZGPuL7Kzb8wBfA1UWRGYl9fDGlQ5uDTaIJvHXdAy7Y0zG7dIv 6rN5S83ndL5qxTjnTBisyewotMO5jSY= -----END CERTIFICATE-----Generated at Mon Mar 2 02:56:27 2026 by rpki-client