$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85ec1a64-baf9-31bd-b38c-8425d8c49b7d.roa File: 85ec1a64-baf9-31bd-b38c-8425d8c49b7d.roa (raw, json) Hash identifier: 8D+nqZLwHGDdOvKPDT/6y3bNCIp7yHdsWki236jJ46o= Subject key identifier: D2:4A:73:6C:F9:FA:A9:CD:69:C7:22:67:EC:AD:CF:0C:CC:E6:53:52 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CE09790A2BB19D6967266DA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85ec1a64-baf9-31bd-b38c-8425d8c49b7d.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 16625 IP address blocks: 23.49.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:90:a2:bb:19:d6:96:72:66:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=ddf643a2-7cc3-4fda-8071-deccf9bf22c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:23:43:bf:14:18:84:a4:ee:1f:2d:1a:b3:25: c3:86:a2:ad:c7:78:21:fa:fc:72:c2:a6:53:ba:dd: 09:dc:c0:0d:87:25:d4:10:75:3c:78:92:cf:1f:4d: 85:8a:37:0c:76:0d:63:67:85:c5:26:2b:fc:0f:72: f5:d4:d4:3e:fa:95:2a:f0:a4:63:44:7f:0e:18:e7: 2e:4e:27:3a:80:14:7c:88:cf:1c:83:c3:c8:ee:6d: cf:d2:c8:f7:d5:6b:43:c9:21:18:69:34:ce:8c:fa: eb:27:dc:59:40:c0:6a:3d:bb:11:0c:e5:db:63:1f: d8:da:04:87:20:bd:09:5d:82:48:c6:c9:53:ac:fa: cf:b5:62:4c:75:e7:8e:f9:3e:b1:95:69:fa:fa:43: fd:ac:78:32:eb:3e:d5:c0:6e:6f:47:7e:d7:bf:b6: 74:61:00:99:98:ab:23:92:b6:b5:ea:a5:96:40:6a: 3d:c9:ed:35:5c:ff:7a:f9:dd:9c:9d:5f:e4:01:e0: 52:df:32:3c:82:36:e3:76:d0:84:02:d6:75:82:91: ef:e7:5e:5f:c0:68:d6:54:05:d8:10:52:01:77:a2: a7:d6:9a:c8:c8:0a:3b:29:cd:0f:43:1a:d8:c3:7a: 85:1b:c9:62:b2:60:d0:de:44:13:ae:5c:24:0f:a3: 08:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4A:73:6C:F9:FA:A9:CD:69:C7:22:67:EC:AD:CF:0C:CC:E6:53:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85ec1a64-baf9-31bd-b38c-8425d8c49b7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.49.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:1f:4e:00:90:8c:82:2b:c0:67:7b:41:ea:65:1e:82:74:ec: bb:9c:36:52:aa:b1:72:8a:48:76:3e:f3:40:2d:d1:68:d1:1e: 47:5a:0f:5b:7a:53:bb:8a:07:18:ea:69:a4:1a:16:bc:bf:d2: 04:bb:6e:c5:10:60:db:59:5a:f6:65:da:08:e4:8a:02:d0:f6: 5b:d6:b9:6e:60:9c:72:ea:3f:73:94:c6:bd:52:cd:a2:58:74: 14:6c:78:66:8f:f7:d3:92:ec:52:f8:e0:15:bd:57:1f:f8:b8: bd:5f:65:6b:f1:5c:87:da:0a:d0:34:b2:b7:e2:59:3f:e6:2e: b5:0d:8a:71:12:bb:c2:7c:64:83:42:83:be:fe:34:c6:0b:b3: 69:fb:ff:bb:77:f1:83:8f:d1:67:3c:69:f9:9e:57:35:de:d8: 01:93:84:a5:5b:5e:55:77:e7:56:ee:fa:cb:3d:d5:db:76:65: 0a:d5:81:e1:23:08:fa:32:6c:cc:5f:b6:63:28:07:c1:33:4b: 3d:fd:c1:69:c4:5c:cd:7d:fa:55:11:2b:6d:73:3f:67:42:80: b4:9f:11:7f:7d:d8:01:67:00:b5:19:90:64:74:5e:30:58:58: 0e:11:87:18:12:bb:bb:90:43:8c:b4:fa:d9:15:20:4e:6c:b0: 2a:ed:61:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl5CiuxnWlnJm2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk ZGRmNjQzYTItN2NjMy00ZmRhLTgwNzEtZGVjY2Y5YmYyMmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyNDvxQYhKTuHy0asyXDhqKtx3gh+vxywqZT ut0J3MANhyXUEHU8eJLPH02FijcMdg1jZ4XFJiv8D3L11NQ++pUq8KRjRH8OGOcu Tic6gBR8iM8cg8PI7m3P0sj31WtDySEYaTTOjPrrJ9xZQMBqPbsRDOXbYx/Y2gSH IL0JXYJIxslTrPrPtWJMdeeO+T6xlWn6+kP9rHgy6z7VwG5vR37Xv7Z0YQCZmKsj kra16qWWQGo9ye01XP96+d2cnV/kAeBS3zI8gjbjdtCEAtZ1gpHv515fwGjWVAXY EFIBd6Kn1prIyAo7Kc0PQxrYw3qFG8lismDQ3kQTrlwkD6MIXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJKc2z5+qnNacciZ+ytzwzM5lNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODVlYzFhNjQtYmFmOS0z MWJkLWIzOGMtODQyNWQ4YzQ5YjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwfTgCQjIIrwGd7QeplHoJ07LucNlKqsXKKSHY+80At0WjRHkdaD1t6 U7uKBxjqaaQaFry/0gS7bsUQYNtZWvZl2gjkigLQ9lvWuW5gnHLqP3OUxr1SzaJY dBRseGaP99OS7FL44BW9Vx/4uL1fZWvxXIfaCtA0srfiWT/mLrUNinESu8J8ZINC g77+NMYLs2n7/7t38YOP0Wc8afmeVzXe2AGThKVbXlV351bu+ss91dt2ZQrVgeEj CPoybMxftmMoB8EzSz39wWnEXM19+lURK21zP2dCgLSfEX992AFnALUZkGR0XjBY WA4RhxgSu7uQQ4y0+tkVIE5ssCrtYRg= -----END CERTIFICATE-----Generated at Sun Mar 1 23:14:21 2026 by rpki-client