$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aedc08ee-3bb3-30e3-bd24-819fcd8b39d5.roa File: aedc08ee-3bb3-30e3-bd24-819fcd8b39d5.roa (raw, json) Hash identifier: BX0qvXHr3g1CpEajvggsEUWSzBU2ZU0IMDCk3nhF/hI= Subject key identifier: AC:D1:39:65:EA:41:C1:EE:43:4E:CB:19:3C:8D:3B:49:6D:38:10:2A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D037D3949721084DD1377EE40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aedc08ee-3bb3-30e3-bd24-819fcd8b39d5.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 20940 IP address blocks: 23.198.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:39:49:72:10:84:dd:13:77:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=c0663167-cd9b-4d20-b194-040b0f59a05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dd:86:d4:ea:a5:55:bd:a5:77:a3:5c:e2:34: d5:1e:05:b3:df:6f:dc:ce:cb:b8:1d:3c:e1:a1:1b: 10:65:3f:34:c0:b8:bb:7d:33:31:9c:88:44:87:7b: c8:07:5e:43:7a:c0:ec:e8:8c:55:fa:13:df:16:f9: c4:17:4d:2f:91:cd:3c:b5:da:c2:1a:99:f5:33:69: 93:3a:fa:45:06:bb:e6:8a:bd:18:13:5b:37:14:47: 83:2d:b6:c0:13:cf:7d:bf:0e:9f:e1:c5:88:69:c0: ea:0c:86:5a:7c:70:e2:20:44:69:b5:ab:73:d0:de: 05:e5:1c:81:65:d9:c8:a9:62:5c:2d:91:1e:86:af: 90:cf:80:8c:03:ab:a5:83:2a:0b:52:f3:0c:33:3c: af:d6:05:ad:bb:f8:7a:21:3c:b2:e4:ac:49:d2:7b: c7:cc:d1:ca:94:87:9b:9c:18:fb:e5:2a:6d:64:f5: f8:d1:0c:a3:e6:61:7f:e4:57:0a:d2:71:51:25:3a: a2:4c:22:02:9a:4f:2c:41:61:dd:8a:c8:c0:da:39: 9d:17:7f:91:43:0d:72:cd:f8:97:c8:82:3d:3a:8c: 5b:ce:43:11:49:fe:90:e4:ed:57:3c:61:41:a1:c3: 94:69:46:1a:05:ef:b6:28:6d:db:92:20:3c:1a:7c: ce:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D1:39:65:EA:41:C1:EE:43:4E:CB:19:3C:8D:3B:49:6D:38:10:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aedc08ee-3bb3-30e3-bd24-819fcd8b39d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:28:1c:64:a2:55:81:eb:2b:aa:40:19:ef:7a:c3:4d:ab:a3: 00:cf:51:a8:1c:9f:e6:a4:3f:f0:13:40:2a:00:a8:47:05:36: db:b6:86:83:5c:3e:2a:8b:52:e8:3c:99:1a:f5:88:ae:74:07: d5:f7:2c:eb:fa:11:b3:5d:22:ca:6f:5d:22:7c:b6:11:f3:36: cd:ab:f1:0a:0a:23:91:5f:91:16:55:79:c0:1e:5c:e2:95:c0: 63:7a:7d:60:af:60:4f:9c:6f:97:d2:7c:3f:48:f6:9d:c7:06: 22:bd:3f:fe:6a:ca:8e:11:14:37:8d:2d:57:a3:b1:20:f9:37: 58:45:13:0c:af:1c:79:b0:f6:2e:34:f9:c2:19:99:d3:d5:9d: 40:99:10:53:be:1d:ad:b6:84:b9:c5:92:86:39:a1:82:cf:bd: ca:bf:9b:ca:56:77:08:d4:96:a3:7f:51:38:8b:8c:f8:b8:29: 67:4e:e1:1e:d4:62:e6:63:9c:fe:f5:53:6f:c8:03:6f:f0:be: b6:d8:a2:a5:00:21:dd:98:62:e1:7c:b2:b6:fd:d1:69:c1:3d: 58:da:f5:c1:26:f2:f4:02:26:5a:62:dd:a5:72:cb:35:d8:df: 47:e9:af:f6:17:b4:cf:8c:8a:ad:6e:0d:3b:83:82:e3:5b:b5: 7f:91:ac:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfTlJchCE3RN37kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk YzA2NjMxNjctY2Q5Yi00ZDIwLWIxOTQtMDQwYjBmNTlhMDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd2G1OqlVb2ld6Nc4jTVHgWz32/czsu4HTzh oRsQZT80wLi7fTMxnIhEh3vIB15DesDs6IxV+hPfFvnEF00vkc08tdrCGpn1M2mT OvpFBrvmir0YE1s3FEeDLbbAE899vw6f4cWIacDqDIZafHDiIERptatz0N4F5RyB ZdnIqWJcLZEehq+Qz4CMA6ulgyoLUvMMMzyv1gWtu/h6ITyy5KxJ0nvHzNHKlIeb nBj75SptZPX40Qyj5mF/5FcK0nFRJTqiTCICmk8sQWHdisjA2jmdF3+RQw1yzfiX yII9OoxbzkMRSf6Q5O1XPGFBocOUaUYaBe+2KG3bkiA8GnzOWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzROWXqQcHuQ07LGTyNO0ltOBAqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWVkYzA4ZWUtM2JiMy0z MGUzLWJkMjQtODE5ZmNkOGIzOWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8YLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMoHGSiVYHrK6pAGe96w02rowDPUagcn+akP/ATQCoAqEcFNtu2hoNc PiqLUug8mRr1iK50B9X3LOv6EbNdIspvXSJ8thHzNs2r8QoKI5FfkRZVecAeXOKV wGN6fWCvYE+cb5fSfD9I9p3HBiK9P/5qyo4RFDeNLVejsSD5N1hFEwyvHHmw9i40 +cIZmdPVnUCZEFO+Ha22hLnFkoY5oYLPvcq/m8pWdwjUlqN/UTiLjPi4KWdO4R7U YuZjnP71U2/IA2/wvrbYoqUAId2YYuF8srb90WnBPVja9cEm8vQCJlpi3aVyyzXY 30fpr/YXtM+Miq1uDTuDguNbtX+RrBI= -----END CERTIFICATE-----Generated at Sun Mar 1 22:50:06 2026 by rpki-client