$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d12df14-b2fd-3ea2-93a9-4ab07f163d28.roa File: 1d12df14-b2fd-3ea2-93a9-4ab07f163d28.roa (raw, json) Hash identifier: /sjKrRYWWDi6AVeIx5j3OZ2T4uomnjssZ4MqeghQFjM= Subject key identifier: 85:BA:9E:73:2D:6F:F1:F7:D8:37:A8:CA:85:7E:C5:64:50:38:3C:A7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1F4A28B5FF1214C2CC4A5F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d12df14-b2fd-3ea2-93a9-4ab07f163d28.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.215.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:28:b5:ff:12:14:c2:cc:4a:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=2355271f-2fca-4f33-8ff7-45b70502a896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0c:05:69:70:70:9b:fe:e0:f9:c1:ce:12:05: 42:3b:86:6f:95:9a:6c:1c:9e:c3:be:bf:79:0d:4f: ee:b3:12:7d:b7:9a:ad:13:fc:b5:93:3d:8d:78:82: 27:e6:17:95:b5:81:9f:0c:5c:8e:66:f6:f3:06:98: 91:1a:1d:eb:8d:f1:d4:cc:12:2d:41:a6:10:09:30: 91:e0:6e:e5:cf:de:d6:1b:cc:4d:9a:2a:26:03:ac: 47:dc:3a:b2:7c:d9:b5:ad:4d:d8:0d:61:e2:22:e7: 86:d9:ab:e7:94:f9:91:72:b8:a4:c5:9e:1e:56:84: 34:a9:cc:07:5a:3d:a0:76:db:80:33:73:7b:74:85: b2:fd:31:bd:69:65:42:71:9e:02:5a:9b:74:ba:8b: eb:1f:68:49:63:e3:8a:37:ab:bc:ad:57:f6:82:e0: 68:e0:14:ea:48:34:ec:b4:70:a8:0e:61:cd:ed:49: ed:f2:95:27:91:81:f5:10:98:50:ea:e8:92:28:ee: 55:05:31:20:40:6d:6f:26:14:63:4b:92:ef:c4:80: 59:6f:8b:57:47:73:2e:5a:24:9a:2d:a5:62:4a:a0: ce:38:76:18:a9:b2:2e:79:c3:20:66:20:48:23:19: 2f:2d:70:3d:85:ac:d3:ae:16:34:6f:ff:31:42:cf: 09:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BA:9E:73:2D:6F:F1:F7:D8:37:A8:CA:85:7E:C5:64:50:38:3C:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d12df14-b2fd-3ea2-93a9-4ab07f163d28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b4:8c:2d:13:86:59:fa:58:48:8b:a1:55:c0:10:76:33:bf: 8d:b1:9b:6e:97:c9:51:2e:4f:93:6f:03:8a:fd:87:d9:47:6c: 38:07:c1:15:b1:9b:fc:0a:e5:28:43:a4:37:14:e3:dc:a8:95: ec:06:73:fc:66:6f:44:c2:a2:71:27:7a:06:44:08:02:a2:d9: 90:59:67:80:bd:4b:07:33:48:03:d0:45:1b:a6:3b:25:05:5f: 16:b8:7d:03:64:7c:97:1e:e8:c9:79:3e:3f:18:b3:65:46:24: 0a:08:e3:83:8a:4f:ee:7b:36:1e:3a:c2:b2:32:a1:22:7b:46: 85:75:70:99:32:a2:59:88:18:ab:d5:4a:5c:19:61:cf:50:f1: 49:b5:d7:61:fd:37:6a:0b:20:3c:79:09:a2:af:f9:10:bc:af: 8c:41:fe:95:db:3c:df:c5:30:2e:30:33:91:8e:d4:23:46:8d: 11:2b:ab:af:71:38:64:be:49:e9:67:f5:37:f6:f0:ea:71:50: 34:94:49:bf:75:e4:dd:6f:05:f2:86:3c:1f:87:24:0e:77:37: fb:f7:1b:7e:ca:d3:41:9d:be:7d:1e:88:85:d5:d4:6a:f9:cc: 25:53:3c:35:5a:45:b0:86:7f:1c:b7:15:1d:e5:b6:dc:d0:d5: 25:cb:bf:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSii1/xIUwsxKX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MjM1NTI3MWYtMmZjYS00ZjMzLThmZjctNDViNzA1MDJhODk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAwFaXBwm/7g+cHOEgVCO4ZvlZpsHJ7Dvr95 DU/usxJ9t5qtE/y1kz2NeIIn5heVtYGfDFyOZvbzBpiRGh3rjfHUzBItQaYQCTCR 4G7lz97WG8xNmiomA6xH3DqyfNm1rU3YDWHiIueG2avnlPmRcrikxZ4eVoQ0qcwH Wj2gdtuAM3N7dIWy/TG9aWVCcZ4CWpt0uovrH2hJY+OKN6u8rVf2guBo4BTqSDTs tHCoDmHN7Unt8pUnkYH1EJhQ6uiSKO5VBTEgQG1vJhRjS5LvxIBZb4tXR3MuWiSa LaViSqDOOHYYqbIuecMgZiBIIxkvLXA9hazTrhY0b/8xQs8JBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIW6nnMtb/H32DeoyoV+xWRQODynMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWQxMmRmMTQtYjJmZC0z ZWEyLTkzYTktNGFiMDdmMTYzZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9dwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABq0jC0Thln6WEiLoVXAEHYzv42xm26XyVEuT5NvA4r9h9lHbDgHwRWx m/wK5ShDpDcU49yolewGc/xmb0TConEnegZECAKi2ZBZZ4C9SwczSAPQRRumOyUF Xxa4fQNkfJce6Ml5Pj8Ys2VGJAoI44OKT+57Nh46wrIyoSJ7RoV1cJkyolmIGKvV SlwZYc9Q8Um112H9N2oLIDx5CaKv+RC8r4xB/pXbPN/FMC4wM5GO1CNGjRErq69x OGS+Seln9Tf28OpxUDSUSb915N1vBfKGPB+HJA53N/v3G37K00Gdvn0eiIXV1Gr5 zCVTPDVaRbCGfxy3FR3lttzQ1SXLv8w= -----END CERTIFICATE-----Generated at Thu Mar 26 07:04:08 2026 by rpki-client