$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/067de1fa-5fff-34ce-9863-9fc217b33a00.roa File: 067de1fa-5fff-34ce-9863-9fc217b33a00.roa (raw, json) Hash identifier: oOJ+O5F2aBctTNWHfVupCdPGtbg/YGlOM5Q+UOKfkVs= Subject key identifier: 49:2B:07:46:97:CB:8C:F5:F5:34:68:44:D4:2A:76:98:B9:16:2B:81 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2BDA2FEA74CDF0D0E1C36280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/067de1fa-5fff-34ce-9863-9fc217b33a00.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.220.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:2f:ea:74:cd:f0:d0:e1:c3:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=6f3121d4-8786-436a-8413-7019bfd1d5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9a:d1:b3:d4:bc:53:47:27:c6:6d:da:7d:d9: 36:93:5f:55:bb:f8:ce:b6:8f:59:50:cf:58:87:45: 6d:cc:49:ba:f2:bd:6c:38:95:7c:b0:f0:9a:08:57: d4:ab:21:c4:e4:47:0a:3a:74:a0:3a:0e:b7:f6:a2: 46:56:e6:bf:66:4b:d1:e9:17:53:c9:33:cd:c4:63: 00:4b:6f:0a:6e:0c:29:3e:fa:01:38:e6:fe:bc:35: d1:e4:da:40:98:2e:8d:ad:12:d5:46:e8:3e:fd:3f: b0:52:7a:46:17:87:92:c8:94:a0:01:2a:73:32:89: bd:a3:06:a4:41:18:ec:e7:ae:b7:70:a5:a6:21:db: da:15:3d:21:cc:e2:70:62:8a:80:0b:0b:1b:b9:86: 47:89:a1:b2:c6:69:4c:a5:25:35:f4:24:47:ce:43: f5:70:c0:e5:1b:8f:8f:f0:46:53:0e:cb:5a:fb:ff: cb:2a:7a:eb:95:5b:95:3e:1c:8a:75:d4:0a:9a:5e: 7c:76:3d:70:df:6d:5e:b4:85:5b:ad:b9:1e:74:70: 2e:5d:f4:1f:ee:bc:c3:56:2b:a5:c6:9e:13:ef:88: 45:4c:65:53:a9:70:d4:26:1a:f6:40:3a:91:fa:ef: 9e:cb:08:65:b2:a7:e7:f2:82:59:d8:2b:ae:bb:dc: bf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2B:07:46:97:CB:8C:F5:F5:34:68:44:D4:2A:76:98:B9:16:2B:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/067de1fa-5fff-34ce-9863-9fc217b33a00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:d8:b8:45:52:34:3e:44:81:5e:72:4c:0f:f0:4d:bf:27:20: 45:4d:84:6d:cb:d4:ec:3a:58:fb:9b:42:72:b8:7d:a4:2b:f4: 29:3a:c0:15:5f:7b:e0:88:7e:53:28:80:6a:29:aa:f1:44:a3: ac:d7:a5:03:b0:ed:9f:14:03:e4:91:53:08:39:9c:e2:21:e9: 89:58:7b:1a:3b:7e:61:71:77:34:26:16:36:b7:8e:41:45:d2: 0d:c6:e5:40:32:c9:3c:e4:21:9d:36:ed:1d:da:dd:80:d7:a9: 13:53:8d:f5:ef:45:ad:4d:46:43:17:cf:a4:bb:16:c9:bb:7f: 3f:e0:9f:5c:a6:82:28:3f:07:a1:57:3e:18:3f:3a:77:08:19: 48:20:da:17:2b:fd:f9:41:c9:85:68:69:e9:3b:45:34:ed:4c: 85:79:3d:c6:8c:42:ba:00:2c:20:80:c6:f7:32:c2:f8:81:4b: 21:aa:bd:a7:f8:6d:05:50:6a:f9:5e:a8:1a:6a:83:31:89:2d: a7:49:00:41:54:d4:8d:23:e1:bf:81:06:b3:b7:d8:0a:25:fd: 84:94:7d:07:40:5e:5d:c4:2c:c7:a6:0c:4b:db:fc:71:58:6a: 5a:54:e2:7e:ba:12:64:ee:cb:50:e4:78:cb:9f:63:56:03:6d: 28:0a:d1:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2i/qdM3w0OHDYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NmYzMTIxZDQtODc4Ni00MzZhLTg0MTMtNzAxOWJmZDFkNWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZrRs9S8U0cnxm3afdk2k19Vu/jOto9ZUM9Y h0VtzEm68r1sOJV8sPCaCFfUqyHE5EcKOnSgOg639qJGVua/ZkvR6RdTyTPNxGMA S28KbgwpPvoBOOb+vDXR5NpAmC6NrRLVRug+/T+wUnpGF4eSyJSgASpzMom9owak QRjs5663cKWmIdvaFT0hzOJwYoqACwsbuYZHiaGyxmlMpSU19CRHzkP1cMDlG4+P 8EZTDsta+//LKnrrlVuVPhyKddQKml58dj1w321etIVbrbkedHAuXfQf7rzDViul xp4T74hFTGVTqXDUJhr2QDqR+u+eywhlsqfn8oJZ2Cuuu9y/VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkrB0aXy4z19TRoRNQqdpi5FiuBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDY3ZGUxZmEtNWZmZi0z NGNlLTk4NjMtOWZjMjE3YjMzYTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9y0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDYuEVSND5EgV5yTA/wTb8nIEVNhG3L1Ow6WPubQnK4faQr9Ck6wBVf e+CIflMogGopqvFEo6zXpQOw7Z8UA+SRUwg5nOIh6YlYexo7fmFxdzQmFja3jkFF 0g3G5UAyyTzkIZ027R3a3YDXqRNTjfXvRa1NRkMXz6S7Fsm7fz/gn1ymgig/B6FX Phg/OncIGUgg2hcr/flByYVoaek7RTTtTIV5PcaMQroALCCAxvcywviBSyGqvaf4 bQVQavleqBpqgzGJLadJAEFU1I0j4b+BBrO32Aol/YSUfQdAXl3ELMemDEvb/HFY alpU4n66EmTuy1DkeMufY1YDbSgK0Tk= -----END CERTIFICATE-----Generated at Thu Mar 26 03:46:47 2026 by rpki-client