$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b025ff38-5885-3f1b-bb73-e5ce7e9aab8b.roa File: b025ff38-5885-3f1b-bb73-e5ce7e9aab8b.roa (raw, json) Hash identifier: kECPPLbRVxfkzEHJCE6vlMvEObkU7in5s1Sr7LVQzYU= Subject key identifier: FB:31:68:67:34:FB:48:52:AD:91:67:F8:56:18:90:EE:E6:29:8C:15 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CF587B373C028F57CB46716C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b025ff38-5885-3f1b-bb73-e5ce7e9aab8b.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 16625 IP address blocks: 23.1.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:b3:73:c0:28:f5:7c:b4:67:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=46bf5d58-0160-443e-93a5-72f70b622314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b2:8a:5f:bb:1f:39:c6:88:12:85:dc:25:66: 30:a8:53:2c:dd:99:82:4e:0e:bd:73:cb:4f:22:1d: 7c:e2:d1:fe:da:40:f6:76:89:e4:95:24:87:27:e2: e9:2f:40:ee:1f:51:f9:c3:12:ad:ea:8f:8d:7e:c4: ec:65:bd:20:6d:22:f6:9d:00:f0:70:6e:e6:3f:09: 3d:b3:45:51:75:6b:e3:8a:9a:9b:fb:57:b5:9d:8c: 99:44:fc:75:29:c0:14:be:bc:8a:0e:41:fd:73:19: f0:b1:f0:e7:98:0b:96:44:ef:69:9f:e5:37:66:65: 26:1e:8a:cb:96:15:6a:d7:2c:1e:5b:f5:29:06:30: 1a:e6:b2:83:66:68:2f:8a:6e:0d:7c:50:25:df:3a: bb:bf:2f:e9:0f:eb:f6:0b:96:f1:92:35:d7:9b:96: 41:d2:8c:45:af:4a:65:8f:61:d0:a1:48:22:08:57: 03:fb:1b:ab:84:f3:d3:1d:b1:73:ba:60:50:56:d7: a9:fd:ac:53:e5:ce:77:94:f4:27:4d:dd:41:80:73: 3d:39:b5:29:b0:cd:4a:05:f6:95:ea:7c:49:d3:c8: 88:96:d8:ec:a4:da:ee:26:e6:81:fc:6c:e4:94:fe: 9c:70:96:b1:ec:4b:5e:d2:5f:7c:da:c6:9b:dc:a3: 6b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:31:68:67:34:FB:48:52:AD:91:67:F8:56:18:90:EE:E6:29:8C:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b025ff38-5885-3f1b-bb73-e5ce7e9aab8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:1b:2c:5e:14:c8:38:55:fa:2c:b1:24:b9:86:dd:e5:c3:08: 1e:2e:09:03:97:4d:e2:46:27:bb:67:20:38:b1:96:eb:4f:55: 2a:00:97:6c:79:0a:9e:27:61:b2:9e:ff:a1:e5:01:94:bc:50: 51:96:8d:3c:75:60:91:5c:eb:02:b3:5d:ba:6c:0a:84:2c:fb: cd:3b:88:39:f1:1e:57:49:6e:47:4b:91:d0:ad:d1:80:19:d8: bf:38:7f:5a:6f:73:f4:62:59:25:bd:67:bf:97:9a:64:28:a1: b3:e8:c4:68:5e:36:20:11:48:3e:1b:a4:21:88:f7:65:02:07: c4:34:11:05:dd:d1:f6:74:1f:e7:df:b2:c8:d0:34:c3:9b:c9: c1:ab:3f:31:bf:92:64:28:ff:fa:98:9b:9c:4a:18:8e:fe:f0: e7:34:7f:d8:9b:42:4d:a0:ca:90:59:5e:b2:46:0a:15:db:eb: 9e:8a:b6:41:e9:97:3e:85:ed:1c:fb:0c:dc:99:9a:33:b3:46: cd:95:f1:8d:0c:0c:4b:69:66:b1:f0:c4:b9:b8:65:a6:72:7a: 17:97:aa:5a:86:bb:bd:22:de:0c:1e:d7:69:66:cc:f2:c9:40: 49:0f:5e:38:0d:4f:0a:cf:cb:2f:de:47:ee:c4:7c:a8:aa:83: b4:4e:a6:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h7NzwCj1fLRnFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk NDZiZjVkNTgtMDE2MC00NDNlLTkzYTUtNzJmNzBiNjIyMzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7KKX7sfOcaIEoXcJWYwqFMs3ZmCTg69c8tP Ih184tH+2kD2donklSSHJ+LpL0DuH1H5wxKt6o+NfsTsZb0gbSL2nQDwcG7mPwk9 s0VRdWvjipqb+1e1nYyZRPx1KcAUvryKDkH9cxnwsfDnmAuWRO9pn+U3ZmUmHorL lhVq1yweW/UpBjAa5rKDZmgvim4NfFAl3zq7vy/pD+v2C5bxkjXXm5ZB0oxFr0pl j2HQoUgiCFcD+xurhPPTHbFzumBQVtep/axT5c53lPQnTd1BgHM9ObUpsM1KBfaV 6nxJ08iIltjspNruJuaB/GzklP6ccJax7Ete0l982sab3KNrAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsxaGc0+0hSrZFn+FYYkO7mKYwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjAyNWZmMzgtNTg4NS0z ZjFiLWJiNzMtZTVjZTdlOWFhYjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEbLF4UyDhV+iyxJLmG3eXDCB4uCQOXTeJGJ7tnIDixlutPVSoAl2x5 Cp4nYbKe/6HlAZS8UFGWjTx1YJFc6wKzXbpsCoQs+807iDnxHldJbkdLkdCt0YAZ 2L84f1pvc/RiWSW9Z7+XmmQoobPoxGheNiARSD4bpCGI92UCB8Q0EQXd0fZ0H+ff ssjQNMObycGrPzG/kmQo//qYm5xKGI7+8Oc0f9ibQk2gypBZXrJGChXb656KtkHp lz6F7Rz7DNyZmjOzRs2V8Y0MDEtpZrHwxLm4ZaZyeheXqlqGu70i3gwe12lmzPLJ QEkPXjgNTwrPyy/eR+7EfKiqg7ROphs= -----END CERTIFICATE-----Generated at Sun Mar 1 22:34:57 2026 by rpki-client