$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfa78834-2e2a-3c72-aaf7-7b51e3c70fd0.roa File: cfa78834-2e2a-3c72-aaf7-7b51e3c70fd0.roa (raw, json) Hash identifier: msP1wukbzJ7MZ1kdphiviB6MCGX+oV1iuEk/nVTj+eU= Subject key identifier: E2:13:59:7B:F1:06:1D:37:DF:8E:50:37:93:11:B2:4E:72:A8:F8:75 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D037D22A0732D4DFC16640000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfa78834-2e2a-3c72-aaf7-7b51e3c70fd0.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16625 IP address blocks: 23.197.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:22:a0:73:2d:4d:fc:16:64:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=d49e59cf-2b50-4c41-921f-5efa14d0dfb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ac:13:62:7d:25:e4:3a:a8:21:0f:e3:26:6a: 19:8d:4f:d8:54:d5:83:ac:33:b0:43:7e:3e:28:17: ba:70:83:8f:15:ad:ee:bf:05:73:73:4a:5c:d0:61: a2:ba:b9:3a:07:68:38:0e:fc:43:7a:69:ff:f4:0a: b7:ae:8e:72:30:19:bd:29:d3:f2:60:1f:cd:7a:9c: f7:f8:23:4c:7f:dd:0c:27:fc:45:80:70:c2:d8:99: 24:3e:e8:55:09:be:66:87:f9:b3:83:6f:7b:3a:6a: 79:b2:45:bc:c7:8e:c8:4b:bb:cc:d6:d8:e2:8a:fa: 90:f1:88:1f:0e:19:02:d5:33:44:24:e1:4d:20:94: c6:c7:1e:5b:52:10:48:2e:cd:fe:9e:07:02:3c:95: 67:21:05:0f:ce:98:1b:b9:4b:7b:3c:9d:41:aa:fb: 08:43:0a:b1:8a:cd:f6:ee:3f:67:7c:a6:d3:2e:37: 8d:84:95:17:06:df:2b:58:24:98:77:ad:f4:fb:c0: 9e:f1:fd:cd:46:18:6a:e6:ca:18:6e:c9:89:cd:35: 79:bc:10:68:27:54:ea:38:f0:df:2d:3e:dc:b1:37: ae:d5:29:ea:aa:ad:cf:01:ba:76:6f:43:1a:dc:66: ce:05:0a:53:59:85:fc:43:53:39:34:b7:97:3d:2b: 5c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:13:59:7B:F1:06:1D:37:DF:8E:50:37:93:11:B2:4E:72:A8:F8:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfa78834-2e2a-3c72-aaf7-7b51e3c70fd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c7:e1:55:23:b2:43:18:1b:96:77:2f:7e:52:31:0f:9a:4e: a1:95:b6:0b:71:4f:ab:aa:f7:7c:8e:79:68:1f:50:1a:8c:aa: df:20:ed:e6:ee:15:f9:38:cf:c3:df:93:91:6c:32:a6:1c:d8: ab:26:4c:ae:3f:2c:bd:f8:55:5b:4d:b7:aa:da:c0:80:1a:d0: 6e:bc:05:15:96:e6:27:63:45:0a:5a:36:f8:e1:bf:74:6b:e5: e0:b2:6f:66:e5:7b:92:7c:3e:25:bd:de:04:37:10:b4:d2:88: be:e6:a7:ee:06:cf:bc:0a:5e:e7:1b:95:42:c4:cf:e3:d8:33: 91:4b:f8:c9:86:8c:3d:e5:7d:f4:60:ed:80:10:cd:1b:21:7b: 65:e0:bf:22:05:a0:b4:b7:83:37:25:24:02:76:fa:45:af:f4: 33:1e:32:57:c7:d4:79:a6:68:c2:98:5b:c2:2a:d4:f0:f5:92: d4:c2:ab:f9:9e:71:f5:cc:5d:56:9d:b7:cc:98:aa:96:b3:03: 46:86:42:d0:d3:5c:2f:f6:55:c4:b7:ac:ed:ab:86:5c:dc:5f: 90:44:fa:c3:62:61:8d:f9:23:db:e2:64:a8:3f:de:62:75:62: 91:d3:95:2c:11:a8:37:63:49:c7:b3:0f:0b:db:80:94:02:58: 33:4e:c2:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfSKgcy1N/BZkAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk ZDQ5ZTU5Y2YtMmI1MC00YzQxLTkyMWYtNWVmYTE0ZDBkZmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6wTYn0l5DqoIQ/jJmoZjU/YVNWDrDOwQ34+ KBe6cIOPFa3uvwVzc0pc0GGiurk6B2g4DvxDemn/9Aq3ro5yMBm9KdPyYB/Nepz3 +CNMf90MJ/xFgHDC2JkkPuhVCb5mh/mzg297Omp5skW8x47IS7vM1tjiivqQ8Ygf DhkC1TNEJOFNIJTGxx5bUhBILs3+ngcCPJVnIQUPzpgbuUt7PJ1BqvsIQwqxis32 7j9nfKbTLjeNhJUXBt8rWCSYd630+8Ce8f3NRhhq5soYbsmJzTV5vBBoJ1TqOPDf LT7csTeu1Snqqq3PAbp2b0Ma3GbOBQpTWYX8Q1M5NLeXPStcMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOITWXvxBh03345QN5MRsk5yqPh1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2ZhNzg4MzQtMmUyYS0z YzcyLWFhZjctN2I1MWUzYzcwZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8X0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjH4VUjskMYG5Z3L35SMQ+aTqGVtgtxT6uq93yOeWgfUBqMqt8g7ebu Ffk4z8Pfk5FsMqYc2KsmTK4/LL34VVtNt6rawIAa0G68BRWW5idjRQpaNvjhv3Rr 5eCyb2ble5J8PiW93gQ3ELTSiL7mp+4Gz7wKXucblULEz+PYM5FL+MmGjD3lffRg 7YAQzRshe2XgvyIFoLS3gzclJAJ2+kWv9DMeMlfH1HmmaMKYW8Iq1PD1ktTCq/me cfXMXVadt8yYqpazA0aGQtDTXC/2VcS3rO2rhlzcX5BE+sNiYY35I9viZKg/3mJ1 YpHTlSwRqDdjScezDwvbgJQCWDNOwoY= -----END CERTIFICATE-----Generated at Mon Mar 2 04:35:11 2026 by rpki-client