$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/d489c930-352c-3f17-a5d2-b2cc806aff09.roa File: d489c930-352c-3f17-a5d2-b2cc806aff09.roa (raw, json) Hash identifier: sFOuaS89Muxe+RAVsUGl9Asb8zfc2gnvvlrQ5L30x7s= Subject key identifier: B5:8F:C2:4C:09:7F:85:D3:D2:3B:51:12:05:B9:0D:06:1A:D8:C9:BB Certificate issuer: /CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Certificate serial: 010D0C9F4328584CE8F76F37FC8B4302CD7C2400 Authority key identifier: CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/d489c930-352c-3f17-a5d2-b2cc806aff09.roa Signing time: Thu 19 Feb 2026 02:00:32 +0000 ROA not before: Thu 19 Feb 2026 02:00:32 +0000 ROA not after: Wed 20 May 2026 01:00:32 +0000 asID: 11739 IP address blocks: 209.20.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e8:f7:6f:37:fc:8b:43:02:cd:7c:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Validity Not Before: Feb 19 02:00:32 2026 GMT Not After : May 20 01:00:32 2026 GMT Subject: CN=022fe353-d43a-4dcf-9165-6a5147f852a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:76:7e:dd:d0:f2:e6:dc:e7:dc:23:c5:3c:a2: 7d:55:9b:b3:84:08:c4:3b:63:1b:1f:26:eb:17:9b: 18:44:56:e9:b0:54:38:7e:52:18:36:be:61:bf:be: 90:6a:9c:db:6e:a0:ab:3b:b8:c6:e4:dd:77:0c:ab: c9:a8:87:b5:81:dc:13:e7:5f:b9:42:a5:a0:fb:3e: 21:19:9b:2a:b4:d3:5d:f6:47:61:b3:63:53:5b:33: 2e:19:ab:37:41:f7:e1:26:d1:b7:23:5b:f2:bc:d0: 35:34:05:0c:40:8e:ad:33:6b:29:6a:3a:43:35:a8: a3:c9:0d:96:8b:f3:ed:0c:6a:45:ad:31:2a:07:b6: 03:07:26:d1:d7:4f:34:5f:a8:9b:f6:c2:62:8b:6c: a1:ed:6e:c3:fa:cb:12:1d:16:1c:41:ca:5a:9c:10: 35:b5:92:7f:4f:90:da:5f:76:1c:0d:fe:c3:18:3a: ee:6b:5a:1c:75:8b:7f:8b:7a:99:c6:ca:6c:20:2a: ef:9b:df:1b:31:b4:26:f1:df:a5:c3:78:7d:09:8a: 85:9d:91:19:8f:9f:a1:c2:dc:72:87:1d:63:9f:57: 17:85:43:7b:6f:3c:05:34:a9:ed:c0:12:1b:52:45: a8:15:dd:2b:46:e8:70:47:84:e0:18:19:64:2c:f1: d7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8F:C2:4C:09:7F:85:D3:D2:3B:51:12:05:B9:0D:06:1A:D8:C9:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/d489c930-352c-3f17-a5d2-b2cc806aff09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl X509v3 Authority Key Identifier: keyid:CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer sbgp-ipAddrBlock: critical IPv4: 209.20.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:78:0e:65:4b:38:a1:92:0e:31:23:f6:4a:af:0c:5c:06:fc: 5a:65:84:40:12:f4:08:29:e6:19:c9:2d:32:c4:6a:76:27:cb: 9b:f6:02:58:37:56:ac:b5:fd:8f:f5:18:79:6a:21:70:e8:ce: 6f:fb:65:45:50:f9:40:e0:18:44:93:f7:14:2b:0d:e7:d4:60: 0d:6d:e2:ec:81:95:0b:d2:0d:1b:96:09:ab:fb:b2:6a:e9:0c: 3a:6a:a9:59:4b:c6:3e:bb:30:4a:e4:9e:77:97:2b:1a:3e:47: 35:71:02:9f:09:da:bf:c4:c9:f3:6f:9f:52:2c:a9:5b:d3:aa: 21:44:81:e7:ef:72:01:5d:88:a3:b7:19:98:d5:83:de:01:37: f9:42:97:67:c9:90:4a:3f:08:62:45:dc:a7:9e:c6:54:b6:87: 97:7a:e1:d2:2e:8f:cb:91:e2:b8:89:91:5c:5a:67:20:a7:f1: 9f:03:15:82:5b:ce:6e:8c:c4:ab:6c:dd:8a:28:34:0d:69:8a: 88:e7:78:fb:60:57:cc:d1:20:02:78:80:d9:cf:2d:f7:46:dd: ec:d4:d7:0b:2b:2d:e7:d9:db:73:1b:9c:d5:73:87:2b:78:8a: 1e:73:31:1c:4b:15:e3:9e:04:62:d2:6c:a9:28:0e:a1:99:c1: 9f:33:88:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzo9283/ItDAs18JAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM5YTdkYTAtMzk3NC00OGMyLWEyYzUtZmNhMWVjMzI4 NDhhMB4XDTI2MDIxOTAyMDAzMloXDTI2MDUyMDAxMDAzMlowLzEtMCsGA1UEAxMk MDIyZmUzNTMtZDQzYS00ZGNmLTkxNjUtNmE1MTQ3Zjg1MmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXZ+3dDy5tzn3CPFPKJ9VZuzhAjEO2MbHybr F5sYRFbpsFQ4flIYNr5hv76QapzbbqCrO7jG5N13DKvJqIe1gdwT51+5QqWg+z4h GZsqtNNd9kdhs2NTWzMuGas3QffhJtG3I1vyvNA1NAUMQI6tM2spajpDNaijyQ2W i/PtDGpFrTEqB7YDBybR1080X6ib9sJii2yh7W7D+ssSHRYcQcpanBA1tZJ/T5Da X3YcDf7DGDrua1ocdYt/i3qZxspsICrvm98bMbQm8d+lw3h9CYqFnZEZj5+hwtxy hx1jn1cXhUN7bzwFNKntwBIbUkWoFd0rRuhwR4TgGBlkLPHX3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWPwkwJf4XT0jtREgW5DQYa2Mm7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Yzlh N2RhMC0zOTc0LTQ4YzItYTJjNS1mY2ExZWMzMjg0OGEvZDQ4OWM5MzAtMzUyYy0z ZjE3LWE1ZDItYjJjYzgwNmFmZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWM5YTdkYTAtMzk3NC00OGMyLWEy YzUtZmNhMWVjMzI4NDhhLzVjOWE3ZGEwLTM5NzQtNDhjMi1hMmM1LWZjYTFlYzMy ODQ4YS5jcmwwHwYDVR0jBBgwFoAUy3jo0M7GwrVepCPnCc4BiznyXx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81YzlhN2RhMC0zOTc0LTQ4YzItYTJjNS1mY2Ex ZWMzMjg0OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0RSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC54DmVLOKGSDjEj9kqvDFwG/FplhEAS9Agp5hnJLTLEanYny5v2Alg3 Vqy1/Y/1GHlqIXDozm/7ZUVQ+UDgGEST9xQrDefUYA1t4uyBlQvSDRuWCav7smrp DDpqqVlLxj67MErknneXKxo+RzVxAp8J2r/EyfNvn1IsqVvTqiFEgefvcgFdiKO3 GZjVg94BN/lCl2fJkEo/CGJF3KeexlS2h5d64dIuj8uR4riJkVxaZyCn8Z8DFYJb zm6MxKts3YooNA1piojnePtgV8zRIAJ4gNnPLfdG3ezU1wsrLefZ23MbnNVzhyt4 ih5zMRxLFeOeBGLSbKkoDqGZwZ8ziPs= -----END CERTIFICATE-----Generated at Sun Feb 22 19:21:40 2026 by rpki-client