$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/029c457f-31a5-3428-aca9-5a90e1ec84a6.roa File: 029c457f-31a5-3428-aca9-5a90e1ec84a6.roa (raw, json) Hash identifier: EvZQrXQKIPeb/0+h/oFXv6y/M3ryWzpG/IgZXTUSqss= Subject key identifier: CE:E0:F6:BA:8C:A5:E8:2B:66:70:8E:A6:CA:0B:11:00:08:94:C4:28 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D19B4C851E67A7E4EB2789600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/029c457f-31a5-3428-aca9-5a90e1ec84a6.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 20940 IP address blocks: 23.204.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:c8:51:e6:7a:7e:4e:b2:78:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=531a9bf6-4680-458d-9aad-26adbe8ee0e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:90:3c:bc:f6:98:18:62:2d:8b:60:2e:c6:c4: 87:96:cd:02:ec:94:8a:29:ba:e7:5d:d7:5d:19:49: 9d:a8:06:e5:28:4a:1f:ae:7e:1d:3a:55:b8:7f:1c: dd:46:3b:14:a5:62:2c:2a:7a:81:bb:5c:86:98:df: 9e:32:ea:8e:d1:2f:be:2a:86:4d:37:3c:6b:fc:31: 63:9a:56:ed:10:d1:37:74:74:7f:bb:34:84:35:fe: 46:01:6f:55:bf:7f:91:0c:2d:35:e0:15:7c:6b:69: 9f:bb:55:1d:a8:69:f8:d4:1b:4d:9c:9f:05:53:2c: 06:9f:8d:53:95:88:cd:67:bc:28:72:07:99:d1:e4: 06:52:85:35:e1:2d:7e:e0:17:0b:4f:ef:3e:77:94: ba:00:d2:0d:02:17:f7:3c:7a:7c:d1:88:e9:e5:0b: 85:55:c4:16:75:f9:bd:f9:ae:78:e4:26:2a:bd:af: 12:49:76:34:89:3f:ea:28:75:89:b2:62:3b:95:2b: 2b:e3:50:e3:ef:26:11:90:05:c1:04:af:22:9b:52: c7:92:fe:37:5c:9f:f7:fb:fd:d9:27:1c:69:c6:15: ae:70:ac:ca:6f:ab:df:38:8c:b6:4a:d8:28:ec:57: f8:51:ef:88:7d:e1:31:4b:2b:9f:58:3d:d1:47:bb: e7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E0:F6:BA:8C:A5:E8:2B:66:70:8E:A6:CA:0B:11:00:08:94:C4:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/029c457f-31a5-3428-aca9-5a90e1ec84a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:02:90:98:99:72:14:c0:5a:cb:af:d7:6b:b1:d7:0b:0d:7c: 8c:99:b2:d5:fc:0e:db:35:cb:ac:67:69:8f:c8:5c:d4:66:94: f5:1c:aa:76:6f:b0:40:fe:b6:28:d1:e0:65:5f:ea:1d:cf:23: ee:37:8b:04:01:cb:f2:37:77:63:03:dc:9a:fd:ad:03:a0:19: 07:78:10:6b:74:76:c3:0d:1a:57:fe:a6:ea:49:bf:22:f5:b9: 97:04:b6:a0:eb:dd:31:c5:d3:ba:93:dd:aa:30:d7:ee:a5:dc: 1f:54:42:b5:d0:bb:7c:66:27:59:db:fb:3f:79:c2:a5:0f:c4: 03:9d:41:97:68:e7:c1:6f:9f:52:cf:25:b1:2b:bb:22:c9:d6: 96:e1:31:48:18:6f:53:f5:72:30:3d:3f:0e:7b:5b:e5:16:af: 33:87:d5:d1:5e:92:71:cb:9c:b5:62:82:dc:71:21:63:2f:b9: 1e:b4:66:11:dd:10:5a:21:ad:4b:99:29:46:9a:d6:95:5e:fb: 48:ce:57:a8:43:e2:bb:b6:c8:31:c2:41:fa:d1:8d:ee:56:53: 82:d7:fb:6a:69:91:19:e1:6f:46:79:14:71:0b:b1:cd:2d:d3: ba:c0:76:7d:9c:95:7a:63:7b:01:85:0e:26:7e:8a:99:1d:32: 8f:7e:06:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtMhR5np+TrJ4lgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NTMxYTliZjYtNDY4MC00NThkLTlhYWQtMjZhZGJlOGVlMGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15A8vPaYGGIti2AuxsSHls0C7JSKKbrnXddd GUmdqAblKEofrn4dOlW4fxzdRjsUpWIsKnqBu1yGmN+eMuqO0S++KoZNNzxr/DFj mlbtENE3dHR/uzSENf5GAW9Vv3+RDC014BV8a2mfu1UdqGn41BtNnJ8FUywGn41T lYjNZ7wocgeZ0eQGUoU14S1+4BcLT+8+d5S6ANINAhf3PHp80Yjp5QuFVcQWdfm9 +a545CYqva8SSXY0iT/qKHWJsmI7lSsr41Dj7yYRkAXBBK8im1LHkv43XJ/3+/3Z JxxpxhWucKzKb6vfOIy2Stgo7Ff4Ue+IfeExSyufWD3RR7vnrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7g9rqMpegrZnCOpsoLEQAIlMQoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDI5YzQ1N2YtMzFhNS0z NDI4LWFjYTktNWE5MGUxZWM4NGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8xQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsCkJiZchTAWsuv12ux1wsNfIyZstX8Dts1y6xnaY/IXNRmlPUcqnZv sED+tijR4GVf6h3PI+43iwQBy/I3d2MD3Jr9rQOgGQd4EGt0dsMNGlf+pupJvyL1 uZcEtqDr3THF07qT3aow1+6l3B9UQrXQu3xmJ1nb+z95wqUPxAOdQZdo58Fvn1LP JbEruyLJ1pbhMUgYb1P1cjA9Pw57W+UWrzOH1dFeknHLnLVigtxxIWMvuR60ZhHd EFohrUuZKUaa1pVe+0jOV6hD4ru2yDHCQfrRje5WU4LX+2ppkRnhb0Z5FHELsc0t 07rAdn2clXpjewGFDiZ+ipkdMo9+BjM= -----END CERTIFICATE-----Generated at Fri Mar 27 03:35:59 2026 by rpki-client