$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d8722a7-b793-3bbb-abf6-e03125e2a653.roa File: 8d8722a7-b793-3bbb-abf6-e03125e2a653.roa (raw, json) Hash identifier: 7Kjq01UvERKIxE1UpVYExRsrlqy5InAgAEu3AYCllCs= Subject key identifier: 43:94:4E:20:0A:2F:7C:76:8F:C9:76:B2:94:94:C0:C9:8F:32:EF:6B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CDF3280734E99A4028DB25300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d8722a7-b793-3bbb-abf6-e03125e2a653.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 16625 IP address blocks: 23.48.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:80:73:4e:99:a4:02:8d:b2:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=6a55b0ed-f4fc-4e49-af9a-829d8fdf28ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d3:f9:49:15:b9:13:79:58:0c:2c:1e:e1:bb: 1e:31:f7:74:88:5c:ac:8b:74:c1:63:18:39:2e:cb: fd:e7:61:22:ce:3b:4e:af:3e:fd:8a:e4:3b:98:74: 47:1c:f4:6a:20:db:43:e2:31:25:b5:69:c1:58:77: 5c:46:ba:fc:43:1b:af:42:0d:4c:35:84:c1:58:7d: 2d:48:26:de:ab:a7:77:71:e6:62:a0:40:4f:b8:fc: 9e:df:ad:03:60:93:5e:11:50:c6:56:c6:26:74:39: 61:22:b9:cc:12:60:48:92:98:d9:27:3c:ac:2a:4b: d2:4e:2c:12:ec:97:c4:ab:ee:54:b2:ef:6e:00:cf: dd:cb:d5:1f:21:40:2b:52:05:63:bd:f8:d3:e6:b6: cf:08:13:26:e9:67:32:82:81:35:dc:8a:71:77:df: 0b:4e:9a:f2:ed:b8:e4:30:85:b5:8f:b2:d2:cc:a7: 99:4d:17:cd:38:e2:41:1d:01:58:aa:b4:c8:07:53: 8e:59:7b:6f:4e:92:01:4a:ea:10:ed:b4:8b:3f:17: 8e:3b:b8:12:b0:94:b4:c8:c5:ca:54:12:a8:3d:43: 60:4e:33:c9:fd:11:58:d7:8c:8a:2c:a5:be:5a:6a: 91:93:79:59:89:b2:2b:86:54:b1:b1:16:2a:97:e2: 76:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:94:4E:20:0A:2F:7C:76:8F:C9:76:B2:94:94:C0:C9:8F:32:EF:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d8722a7-b793-3bbb-abf6-e03125e2a653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:de:a6:c5:d0:1e:41:95:9e:ef:4a:31:3c:e7:0f:cf:ec:1e: 61:da:9a:6b:eb:cf:a1:46:25:3c:b5:96:2b:f6:8e:fa:2e:d7: c3:6c:07:d7:a6:4a:b1:a5:83:65:ca:34:7e:fa:bd:b9:c1:d2: 58:4c:88:d4:c8:2d:55:58:87:c3:15:7d:a4:42:ca:bc:17:2b: fe:dc:17:aa:90:66:56:25:cb:d5:51:15:ab:00:c3:f6:1a:72: c7:62:e2:80:e3:b1:27:3e:4b:94:a5:d8:8c:e6:cb:4d:13:e6: 12:68:5d:3d:60:9e:2d:2b:0f:c6:58:e2:f4:3f:9e:ef:ce:6d: e8:05:ca:a3:85:a6:59:ba:8a:f0:85:13:d5:66:c3:4a:76:20: 00:93:f9:6b:c7:8d:89:e3:d6:c2:80:21:55:f4:d0:be:41:ce: ec:64:74:9e:51:1e:5c:d6:70:e4:df:04:49:7b:60:43:ca:b5: e2:31:ec:b1:34:52:d4:b7:26:54:0e:39:0f:a3:da:2d:87:d6: 14:94:7f:e1:0a:9e:d8:92:d9:36:87:aa:4d:8b:21:a5:78:c0: 88:6f:aa:61:a7:fa:0f:e7:06:4a:51:78:1e:ae:94:06:32:ed: 8e:d3:c6:3c:ff:12:b2:04:d6:92:f3:f3:4d:55:93:e4:11:ea: 8f:8f:88:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMoBzTpmkAo2yUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk NmE1NWIwZWQtZjRmYy00ZTQ5LWFmOWEtODI5ZDhmZGYyOGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdP5SRW5E3lYDCwe4bseMfd0iFysi3TBYxg5 Lsv952EizjtOrz79iuQ7mHRHHPRqINtD4jEltWnBWHdcRrr8QxuvQg1MNYTBWH0t SCbeq6d3ceZioEBPuPye360DYJNeEVDGVsYmdDlhIrnMEmBIkpjZJzysKkvSTiwS 7JfEq+5Usu9uAM/dy9UfIUArUgVjvfjT5rbPCBMm6WcygoE13Ipxd98LTpry7bjk MIW1j7LSzKeZTRfNOOJBHQFYqrTIB1OOWXtvTpIBSuoQ7bSLPxeOO7gSsJS0yMXK VBKoPUNgTjPJ/RFY14yKLKW+WmqRk3lZibIrhlSxsRYql+J2+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOUTiAKL3x2j8l2spSUwMmPMu9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGQ4NzIyYTctYjc5My0z YmJiLWFiZjYtZTAzMTI1ZTJhNjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPepsXQHkGVnu9KMTznD8/sHmHammvrz6FGJTy1liv2jvou18NsB9em SrGlg2XKNH76vbnB0lhMiNTILVVYh8MVfaRCyrwXK/7cF6qQZlYly9VRFasAw/Ya csdi4oDjsSc+S5Sl2Izmy00T5hJoXT1gni0rD8ZY4vQ/nu/ObegFyqOFplm6ivCF E9Vmw0p2IACT+WvHjYnj1sKAIVX00L5BzuxkdJ5RHlzWcOTfBEl7YEPKteIx7LE0 UtS3JlQOOQ+j2i2H1hSUf+EKntiS2TaHqk2LIaV4wIhvqmGn+g/nBkpReB6ulAYy 7Y7Txjz/ErIE1pLz801Vk+QR6o+PiIM= -----END CERTIFICATE-----Generated at Mon Mar 2 02:24:55 2026 by rpki-client