$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4430742-cad1-3759-a6d0-6fde7b7f1fe0.roa File: d4430742-cad1-3759-a6d0-6fde7b7f1fe0.roa (raw, json) Hash identifier: FSB5BWhX1A+q5lxBzn6LtZi8DLm+w0Il/238FN6kMDw= Subject key identifier: C7:89:CD:0E:6E:66:33:5B:6B:91:69:40:08:C3:0C:D1:14:71:9D:E2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D037D34FB5CB2B3500B79FC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4430742-cad1-3759-a6d0-6fde7b7f1fe0.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 20940 IP address blocks: 23.195.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:34:fb:5c:b2:b3:50:0b:79:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=e22189e8-fc4a-4297-8134-716b6d693af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:66:1b:75:89:a0:61:6a:8f:47:f5:8f:0c:6d: 55:b4:93:21:1c:7c:ad:8f:e6:c9:0d:65:1a:b7:d9: ec:97:b6:fe:73:4a:a4:46:db:48:ab:dd:ef:62:0b: c6:77:17:3a:5d:e0:cd:6e:06:74:af:e3:70:1c:05: 6c:31:55:95:f8:4e:72:0e:3f:34:9d:a1:da:ae:bf: ee:49:1e:9a:ca:97:35:45:41:53:79:73:e4:aa:fa: 11:bd:90:6b:1f:31:84:52:0e:56:0f:71:c9:ab:a0: 71:07:76:14:12:5a:35:8a:6e:f5:d1:42:9c:ae:53: f5:7b:cd:31:f6:4f:4a:fb:de:4c:b0:f3:00:a7:44: 5f:5b:b7:1e:89:46:e3:8b:7f:b0:b9:7a:30:b8:b9: 86:28:e8:6d:cc:08:e5:1b:81:73:a8:97:83:b4:b6: 77:3f:24:70:93:b4:c6:f1:38:f7:60:7f:67:ae:a9: 7d:c0:07:7e:f1:8d:4c:60:42:89:ce:e2:00:f6:d0: e8:dc:e9:82:da:70:82:84:69:4a:7c:b0:b4:7e:a2: 6d:d0:b7:43:5d:4e:46:c9:37:b1:03:e9:2e:19:e8: ba:66:83:ab:4d:4f:2b:80:89:4f:49:64:00:54:cd: 6a:ef:19:80:91:47:50:0c:e6:e1:97:af:1e:b2:bd: 48:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:89:CD:0E:6E:66:33:5B:6B:91:69:40:08:C3:0C:D1:14:71:9D:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4430742-cad1-3759-a6d0-6fde7b7f1fe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:1e:b6:ce:e4:5e:30:85:30:84:77:97:23:fd:f8:2c:76:da: 15:b0:79:44:e6:37:e5:e3:d2:da:ee:c3:98:b6:ad:f7:cd:5b: ac:66:4d:9a:da:20:8d:88:47:c0:d7:a4:d1:ac:7e:c6:bd:ee: 72:04:97:3c:89:d3:bc:7c:eb:83:79:84:95:7c:be:28:90:67: 67:96:42:77:92:41:fd:c5:34:b3:0a:25:46:a7:fd:80:82:d6: 5f:71:e5:dc:85:6a:2f:84:76:46:44:9e:07:3c:b8:5d:43:22: b7:be:a0:e1:1b:fa:90:cf:32:4a:4c:de:38:05:86:72:b0:bb: b0:07:91:d7:67:da:52:a1:73:fb:48:55:1c:a9:d3:f4:0f:27: 17:92:88:be:5d:bd:98:88:66:83:41:08:d4:6c:31:b6:80:69: 0b:1c:e1:28:80:16:19:b9:2e:0d:da:82:cb:5b:22:6b:42:d6: 78:ee:0c:8d:d6:d8:57:f7:74:2f:e9:26:3a:52:8b:3b:4a:40: 06:3e:ec:93:2d:05:1f:60:33:f7:cd:63:dc:b0:17:a7:10:15: f0:32:6b:d4:0d:b0:e7:3e:07:88:9d:f4:35:83:4c:41:31:f6: ee:e2:6f:3c:d1:ac:3b:a6:15:7c:94:2f:b6:c7:51:59:2b:99: 7f:b4:54:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfTT7XLKzUAt5/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk ZTIyMTg5ZTgtZmM0YS00Mjk3LTgxMzQtNzE2YjZkNjkzYWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mYbdYmgYWqPR/WPDG1VtJMhHHytj+bJDWUa t9nsl7b+c0qkRttIq93vYgvGdxc6XeDNbgZ0r+NwHAVsMVWV+E5yDj80naHarr/u SR6aypc1RUFTeXPkqvoRvZBrHzGEUg5WD3HJq6BxB3YUElo1im710UKcrlP1e80x 9k9K+95MsPMAp0RfW7ceiUbji3+wuXowuLmGKOhtzAjlG4FzqJeDtLZ3PyRwk7TG 8Tj3YH9nrql9wAd+8Y1MYEKJzuIA9tDo3OmC2nCChGlKfLC0fqJt0LdDXU5GyTex A+kuGei6ZoOrTU8rgIlPSWQAVM1q7xmAkUdQDObhl68esr1IUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeJzQ5uZjNba5FpQAjDDNEUcZ3iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDQ0MzA3NDItY2FkMS0z NzU5LWE2ZDAtNmZkZTdiN2YxZmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8MUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYets7kXjCFMIR3lyP9+Cx22hWweUTmN+Xj0truw5i2rffNW6xmTZra II2IR8DXpNGsfsa97nIElzyJ07x864N5hJV8viiQZ2eWQneSQf3FNLMKJUan/YCC 1l9x5dyFai+EdkZEngc8uF1DIre+oOEb+pDPMkpM3jgFhnKwu7AHkddn2lKhc/tI VRyp0/QPJxeSiL5dvZiIZoNBCNRsMbaAaQsc4SiAFhm5Lg3agstbImtC1njuDI3W 2Ff3dC/pJjpSiztKQAY+7JMtBR9gM/fNY9ywF6cQFfAya9QNsOc+B4id9DWDTEEx 9u7ibzzRrDumFXyUL7bHUVkrmX+0VCc= -----END CERTIFICATE-----Generated at Mon Mar 2 12:02:05 2026 by rpki-client