$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f79aa5e-085a-3045-8f44-71c539cdf499.roa File: 2f79aa5e-085a-3045-8f44-71c539cdf499.roa (raw, json) Hash identifier: 16dU0ReMXv9k9zi0vnXL64nTDusqIkpD9qb1kCCN8Wk= Subject key identifier: E8:F7:4C:03:BF:63:8F:07:E5:52:CE:78:3B:62:3A:AF:01:40:0B:D4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2BDA337BDC8500A2BA70FA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f79aa5e-085a-3045-8f44-71c539cdf499.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 16625 IP address blocks: 23.222.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:33:7b:dc:85:00:a2:ba:70:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=2e2a7aae-cbad-4194-8a0a-a33731ca4e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:88:f9:68:56:03:00:bf:0d:8b:6c:69:0c:c3: 03:38:09:c6:00:3d:30:b7:d4:5c:bf:51:a8:e7:73: bc:f4:d5:a7:d8:57:40:7a:81:56:4e:c3:60:45:ea: 69:d7:48:6e:61:22:66:ef:72:a9:43:7d:40:ca:6f: be:49:b4:f6:0a:0d:db:40:2f:7f:8f:cb:e0:88:ba: 7d:e7:1e:09:a4:47:28:b4:ea:b4:e6:36:e9:8a:73: e9:72:fc:6c:68:df:7c:78:7a:74:eb:c2:90:c6:ef: ea:30:0a:55:71:04:54:ea:fa:8d:89:fa:84:b2:45: 5a:31:34:37:20:8f:f7:c7:95:d4:4b:d8:f6:d5:57: 9b:aa:70:d5:86:d2:17:b3:72:2b:e0:cf:ea:ca:ce: c5:6b:7c:23:a7:07:5d:49:5f:e1:67:d2:f1:95:c6: 27:91:72:6d:cc:0c:3b:9f:4f:9c:af:17:bb:48:6d: 17:db:e3:71:88:20:16:2d:e6:42:9f:f6:cc:2a:c5: 80:84:35:19:61:bc:2a:a1:49:2b:f0:90:0e:30:ab: 57:41:c0:b2:66:fc:4c:16:65:63:00:67:79:99:d2: c9:87:cf:6c:c2:32:1e:9e:f3:46:db:f6:e6:d2:13: 74:7f:06:07:8d:8b:89:c7:f0:91:3d:1d:ec:11:20: 10:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F7:4C:03:BF:63:8F:07:E5:52:CE:78:3B:62:3A:AF:01:40:0B:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f79aa5e-085a-3045-8f44-71c539cdf499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:a5:58:40:27:53:2e:3a:90:66:f6:c5:bd:9a:d6:62:fa:88: b6:44:56:93:bc:e4:4b:2a:82:08:d3:1d:30:2c:7b:85:bf:0b: 93:0a:a1:50:87:ee:61:29:23:75:68:a1:06:73:a7:7e:a9:82: ff:ba:03:c5:75:36:dc:89:99:ac:32:ef:ad:f4:8c:f4:48:5a: 7d:54:92:86:80:b2:01:63:58:d7:3d:0f:5c:85:82:be:69:0a: 05:03:1f:e0:9f:20:e2:8c:1e:f2:b6:76:8e:98:65:30:66:3e: 81:c7:aa:d3:6b:e2:44:a7:64:9e:4d:9c:ea:36:18:6d:1c:5e: fc:35:9f:e0:bb:da:89:d8:f1:28:6e:ac:61:40:89:02:fc:24: 2e:c7:9b:be:d4:16:c4:c8:28:cf:1b:1e:c6:2a:64:0d:e9:f6: 5b:e0:98:27:6b:a4:c1:7c:4b:39:88:74:da:28:4e:22:5b:30: bd:9d:d5:70:d3:10:4f:0c:a9:85:54:5c:a6:3d:76:c9:c3:67: 2d:30:66:4a:a6:36:30:80:36:af:4d:73:53:e3:a6:93:7d:36: 67:ed:d8:46:9d:78:4a:72:98:b1:b1:db:d9:5d:00:c2:cf:9f: 24:65:90:b4:c3:79:f6:17:37:20:ab:fc:1b:a2:8e:01:43:10: a4:a5:f1:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jN73IUAorpw+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MmUyYTdhYWUtY2JhZC00MTk0LThhMGEtYTMzNzMxY2E0ZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYj5aFYDAL8Ni2xpDMMDOAnGAD0wt9Rcv1Go 53O89NWn2FdAeoFWTsNgRepp10huYSJm73KpQ31Aym++SbT2Cg3bQC9/j8vgiLp9 5x4JpEcotOq05jbpinPpcvxsaN98eHp068KQxu/qMApVcQRU6vqNifqEskVaMTQ3 II/3x5XUS9j21VebqnDVhtIXs3Ir4M/qys7Fa3wjpwddSV/hZ9LxlcYnkXJtzAw7 n0+crxe7SG0X2+NxiCAWLeZCn/bMKsWAhDUZYbwqoUkr8JAOMKtXQcCyZvxMFmVj AGd5mdLJh89swjIenvNG2/bm0hN0fwYHjYuJx/CRPR3sESAQnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOj3TAO/Y48H5VLOeDtiOq8BQAvUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmY3OWFhNWUtMDg1YS0z MDQ1LThmNDQtNzFjNTM5Y2RmNDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF95EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmlWEAnUy46kGb2xb2a1mL6iLZEVpO85EsqggjTHTAse4W/C5MKoVCH 7mEpI3VooQZzp36pgv+6A8V1NtyJmawy7630jPRIWn1UkoaAsgFjWNc9D1yFgr5p CgUDH+CfIOKMHvK2do6YZTBmPoHHqtNr4kSnZJ5NnOo2GG0cXvw1n+C72onY8Shu rGFAiQL8JC7Hm77UFsTIKM8bHsYqZA3p9lvgmCdrpMF8SzmIdNooTiJbML2d1XDT EE8MqYVUXKY9dsnDZy0wZkqmNjCANq9Nc1PjppN9Nmft2EadeEpymLGx29ldAMLP nyRlkLTDefYXNyCr/BuijgFDEKSl8WU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:54:23 2026 by rpki-client