$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9257d023-92ed-3962-b590-1b58b2a8e6d1.roa File: 9257d023-92ed-3962-b590-1b58b2a8e6d1.roa (raw, json) Hash identifier: Od12bmnuvo4m9FuBpbX/eP9uTdi+XTpM2fPDT7udHCc= Subject key identifier: 57:3C:3D:69:CB:D6:40:E9:D2:15:65:39:B7:EE:10:FA:B8:CD:EB:98 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CF42234C58684114108357400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9257d023-92ed-3962-b590-1b58b2a8e6d1.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.219.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:34:c5:86:84:11:41:08:35:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=ceb0ed32-9864-4713-8a0a-aec06c13a4af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:45:b1:bd:31:31:f0:8b:e5:7b:61:a2:1b:bd: b2:e9:d3:f4:85:07:2c:71:06:09:27:83:33:37:d3: c6:00:06:45:de:0c:71:59:c5:8e:25:0a:83:c6:46: 0c:b7:cc:2c:e1:34:e0:8b:a4:30:6e:6d:08:96:f6: f7:7d:94:b7:9f:7c:3a:c2:59:74:b4:b2:c5:fc:36: f3:9e:ca:02:90:9d:2e:fb:d7:16:a7:b0:82:ac:16: 5c:8d:29:cf:6f:ba:4d:96:1c:43:9e:c6:80:e0:14: ba:41:bf:25:b3:5c:d6:7e:a2:23:40:a9:e8:cb:57: 89:c0:e3:9c:0e:ee:46:4c:f7:07:14:5e:5e:91:ac: b1:1f:94:29:c5:95:59:80:66:dc:1d:cc:17:fc:dd: a0:6a:c8:d0:ac:74:99:51:19:55:7d:f3:a3:8a:08: 08:40:96:9e:96:7b:d3:36:00:71:8e:bf:bf:64:88: 15:bc:96:21:69:6d:01:db:5e:0a:a8:c3:b1:a1:ce: 54:7c:bb:09:54:df:ae:7c:09:ad:56:66:18:ae:d0: 2d:5d:8e:3c:d9:ae:44:b0:12:66:43:8f:5a:dc:ac: 69:1b:49:aa:6a:f0:6d:ff:d9:71:f6:f3:56:f1:23: 22:d7:a5:cb:94:e4:ef:44:8a:a3:2c:38:57:c2:70: 0c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3C:3D:69:CB:D6:40:E9:D2:15:65:39:B7:EE:10:FA:B8:CD:EB:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9257d023-92ed-3962-b590-1b58b2a8e6d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:92:33:16:21:48:1c:52:ca:5d:f2:c7:f2:bd:e4:3b:dd:35: 59:48:92:ec:bc:d5:7f:dc:ac:f9:96:6b:c2:8f:e9:ac:3f:44: 89:2b:4c:71:ea:39:2f:ce:e8:f2:f3:a4:64:f3:29:8f:8d:e0: 1d:4c:81:20:82:5d:a7:39:b7:10:39:24:b3:2d:2c:79:71:71: 86:fb:a8:b0:6c:4f:6a:f3:dd:34:74:4c:20:b6:f2:bd:58:d8: 0b:80:59:24:44:51:0c:4b:fb:b2:57:68:31:90:38:be:df:cd: 02:d4:8f:23:66:ee:e9:33:07:44:7d:9c:a1:87:15:97:b4:a5: 70:c0:8d:04:17:af:72:3e:73:0d:30:b5:a5:a0:73:ef:a7:b0: bf:ec:0a:88:0d:7a:64:5d:3e:76:a2:c1:f0:0f:c7:a8:5c:aa: 88:09:20:20:e4:64:99:73:10:ff:00:d7:4b:fb:2a:7e:06:23: 58:c6:80:0e:8d:ea:ff:8e:2d:64:f0:08:1e:ad:5e:ba:46:36: f9:eb:96:45:72:71:79:8c:5a:f0:16:09:56:0a:25:95:70:69: b0:e7:2e:87:04:ba:81:cc:41:b0:b5:3e:0f:21:7f:48:8b:21: 4c:3e:8c:81:74:0b:c7:aa:8b:52:ca:eb:0a:42:54:2f:63:5a: d3:8a:82:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0IjTFhoQRQQg1dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk Y2ViMGVkMzItOTg2NC00NzEzLThhMGEtYWVjMDZjMTNhNGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0WxvTEx8Ivle2GiG72y6dP0hQcscQYJJ4Mz N9PGAAZF3gxxWcWOJQqDxkYMt8ws4TTgi6Qwbm0Ilvb3fZS3n3w6wll0tLLF/Dbz nsoCkJ0u+9cWp7CCrBZcjSnPb7pNlhxDnsaA4BS6Qb8ls1zWfqIjQKnoy1eJwOOc Du5GTPcHFF5ekayxH5QpxZVZgGbcHcwX/N2gasjQrHSZURlVffOjiggIQJaelnvT NgBxjr+/ZIgVvJYhaW0B214KqMOxoc5UfLsJVN+ufAmtVmYYrtAtXY482a5EsBJm Q49a3KxpG0mqavBt/9lx9vNW8SMi16XLlOTvRIqjLDhXwnAMqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFc8PWnL1kDp0hVlObfuEPq4zeuYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTI1N2QwMjMtOTJlZC0z OTYyLWI1OTAtMWI1OGIyYThlNmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9t4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+SMxYhSBxSyl3yx/K95DvdNVlIkuy81X/crPmWa8KP6aw/RIkrTHHq OS/O6PLzpGTzKY+N4B1MgSCCXac5txA5JLMtLHlxcYb7qLBsT2rz3TR0TCC28r1Y 2AuAWSREUQxL+7JXaDGQOL7fzQLUjyNm7ukzB0R9nKGHFZe0pXDAjQQXr3I+cw0w taWgc++nsL/sCogNemRdPnaiwfAPx6hcqogJICDkZJlzEP8A10v7Kn4GI1jGgA6N 6v+OLWTwCB6tXrpGNvnrlkVycXmMWvAWCVYKJZVwabDnLocEuoHMQbC1Pg8hf0iL IUw+jIF0C8eqi1LK6wpCVC9jWtOKgqA= -----END CERTIFICATE-----Generated at Mon Mar 2 10:16:38 2026 by rpki-client