$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aa62e02-af27-329c-951f-b7bee0b1db13.roa File: 4aa62e02-af27-329c-951f-b7bee0b1db13.roa (raw, json) Hash identifier: gYdN564KdiuENAuwRj/g2Pb22wLVIBDdMsEAhSLuCM4= Subject key identifier: AC:49:0B:E9:46:8D:32:85:84:C2:AD:33:26:68:43:AB:4C:A6:42:FF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D0912AF29BA4849D58418E880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aa62e02-af27-329c-951f-b7bee0b1db13.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 16625 IP address blocks: 23.202.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:af:29:ba:48:49:d5:84:18:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=ea0df990-30e6-47af-af4b-790e1c6196e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2c:60:1c:6c:bb:6a:c3:53:e5:5f:a6:6a:b5: 18:96:0b:c0:9e:bd:56:47:c6:e5:dd:93:44:7c:79: 96:34:e2:64:81:9f:95:b5:f6:d1:64:f1:8b:7d:73: 47:99:2e:0a:eb:63:19:8d:51:0d:62:b6:a5:cf:10: 81:12:a4:3a:54:ca:e5:78:f6:7c:b7:23:59:a7:92: 5b:06:b3:c7:ad:57:e4:ec:da:a0:4e:55:5d:4a:7f: 2e:dc:7a:5a:f9:28:87:62:f0:54:d8:29:41:f1:ed: bb:cc:b4:e2:a7:25:87:cd:49:13:41:32:0c:44:11: b9:e4:fc:17:60:51:e5:07:03:71:58:2b:74:84:b1: bc:fd:c9:26:71:e0:45:59:c3:73:ca:84:2d:4b:59: 57:9a:06:19:bd:f6:54:6e:5e:ff:02:4d:47:f7:28: d2:d4:c7:6f:ed:d1:5f:2e:58:59:10:a9:b6:8e:dc: 54:cb:41:d2:a5:23:bf:a5:f1:d1:00:36:97:e4:64: ad:f2:81:45:e9:2a:7a:03:e5:59:3b:2a:5d:31:d4: 16:31:57:a1:73:e8:04:3d:c4:ff:b6:d0:74:bc:7b: 40:a9:19:37:75:4b:7f:ee:ba:6d:e1:ba:5e:66:71: e5:c4:da:b1:8a:dc:47:7c:2d:5d:c4:71:7b:a8:3d: d8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:49:0B:E9:46:8D:32:85:84:C2:AD:33:26:68:43:AB:4C:A6:42:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aa62e02-af27-329c-951f-b7bee0b1db13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:e9:01:32:f5:5e:41:d6:3d:15:cb:19:07:74:52:bc:2b:09: dc:8f:81:9f:7f:58:84:c6:16:49:d0:20:cd:6c:4b:37:20:17: 0a:c6:20:88:90:84:17:08:81:5a:b8:4c:72:91:76:07:5d:e1: 02:bb:22:39:24:6e:d3:ff:59:a4:3f:31:1d:b6:94:ea:27:e7: 5d:9f:e7:80:4e:c0:6d:21:36:f9:2d:4f:51:96:43:19:7b:5e: 94:e5:7e:07:2c:1e:4a:06:83:75:08:04:2e:c0:80:b2:ae:bf: bb:57:60:53:21:eb:08:16:6c:00:20:d2:a2:0f:8a:aa:2f:d8: c2:05:2d:fc:9f:ef:55:72:c8:c7:32:de:25:24:7a:f9:9c:d3: a6:2b:39:62:7d:62:84:87:07:02:d2:9c:92:63:eb:df:60:1b: 09:4c:89:02:e8:96:63:2b:45:45:34:a0:1f:ca:9c:99:40:8d: 13:af:f7:4d:9b:6e:5b:bd:86:4f:be:7b:1e:51:f7:c1:8b:b2: 5a:4f:4c:2c:b2:c9:57:b9:f3:a7:33:83:17:f1:8f:8a:b1:18: 81:9c:d1:d4:6d:a1:2a:92:5c:28:e9:60:b4:d3:74:f7:ed:77: e0:78:7f:e3:fe:af:36:a3:25:27:3c:20:b5:c0:1c:7c:6f:d3: a6:14:4f:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEq8pukhJ1YQY6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZWEwZGY5OTAtMzBlNi00N2FmLWFmNGItNzkwZTFjNjE5NmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArixgHGy7asNT5V+marUYlgvAnr1WR8bl3ZNE fHmWNOJkgZ+VtfbRZPGLfXNHmS4K62MZjVENYralzxCBEqQ6VMrlePZ8tyNZp5Jb BrPHrVfk7NqgTlVdSn8u3Hpa+SiHYvBU2ClB8e27zLTipyWHzUkTQTIMRBG55PwX YFHlBwNxWCt0hLG8/ckmceBFWcNzyoQtS1lXmgYZvfZUbl7/Ak1H9yjS1Mdv7dFf LlhZEKm2jtxUy0HSpSO/pfHRADaX5GSt8oFF6Sp6A+VZOypdMdQWMVehc+gEPcT/ ttB0vHtAqRk3dUt/7rpt4bpeZnHlxNqxitxHfC1dxHF7qD3YBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxJC+lGjTKFhMKtMyZoQ6tMpkL/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGFhNjJlMDItYWYyNy0z MjljLTk1MWYtYjdiZWUwYjFkYjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8qsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvpATL1XkHWPRXLGQd0UrwrCdyPgZ9/WITGFknQIM1sSzcgFwrGIIiQ hBcIgVq4THKRdgdd4QK7IjkkbtP/WaQ/MR22lOon512f54BOwG0hNvktT1GWQxl7 XpTlfgcsHkoGg3UIBC7AgLKuv7tXYFMh6wgWbAAg0qIPiqov2MIFLfyf71VyyMcy 3iUkevmc06YrOWJ9YoSHBwLSnJJj699gGwlMiQLolmMrRUU0oB/KnJlAjROv902b blu9hk++ex5R98GLslpPTCyyyVe586czgxfxj4qxGIGc0dRtoSqSXCjpYLTTdPft d+B4f+P+rzajJSc8ILXAHHxv06YUT3Q= -----END CERTIFICATE-----Generated at Thu Mar 26 03:43:32 2026 by rpki-client