$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/9350ef68-af73-3548-8377-c2969548bbe2.roa File: 9350ef68-af73-3548-8377-c2969548bbe2.roa (raw, json) Hash identifier: IdRPXvNqwTx4Lj8JRHmQKc7CE2TMiRbbxZ+OPkHvwb4= Subject key identifier: BC:BA:B8:E3:91:C4:4F:D4:40:74:3B:7B:85:CE:7D:36:EF:62:B6:70 Certificate issuer: /CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Certificate serial: 010D0C9F4328584CCF49084743CED2EBE86F6F00 Authority key identifier: 59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/9350ef68-af73-3548-8377-c2969548bbe2.roa Signing time: Mon 09 Feb 2026 21:14:07 +0000 ROA not before: Mon 09 Feb 2026 21:14:07 +0000 ROA not after: Sun 10 May 2026 20:14:07 +0000 asID: 22223 IP address blocks: 139.60.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cf:49:08:47:43:ce:d2:eb:e8:6f:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Validity Not Before: Feb 9 21:14:07 2026 GMT Not After : May 10 20:14:07 2026 GMT Subject: CN=b65e9449-5bb6-4b20-825b-5f782c1edf9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:97:42:b6:ea:27:1f:f4:df:67:2e:f1:39:ca: 60:28:a1:9a:4e:f0:b2:e8:3f:56:cb:3d:fa:41:26: 7b:82:7b:07:4a:fb:f8:27:f9:81:e8:20:a9:a1:47: 31:69:4c:a8:95:78:43:94:fd:c8:18:1e:e4:77:f9: 95:79:65:b2:12:c1:a0:1e:2f:32:48:0b:ae:ba:85: df:09:36:2a:3c:c7:6a:1e:d1:f5:ac:4e:c5:f4:8b: ed:2e:5a:a3:08:02:18:b3:69:bd:4e:ff:bd:68:ca: fa:8c:0a:6d:99:f8:92:4f:c2:51:15:73:e7:3c:49: c6:85:9a:38:b9:8b:47:02:59:4a:7f:3d:9d:be:6d: 9f:4e:1d:9d:b9:72:3c:8b:cf:d6:34:eb:ed:3c:8e: a0:9f:e6:52:dc:7f:23:6c:b2:ca:21:06:14:72:c7: e0:34:91:28:4d:e3:19:dc:af:93:28:10:5c:ea:99: 3f:e2:09:3f:5e:1c:bd:fc:70:95:69:09:94:80:b6: 5a:71:e2:49:c4:60:db:d7:e1:ab:e1:cc:af:4c:c3: 02:b8:74:0f:61:f5:cf:7a:63:c6:e0:c8:6e:cd:d9: c9:7c:74:e2:01:4b:8d:29:17:ef:cc:6b:15:19:7e: 8a:16:74:f9:c5:c3:87:57:93:b8:03:c2:4f:70:bb: c0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BA:B8:E3:91:C4:4F:D4:40:74:3B:7B:85:CE:7D:36:EF:62:B6:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/9350ef68-af73-3548-8377-c2969548bbe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl X509v3 Authority Key Identifier: keyid:59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer sbgp-ipAddrBlock: critical IPv4: 139.60.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:18:1e:46:9e:ce:0e:d8:19:78:30:16:f1:f0:34:27:a8:42: 3c:42:ab:72:56:c5:71:47:dc:db:31:93:9e:e6:8e:06:95:cb: 45:75:4a:08:3c:25:d6:ed:a8:c3:91:84:f5:cf:c0:5d:73:01: 0b:45:74:31:a3:19:da:90:5d:eb:bf:7d:e7:29:69:b7:9a:9d: 08:e7:76:d1:4a:46:bb:33:8e:da:c8:23:16:3d:31:8f:1f:7b: b1:d9:f5:f2:c4:ac:fa:64:25:11:90:fd:17:8a:90:51:9b:a4: ed:51:e9:10:7c:42:0f:a5:7b:a3:81:23:3d:d0:c8:9c:6c:d6: a3:8f:3a:79:1c:29:0b:df:62:32:f3:37:a3:2f:3f:3e:b4:8c: 83:23:ab:0f:6c:5e:0f:45:0d:7b:10:1f:56:e8:ae:b3:b9:5c: 2a:e3:99:36:68:10:73:08:49:10:f0:83:c5:91:80:77:f0:da: c1:47:fe:71:a7:c9:28:84:3c:e7:43:ee:c9:3f:57:82:dc:c5: 79:1e:1e:0f:ca:6c:46:34:86:03:06:20:f8:fd:55:7b:57:ac: dd:fe:c3:af:00:2c:f9:6b:f1:45:cd:3b:74:44:55:9d:61:04: 0a:2d:c6:91:f5:65:47:61:d3:9f:1a:65:2f:f5:62:ca:f2:d3: ec:e4:49:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzPSQhHQ87S6+hvbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzYmYxNDktM2U4OS00Y2E0LWI5NmQtOTE4YzJlYWI4 N2Q4MB4XDTI2MDIwOTIxMTQwN1oXDTI2MDUxMDIwMTQwN1owLzEtMCsGA1UEAxMk YjY1ZTk0NDktNWJiNi00YjIwLTgyNWItNWY3ODJjMWVkZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpdCtuonH/TfZy7xOcpgKKGaTvCy6D9Wyz36 QSZ7gnsHSvv4J/mB6CCpoUcxaUyolXhDlP3IGB7kd/mVeWWyEsGgHi8ySAuuuoXf CTYqPMdqHtH1rE7F9IvtLlqjCAIYs2m9Tv+9aMr6jAptmfiST8JRFXPnPEnGhZo4 uYtHAllKfz2dvm2fTh2duXI8i8/WNOvtPI6gn+ZS3H8jbLLKIQYUcsfgNJEoTeMZ 3K+TKBBc6pk/4gk/Xhy9/HCVaQmUgLZaceJJxGDb1+Gr4cyvTMMCuHQPYfXPemPG 4MhuzdnJfHTiAUuNKRfvzGsVGX6KFnT5xcOHV5O4A8JPcLvA8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLy6uOORxE/UQHQ7e4XOfTbvYrZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNi ZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThjMmVhYjg3ZDgvOTM1MGVmNjgtYWY3My0z NTQ4LTgzNzctYzI5Njk1NDhiYmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDIzYmYxNDktM2U4OS00Y2E0LWI5 NmQtOTE4YzJlYWI4N2Q4L2QyM2JmMTQ5LTNlODktNGNhNC1iOTZkLTkxOGMyZWFi ODdkOC5jcmwwHwYDVR0jBBgwFoAUWdolHf/bCSCEwSKLLyC+KA2QoukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNiZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThj MmVhYjg3ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDizxoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4YHkaezg7YGXgwFvHwNCeoQjxCq3JWxXFH3Nsxk57mjgaVy0V1Sgg8 JdbtqMORhPXPwF1zAQtFdDGjGdqQXeu/fecpabeanQjndtFKRrszjtrIIxY9MY8f e7HZ9fLErPpkJRGQ/ReKkFGbpO1R6RB8Qg+le6OBIz3QyJxs1qOPOnkcKQvfYjLz N6MvPz60jIMjqw9sXg9FDXsQH1borrO5XCrjmTZoEHMISRDwg8WRgHfw2sFH/nGn ySiEPOdD7sk/V4LcxXkeHg/KbEY0hgMGIPj9VXtXrN3+w68ALPlr8UXNO3REVZ1h BAotxpH1ZUdh058aZS/1Ysry0+zkSao= -----END CERTIFICATE-----Generated at Thu Feb 26 19:28:40 2026 by rpki-client