$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb4f5222-fd7d-3e44-a4a6-dc140f6ed534.roa File: eb4f5222-fd7d-3e44-a4a6-dc140f6ed534.roa (raw, json) Hash identifier: 3J2/2q+DxUneJQDXst2qCpMxtyZJdbRLwMPnOnWnS/A= Subject key identifier: D6:58:6C:11:15:F9:7A:61:AA:65:80:CD:D8:0F:0A:DE:4C:11:49:A5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CF2BD02D0B4DE44709B30C600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb4f5222-fd7d-3e44-a4a6-dc140f6ed534.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 16625 IP address blocks: 23.211.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bd:02:d0:b4:de:44:70:9b:30:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=d2ae020f-0569-4d37-888a-025119643637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:dc:41:cf:2e:5d:87:84:7e:df:6b:60:24:11: 96:6e:b4:30:04:7c:56:4b:a9:b2:6a:53:88:31:9e: 08:c0:1b:52:81:e9:db:bd:3b:26:40:3c:df:c1:29: 41:b8:5d:8e:df:1c:3d:77:02:a1:fb:01:b6:01:f6: c5:97:c7:0c:34:c2:82:8f:b0:46:38:99:b1:a0:f4: a0:ba:b8:cf:af:70:cc:1e:dd:05:fe:e8:a8:a2:9b: ae:85:e1:bf:4b:54:90:7d:59:9b:5e:f6:e0:0a:02: bf:1b:3a:89:6c:1d:b5:9a:e0:03:a3:55:28:01:ac: 6a:7b:a1:b0:88:b7:d4:dd:61:4c:36:46:4d:f0:92: 14:22:9f:4f:63:83:86:a6:06:39:c1:7e:7e:a6:b0: d1:79:bc:2f:ff:8a:2b:21:cc:12:6b:5a:03:49:3e: d3:b6:2d:51:9b:72:c2:fb:a8:e9:08:f5:ea:6a:67: 7b:ee:3f:21:52:8b:34:6a:34:04:ab:b5:9e:36:cd: b7:f8:56:db:fb:77:08:2d:f9:99:2b:8d:18:27:10: 10:5c:08:74:12:ff:19:84:11:c2:c6:3c:16:7a:95: 4b:18:69:eb:78:0f:54:68:76:f7:32:9b:17:a7:dd: 60:7f:4d:1e:c4:03:87:cd:a9:77:34:8a:0e:a7:7c: db:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:58:6C:11:15:F9:7A:61:AA:65:80:CD:D8:0F:0A:DE:4C:11:49:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb4f5222-fd7d-3e44-a4a6-dc140f6ed534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:27:24:5e:53:30:eb:f8:db:00:41:f1:20:d3:77:41:34:a4: e7:0a:7d:60:6f:22:df:9f:f0:59:e5:59:77:cc:41:20:1d:ba: 48:ed:98:3c:f3:19:4c:07:88:c2:09:a8:c8:72:d0:28:92:8b: ad:8e:f1:3f:53:26:20:2a:17:ed:53:c2:b7:14:2f:6f:67:d9: 3b:f7:5b:2d:1e:8c:77:f1:b9:9e:e9:e0:88:87:0f:a1:46:43: 08:f9:9c:8a:06:ca:b3:4f:ff:61:1d:9f:ee:39:0b:54:af:77: 68:72:1d:e4:36:e9:44:84:f0:a2:cc:49:ce:c6:ff:55:a5:2c: cc:61:f6:84:10:94:17:86:ba:e9:0b:a9:a3:6e:3c:3d:54:0c: a9:d7:09:a5:4c:2b:fd:ec:83:ff:6e:29:be:e5:30:7c:6b:b3: 23:38:53:b8:a2:86:ef:55:05:de:f8:33:d0:47:0f:21:e7:bf: 47:2b:2e:4a:cd:8b:92:d9:32:f0:56:91:6a:ea:41:16:13:e7: 9b:06:6d:e9:4c:fd:f0:63:1f:67:68:2e:70:fb:96:71:c6:97: 24:39:43:72:6a:f1:8b:a9:ee:54:92:ee:c2:44:c8:2d:d2:83: d9:7c:ae:f8:0f:22:69:87:c3:45:0b:c6:a1:a7:f0:81:97:4b: 14:33:f0:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvQLQtN5EcJswxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZDJhZTAyMGYtMDU2OS00ZDM3LTg4OGEtMDI1MTE5NjQzNjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNxBzy5dh4R+32tgJBGWbrQwBHxWS6myalOI MZ4IwBtSgenbvTsmQDzfwSlBuF2O3xw9dwKh+wG2AfbFl8cMNMKCj7BGOJmxoPSg urjPr3DMHt0F/uioopuuheG/S1SQfVmbXvbgCgK/GzqJbB21muADo1UoAaxqe6Gw iLfU3WFMNkZN8JIUIp9PY4OGpgY5wX5+prDRebwv/4orIcwSa1oDST7Tti1Rm3LC +6jpCPXqamd77j8hUos0ajQEq7WeNs23+Fbb+3cILfmZK40YJxAQXAh0Ev8ZhBHC xjwWepVLGGnreA9UaHb3MpsXp91gf00exAOHzal3NIoOp3zbWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZYbBEV+XphqmWAzdgPCt5MEUmlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWI0ZjUyMjItZmQ3ZC0z ZTQ0LWE0YTYtZGMxNDBmNmVkNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9OQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgnJF5TMOv42wBB8SDTd0E0pOcKfWBvIt+f8FnlWXfMQSAdukjtmDzz GUwHiMIJqMhy0CiSi62O8T9TJiAqF+1TwrcUL29n2Tv3Wy0ejHfxuZ7p4IiHD6FG Qwj5nIoGyrNP/2Edn+45C1Svd2hyHeQ26USE8KLMSc7G/1WlLMxh9oQQlBeGuukL qaNuPD1UDKnXCaVMK/3sg/9uKb7lMHxrsyM4U7iihu9VBd74M9BHDyHnv0crLkrN i5LZMvBWkWrqQRYT55sGbelM/fBjH2doLnD7lnHGlyQ5Q3Jq8Yup7lSS7sJEyC3S g9l8rvgPImmHw0ULxqGn8IGXSxQz8CQ= -----END CERTIFICATE-----Generated at Mon Mar 2 02:34:30 2026 by rpki-client