$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f20c314-9626-37ad-ae50-b0f60b950a06.roa File: 4f20c314-9626-37ad-ae50-b0f60b950a06.roa (raw, json) Hash identifier: kkMfjP7Zzhje6bXBNWdFsf6egiNU0vlyk+vd/2o7QGk= Subject key identifier: 77:1F:2E:82:C4:55:26:95:06:08:0B:59:84:EB:7B:E1:5D:63:19:15 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2BDA271AC00B08EA465CC300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f20c314-9626-37ad-ae50-b0f60b950a06.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.220.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:27:1a:c0:0b:08:ea:46:5c:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=d32883b3-ebda-44e6-b838-676af2e14bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:5e:21:b5:7a:92:6b:17:a2:55:0b:9c:2e: f0:67:36:6f:9e:2c:e7:6a:2e:7b:6d:89:03:b7:77: 68:cf:9f:51:e3:dd:fc:e4:e2:b9:b4:01:f2:94:7c: 14:00:37:b0:75:c9:c3:25:9e:8f:65:9f:c4:ef:89: 5b:3a:96:52:6c:04:d9:4f:96:f4:c3:95:ce:c9:29: 29:b6:39:92:ce:ad:ca:22:91:0b:b6:df:c3:c7:22: 00:1b:a7:53:f0:7b:3c:e9:45:7c:00:83:e8:cd:bb: e6:49:b2:3e:89:95:e9:9e:e4:e0:f8:98:b1:42:24: b6:4f:6f:a8:cb:0e:16:01:33:ac:14:63:39:5e:11: 94:74:b3:03:c1:eb:32:ef:51:ba:39:66:60:7d:bb: 7f:0f:4a:bc:85:a6:27:15:22:65:30:ea:3d:42:fc: 1e:c4:45:32:8e:85:9b:b2:1c:f6:62:40:20:12:d4: 74:e4:3e:cf:43:13:ed:0f:6d:60:a2:e5:44:a7:bf: b9:91:0d:b7:34:68:7e:20:b4:e0:3f:53:51:1c:1e: cb:9f:f9:5a:6f:e2:ca:22:a2:62:f9:a0:98:18:9d: 65:4e:6f:6f:3a:23:78:d0:24:e4:72:b8:d5:c5:18: 98:5c:50:df:26:f0:5b:ab:5b:c5:69:ac:bf:54:0f: 3c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1F:2E:82:C4:55:26:95:06:08:0B:59:84:EB:7B:E1:5D:63:19:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f20c314-9626-37ad-ae50-b0f60b950a06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:3c:cd:8b:1e:3c:f5:ce:b0:36:77:dc:3b:0f:14:1c:13:e7: ca:3f:9a:8b:97:a6:fb:5e:92:aa:ab:8a:dc:20:75:90:c5:c1: 9a:28:05:74:33:fc:df:b1:db:f0:13:d8:99:c5:8c:73:0c:43: 76:3b:61:04:8f:4f:5c:62:75:fe:b5:5e:44:f1:62:b2:fe:64: e5:45:15:50:eb:2c:11:d8:dc:d5:ed:0d:aa:8e:db:f7:ad:4f: 7a:59:53:86:54:10:be:bf:e3:36:23:8d:cc:bf:ec:77:48:d5: 00:1c:ed:5f:de:c4:88:aa:b7:4b:43:1a:e4:15:14:36:45:bc: 86:42:a8:a6:10:e8:ba:c4:f5:4f:38:83:26:69:c7:a9:3e:f3: cb:09:ef:77:dd:a7:0a:96:17:dd:5b:7a:1c:24:79:bb:f7:31: f0:81:eb:38:c5:04:3d:21:f7:6f:1e:4b:b6:0b:db:03:c3:04: 33:af:93:76:e4:81:cd:a2:5a:0d:e8:eb:20:79:b3:cc:51:5f: e5:28:47:73:45:f8:ce:8d:9c:a3:17:65:10:08:ae:f8:c6:f8: bb:d0:17:89:88:b5:f9:48:5c:de:17:78:9a:f4:69:34:60:26: 43:3e:d7:7b:a9:d3:dd:f4:f4:a8:ee:e6:6e:33:5c:4f:23:69: d8:e4:bf:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2icawAsI6kZcwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZDMyODgzYjMtZWJkYS00NGU2LWI4MzgtNjc2YWYyZTE0YmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRBeIbV6kmsXolULnC7wZzZvniznai57bYkD t3doz59R49385OK5tAHylHwUADewdcnDJZ6PZZ/E74lbOpZSbATZT5b0w5XOySkp tjmSzq3KIpELtt/DxyIAG6dT8Hs86UV8AIPozbvmSbI+iZXpnuTg+JixQiS2T2+o yw4WATOsFGM5XhGUdLMDwesy71G6OWZgfbt/D0q8haYnFSJlMOo9QvwexEUyjoWb shz2YkAgEtR05D7PQxPtD21gouVEp7+5kQ23NGh+ILTgP1NRHB7Ln/lab+LKIqJi +aCYGJ1lTm9vOiN40CTkcrjVxRiYXFDfJvBbq1vFaay/VA88zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcfLoLEVSaVBggLWYTre+FdYxkVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGYyMGMzMTQtOTYyNi0z N2FkLWFlNTAtYjBmNjBiOTUwYTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9xqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFg8zYsePPXOsDZ33DsPFBwT58o/mouXpvtekqqritwgdZDFwZooBXQz /N+x2/AT2JnFjHMMQ3Y7YQSPT1xidf61XkTxYrL+ZOVFFVDrLBHY3NXtDaqO2/et T3pZU4ZUEL6/4zYjjcy/7HdI1QAc7V/exIiqt0tDGuQVFDZFvIZCqKYQ6LrE9U84 gyZpx6k+88sJ73fdpwqWF91behwkebv3MfCB6zjFBD0h928eS7YL2wPDBDOvk3bk gc2iWg3o6yB5s8xRX+UoR3NF+M6NnKMXZRAIrvjG+LvQF4mItflIXN4XeJr0aTRg JkM+13up09309Kju5m4zXE8jadjkv4c= -----END CERTIFICATE-----Generated at Thu Mar 26 03:48:53 2026 by rpki-client