$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f151baca-f099-32c9-8682-ce9091585b73.roa File: f151baca-f099-32c9-8682-ce9091585b73.roa (raw, json) Hash identifier: lcAS3PGNpMAwzA1EVEUVSy3FSKN3VZdwnKmHBcUAcQQ= Subject key identifier: 71:29:25:44:65:3E:3E:8D:52:F5:43:D2:56:17:A8:1C:60:84:4B:91 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D037D1FA7508927C105C5C2C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f151baca-f099-32c9-8682-ce9091585b73.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 20940 IP address blocks: 23.196.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:1f:a7:50:89:27:c1:05:c5:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=47d3b990-2d02-40ed-90cc-1748dc7ad2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:69:70:28:23:e5:df:88:dd:8b:c7:61:ee:54: 88:48:6a:79:16:21:57:8f:a3:07:cc:30:97:9c:d3: 20:2d:fe:c7:7e:69:1f:14:86:a4:c7:ac:03:3b:84: 83:ec:b3:f8:c4:58:55:f5:9b:64:9b:22:15:02:0f: 87:a6:2d:8b:a1:03:92:65:78:76:af:9c:db:17:73: b9:dc:d3:79:f5:28:e1:58:da:a2:a8:dc:3a:29:31: a7:7a:d4:06:13:c9:9d:8c:c4:2e:c1:d9:67:80:ba: 39:d3:16:3f:3d:90:63:dc:32:51:9a:bf:67:68:75: f6:c4:03:f8:3e:97:72:46:57:b0:93:7e:e8:98:44: e0:76:ac:db:52:dc:5d:9d:10:0f:5d:2c:e6:2f:40: a2:ee:d8:7f:1f:a9:df:37:7b:9e:ca:7b:44:0e:65: d4:a7:f9:06:46:89:25:04:7d:c3:89:a7:2c:d4:d8: 10:4b:32:2c:4f:e1:5e:6c:1a:10:c8:91:63:4e:ed: c4:88:c3:d7:58:bc:e5:c0:cd:7a:9d:f4:e9:d0:bf: 40:c5:e9:92:81:42:9e:69:d8:8c:5c:47:a8:37:23: 12:83:dd:8d:e9:e9:67:d9:84:31:e7:cf:45:bd:34: 86:c4:40:1e:2e:30:dc:c3:f5:5e:f1:fa:b9:7e:26: b4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:29:25:44:65:3E:3E:8D:52:F5:43:D2:56:17:A8:1C:60:84:4B:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f151baca-f099-32c9-8682-ce9091585b73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:c7:eb:ea:e1:f8:af:8b:90:27:57:51:00:80:5c:3c:7e:75: 94:9f:d8:b4:89:c4:f6:1b:dd:13:ab:3c:d0:43:71:e9:a3:9f: a6:7c:d0:a9:89:c1:a0:3a:95:37:41:1d:e1:24:83:82:16:df: 42:4f:2a:c1:07:4b:03:47:1b:33:78:1c:b9:b5:9c:b8:88:91: 8c:64:d9:f3:5f:ce:cf:5e:10:db:64:2d:32:f8:d1:40:7d:d9: 21:db:50:23:da:ff:f8:ff:cf:45:74:d9:84:d8:ec:d3:49:92: 23:0f:f5:b2:8a:5d:e1:ea:81:ee:4b:3f:23:96:4e:99:8c:17: 55:8b:3e:09:48:c2:20:ef:b3:57:68:d3:70:99:c0:b8:13:e0: 15:5d:fe:66:d4:8e:70:5d:06:5f:3e:ed:4a:da:99:4f:bc:7d: 93:82:f6:61:c1:1e:1c:f0:76:24:d0:6e:42:49:70:ae:52:08: 38:e4:5e:db:16:73:6a:1e:6a:6e:40:b3:1d:b3:a7:da:78:ae: 6f:72:02:ca:b3:d1:a1:d9:85:30:f3:ee:56:f3:1a:2c:7f:10: d3:72:fa:07:c0:26:c2:40:c5:b5:9d:5e:02:4f:6c:e7:e6:10: 12:2c:9a:b9:39:a3:e9:54:c3:37:ab:48:c0:5d:28:22:4c:61: c4:7b:98:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfR+nUIknwQXFwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk NDdkM2I5OTAtMmQwMi00MGVkLTkwY2MtMTc0OGRjN2FkMmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2lwKCPl34jdi8dh7lSISGp5FiFXj6MHzDCX nNMgLf7HfmkfFIakx6wDO4SD7LP4xFhV9ZtkmyIVAg+Hpi2LoQOSZXh2r5zbF3O5 3NN59SjhWNqiqNw6KTGnetQGE8mdjMQuwdlngLo50xY/PZBj3DJRmr9naHX2xAP4 PpdyRlewk37omETgdqzbUtxdnRAPXSzmL0Ci7th/H6nfN3ueyntEDmXUp/kGRokl BH3Diacs1NgQSzIsT+FebBoQyJFjTu3EiMPXWLzlwM16nfTp0L9AxemSgUKeadiM XEeoNyMSg92N6eln2YQx589FvTSGxEAeLjDcw/Ve8fq5fia0zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEpJURlPj6NUvVD0lYXqBxghEuRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjE1MWJhY2EtZjA5OS0z MmM5LTg2ODItY2U5MDkxNTg1YjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8QCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnH6+rh+K+LkCdXUQCAXDx+dZSf2LSJxPYb3ROrPNBDcemjn6Z80KmJ waA6lTdBHeEkg4IW30JPKsEHSwNHGzN4HLm1nLiIkYxk2fNfzs9eENtkLTL40UB9 2SHbUCPa//j/z0V02YTY7NNJkiMP9bKKXeHqge5LPyOWTpmMF1WLPglIwiDvs1do 03CZwLgT4BVd/mbUjnBdBl8+7UramU+8fZOC9mHBHhzwdiTQbkJJcK5SCDjkXtsW c2oeam5Asx2zp9p4rm9yAsqz0aHZhTDz7lbzGix/ENNy+gfAJsJAxbWdXgJPbOfm EBIsmrk5o+lUwzerSMBdKCJMYcR7mJ0= -----END CERTIFICATE-----Generated at Mon Mar 2 13:06:41 2026 by rpki-client