$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/885022c6-7932-310e-8f41-dc349569c3b3.roa File: 885022c6-7932-310e-8f41-dc349569c3b3.roa (raw, json) Hash identifier: 2W68tOQFh4kovS4yyWplBg8mTeJs6qpaXtmO6DWG0ec= Subject key identifier: 0D:28:FF:26:FB:1B:44:F8:8A:62:D7:1D:1B:62:AC:4F:15:6D:E4:97 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584CDCA6AAAEA836CAD25EFA7280 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/885022c6-7932-310e-8f41-dc349569c3b3.roa Signing time: Sat 14 Feb 2026 16:08:17 +0000 ROA not before: Sat 14 Feb 2026 16:08:17 +0000 ROA not after: Fri 15 May 2026 15:08:17 +0000 asID: 2731 IP address blocks: 8.21.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:a6:aa:ae:a8:36:ca:d2:5e:fa:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 14 16:08:17 2026 GMT Not After : May 15 15:08:17 2026 GMT Subject: CN=b6db1a6e-b0ec-41f5-98ac-cbafce1f5ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:30:3e:9f:e6:b6:08:b1:6c:b7:84:5c:85:72: c2:1a:61:88:e9:63:2b:fb:f9:9f:78:57:c1:40:02: a2:33:25:1b:ee:50:00:ab:c2:1a:37:f0:8c:f7:7b: 09:ed:f5:3f:fc:72:70:6e:89:61:c9:f8:21:8a:3e: f8:d5:ff:26:7d:a6:d1:64:d8:28:fa:4d:2e:b6:09: 78:2d:3e:3b:87:cf:c6:57:03:c4:c0:a6:d0:c7:d7: 67:f9:f3:6c:1a:3f:54:90:a3:a7:8b:92:10:cf:cf: 6a:46:98:12:e8:87:59:0a:b3:38:26:b1:1c:71:ca: 69:e3:45:df:05:21:38:c7:6d:fe:c0:d2:06:99:ca: dc:f0:e1:35:ae:14:91:8d:d7:48:c5:48:45:56:3c: 73:de:01:11:f7:20:4a:0f:9e:67:97:5c:06:12:79: 29:b7:31:db:44:ea:c2:f7:71:90:c8:f5:ff:80:f3: 1e:5b:4a:7f:c3:7b:77:da:0d:c9:34:4d:60:74:19: 97:26:d4:73:1b:15:61:11:7d:86:b8:15:ef:07:d7: 11:b9:d9:f7:29:4c:53:70:31:8e:b3:a9:cc:0a:10: f3:e1:1f:99:5a:d5:09:da:f4:7c:1c:f6:30:f1:9c: 7f:a2:ba:13:23:28:7c:d3:8a:a3:4d:e9:1d:68:8f: 6c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:28:FF:26:FB:1B:44:F8:8A:62:D7:1D:1B:62:AC:4F:15:6D:E4:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/885022c6-7932-310e-8f41-dc349569c3b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.21.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:1f:5d:b7:aa:48:41:0c:3c:86:f0:a5:e9:4c:c5:8d:5a:42: d9:bb:07:aa:6e:a1:c9:b1:f9:77:b0:3a:54:6a:9b:8a:25:ed: 63:4f:de:90:e6:11:ad:9a:36:1e:4c:db:64:ca:2b:78:36:0d: 68:f6:c3:a5:6a:78:d5:93:6a:91:cb:e6:29:cc:42:ab:88:f5: f8:f6:0d:49:30:b9:df:07:00:54:ce:4d:85:73:12:f3:0c:19: 74:aa:a8:53:c9:09:bc:fe:c5:70:05:1a:06:15:80:fb:b0:1b: 64:84:e5:6d:2d:e8:f8:f0:2e:95:40:86:93:f9:28:62:e9:d0: fb:76:7c:82:fe:39:a9:8e:96:24:39:b7:79:cd:3c:fc:5e:c5: 58:30:a7:f5:a5:8b:45:c2:18:87:5d:d6:bd:9d:00:92:be:a6: 5f:94:cb:0d:65:cc:13:b9:c7:02:8e:74:a2:01:53:7b:f6:f4: d0:48:85:44:76:21:bd:12:cb:b1:74:85:ab:7b:db:29:56:f9: a3:6c:9e:8a:14:d9:29:0f:89:57:3b:1a:f5:fc:6b:b0:08:21: 74:46:cc:a0:9f:f7:80:29:72:44:3d:b2:0b:48:fb:b6:a4:85: 14:66:15:79:3e:b7:70:b4:c9:64:53:58:b9:be:08:bf:8c:cc: 80:87:44:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcpqquqDbK0l76coAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDIxNDE2MDgxN1oXDTI2MDUxNTE1MDgxN1owLzEtMCsGA1UEAxMk YjZkYjFhNmUtYjBlYy00MWY1LTk4YWMtY2JhZmNlMWY1ZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjA+n+a2CLFst4RchXLCGmGI6WMr+/mfeFfB QAKiMyUb7lAAq8IaN/CM93sJ7fU//HJwbolhyfghij741f8mfabRZNgo+k0utgl4 LT47h8/GVwPEwKbQx9dn+fNsGj9UkKOni5IQz89qRpgS6IdZCrM4JrEcccpp40Xf BSE4x23+wNIGmcrc8OE1rhSRjddIxUhFVjxz3gER9yBKD55nl1wGEnkptzHbROrC 93GQyPX/gPMeW0p/w3t32g3JNE1gdBmXJtRzGxVhEX2GuBXvB9cRudn3KUxTcDGO s6nMChDz4R+ZWtUJ2vR8HPYw8Zx/oroTIyh804qjTekdaI9sHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0o/yb7G0T4imLXHRtirE8VbeSXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvODg1MDIyYzYtNzkzMi0z MTBlLThmNDEtZGMzNDk1NjljM2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCBV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQfXbeqSEEMPIbwpelMxY1aQtm7B6puocmx+XewOlRqm4ol7WNP3pDm Ea2aNh5M22TKK3g2DWj2w6VqeNWTapHL5inMQquI9fj2DUkwud8HAFTOTYVzEvMM GXSqqFPJCbz+xXAFGgYVgPuwG2SE5W0t6PjwLpVAhpP5KGLp0Pt2fIL+OamOliQ5 t3nNPPxexVgwp/Wli0XCGIdd1r2dAJK+pl+Uyw1lzBO5xwKOdKIBU3v29NBIhUR2 Ib0Sy7F0hat72ylW+aNsnooU2SkPiVc7GvX8a7AIIXRGzKCf94ApckQ9sgtI+7ak hRRmFXk+t3C0yWRTWLm+CL+MzICHRB4= -----END CERTIFICATE-----Generated at Fri Feb 27 07:29:23 2026 by rpki-client