$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c74c8c1-78af-36e7-a29f-1096fafbfcb3.roa File: 4c74c8c1-78af-36e7-a29f-1096fafbfcb3.roa (raw, json) Hash identifier: NkwhZhPa8BkJH5vXqV3ScQ+cbgCOE30b3XDI5jNzKXk= Subject key identifier: 54:99:F0:FB:25:83:EC:3E:A3:03:32:0B:8C:43:C6:E5:67:60:BF:72 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2BDA2BDF011E04E98492DE20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c74c8c1-78af-36e7-a29f-1096fafbfcb3.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.223.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:2b:df:01:1e:04:e9:84:92:de:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=28a203d9-6882-42f5-9e7d-8a3ed461e51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f5:30:2c:7b:41:86:2c:ae:76:a9:d6:3c:eb: f8:a4:bd:0c:cd:3c:10:29:dc:bc:76:c1:a2:b6:b7: 4e:4b:e5:de:a2:71:24:45:84:7f:67:3d:e5:4a:78: d1:4e:26:8c:2a:58:65:ac:66:81:a9:ba:11:49:ec: 3f:1e:93:05:5d:79:5e:0c:8e:aa:39:6e:71:58:b4: 08:26:e7:37:4f:fd:9d:71:9c:e3:b4:26:2b:19:80: 79:13:7a:20:2c:c9:97:1a:4a:02:cc:db:94:6d:23: 03:38:3b:20:94:68:3e:9d:97:9e:8d:ed:21:f2:38: 44:2c:aa:ec:b5:2b:82:9d:66:59:f7:b7:e7:9e:92: 6c:fe:28:8b:43:e1:b7:5a:cd:e2:7b:3f:4f:89:ed: 4d:66:07:f8:81:55:ec:10:2d:20:46:f6:1a:ff:55: ed:03:b2:98:ed:c7:af:80:4e:c4:3d:11:56:e2:0b: 9b:45:d6:9d:b2:05:12:eb:83:2a:2b:6c:bb:af:9e: 62:cc:83:0a:87:b4:82:39:2e:2d:de:24:1b:bc:30: 5c:37:f3:1e:1c:1e:ec:98:55:05:5c:9f:03:e8:4e: ae:be:ee:4e:1d:c3:68:1c:47:b2:70:ad:8f:96:af: d6:33:25:43:4e:50:d1:d0:8f:44:aa:13:3e:46:77: 84:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:99:F0:FB:25:83:EC:3E:A3:03:32:0B:8C:43:C6:E5:67:60:BF:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c74c8c1-78af-36e7-a29f-1096fafbfcb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:ca:bd:3f:ed:e1:aa:c0:0d:28:0b:d9:63:4a:f3:4b:be:20: 64:b0:2f:ec:c4:5d:ab:e5:ca:b1:fb:d6:c3:69:0a:de:b5:7b: 43:a1:09:08:a0:74:34:6a:44:b9:fc:60:fd:40:70:81:8b:44: 3d:8f:ef:9f:e9:ad:41:68:68:d2:e2:55:57:75:bd:a5:9c:a6: f9:2a:ae:2c:d1:9f:3f:f0:7a:9b:58:10:48:60:10:dc:34:a6: 1a:96:c9:e7:4d:32:8b:87:84:ec:fc:1d:0c:a8:da:7a:5f:e9: 37:36:81:4c:e7:90:c8:ef:09:e5:5f:29:5c:05:2d:cf:35:27: 81:b5:79:bf:88:3b:11:89:35:91:16:b8:f4:b8:f6:70:e2:c9: 4d:c9:5c:6a:f3:51:96:87:7a:9a:66:51:e2:b5:f7:43:f5:bf: d6:6e:5f:07:97:a7:df:9a:9d:5a:f4:27:28:34:c3:50:c6:2f: 7c:ba:13:29:e1:fc:5d:47:53:73:59:77:de:a0:d2:2d:e6:d8: 3b:db:d7:db:5e:3e:74:df:19:3a:7d:eb:93:0d:23:09:c0:f0: f9:36:3d:da:f8:9e:61:f2:15:96:0f:72:34:81:0f:61:aa:e6: 19:15:6b:7b:32:ce:73:2a:33:27:66:34:9f:1e:aa:bd:36:b7: c2:d6:0a:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2ivfAR4E6YSS3iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MjhhMjAzZDktNjg4Mi00MmY1LTllN2QtOGEzZWQ0NjFlNTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPUwLHtBhiyudqnWPOv4pL0MzTwQKdy8dsGi trdOS+XeonEkRYR/Zz3lSnjRTiaMKlhlrGaBqboRSew/HpMFXXleDI6qOW5xWLQI Juc3T/2dcZzjtCYrGYB5E3ogLMmXGkoCzNuUbSMDODsglGg+nZeeje0h8jhELKrs tSuCnWZZ97fnnpJs/iiLQ+G3Ws3iez9Pie1NZgf4gVXsEC0gRvYa/1XtA7KY7cev gE7EPRFW4gubRdadsgUS64MqK2y7r55izIMKh7SCOS4t3iQbvDBcN/MeHB7smFUF XJ8D6E6uvu5OHcNoHEeycK2Plq/WMyVDTlDR0I9EqhM+RneE4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSZ8Pslg+w+owMyC4xDxuVnYL9yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGM3NGM4YzEtNzhhZi0z NmU3LWEyOWYtMTA5NmZhZmJmY2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF980MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPKvT/t4arADSgL2WNK80u+IGSwL+zEXavlyrH71sNpCt61e0OhCQig dDRqRLn8YP1AcIGLRD2P75/prUFoaNLiVVd1vaWcpvkqrizRnz/weptYEEhgENw0 phqWyedNMouHhOz8HQyo2npf6Tc2gUznkMjvCeVfKVwFLc81J4G1eb+IOxGJNZEW uPS49nDiyU3JXGrzUZaHeppmUeK190P1v9ZuXweXp9+anVr0Jyg0w1DGL3y6Eynh /F1HU3NZd96g0i3m2Dvb19tePnTfGTp965MNIwnA8Pk2Pdr4nmHyFZYPcjSBD2Gq 5hkVa3syznMqMydmNJ8eqr02t8LWCm8= -----END CERTIFICATE-----Generated at Thu Mar 26 03:46:17 2026 by rpki-client