$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8995993-1c12-3313-adf5-9f67eb243aa7.roa File: c8995993-1c12-3313-adf5-9f67eb243aa7.roa (raw, json) Hash identifier: C/yct2qRKvks5kxcH4aXqMZWUap+e/iGqIPbZ5ElYIM= Subject key identifier: A2:37:58:C4:DB:68:C7:68:BF:08:82:1B:F9:4E:8D:78:47:FD:B7:A2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CFDEAAA469ACA991FDDD2A680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8995993-1c12-3313-adf5-9f67eb243aa7.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 16625 IP address blocks: 23.2.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:ea:aa:46:9a:ca:99:1f:dd:d2:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=df3e44fb-ae47-4347-b918-e07002693147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:dc:64:b8:4e:c5:e4:a4:3b:c7:1e:ab:7d:16: 0f:20:8b:ef:1f:b1:29:8f:02:b9:07:f9:5c:05:43: 07:95:18:6b:4a:57:44:1a:0e:03:1b:c7:23:1b:6b: 58:a4:32:64:58:f2:57:c6:0d:d2:9e:82:32:06:d7: 44:25:c4:7e:d5:df:6c:30:c5:28:2a:76:0d:7c:1a: 5d:b3:90:9b:3f:c7:31:5e:f3:58:06:3f:a8:51:32: 17:23:fc:13:09:3e:35:7d:14:8d:b5:8f:18:05:d3: bc:5a:97:52:14:2c:ec:db:b7:d3:3c:db:be:2f:cc: cc:b0:36:90:e3:dd:ac:24:65:9a:83:8b:3f:fc:23: 12:64:f5:b0:45:f9:27:30:75:e3:94:f3:8e:45:33: f4:5e:77:74:c3:2c:c7:e6:19:0e:32:16:7d:47:bb: e5:9b:d4:73:c0:4f:a9:d2:5a:43:b2:3a:a6:3f:35: 28:fb:46:f4:50:a7:0d:fa:14:fb:97:24:b1:1f:57: d1:2e:a5:d1:14:26:e5:72:54:92:ef:d6:d7:5e:a5: 03:4b:ba:a3:3b:d8:50:9f:d8:a5:42:61:41:0e:cd: 96:71:9c:3a:2e:1f:7e:43:fe:86:bb:1f:ba:bb:34: ec:a2:0b:27:58:7e:34:22:7f:fb:c8:fc:1b:5d:1e: ff:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:37:58:C4:DB:68:C7:68:BF:08:82:1B:F9:4E:8D:78:47:FD:B7:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8995993-1c12-3313-adf5-9f67eb243aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.2.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:3f:76:3c:2d:5a:c4:a5:77:7e:25:8b:4a:c8:72:f0:7f:d0: 42:2c:ce:d2:44:64:5b:98:c2:50:69:c4:db:ce:ca:96:c4:07: 8f:a8:5b:b5:1b:be:8b:b6:98:23:93:75:62:0e:74:22:df:af: 9f:62:58:4e:39:8c:a2:36:87:ee:27:1a:b9:7c:6b:34:55:b3: fc:81:cb:54:7c:bc:05:02:8a:bc:20:79:c1:5c:82:ec:e8:b7: 21:26:5d:f4:53:04:3a:10:35:0c:86:1d:97:a0:6e:c0:87:bd: d5:9f:79:2f:75:96:fc:12:b7:c5:8b:af:25:72:05:09:1c:b1: 72:4d:ff:8d:78:42:cc:0d:d5:a3:df:aa:f9:ee:fe:07:1c:19: 2b:05:40:f8:8a:31:c1:4a:93:78:fa:11:00:58:a8:cd:34:ba: b0:42:f6:f8:2a:52:8a:c7:2c:e6:78:89:48:0a:1d:bf:72:9e: 93:2d:88:5e:bc:e8:08:dc:69:e0:03:dc:98:4f:5f:20:9b:62: 83:f0:89:e1:b2:78:e1:e9:8e:0a:df:70:e2:99:c4:fa:67:c0: 1d:e2:ec:c0:b2:d7:1f:37:22:be:c2:1c:70:27:be:b1:9d:d0: 39:49:1b:46:fe:c9:76:87:3b:00:c5:b3:f8:8a:91:ea:6b:70: c2:21:37:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96qpGmsqZH93SpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk ZGYzZTQ0ZmItYWU0Ny00MzQ3LWI5MTgtZTA3MDAyNjkzMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtxkuE7F5KQ7xx6rfRYPIIvvH7EpjwK5B/lc BUMHlRhrSldEGg4DG8cjG2tYpDJkWPJXxg3SnoIyBtdEJcR+1d9sMMUoKnYNfBpd s5CbP8cxXvNYBj+oUTIXI/wTCT41fRSNtY8YBdO8WpdSFCzs27fTPNu+L8zMsDaQ 492sJGWag4s//CMSZPWwRfknMHXjlPOORTP0Xnd0wyzH5hkOMhZ9R7vlm9RzwE+p 0lpDsjqmPzUo+0b0UKcN+hT7lySxH1fRLqXRFCblclSS79bXXqUDS7qjO9hQn9il QmFBDs2WcZw6Lh9+Q/6Gux+6uzTsogsnWH40In/7yPwbXR7/LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKI3WMTbaMdovwiCG/lOjXhH/beiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzg5OTU5OTMtMWMxMi0z MzEzLWFkZjUtOWY2N2ViMjQzYWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwJMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc/djwtWsSld34li0rIcvB/0EIsztJEZFuYwlBpxNvOypbEB4+oW7Ub vou2mCOTdWIOdCLfr59iWE45jKI2h+4nGrl8azRVs/yBy1R8vAUCirwgecFcguzo tyEmXfRTBDoQNQyGHZegbsCHvdWfeS91lvwSt8WLryVyBQkcsXJN/414QswN1aPf qvnu/gccGSsFQPiKMcFKk3j6EQBYqM00urBC9vgqUorHLOZ4iUgKHb9ynpMtiF68 6AjcaeAD3JhPXyCbYoPwieGyeOHpjgrfcOKZxPpnwB3i7MCy1x83Ir7CHHAnvrGd 0DlJG0b+yXaHOwDFs/iKkeprcMIhN1k= -----END CERTIFICATE-----Generated at Mon Mar 2 08:05:23 2026 by rpki-client