$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40ab5e92-4f7b-31f9-868b-d483f9a7a152.roa File: 40ab5e92-4f7b-31f9-868b-d483f9a7a152.roa (raw, json) Hash identifier: IdW0gNAQjrfcc7a1aZjNxP/KhN9VJkpPAFCYdMT+fz0= Subject key identifier: FA:E3:85:01:A7:B9:16:B0:9B:10:5C:7B:F1:53:38:15:C5:74:7F:CB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D300A8FBB82619414049FE400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40ab5e92-4f7b-31f9-868b-d483f9a7a152.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 16625 IP address blocks: 23.43.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:8f:bb:82:61:94:14:04:9f:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=f47e31c0-c607-41e1-8930-9967f44d49a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c6:97:3c:86:80:01:fa:c5:7f:dd:3b:72:c1: 6d:1c:58:28:fb:4a:b1:41:e9:f8:95:fc:2d:b2:d4: 1d:1c:e8:f0:d4:df:ac:b1:38:97:c3:3e:29:e8:ef: 86:0b:77:62:40:0e:b2:68:0f:39:e3:89:91:96:7e: 78:29:d2:0b:2e:e5:fd:37:55:10:ff:3e:f6:68:bf: c9:1a:d3:89:a1:b5:12:31:3c:93:77:77:9a:a7:4c: 46:fc:02:c1:db:64:03:d6:60:b2:04:a3:c9:88:4f: 7e:62:4d:35:00:c4:93:91:84:64:1b:ef:0b:8b:9b: 56:f8:e5:a1:a1:c8:9a:b3:f7:31:af:53:4e:48:91: b9:69:54:03:5f:3e:6a:a3:f9:08:bc:d4:f6:49:11: 84:d1:54:da:27:08:19:19:aa:60:51:ae:75:97:90: 37:75:39:20:ce:87:4f:98:9e:46:81:58:46:6e:7f: 66:bb:78:02:2b:06:57:1c:f8:43:38:70:fd:2f:1d: fb:65:77:9b:5d:14:74:76:8d:12:37:92:ee:48:1e: 46:17:dd:85:0f:02:6e:f8:c9:4d:18:c0:40:db:ca: 3d:83:05:ba:1b:52:55:4d:5d:15:e8:35:9e:9f:92: 3c:50:f5:4b:a6:3b:36:22:ba:03:08:a7:95:7c:30: 25:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E3:85:01:A7:B9:16:B0:9B:10:5C:7B:F1:53:38:15:C5:74:7F:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40ab5e92-4f7b-31f9-868b-d483f9a7a152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:2b:f2:88:5c:a5:f0:83:fe:a4:6d:e8:47:30:6e:7d:fe:a8: c3:fa:e6:4f:5e:d8:d4:7a:31:65:2c:66:2e:6a:ac:05:9f:8f: b1:cb:ed:50:b4:bf:d1:19:a3:a8:11:80:e1:b6:e4:3a:cd:13: a3:4b:42:3b:de:ae:bb:44:08:f8:4e:a4:14:31:f2:99:1d:e0: 93:84:61:ee:b9:6d:c2:69:cb:2e:d4:cd:eb:31:56:dd:e4:e2: 15:2c:dd:78:5c:6a:03:cb:0b:27:db:10:6f:64:85:8f:b3:f8: db:f3:ca:a7:91:6c:43:e8:1c:b7:36:eb:bc:4a:fd:d5:35:89: f2:6e:38:eb:12:80:fb:1e:b5:bc:b0:70:99:d9:74:a4:1f:5a: 9a:f4:a0:9c:59:a3:47:a9:a2:64:a6:c7:79:81:eb:63:7d:5f: a6:4c:ed:1a:fd:02:b9:de:f8:3e:f8:8f:2f:09:0f:c8:c8:e3: 30:c1:f3:13:fd:f5:02:61:a8:6f:d9:69:c9:88:29:1f:2e:c1: cb:2a:d0:79:61:bf:0b:3d:96:8b:96:df:1a:0d:b3:60:05:89: 5b:bf:d0:bb:05:f4:60:97:91:41:9a:e1:3a:74:3b:99:d9:b6: f9:70:07:80:ba:d8:06:44:22:9f:ba:03:15:fa:ae:19:21:17: dd:53:68:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCo+7gmGUFASf5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZjQ3ZTMxYzAtYzYwNy00MWUxLTg5MzAtOTk2N2Y0NGQ0OWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8aXPIaAAfrFf907csFtHFgo+0qxQen4lfwt stQdHOjw1N+ssTiXwz4p6O+GC3diQA6yaA8544mRln54KdILLuX9N1UQ/z72aL/J GtOJobUSMTyTd3eap0xG/ALB22QD1mCyBKPJiE9+Yk01AMSTkYRkG+8Li5tW+OWh ocias/cxr1NOSJG5aVQDXz5qo/kIvNT2SRGE0VTaJwgZGapgUa51l5A3dTkgzodP mJ5GgVhGbn9mu3gCKwZXHPhDOHD9Lx37ZXebXRR0do0SN5LuSB5GF92FDwJu+MlN GMBA28o9gwW6G1JVTV0V6DWen5I8UPVLpjs2IroDCKeVfDAl0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrjhQGnuRawmxBce/FTOBXFdH/LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDBhYjVlOTItNGY3Yi0z MWY5LTg2OGItZDQ4M2Y5YTdhMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4r8ohcpfCD/qRt6Ecwbn3+qMP65k9e2NR6MWUsZi5qrAWfj7HL7VC0 v9EZo6gRgOG25DrNE6NLQjverrtECPhOpBQx8pkd4JOEYe65bcJpyy7UzesxVt3k 4hUs3XhcagPLCyfbEG9khY+z+NvzyqeRbEPoHLc267xK/dU1ifJuOOsSgPsetbyw cJnZdKQfWpr0oJxZo0epomSmx3mB62N9X6ZM7Rr9Arne+D74jy8JD8jI4zDB8xP9 9QJhqG/ZacmIKR8uwcsq0Hlhvws9louW3xoNs2AFiVu/0LsF9GCXkUGa4Tp0O5nZ tvlwB4C62AZEIp+6AxX6rhkhF91TaAc= -----END CERTIFICATE-----Generated at Thu Mar 26 03:44:10 2026 by rpki-client