$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2912cc37-3050-3a7b-be0a-b1c94d0af731.roa File: 2912cc37-3050-3a7b-be0a-b1c94d0af731.roa (raw, json) Hash identifier: 9njf0eJDUXwlGDB3kVHNuEkt7xS+MdXKQBsCfrlzlPo= Subject key identifier: D5:0D:8E:BF:55:0B:9D:60:25:41:B0:76:D8:58:77:9B:6D:27:F2:5E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1B1A5621F3794CCF19512BE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2912cc37-3050-3a7b-be0a-b1c94d0af731.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.209.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:56:21:f3:79:4c:cf:19:51:2b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=3f947973-ec16-4e76-bf50-94bf53c33e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e7:a2:66:97:44:d4:33:8a:3f:55:a9:9c:18: b6:8b:02:34:0b:bd:82:f6:fc:aa:ee:fc:92:91:f9: 1f:03:6a:f3:d7:84:45:8c:d8:bf:6d:76:f5:30:c9: 3b:e8:03:0d:46:2e:b3:9b:85:de:60:be:45:7e:35: a3:fe:c3:b5:44:04:6c:34:49:4c:eb:28:c6:1b:0a: f1:f6:af:49:56:47:23:24:ce:b0:28:ff:dd:b9:50: e3:2a:9f:be:6b:60:68:0b:10:be:64:93:db:54:c0: cf:8b:21:ce:1c:ae:44:0c:1f:1f:10:63:74:0c:43: 12:88:53:86:d1:db:4f:dc:3a:62:8e:5a:b0:8a:20: 1d:57:92:61:80:93:50:4a:d7:bc:28:7c:03:93:70: c9:61:ef:a7:00:3b:12:cc:02:84:78:63:42:bf:55: e3:e2:49:44:5c:71:99:59:b4:6b:ea:0d:77:0d:6d: c9:90:ab:4e:70:98:bc:6a:06:27:18:bf:e8:fe:5d: 72:e9:a7:65:d1:b4:99:49:77:58:eb:6c:36:f1:29: ad:a2:9c:00:e8:b5:96:69:15:07:7f:20:83:28:83: 91:1e:d6:75:71:48:5e:f5:05:d3:e5:75:e7:35:91: 31:24:a7:f4:6e:72:62:87:2c:68:2a:a1:bb:e3:a1: c5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0D:8E:BF:55:0B:9D:60:25:41:B0:76:D8:58:77:9B:6D:27:F2:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2912cc37-3050-3a7b-be0a-b1c94d0af731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:3f:b8:57:a7:13:2e:85:37:cb:fd:de:2c:c8:b9:03:71:47: 87:3d:6b:8a:74:e1:d5:1f:45:6b:11:9e:1e:26:35:b5:e5:c3: c9:da:94:c6:86:e3:9b:bb:82:20:9d:07:a5:fa:e1:57:69:ad: 4b:9a:37:a9:34:6e:fa:db:18:9f:f5:fc:ee:7d:89:b9:65:a8: 92:2e:86:9c:fd:e9:2f:1c:12:f9:9c:e3:a7:f5:f0:7c:ca:aa: f3:7d:50:20:4c:3f:d2:7c:d8:f7:cc:b3:a7:a7:8f:95:1b:75: b8:59:2a:d8:93:bc:34:a5:07:8c:7b:65:d8:d1:53:02:37:b6: bc:10:c8:b9:eb:33:5c:2c:59:9b:17:80:8b:94:fb:a9:8f:fa: f8:7b:fb:6a:81:ca:8e:fc:2b:92:72:73:bc:fe:52:bc:c2:72: 27:61:71:88:78:2a:93:36:b0:61:1c:3c:8f:75:15:2f:2f:32: 7a:06:ca:b6:58:88:5a:0f:d6:90:e8:bf:40:59:90:8e:61:70: 75:dc:29:af:89:7b:67:30:78:fe:e2:c8:7e:61:10:da:a6:a5: e1:56:59:a2:ea:fd:32:85:ba:04:8d:f5:07:f8:4d:91:71:e5: 6b:4f:c5:d4:e8:c1:2d:83:8c:19:a0:f2:ee:71:51:e4:16:b6: 86:a9:1d:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGlYh83lMzxlRK+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk M2Y5NDc5NzMtZWMxNi00ZTc2LWJmNTAtOTRiZjUzYzMzZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheeiZpdE1DOKP1WpnBi2iwI0C72C9vyq7vyS kfkfA2rz14RFjNi/bXb1MMk76AMNRi6zm4XeYL5FfjWj/sO1RARsNElM6yjGGwrx 9q9JVkcjJM6wKP/duVDjKp++a2BoCxC+ZJPbVMDPiyHOHK5EDB8fEGN0DEMSiFOG 0dtP3DpijlqwiiAdV5JhgJNQSte8KHwDk3DJYe+nADsSzAKEeGNCv1Xj4klEXHGZ WbRr6g13DW3JkKtOcJi8agYnGL/o/l1y6adl0bSZSXdY62w28SmtopwA6LWWaRUH fyCDKIORHtZ1cUhe9QXT5XXnNZExJKf0bnJihyxoKqG746HF5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUNjr9VC51gJUGwdthYd5ttJ/JeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjkxMmNjMzctMzA1MC0z YTdiLWJlMGEtYjFjOTRkMGFmNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAA/uFenEy6FN8v93izIuQNxR4c9a4p04dUfRWsRnh4mNbXlw8nalMaG 45u7giCdB6X64VdprUuaN6k0bvrbGJ/1/O59ibllqJIuhpz96S8cEvmc46f18HzK qvN9UCBMP9J82PfMs6enj5UbdbhZKtiTvDSlB4x7ZdjRUwI3trwQyLnrM1wsWZsX gIuU+6mP+vh7+2qByo78K5Jyc7z+UrzCcidhcYh4KpM2sGEcPI91FS8vMnoGyrZY iFoP1pDov0BZkI5hcHXcKa+Je2cweP7iyH5hENqmpeFWWaLq/TKFugSN9Qf4TZFx 5WtPxdTowS2DjBmg8u5xUeQWtoapHUg= -----END CERTIFICATE-----Generated at Thu Mar 26 03:53:04 2026 by rpki-client