$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ceb6d72c-b04b-31f1-ba5f-b415a6f32eda.roa File: ceb6d72c-b04b-31f1-ba5f-b415a6f32eda.roa (raw, json) Hash identifier: SrJpVb5HKLB85qoiB1fLufNDBpdPuu/Tqo3M31RC+Pg= Subject key identifier: 20:7F:F8:82:6B:6A:2F:BB:3A:9B:89:B9:A3:B0:DD:34:16:05:4E:D9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CED27B06562D1154EC0287380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ceb6d72c-b04b-31f1-ba5f-b415a6f32eda.roa Signing time: Fri 20 Feb 2026 14:00:41 +0000 ROA not before: Fri 20 Feb 2026 14:00:41 +0000 ROA not after: Thu 21 May 2026 13:00:41 +0000 asID: 16625 IP address blocks: 23.59.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:27:b0:65:62:d1:15:4e:c0:28:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 20 14:00:41 2026 GMT Not After : May 21 13:00:41 2026 GMT Subject: CN=7279d79a-b212-45f2-9243-a49bcdc4a317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ca:1a:47:e2:16:4b:9c:03:73:fc:ff:56:b7: ae:5d:bf:a1:57:ba:a7:bb:fb:dd:48:5a:5c:c9:0d: f5:76:bd:b0:04:12:df:f4:30:18:2f:6a:1e:b8:35: 01:77:48:08:19:30:32:24:52:26:4b:65:07:64:de: 9e:32:89:53:80:38:71:38:0e:0c:4e:e2:4d:5e:07: f5:59:d4:c9:c6:60:ce:c6:ae:a5:db:90:4a:b9:3c: e1:9d:38:73:af:c4:4e:3f:0a:95:70:88:6e:ec:61: e8:6c:49:8b:a0:d9:d2:0c:e6:99:7b:4f:6e:10:eb: f7:71:ed:9e:5d:44:4e:65:47:25:5c:b1:5b:57:d9: fa:2a:63:96:bc:e7:c9:d2:7d:a2:de:02:49:95:be: 7a:d6:5e:dd:0c:cf:ff:ff:a6:43:6f:5c:6a:7f:ca: 2e:10:5c:79:2c:dc:c1:72:01:50:da:92:6b:ea:52: d6:33:25:53:cb:a3:36:8a:ef:fe:71:ad:3f:ed:63: 75:68:d7:31:2d:87:96:cb:76:46:25:59:da:a9:e3: 54:2c:3d:6c:51:3e:27:ac:8d:b1:c2:b8:3e:7c:60: a1:e8:9f:cd:82:dc:fb:f7:ac:f6:2b:39:47:62:0c: 7e:5d:71:4d:a5:ad:5a:70:fb:3d:a3:22:20:c3:5b: fd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7F:F8:82:6B:6A:2F:BB:3A:9B:89:B9:A3:B0:DD:34:16:05:4E:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ceb6d72c-b04b-31f1-ba5f-b415a6f32eda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:46:bf:21:14:39:83:ed:75:b1:f0:27:02:ca:ca:83:59:70: b0:30:f0:8f:8d:61:b2:94:d6:78:a6:d4:51:14:ef:27:8d:f8: cc:8e:c1:d2:10:e0:04:97:8a:b4:27:e1:c1:d9:00:59:29:bb: 5c:2f:2f:82:cd:ea:78:d9:61:8a:02:bb:3d:12:22:9a:b8:2f: 8c:97:36:e4:eb:45:d5:aa:4f:ee:9d:4f:d1:50:af:7b:60:56: 25:56:31:31:f9:09:a5:c5:34:ea:7b:3c:ce:eb:74:a4:88:d0: 88:1a:4a:14:71:96:78:7e:a9:11:99:47:45:2d:88:a9:c4:06: fa:35:84:8f:a0:88:5e:7c:df:75:b9:67:ab:94:13:78:37:4f: 77:88:7f:ce:b0:ab:89:41:db:d0:fd:02:5c:e7:49:e0:42:d3: e9:e8:b0:a3:3b:3a:f7:e4:a7:ee:1c:61:09:ff:7e:bb:dd:d0: ca:86:01:6e:24:6f:45:6e:3d:6b:e3:ee:88:6d:28:f6:4e:c6: ee:f2:71:c4:15:a2:75:40:38:68:ff:37:9d:7e:a6:6a:33:e0: e4:97:9b:a9:b0:2d:bb:94:2a:a1:5b:32:52:53:20:89:5f:da: 0b:4f:01:48:c4:64:d2:55:b2:b6:f0:e7:43:82:ef:dc:74:05: 38:b2:fa:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ7BlYtEVTsAoc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk NzI3OWQ3OWEtYjIxMi00NWYyLTkyNDMtYTQ5YmNkYzRhMzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMoaR+IWS5wDc/z/VreuXb+hV7qnu/vdSFpc yQ31dr2wBBLf9DAYL2oeuDUBd0gIGTAyJFImS2UHZN6eMolTgDhxOA4MTuJNXgf1 WdTJxmDOxq6l25BKuTzhnThzr8ROPwqVcIhu7GHobEmLoNnSDOaZe09uEOv3ce2e XUROZUclXLFbV9n6KmOWvOfJ0n2i3gJJlb561l7dDM///6ZDb1xqf8ouEFx5LNzB cgFQ2pJr6lLWMyVTy6M2iu/+ca0/7WN1aNcxLYeWy3ZGJVnaqeNULD1sUT4nrI2x wrg+fGCh6J/Ngtz796z2KzlHYgx+XXFNpa1acPs9oyIgw1v9nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCB/+IJrai+7OpuJuaOw3TQWBU7ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2ViNmQ3MmMtYjA0Yi0z MWYxLWJhNWYtYjQxNWE2ZjMyZWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZGvyEUOYPtdbHwJwLKyoNZcLAw8I+NYbKU1nim1FEU7yeN+MyOwdIQ 4ASXirQn4cHZAFkpu1wvL4LN6njZYYoCuz0SIpq4L4yXNuTrRdWqT+6dT9FQr3tg ViVWMTH5CaXFNOp7PM7rdKSI0IgaShRxlnh+qRGZR0UtiKnEBvo1hI+giF5833W5 Z6uUE3g3T3eIf86wq4lB29D9AlznSeBC0+nosKM7Ovfkp+4cYQn/frvd0MqGAW4k b0VuPWvj7ohtKPZOxu7yccQVonVAOGj/N51+pmoz4OSXm6mwLbuUKqFbMlJTIIlf 2gtPAUjEZNJVsrbw50OC79x0BTiy+rs= -----END CERTIFICATE-----Generated at Mon Mar 2 00:45:05 2026 by rpki-client