$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8614b32a-2b24-3288-aa66-942237dbf140.roa File: 8614b32a-2b24-3288-aa66-942237dbf140.roa (raw, json) Hash identifier: BX7l+W8hN4nNgwp2ZSZlo2H5mc6NwU0tjyex7mg2dp8= Subject key identifier: F5:0D:42:D4:3F:A4:0C:82:E2:5C:65:3A:88:98:CD:F8:85:D2:13:37 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CEFF25895797FCF6F1E0B7380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8614b32a-2b24-3288-aa66-942237dbf140.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 16625 IP address blocks: 23.198.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:58:95:79:7f:cf:6f:1e:0b:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=14306664-df79-4e8a-8a57-850c7112be09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:56:7f:10:90:4a:f2:21:99:4e:19:b9:8f:21: 57:25:53:a5:a7:78:22:3f:51:d0:54:6c:fe:c4:11: 5d:cc:84:e1:8f:87:5d:e3:b9:2e:80:81:ee:9c:1e: 78:19:73:88:7b:05:f1:05:5d:2b:0c:bc:44:b5:76: 32:d9:3b:d3:53:16:ca:f0:b3:ee:60:01:96:48:f9: 6b:00:62:c0:c2:16:1b:f3:5e:0e:e5:12:48:72:d3: 07:6a:b7:d7:49:cf:c2:a8:2b:62:18:f4:e4:38:53: 80:c3:03:95:e7:d5:a7:7a:c1:f8:b7:cb:5a:6f:aa: 70:57:11:a8:12:4e:70:80:56:28:e2:3a:54:c0:8c: a7:e9:b5:5b:9d:3d:2a:4d:5d:27:86:64:cb:9b:ce: 21:57:76:76:fa:ef:b0:3b:e4:03:1a:4a:3f:ae:ab: b5:82:77:f3:87:de:5c:2a:ca:8a:e1:66:29:b9:fd: cb:20:bf:11:2d:2d:38:4b:cf:1f:39:09:19:4c:67: d7:35:0d:98:2b:07:59:bb:4f:df:29:40:c7:f6:a7: 5c:19:33:3e:8d:1d:25:f5:cb:33:36:70:14:af:19: 0a:b5:10:1e:58:5b:fa:f8:22:c8:77:38:aa:45:b5: d7:59:51:b4:d4:f6:de:d1:80:59:27:17:c7:14:63: cf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0D:42:D4:3F:A4:0C:82:E2:5C:65:3A:88:98:CD:F8:85:D2:13:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8614b32a-2b24-3288-aa66-942237dbf140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:11:8f:6b:e8:64:85:21:91:12:c8:74:f1:41:b6:5a:14:61: 8d:30:95:56:df:0c:d4:61:ac:f7:1e:f1:f1:9f:17:b5:bb:ba: 45:73:cf:64:76:bb:5d:60:bc:cd:7d:08:21:41:0d:48:92:46: dc:71:e0:43:ff:df:01:fd:4c:39:dc:c8:22:c5:99:4a:08:62: 5a:bb:45:cf:16:72:cc:b1:54:d8:1d:cd:87:b3:43:70:6c:12: 83:59:92:63:c3:01:b3:85:a7:2c:16:9d:7e:87:a4:bd:ab:88: 06:19:32:4a:42:51:4e:cf:e7:b2:5f:54:e6:01:b3:11:67:ff: 6f:3a:2e:4b:70:49:7a:d2:72:2e:8b:ff:59:b9:0a:83:da:6f: 54:a7:a5:a1:5c:78:c2:56:bf:e0:0f:37:d7:e5:55:0f:5f:53: bb:f0:fe:b2:bd:3e:a3:a4:6d:5c:59:cd:9c:0a:a7:36:10:c6: 9d:68:40:ff:1e:15:4a:bc:67:2a:25:3b:88:a5:ed:f8:cb:72: 7b:2f:0a:46:25:3c:e8:d1:dc:12:ab:40:92:f2:3b:cf:91:b5: 29:cc:ac:b9:4d:38:f4:db:a4:ac:c1:bd:fb:37:8d:88:4a:65: ff:59:e2:48:39:16:af:a5:a8:9e:8e:97:57:71:6e:ab:61:27: d9:32:d9:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8liVeX/Pbx4Lc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk MTQzMDY2NjQtZGY3OS00ZThhLThhNTctODUwYzcxMTJiZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVZ/EJBK8iGZThm5jyFXJVOlp3giP1HQVGz+ xBFdzIThj4dd47kugIHunB54GXOIewXxBV0rDLxEtXYy2TvTUxbK8LPuYAGWSPlr AGLAwhYb814O5RJIctMHarfXSc/CqCtiGPTkOFOAwwOV59WnesH4t8tab6pwVxGo Ek5wgFYo4jpUwIyn6bVbnT0qTV0nhmTLm84hV3Z2+u+wO+QDGko/rqu1gnfzh95c KsqK4WYpuf3LIL8RLS04S88fOQkZTGfXNQ2YKwdZu0/fKUDH9qdcGTM+jR0l9csz NnAUrxkKtRAeWFv6+CLIdziqRbXXWVG01Pbe0YBZJxfHFGPPHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUNQtQ/pAyC4lxlOoiYzfiF0hM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODYxNGIzMmEtMmIyNC0z Mjg4LWFhNjYtOTQyMjM3ZGJmMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8bQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQRj2voZIUhkRLIdPFBtloUYY0wlVbfDNRhrPce8fGfF7W7ukVzz2R2 u11gvM19CCFBDUiSRtxx4EP/3wH9TDncyCLFmUoIYlq7Rc8WcsyxVNgdzYezQ3Bs EoNZkmPDAbOFpywWnX6HpL2riAYZMkpCUU7P57JfVOYBsxFn/286LktwSXrSci6L /1m5CoPab1SnpaFceMJWv+APN9flVQ9fU7vw/rK9PqOkbVxZzZwKpzYQxp1oQP8e FUq8ZyolO4il7fjLcnsvCkYlPOjR3BKrQJLyO8+RtSnMrLlNOPTbpKzBvfs3jYhK Zf9Z4kg5Fq+lqJ6Ol1dxbqthJ9ky2UA= -----END CERTIFICATE-----Generated at Mon Mar 2 15:10:49 2026 by rpki-client