$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c2f1a51-8782-369d-8ee3-2041611ab896.roa File: 9c2f1a51-8782-369d-8ee3-2041611ab896.roa (raw, json) Hash identifier: sZjUS7Esfnb2XvR+EjLpv8EedQLvfd0s/8kKu+nkwrg= Subject key identifier: D9:47:C9:D9:2D:59:64:2F:74:48:49:EA:C9:22:98:1D:0B:C0:AD:2C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CF2BCFCC01E0E2E5229721780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c2f1a51-8782-369d-8ee3-2041611ab896.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.203.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bc:fc:c0:1e:0e:2e:52:29:72:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=09a6797f-c402-4ae5-b9e9-889496c98368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:09:75:2e:d5:73:c4:67:9c:95:5f:62:2c:61: 79:59:fd:83:8c:02:b3:35:c4:9f:27:28:f1:b7:36: 1c:99:66:d9:e8:40:c9:5c:84:5c:0c:fd:12:9f:b9: b9:df:a2:df:34:6d:e5:c2:97:60:df:76:82:c2:a9: 4c:42:ff:56:1d:43:fb:65:27:f9:93:6e:47:4c:bf: 7f:af:e8:bb:b3:0b:c7:32:ed:e8:21:ed:97:09:93: 54:bc:0b:b4:92:fa:b1:bf:84:e7:69:18:65:e3:23: a5:3f:0d:68:21:15:11:a4:c1:25:a8:9e:f1:45:e8: 34:67:5e:09:c0:98:ac:71:78:78:db:b8:10:aa:83: f7:50:60:34:82:0b:8e:55:07:b2:27:44:bc:34:d8: 70:37:3c:46:ab:22:57:87:28:d6:47:87:d5:28:4b: 7d:87:24:9f:45:1f:72:36:22:f6:9a:23:7f:d7:4e: 29:43:29:db:c9:c9:bd:12:32:08:52:f5:2c:a6:50: d0:b5:7a:c4:e1:72:14:bf:56:31:71:af:ca:e8:91: c0:4b:43:99:27:a4:21:31:ba:47:2e:65:31:7b:1d: 47:a9:19:ae:a3:c9:73:47:56:2a:83:10:31:44:7e: 36:29:3a:eb:7d:59:34:b6:d8:1a:2c:38:13:9d:52: d9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:47:C9:D9:2D:59:64:2F:74:48:49:EA:C9:22:98:1D:0B:C0:AD:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c2f1a51-8782-369d-8ee3-2041611ab896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:fd:6f:3a:fe:ee:c1:40:7f:77:fb:df:95:aa:52:f7:11:44: bd:44:fb:73:b9:c5:4c:ad:72:f1:72:9a:d4:d1:aa:23:b5:af: 20:0d:2b:87:38:e2:28:93:41:9d:8e:7c:e3:83:4d:68:d6:15: 0e:d2:47:23:27:ec:e3:6e:0b:61:3c:05:cb:02:9f:cf:2f:c3: 41:91:54:01:77:90:ff:21:d0:23:6c:bc:c9:d6:0d:5b:82:22: 73:32:db:9e:e7:ea:af:41:11:04:ec:4e:56:72:f5:1d:3a:4d: ce:0d:05:d9:97:ef:dd:ba:1e:8b:b4:64:88:28:a7:98:51:78: 46:15:7c:32:22:7f:33:d6:62:3a:88:56:a9:d7:db:42:bd:94: c4:f9:e6:d4:d0:38:d3:01:5b:ac:0f:97:c3:3f:de:88:bd:b0: 4e:d8:a4:ce:b0:f2:fe:b5:a3:11:a2:a5:73:9c:e5:ef:ed:02: 25:d7:70:69:cc:3b:c2:5d:64:68:b8:9a:96:dc:fc:9c:60:b8: a3:f0:41:62:27:ce:00:f6:77:ed:44:b6:0d:b6:4b:4e:4e:93: bf:cd:0f:19:18:d5:b5:64:07:0b:8d:f7:f5:e3:5a:20:be:7c: 3e:4d:64:84:77:5e:ce:35:38:51:0a:c4:35:bd:bf:6e:77:2f: d6:e7:61:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvPzAHg4uUilyF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk MDlhNjc5N2YtYzQwMi00YWU1LWI5ZTktODg5NDk2Yzk4MzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ql1LtVzxGeclV9iLGF5Wf2DjAKzNcSfJyjx tzYcmWbZ6EDJXIRcDP0Sn7m536LfNG3lwpdg33aCwqlMQv9WHUP7ZSf5k25HTL9/ r+i7swvHMu3oIe2XCZNUvAu0kvqxv4TnaRhl4yOlPw1oIRURpMElqJ7xReg0Z14J wJiscXh427gQqoP3UGA0gguOVQeyJ0S8NNhwNzxGqyJXhyjWR4fVKEt9hySfRR9y NiL2miN/104pQynbycm9EjIIUvUsplDQtXrE4XIUv1Yxca/K6JHAS0OZJ6QhMbpH LmUxex1HqRmuo8lzR1YqgxAxRH42KTrrfVk0ttgaLDgTnVLZHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlHydktWWQvdEhJ6skimB0LwK0sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWMyZjFhNTEtODc4Mi0z NjlkLThlZTMtMjA0MTYxMWFiODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8ufMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHj9bzr+7sFAf3f735WqUvcRRL1E+3O5xUytcvFymtTRqiO1ryANK4c4 4iiTQZ2OfOODTWjWFQ7SRyMn7ONuC2E8BcsCn88vw0GRVAF3kP8h0CNsvMnWDVuC InMy257n6q9BEQTsTlZy9R06Tc4NBdmX7926Hou0ZIgop5hReEYVfDIifzPWYjqI VqnX20K9lMT55tTQONMBW6wPl8M/3oi9sE7YpM6w8v61oxGipXOc5e/tAiXXcGnM O8JdZGi4mpbc/JxguKPwQWInzgD2d+1Etg22S05Ok7/NDxkY1bVkBwuN9/XjWiC+ fD5NZIR3Xs41OFEKxDW9v253L9bnYfM= -----END CERTIFICATE-----Generated at Mon Mar 2 10:42:10 2026 by rpki-client