$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9611ee91-c051-3023-b65a-eb67d3252d38.roa File: 9611ee91-c051-3023-b65a-eb67d3252d38.roa (raw, json) Hash identifier: Sj3wYtgAEtFKL4k+y6SpPOGo10F80zGuX7zLW5/hubk= Subject key identifier: 22:99:FE:0E:69:19:41:35:70:CE:DF:A6:27:BC:1F:94:60:AA:7D:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CF2BD040A8A16509774392A20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9611ee91-c051-3023-b65a-eb67d3252d38.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 7713 IP address blocks: 23.217.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bd:04:0a:8a:16:50:97:74:39:2a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=b5bc8656-048c-4c6c-9358-0873120d5fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e7:53:1c:18:44:61:77:e2:51:fd:d0:c0:74: 03:40:38:d0:fd:38:df:70:41:5a:96:b3:75:d0:08: 19:0a:3d:e8:bb:eb:6b:05:39:9f:3b:63:1f:e8:73: c1:b3:ca:c1:88:d1:83:92:e4:65:93:7a:7e:c4:27: 38:2c:e9:bb:d1:da:f3:5b:ce:17:92:78:10:cf:ca: 53:b0:a9:76:ff:c7:27:62:88:e8:24:6a:16:a2:d1: 7b:4f:31:3e:cf:b6:86:54:91:0f:ee:73:11:29:28: 5c:18:cf:c0:7b:84:a6:82:57:d5:bb:b1:a5:f1:96: 53:51:c7:95:5c:9c:03:a3:c9:c6:94:b1:7c:53:6a: 66:e2:d1:75:98:d2:40:34:52:68:76:69:a7:7d:c4: 0d:a7:db:8c:bd:bf:bd:e5:f1:fc:48:89:f2:ad:ff: e4:e3:15:70:15:72:c4:7c:54:23:18:1c:7a:f1:0d: 9b:42:df:1d:2c:67:c7:90:e6:84:64:e8:bd:e0:40: aa:5f:5a:35:89:2a:9c:74:bd:c2:1c:34:f0:f1:62: 74:f3:52:b1:13:ef:4b:13:3c:62:e0:27:09:72:55: 9b:05:f2:71:89:91:ab:0c:e3:3d:cf:5a:7c:9e:82: a8:30:74:ad:3c:a6:c1:1e:11:fe:9b:b0:8f:e0:6a: ea:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:99:FE:0E:69:19:41:35:70:CE:DF:A6:27:BC:1F:94:60:AA:7D:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9611ee91-c051-3023-b65a-eb67d3252d38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ee:13:de:d0:59:27:75:bc:97:3a:35:97:e1:78:75:83:49: 43:aa:2b:4a:fe:61:45:5d:52:f3:6c:ed:22:b8:04:8f:8d:4c: cf:16:79:79:47:ab:b3:83:f3:8a:68:0f:81:0a:5e:0c:77:20: 37:44:2f:6e:e7:83:10:92:d6:7b:92:76:f0:6a:eb:d7:11:c2: 86:e3:6b:82:76:9e:c6:15:23:56:a9:54:b5:5a:a1:93:97:cc: eb:d0:6e:d7:15:32:8d:96:27:05:5b:2c:63:9a:b6:49:54:e6: 19:95:98:66:4f:28:c8:90:02:65:ef:eb:d0:07:2a:1a:5c:2c: 86:ef:9a:61:ce:31:ce:2a:cc:33:8d:9a:35:76:1b:fc:cd:15: 17:24:01:b3:24:da:cc:0d:ff:4a:f3:57:4b:79:88:d3:fb:28: 90:be:24:85:66:59:02:e8:45:aa:00:ce:ac:09:34:d5:3d:50: e7:a3:49:ae:3c:bf:6e:4b:fe:bd:2b:f8:2a:9f:2d:fb:3f:33: 43:d8:d1:e4:71:3a:e6:b3:b9:e5:82:54:6e:88:fe:40:93:81: ea:c1:6e:9e:4f:cc:b4:2e:a0:e3:f8:6d:54:c0:18:39:e0:8a: 5e:e4:e2:ef:3a:fb:12:6c:10:e5:6e:a0:11:10:a9:90:83:6b: b4:a6:54:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvQQKihZQl3Q5KiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk YjViYzg2NTYtMDQ4Yy00YzZjLTkzNTgtMDg3MzEyMGQ1ZmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsedTHBhEYXfiUf3QwHQDQDjQ/TjfcEFalrN1 0AgZCj3ou+trBTmfO2Mf6HPBs8rBiNGDkuRlk3p+xCc4LOm70drzW84XkngQz8pT sKl2/8cnYojoJGoWotF7TzE+z7aGVJEP7nMRKShcGM/Ae4SmglfVu7Gl8ZZTUceV XJwDo8nGlLF8U2pm4tF1mNJANFJodmmnfcQNp9uMvb+95fH8SInyrf/k4xVwFXLE fFQjGBx68Q2bQt8dLGfHkOaEZOi94ECqX1o1iSqcdL3CHDTw8WJ081KxE+9LEzxi 4CcJclWbBfJxiZGrDOM9z1p8noKoMHStPKbBHhH+m7CP4GrqJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKZ/g5pGUE1cM7fpie8H5Rgqn0zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTYxMWVlOTEtYzA1MS0z MDIzLWI2NWEtZWI2N2QzMjUyZDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9mgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7uE97QWSd1vJc6NZfheHWDSUOqK0r+YUVdUvNs7SK4BI+NTM8WeXlH q7OD84poD4EKXgx3IDdEL27ngxCS1nuSdvBq69cRwobja4J2nsYVI1apVLVaoZOX zOvQbtcVMo2WJwVbLGOatklU5hmVmGZPKMiQAmXv69AHKhpcLIbvmmHOMc4qzDON mjV2G/zNFRckAbMk2swN/0rzV0t5iNP7KJC+JIVmWQLoRaoAzqwJNNU9UOejSa48 v25L/r0r+CqfLfs/M0PY0eRxOuazueWCVG6I/kCTgerBbp5PzLQuoOP4bVTAGDng il7k4u86+xJsEOVuoBEQqZCDa7SmVGw= -----END CERTIFICATE-----Generated at Mon Mar 2 18:35:26 2026 by rpki-client