$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0de09fbb-39ff-3c57-bba7-8f3508fed946.roa File: 0de09fbb-39ff-3c57-bba7-8f3508fed946.roa (raw, json) Hash identifier: QG9n7+zbsyRr+1sX0uZOgVyPVk/Ei7XRCsovopLFVZ8= Subject key identifier: E4:56:C6:8C:DC:05:DB:D8:30:16:35:24:D1:02:44:E1:4F:38:FA:65 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2BDA316E95CD4F9F15CD0E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0de09fbb-39ff-3c57-bba7-8f3508fed946.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 12400 IP address blocks: 23.221.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:31:6e:95:cd:4f:9f:15:cd:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=a8d3f1e0-3330-43a0-9d03-0f7b56e9b3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:54:75:b6:11:00:1a:c9:ee:d6:2a:69:af:7f: d7:4e:45:f3:15:d6:03:d7:96:eb:47:42:36:94:10: be:3d:28:63:09:c7:b4:fa:1d:2e:53:1d:91:0d:05: 84:0d:48:05:0a:b2:1b:94:d0:46:56:d0:38:bb:79: 91:d1:64:cc:d7:d4:ee:6f:02:33:39:d6:87:fa:4d: 6e:0e:d8:eb:22:c2:39:8f:e4:2c:5a:c1:69:0a:ec: a6:a2:04:0b:d8:0c:bc:ea:30:ef:7e:71:51:e0:cf: f0:9a:c2:32:fd:13:7c:66:e8:fb:c6:07:98:64:75: b9:bf:16:ae:13:e1:15:0f:95:e9:b8:05:c8:07:94: d2:d3:07:8c:be:d3:9d:61:3d:a8:a2:7b:1f:98:32: 40:03:1a:80:a3:75:99:ff:4c:6b:14:9d:e1:d9:8d: dd:95:fa:4c:07:35:58:b2:dd:dc:c2:3e:31:50:f4: 64:e0:d5:80:0c:c9:6b:30:e0:fd:52:1b:bd:d6:68: 7b:63:16:7b:bb:2a:eb:1e:97:2e:06:bd:30:41:7d: bc:69:9f:46:0e:68:3e:e7:1e:9a:16:8b:6c:1a:a2: 89:85:58:fc:16:63:f9:1b:8b:76:8d:61:79:6c:5e: f5:04:2d:a4:df:27:75:62:e1:ae:af:95:94:e6:c1: 83:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:56:C6:8C:DC:05:DB:D8:30:16:35:24:D1:02:44:E1:4F:38:FA:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0de09fbb-39ff-3c57-bba7-8f3508fed946.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:5e:3e:7d:34:77:3f:80:90:b9:77:ff:53:af:b3:32:f4:77: 22:6b:12:ae:f3:d3:e4:cd:e8:d8:bd:f5:29:72:50:a9:50:25: a9:cc:cd:1b:be:af:95:41:83:5b:cb:18:81:a8:97:10:a3:60: 1c:83:00:3c:a8:74:a7:51:58:0d:07:7b:52:37:e6:3c:b9:53: ab:c3:11:ed:ad:e5:cc:dc:5a:be:ee:a1:30:4f:e1:4c:98:5e: 5a:45:3e:66:8e:60:ca:f6:a0:f7:8a:e6:20:ed:d3:d4:38:49: 64:03:90:91:e7:e9:2e:35:0d:8c:f8:3c:e7:5c:0b:dd:13:63: ca:76:c4:30:b7:e9:f8:a2:f5:cb:a0:70:84:60:9f:a6:7a:e5: e9:8c:63:c7:f0:37:d4:8a:94:0b:95:96:56:13:45:87:9f:22: 4c:af:c9:06:7f:9b:c9:e5:21:4a:96:5f:21:51:0a:f3:96:79: 5b:64:eb:c2:e7:ef:0e:5e:e3:f7:f5:d2:dd:cc:e1:e1:30:f6: 77:f2:9e:a4:c2:2f:70:8e:f2:0a:89:35:2a:75:51:db:e3:bb: 4b:8c:e0:bf:57:7f:2a:f3:e2:8a:2c:f1:24:d4:b5:e0:4d:77: 3b:42:a7:c5:50:57:17:24:c5:a3:28:88:2a:72:c9:51:f7:dd: c8:93:9f:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jFulc1PnxXNDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YThkM2YxZTAtMzMzMC00M2EwLTlkMDMtMGY3YjU2ZTliM2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lR1thEAGsnu1ippr3/XTkXzFdYD15brR0I2 lBC+PShjCce0+h0uUx2RDQWEDUgFCrIblNBGVtA4u3mR0WTM19TubwIzOdaH+k1u DtjrIsI5j+QsWsFpCuymogQL2Ay86jDvfnFR4M/wmsIy/RN8Zuj7xgeYZHW5vxau E+EVD5XpuAXIB5TS0weMvtOdYT2oonsfmDJAAxqAo3WZ/0xrFJ3h2Y3dlfpMBzVY st3cwj4xUPRk4NWADMlrMOD9Uhu91mh7YxZ7uyrrHpcuBr0wQX28aZ9GDmg+5x6a FotsGqKJhVj8FmP5G4t2jWF5bF71BC2k3yd1YuGur5WU5sGD+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORWxozcBdvYMBY1JNECROFPOPplMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGRlMDlmYmItMzlmZi0z YzU3LWJiYTctOGYzNTA4ZmVkOTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF90cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItePn00dz+AkLl3/1OvszL0dyJrEq7z0+TN6Ni99SlyUKlQJanMzRu+ r5VBg1vLGIGolxCjYByDADyodKdRWA0He1I35jy5U6vDEe2t5czcWr7uoTBP4UyY XlpFPmaOYMr2oPeK5iDt09Q4SWQDkJHn6S41DYz4POdcC90TY8p2xDC36fii9cug cIRgn6Z65emMY8fwN9SKlAuVllYTRYefIkyvyQZ/m8nlIUqWXyFRCvOWeVtk68Ln 7w5e4/f10t3M4eEw9nfynqTCL3CO8gqJNSp1Udvju0uM4L9Xfyrz4oos8STUteBN dztCp8VQVxckxaMoiCpyyVH33ciTn58= -----END CERTIFICATE-----Generated at Thu Mar 26 03:50:37 2026 by rpki-client