$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a240320b-048b-30ff-b2dd-5b09f5eb27f8.roa File: a240320b-048b-30ff-b2dd-5b09f5eb27f8.roa (raw, json) Hash identifier: FkMGhzR6eUx0Qnpu2b7nTjI8DjeZl3HnzMg2fBFSGkg= Subject key identifier: 0F:FC:1F:5A:80:C7:0B:96:04:C7:46:E2:F1:DC:3C:FD:F8:B4:90:00 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CF2BD0316A51B6E38F2AD7980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a240320b-048b-30ff-b2dd-5b09f5eb27f8.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 16625 IP address blocks: 23.212.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bd:03:16:a5:1b:6e:38:f2:ad:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=a6e9b834-f37b-476a-a9c9-f4f3b2948a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f1:41:d5:3c:b3:44:bc:b1:08:2d:3b:53:49: 0b:e5:dc:c4:31:7d:46:70:66:1d:14:96:b4:28:7d: 12:8b:0c:2d:d0:c4:22:b4:57:69:f2:d4:18:62:b2: 2d:ca:f3:f6:ba:21:25:0a:a8:b1:13:18:8b:bb:4b: 88:67:bf:b7:1f:c9:34:08:55:5d:2d:1e:44:3c:83: a1:5a:54:23:7c:2a:e0:94:fc:93:e1:a7:c7:83:76: 62:d5:83:f3:43:f7:96:70:6e:a7:32:e9:9a:79:4e: 36:6d:1b:4a:44:08:58:c9:7a:9f:cb:52:0d:94:13: fc:c8:ad:a0:ea:bc:69:88:ce:b8:5e:43:e1:4f:fc: 47:46:ee:dc:04:10:1b:51:b8:1c:a0:23:63:42:c3: fa:97:6a:23:a3:46:80:06:c6:82:f6:32:cc:9e:78: aa:6a:ee:af:06:61:61:c2:55:69:af:92:38:81:d3: bf:0c:a5:7d:4d:5d:86:77:bd:9a:db:88:c2:79:db: c3:fe:b1:00:b4:6d:a9:c5:63:00:9a:47:f7:23:f5: 83:48:65:07:62:88:f4:c9:c4:27:4a:f1:c7:bd:e1: 15:e3:80:2d:62:77:52:d1:29:82:78:e7:0d:58:bc: e5:c2:1b:aa:fc:e3:1a:0a:b9:54:1e:e0:35:27:a2: 58:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FC:1F:5A:80:C7:0B:96:04:C7:46:E2:F1:DC:3C:FD:F8:B4:90:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a240320b-048b-30ff-b2dd-5b09f5eb27f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:b2:c2:2f:3b:c2:e4:be:47:d7:e0:f7:0e:24:86:e3:b7:48: cf:e9:c2:6b:0a:5f:9c:0c:c5:1a:cb:3c:a9:98:50:cb:b7:4d: 3b:44:e7:8e:ee:f4:94:81:29:e1:25:f9:8f:c6:6c:a7:1a:fa: 01:5d:3d:ef:07:9d:1e:1f:e4:17:d0:b1:fc:8b:63:b6:37:24: ab:4d:3c:da:2b:ee:fc:11:c6:87:ee:89:70:a2:3f:25:2b:89: 8b:ab:42:8a:ad:45:1c:e8:e8:bd:5c:2c:69:32:ee:d1:01:d4: 0a:69:24:5e:4c:76:41:d5:48:fc:3a:2f:d7:69:b3:c8:db:f2: 53:6a:c3:6d:0e:2d:25:96:39:28:b5:91:62:27:85:fd:d7:0c: 0b:26:80:6a:2c:59:ea:0e:20:78:00:57:ad:67:b9:5d:98:33: c6:3f:a1:42:8a:6d:c4:8f:62:73:f8:a6:2c:83:9e:e4:b9:9f: 7a:0b:84:fe:aa:c0:1d:ba:8f:a0:7d:bc:0f:c3:e3:e1:a5:f2: c5:4c:c9:a0:89:80:37:6c:b9:c5:74:ce:58:b5:f0:1d:08:37: 3b:00:1d:81:7d:e1:d9:40:a2:c3:0d:52:a4:b6:f6:53:2e:30: 06:31:c9:8d:52:12:3e:7d:85:99:04:3e:79:5b:a7:ba:40:d7: ca:6b:66:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvQMWpRtuOPKteYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk YTZlOWI4MzQtZjM3Yi00NzZhLWE5YzktZjRmM2IyOTQ4YTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovFB1TyzRLyxCC07U0kL5dzEMX1GcGYdFJa0 KH0Siwwt0MQitFdp8tQYYrItyvP2uiElCqixExiLu0uIZ7+3H8k0CFVdLR5EPIOh WlQjfCrglPyT4afHg3Zi1YPzQ/eWcG6nMumaeU42bRtKRAhYyXqfy1INlBP8yK2g 6rxpiM64XkPhT/xHRu7cBBAbUbgcoCNjQsP6l2ojo0aABsaC9jLMnniqau6vBmFh wlVpr5I4gdO/DKV9TV2Gd72a24jCedvD/rEAtG2pxWMAmkf3I/WDSGUHYoj0ycQn SvHHveEV44AtYndS0SmCeOcNWLzlwhuq/OMaCrlUHuA1J6JYMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/8H1qAxwuWBMdG4vHcPP34tJAAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTI0MDMyMGItMDQ4Yi0z MGZmLWIyZGQtNWIwOWY1ZWIyN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9RsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWywi87wuS+R9fg9w4khuO3SM/pwmsKX5wMxRrLPKmYUMu3TTtE547u 9JSBKeEl+Y/GbKca+gFdPe8HnR4f5BfQsfyLY7Y3JKtNPNor7vwRxofuiXCiPyUr iYurQoqtRRzo6L1cLGky7tEB1AppJF5MdkHVSPw6L9dps8jb8lNqw20OLSWWOSi1 kWInhf3XDAsmgGosWeoOIHgAV61nuV2YM8Y/oUKKbcSPYnP4piyDnuS5n3oLhP6q wB26j6B9vA/D4+Gl8sVMyaCJgDdsucV0zli18B0INzsAHYF94dlAosMNUqS29lMu MAYxyY1SEj59hZkEPnlbp7pA18prZpo= -----END CERTIFICATE-----Generated at Sun Mar 1 22:54:10 2026 by rpki-client