$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caa1b83f-ea02-3b4a-b16b-5ca25234f07c.roa File: caa1b83f-ea02-3b4a-b16b-5ca25234f07c.roa (raw, json) Hash identifier: RBcXpRgn1suQ2Ksorto7OCD6tr9tVmq172qMwv5UKUQ= Subject key identifier: 51:0A:5A:72:5E:48:18:23:D3:A9:04:B4:63:82:D7:1C:80:5F:B0:13 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CDF32822F4987938DAE35F900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caa1b83f-ea02-3b4a-b16b-5ca25234f07c.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.48.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:82:2f:49:87:93:8d:ae:35:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=2ed47b61-d9ae-4219-b83b-44080f688477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b1:7b:6f:5f:ae:d1:ff:71:41:37:6d:2c:85: ce:ee:d6:87:a6:05:8f:3a:91:18:5b:5e:18:cb:bc: 0d:77:91:7b:93:51:d1:df:71:1b:62:40:90:de:27: 2f:f1:2f:93:a8:0b:2c:9e:d3:1e:7b:fb:b6:03:b5: 9c:71:bc:8c:d9:fe:83:14:5f:96:24:8e:d4:f4:98: 89:77:31:78:5f:0b:45:f3:07:c1:99:f0:ee:6b:c0: a7:dd:f6:8f:7a:ba:85:64:94:8b:e4:ab:c5:3e:52: 74:9a:be:41:cf:aa:14:26:32:a2:08:93:0e:eb:8e: b3:8b:fe:c4:02:57:19:7f:e5:09:17:56:ee:c2:bc: b1:6c:e3:cd:49:23:28:ba:d9:de:ab:17:cc:a0:62: ef:6d:db:12:32:70:03:10:8c:81:5a:15:77:1e:4a: aa:d3:64:ac:8a:21:19:9f:60:cc:80:7b:22:c9:2c: ac:4e:f7:75:d1:10:c5:ff:98:9c:ad:63:ac:ee:71: a2:44:69:a9:cf:0f:16:95:bc:45:39:98:27:7e:77: e1:0d:34:ec:29:48:90:d1:ce:f7:f0:4e:1f:07:5b: 4d:9c:eb:18:b2:f6:66:ed:a8:81:8a:cd:7b:d0:25: 61:34:20:04:23:11:c2:d0:21:ef:49:b9:bd:9d:85: 49:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0A:5A:72:5E:48:18:23:D3:A9:04:B4:63:82:D7:1C:80:5F:B0:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caa1b83f-ea02-3b4a-b16b-5ca25234f07c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e7:ef:bb:42:08:7a:cc:ad:0d:c0:8e:db:91:c0:47:79:2b: d0:6b:ca:69:23:0f:98:e4:1c:d8:d9:b2:5e:a8:40:ab:f8:56: 1c:03:54:54:0c:46:89:b5:54:e9:8a:39:64:f3:70:83:2d:08: 87:cd:ae:25:1e:fa:61:37:c5:b8:2c:78:67:b6:d6:31:ae:6a: 60:2b:a6:a7:71:bb:58:c5:dd:24:d9:45:1d:18:5d:0c:8e:61: 66:5d:c5:5e:28:ff:b9:71:bc:03:60:75:b0:36:4b:82:1e:8a: 25:72:ff:19:40:ca:87:97:d0:5c:66:a2:ed:a4:89:04:7c:8d: e0:66:e2:a9:89:32:b5:16:d3:0b:c5:60:f7:1d:51:0a:bf:9d: 57:b0:9e:d0:6b:a6:95:f1:55:b3:4f:ec:92:cb:77:6a:ee:23: 9c:11:e9:0b:ba:43:33:db:d2:7c:b4:b1:3e:cd:15:b5:d8:d4: 12:4c:7d:7c:42:e4:44:84:aa:41:13:83:c7:9c:6a:b0:ed:83: 5f:36:94:ce:fe:fe:83:41:f2:36:4a:0a:ec:48:e1:f7:ea:af: 66:2c:af:09:2d:b0:45:a9:d1:b9:4b:7c:7c:83:cb:1b:95:15: d7:b6:4b:71:c2:fb:22:fd:61:5d:59:56:31:36:ed:d5:f7:f3: e1:ad:9a:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMoIvSYeTja41+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk MmVkNDdiNjEtZDlhZS00MjE5LWI4M2ItNDQwODBmNjg4NDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubF7b1+u0f9xQTdtLIXO7taHpgWPOpEYW14Y y7wNd5F7k1HR33EbYkCQ3icv8S+TqAssntMee/u2A7WccbyM2f6DFF+WJI7U9JiJ dzF4XwtF8wfBmfDua8Cn3faPerqFZJSL5KvFPlJ0mr5Bz6oUJjKiCJMO646zi/7E AlcZf+UJF1buwryxbOPNSSMoutneqxfMoGLvbdsSMnADEIyBWhV3Hkqq02SsiiEZ n2DMgHsiySysTvd10RDF/5icrWOs7nGiRGmpzw8WlbxFOZgnfnfhDTTsKUiQ0c73 8E4fB1tNnOsYsvZm7aiBis170CVhNCAEIxHC0CHvSbm9nYVJ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEKWnJeSBgj06kEtGOC1xyAX7ATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2FhMWI4M2YtZWEwMi0z YjRhLWIxNmItNWNhMjUyMzRmMDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzCsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbn77tCCHrMrQ3AjtuRwEd5K9BrymkjD5jkHNjZsl6oQKv4VhwDVFQM Rom1VOmKOWTzcIMtCIfNriUe+mE3xbgseGe21jGuamArpqdxu1jF3STZRR0YXQyO YWZdxV4o/7lxvANgdbA2S4IeiiVy/xlAyoeX0Fxmou2kiQR8jeBm4qmJMrUW0wvF YPcdUQq/nVewntBrppXxVbNP7JLLd2ruI5wR6Qu6QzPb0ny0sT7NFbXY1BJMfXxC 5ESEqkETg8ecarDtg182lM7+/oNB8jZKCuxI4ffqr2YsrwktsEWp0blLfHyDyxuV Fde2S3HC+yL9YV1ZVjE27dX38+GtmvU= -----END CERTIFICATE-----Generated at Mon Mar 2 00:33:55 2026 by rpki-client