$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24a2f576-65b4-35d1-979d-9071f575dab4.roa File: 24a2f576-65b4-35d1-979d-9071f575dab4.roa (raw, json) Hash identifier: 8UYOh0K7zv5b7VpLS779SC78RkK+KH051nbCE68Zze0= Subject key identifier: 84:55:F0:B5:05:07:88:87:F7:46:C9:DB:92:DB:15:24:DA:A0:3C:91 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1B1A554A3BD741C8453E4B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24a2f576-65b4-35d1-979d-9071f575dab4.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.209.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:55:4a:3b:d7:41:c8:45:3e:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=ae82a519-789e-4b30-8877-2fbfe31fbbe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:41:e2:0b:ee:cf:be:95:bc:e9:e4:9c:df:8d: 0d:62:a2:7a:22:ca:70:c2:60:15:eb:2f:34:a1:09: 94:00:7f:02:b8:61:7e:10:05:50:a7:0a:61:4d:ff: d1:53:a1:48:aa:c5:b2:d0:22:3f:78:9b:67:d5:b1: ac:8d:64:3a:48:37:21:b1:e8:9b:70:7d:3c:ec:b7: fb:ff:20:3d:e4:f8:4e:66:03:24:1d:51:5e:40:16: 29:1f:c4:0d:ee:29:b3:25:92:7f:6b:96:51:83:2d: cc:72:80:fd:9f:aa:a4:cf:11:d2:43:34:b1:d2:7a: 80:f6:20:58:c6:eb:e0:51:fe:75:51:92:6d:7f:13: 0e:52:61:7e:31:c9:d1:21:21:34:80:ac:b6:42:19: ae:a0:8a:c0:46:bc:58:5b:49:41:cd:bd:29:80:00: b4:a2:99:90:89:62:1b:c4:70:20:a7:29:3c:f8:30: 71:94:fd:bf:f7:14:58:70:ef:d3:0d:cb:a9:2c:0a: d5:ed:96:20:d6:b3:2c:f0:c0:a6:fe:1c:0a:07:32: 99:35:0b:00:ad:8f:6c:13:45:10:e9:bd:3c:ae:aa: bc:0a:f3:a4:bf:ee:8a:60:d4:2e:4c:20:18:2d:8e: 18:6c:ef:14:f1:93:5a:2b:42:3f:02:5b:6a:7c:50: bb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:55:F0:B5:05:07:88:87:F7:46:C9:DB:92:DB:15:24:DA:A0:3C:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24a2f576-65b4-35d1-979d-9071f575dab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:62:36:10:29:49:3b:b4:7b:02:31:e6:0d:f3:ed:7c:4d:e0: 37:42:8c:18:db:14:57:a1:ae:ac:2b:e8:b5:23:a5:e3:63:07: a2:47:0b:48:79:60:34:19:8b:78:ed:df:d0:a6:c3:0e:fd:7c: c5:be:b1:16:93:6a:89:3f:35:d8:f7:90:09:7c:d6:8f:4a:50: 6d:61:24:45:37:cc:f6:10:3d:8c:a8:4b:3a:0a:9d:90:9f:8f: 30:f0:6e:59:72:8e:5b:b6:2b:b4:bc:96:d6:af:e5:d9:d7:5c: a3:29:cd:c6:1d:df:52:d8:56:45:15:b4:80:0f:b6:86:e3:69: 14:83:f6:2b:3b:5a:f4:59:38:ca:fa:6b:75:3c:7d:4b:c1:80: 1e:9c:3e:68:b6:86:48:a4:15:5d:74:63:f3:39:13:17:a7:91: 11:a8:f8:31:be:01:f7:bb:b3:14:ea:10:da:24:cc:7c:38:ef: 0b:be:e2:21:85:65:4c:67:a0:a5:7e:01:63:77:00:d1:94:ce: 26:19:29:98:9f:02:49:ac:9d:ea:73:e5:5c:c0:f4:2e:cb:a3: 5a:03:7a:69:bd:7b:8e:0b:60:cc:34:89:44:f8:8c:7e:d8:95: 94:8c:af:57:19:8f:51:61:77:26:99:34:19:46:9a:34:47:63: d4:13:d6:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGlVKO9dByEU+S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YWU4MmE1MTktNzg5ZS00YjMwLTg4NzctMmZiZmUzMWZiYmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUHiC+7PvpW86eSc340NYqJ6IspwwmAV6y80 oQmUAH8CuGF+EAVQpwphTf/RU6FIqsWy0CI/eJtn1bGsjWQ6SDchseibcH087Lf7 /yA95PhOZgMkHVFeQBYpH8QN7imzJZJ/a5ZRgy3McoD9n6qkzxHSQzSx0nqA9iBY xuvgUf51UZJtfxMOUmF+McnRISE0gKy2QhmuoIrARrxYW0lBzb0pgAC0opmQiWIb xHAgpyk8+DBxlP2/9xRYcO/TDcupLArV7ZYg1rMs8MCm/hwKBzKZNQsArY9sE0UQ 6b08rqq8CvOkv+6KYNQuTCAYLY4YbO8U8ZNaK0I/AltqfFC7/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRV8LUFB4iH90bJ25LbFSTaoDyRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjRhMmY1NzYtNjViNC0z NWQxLTk3OWQtOTA3MWY1NzVkYWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ErMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZiNhApSTu0ewIx5g3z7XxN4DdCjBjbFFehrqwr6LUjpeNjB6JHC0h5 YDQZi3jt39Cmww79fMW+sRaTaok/Ndj3kAl81o9KUG1hJEU3zPYQPYyoSzoKnZCf jzDwbllyjlu2K7S8ltav5dnXXKMpzcYd31LYVkUVtIAPtobjaRSD9is7WvRZOMr6 a3U8fUvBgB6cPmi2hkikFV10Y/M5ExenkRGo+DG+Afe7sxTqENokzHw47wu+4iGF ZUxnoKV+AWN3ANGUziYZKZifAkmsnepz5VzA9C7Lo1oDemm9e44LYMw0iUT4jH7Y lZSMr1cZj1FhdyaZNBlGmjRHY9QT1tQ= -----END CERTIFICATE-----Generated at Thu Mar 26 03:46:50 2026 by rpki-client