$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4fe19fca-ef52-3747-ae34-a1c6ab21d966.roa File: 4fe19fca-ef52-3747-ae34-a1c6ab21d966.roa (raw, json) Hash identifier: w9kCl+C3DMnWoHV35J8DbgCsbgCrvTyTsz9bMAKNMxw= Subject key identifier: B9:A4:F8:CD:0F:56:F6:22:DA:97:7E:B3:AD:28:79:69:E9:12:60:3D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2BDA352C741B38B8541846A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4fe19fca-ef52-3747-ae34-a1c6ab21d966.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.223.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:35:2c:74:1b:38:b8:54:18:46:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=5b4b26da-30eb-41d7-b771-c3509475c2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c6:b1:38:a6:34:80:86:a0:96:c9:bc:aa:88: 2f:9d:89:cf:e8:bd:9a:7d:56:e1:dc:0f:ca:21:fa: 4e:c2:f9:cf:9b:34:35:0d:78:90:bf:5f:c0:07:9a: 24:b8:fb:a9:f1:d4:8b:8a:36:ff:5f:70:af:45:46: 40:3e:79:6e:91:0e:18:32:e5:ac:25:09:04:23:30: 58:d9:a7:e2:63:be:fd:d0:ca:24:32:30:6d:27:28: 89:1f:b2:5c:00:d9:71:15:05:24:75:31:07:a3:76: 7b:c8:74:1e:58:93:ce:7e:67:2d:6a:7e:83:d9:0d: 1c:69:46:e7:8c:91:83:94:1b:32:76:24:23:da:e9: 98:4b:70:cb:6d:70:04:e0:08:9b:54:a5:9d:bd:37: 5e:25:5d:ed:01:d2:f0:ec:8d:65:52:11:83:95:bc: ab:ca:75:45:9a:95:e4:65:24:82:42:8d:62:ea:a3: 5e:ce:bb:4a:e6:6f:08:08:55:4d:6a:6f:0a:9f:94: f2:9a:9a:af:eb:d4:c4:c9:20:54:f9:14:fe:cc:17: c9:b3:cc:b2:b6:2e:f9:e2:97:fa:80:5c:25:23:79: cc:e7:04:f5:a4:b9:d5:22:0a:b7:09:6b:27:a1:38: c1:68:9c:bb:88:cd:54:65:5f:7b:2b:54:a4:97:51: a0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A4:F8:CD:0F:56:F6:22:DA:97:7E:B3:AD:28:79:69:E9:12:60:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4fe19fca-ef52-3747-ae34-a1c6ab21d966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:62:80:4b:f4:fe:13:44:7b:77:c6:f9:9d:cd:89:28:e1:d3: 2a:fc:d9:11:43:65:e9:21:6f:4c:1e:af:20:b5:df:f2:b4:b1: 3c:e1:ad:69:d8:3d:bf:dc:10:42:91:d3:bc:58:fb:3a:57:22: 69:8f:e1:7c:ae:e8:17:c3:25:7b:e9:2c:d4:f9:ec:9d:43:7d: 13:44:69:61:97:7d:dd:c0:47:18:28:2d:01:bf:9f:55:8c:c9: f2:51:56:2e:e1:73:b9:0b:4d:5b:e0:36:53:dc:08:80:2f:ef: 91:0b:2d:6d:b8:91:65:13:ba:12:de:e9:c7:39:4b:65:40:a2: 49:eb:bf:bd:a6:3f:fe:64:e4:f8:07:90:53:c5:93:51:48:cf: ab:94:ff:45:02:fa:d3:b5:13:92:ee:fd:b6:07:88:af:d5:3a: f7:26:bf:93:3e:ba:c8:27:a6:26:0a:0e:2c:1b:0b:23:55:77: 79:ec:de:ac:80:29:3e:63:06:e9:57:7d:bd:50:df:36:11:2d: 81:ba:71:29:1c:7a:b0:7e:2b:a3:7c:18:4a:e2:4f:05:77:cc: b3:9d:34:45:7e:94:4e:81:7d:f7:57:33:b2:4d:fa:b4:fd:77: 0f:d9:1e:59:4b:ff:9a:51:30:8f:a0:1a:0e:bc:1c:35:82:1f: 59:8c:f3:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jUsdBs4uFQYRqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NWI0YjI2ZGEtMzBlYi00MWQ3LWI3NzEtYzM1MDk0NzVjMmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8axOKY0gIaglsm8qogvnYnP6L2afVbh3A/K IfpOwvnPmzQ1DXiQv1/AB5okuPup8dSLijb/X3CvRUZAPnlukQ4YMuWsJQkEIzBY 2afiY7790MokMjBtJyiJH7JcANlxFQUkdTEHo3Z7yHQeWJPOfmctan6D2Q0caUbn jJGDlBsydiQj2umYS3DLbXAE4AibVKWdvTdeJV3tAdLw7I1lUhGDlbyrynVFmpXk ZSSCQo1i6qNezrtK5m8ICFVNam8Kn5Tympqv69TEySBU+RT+zBfJs8yyti754pf6 gFwlI3nM5wT1pLnVIgq3CWsnoTjBaJy7iM1UZV97K1Skl1GgHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmk+M0PVvYi2pd+s60oeWnpEmA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGZlMTlmY2EtZWY1Mi0z NzQ3LWFlMzQtYTFjNmFiMjFkOTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9/DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFigEv0/hNEe3fG+Z3NiSjh0yr82RFDZekhb0weryC13/K0sTzhrWnY Pb/cEEKR07xY+zpXImmP4Xyu6BfDJXvpLNT57J1DfRNEaWGXfd3ARxgoLQG/n1WM yfJRVi7hc7kLTVvgNlPcCIAv75ELLW24kWUTuhLe6cc5S2VAoknrv72mP/5k5PgH kFPFk1FIz6uU/0UC+tO1E5Lu/bYHiK/VOvcmv5M+usgnpiYKDiwbCyNVd3ns3qyA KT5jBulXfb1Q3zYRLYG6cSkcerB+K6N8GEriTwV3zLOdNEV+lE6BffdXM7JN+rT9 dw/ZHllL/5pRMI+gGg68HDWCH1mM8zc= -----END CERTIFICATE-----Generated at Thu Mar 26 03:54:08 2026 by rpki-client