$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f70d0f0-5b6a-3172-bde5-d4700cc9f233.roa File: 0f70d0f0-5b6a-3172-bde5-d4700cc9f233.roa (raw, json) Hash identifier: pmM+gsmxEgbJNaB/hWHTth4t6RxI7eJHZA712mJQhXQ= Subject key identifier: 6F:FA:1C:2F:D7:CA:24:21:5E:A5:FD:E5:E8:CB:29:C8:E7:B3:F3:0F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D300A7F9AD48266F1B083BEF0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f70d0f0-5b6a-3172-bde5-d4700cc9f233.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 20940 IP address blocks: 23.32.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:7f:9a:d4:82:66:f1:b0:83:be:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=23c70a3b-93c2-4d41-89a9-18c2ad34a5b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:29:94:8a:37:b1:86:9e:0c:b9:66:2e:e4:83: a1:56:64:aa:37:54:38:28:6d:ef:95:6f:48:4d:1c: 1d:7f:2b:44:35:d7:17:62:3f:0f:b2:07:59:20:02: 7b:7c:81:04:ce:3c:55:2f:2f:07:e3:54:8b:62:42: f6:dc:f6:f5:6f:f1:4c:27:bb:69:94:eb:ae:71:81: b6:06:45:bb:07:b5:ac:7e:72:ea:f3:2a:08:12:e0: 2c:29:69:c8:60:94:8e:b5:6f:61:07:db:2c:77:5e: 5c:b2:41:85:ac:70:05:d6:4d:90:83:5c:b7:f1:1b: 54:63:54:2d:25:f6:d3:88:9a:42:3a:82:e1:b6:e7: f4:75:98:0d:d7:79:3c:87:db:6d:39:32:30:f7:81: fb:20:7e:53:67:02:52:15:29:76:17:d3:cf:b1:c1: c8:29:5b:e5:47:89:eb:8c:66:84:e5:b8:c5:9d:a8: e6:e0:39:4e:c1:d7:a6:fd:4c:11:37:69:42:02:c4: 40:71:79:be:e4:45:23:25:a4:86:33:5a:b9:d7:12: 7d:78:a1:e5:14:9e:92:a0:0c:78:3f:fa:2a:ce:81: 67:dd:1c:48:09:2a:93:ab:1d:3b:f9:44:2f:dd:37: f1:5e:cf:50:4d:4b:95:ff:f5:1a:ce:8b:8b:b8:99: e9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:FA:1C:2F:D7:CA:24:21:5E:A5:FD:E5:E8:CB:29:C8:E7:B3:F3:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f70d0f0-5b6a-3172-bde5-d4700cc9f233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a8:98:5d:0c:ac:d7:fa:01:79:a2:b6:7c:fa:a1:ee:b9:aa: 15:e2:36:01:4f:d6:d8:99:c4:87:12:18:bf:8f:20:05:f8:67: 42:12:be:2b:5b:57:3c:58:78:2e:2b:1f:bf:4d:b9:de:c6:89: 58:d6:6b:ea:b2:2d:1b:b7:7b:1d:5a:6f:a8:3a:ab:f3:89:ed: c4:ee:03:98:e3:a2:da:02:5a:2d:e0:ff:2f:34:9d:4d:0a:37: 58:f5:eb:53:48:26:0b:54:b0:7a:05:0a:26:1d:a4:53:0e:52: 89:5a:8a:3a:d0:a7:ac:a0:2f:0d:e5:0e:87:30:88:fd:b2:44: 02:4a:5b:ae:9f:9c:86:db:f4:45:85:7c:00:40:89:7d:cc:0c: aa:fe:67:f5:25:01:ad:0e:05:92:71:28:2d:dd:bc:13:69:16: 22:1a:c3:94:0b:cd:31:c1:6e:4b:95:cd:05:f7:27:4b:b4:d0: f2:87:89:d9:b2:f3:69:0d:42:57:b6:d0:87:81:ba:e8:fe:08: 69:f8:d9:fd:a2:f6:d0:c7:13:76:47:92:d2:f9:76:64:a2:8a: df:28:3f:e2:db:a1:56:1a:1c:a1:a9:92:4d:30:e9:00:dc:26: e1:8e:5d:f6:09:6f:93:a4:a4:2d:ce:3c:20:0a:6e:83:16:30: 12:a8:41:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCn+a1IJm8bCDvvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MjNjNzBhM2ItOTNjMi00ZDQxLTg5YTktMThjMmFkMzRhNWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCmUijexhp4MuWYu5IOhVmSqN1Q4KG3vlW9I TRwdfytENdcXYj8PsgdZIAJ7fIEEzjxVLy8H41SLYkL23Pb1b/FMJ7tplOuucYG2 BkW7B7WsfnLq8yoIEuAsKWnIYJSOtW9hB9ssd15cskGFrHAF1k2Qg1y38RtUY1Qt JfbTiJpCOoLhtuf0dZgN13k8h9ttOTIw94H7IH5TZwJSFSl2F9PPscHIKVvlR4nr jGaE5bjFnajm4DlOwdem/UwRN2lCAsRAcXm+5EUjJaSGM1q51xJ9eKHlFJ6SoAx4 P/oqzoFn3RxICSqTqx07+UQv3TfxXs9QTUuV//UazouLuJnp1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/6HC/XyiQhXqX95ejLKcjns/MPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGY3MGQwZjAtNWI2YS0z MTcyLWJkZTUtZDQ3MDBjYzlmMjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSomF0MrNf6AXmitnz6oe65qhXiNgFP1tiZxIcSGL+PIAX4Z0ISvitb VzxYeC4rH79Nud7GiVjWa+qyLRu3ex1ab6g6q/OJ7cTuA5jjotoCWi3g/y80nU0K N1j161NIJgtUsHoFCiYdpFMOUolaijrQp6ygLw3lDocwiP2yRAJKW66fnIbb9EWF fABAiX3MDKr+Z/UlAa0OBZJxKC3dvBNpFiIaw5QLzTHBbkuVzQX3J0u00PKHidmy 82kNQle20IeBuuj+CGn42f2i9tDHE3ZHktL5dmSiit8oP+LboVYaHKGpkk0w6QDc JuGOXfYJb5OkpC3OPCAKboMWMBKoQXI= -----END CERTIFICATE-----Generated at Thu Mar 26 03:46:55 2026 by rpki-client