$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c578fe7-fa39-36e1-bd77-8344aa43146d.roa File: 5c578fe7-fa39-36e1-bd77-8344aa43146d.roa (raw, json) Hash identifier: oNHtH6+9RCUhMHrJk8qPLycXyu7mD0sRmHN8n84C9sI= Subject key identifier: 18:5C:C3:1F:8E:D8:0D:31:AF:DE:0B:B3:85:8B:4A:EA:26:E2:62:37 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2A74CC8BA69999A09F63E2E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c578fe7-fa39-36e1-bd77-8344aa43146d.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 20940 IP address blocks: 23.219.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:cc:8b:a6:99:99:a0:9f:63:e2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=5da87f08-1f46-44d4-be7f-d701d0d9a66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d4:3d:0a:9e:e2:3d:a8:a3:bb:45:9c:ba:6d: b8:98:f1:a0:c1:46:3f:19:b8:be:91:f6:33:c1:e6: 71:4c:40:b8:98:a5:5c:e9:e8:23:7d:d1:19:ee:cb: 69:28:a7:ed:79:e8:53:8b:80:9c:c2:26:01:d7:24: 77:ca:9a:e6:16:30:b8:79:da:f6:be:37:3f:b4:ad: 38:69:eb:e1:9e:24:84:73:c9:bc:4f:e8:54:88:21: a1:c5:99:e9:90:8b:3e:47:82:b3:68:c0:b6:0b:73: 4c:49:44:c7:9f:e1:1a:22:2f:c9:60:6a:2b:7e:ad: f8:da:6c:70:69:70:aa:24:63:ef:9a:4f:96:bf:74: 61:02:cc:7e:82:fc:55:be:27:87:0f:1e:3f:6f:1b: 88:59:ef:7b:d9:47:8a:a8:10:99:97:82:56:cb:4e: ba:75:2b:b2:7e:34:5f:ee:42:29:e8:40:71:1f:cc: e4:88:b0:3d:15:cd:5b:65:a9:21:93:44:52:b2:0e: 84:76:78:0e:a1:f8:a4:71:0b:b0:c6:bb:57:3c:7f: 79:96:80:5a:d2:ea:c3:02:25:c3:d5:03:11:68:0e: a5:da:8a:ed:14:84:ae:6a:e0:73:7c:e8:25:d3:10: f1:d7:44:17:a1:95:b0:59:64:31:29:da:a4:52:90: cf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5C:C3:1F:8E:D8:0D:31:AF:DE:0B:B3:85:8B:4A:EA:26:E2:62:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c578fe7-fa39-36e1-bd77-8344aa43146d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d7:a3:dd:c0:5c:c5:a4:64:f3:80:f4:de:f2:be:35:00:8a: 34:60:bc:ff:1c:59:02:1f:58:b5:93:20:44:9a:a7:5d:0e:ad: b5:c8:c8:5b:38:b4:5a:41:f9:0a:7a:d1:ff:91:cd:a4:27:ce: 71:a7:fb:2c:12:f8:41:3c:86:2e:42:33:f1:99:a1:9d:35:ae: e3:36:fd:d8:ee:2e:49:a7:44:d7:dc:11:b0:a2:90:9e:32:69: 53:5a:9f:1b:93:12:4b:9e:11:95:64:c6:d5:4f:f6:ed:78:ad: f4:9a:b3:64:55:8e:28:97:d5:2d:67:e0:84:18:ad:ac:ce:ac: 5f:42:47:3e:d5:21:c4:f5:48:ef:8b:16:92:44:18:0f:b1:88: e3:7e:4a:c1:bf:92:dd:22:9e:01:b6:1e:1a:42:60:84:50:02: 35:23:c9:d4:15:96:b3:15:62:71:32:7a:6b:84:0b:00:df:6c: c0:fe:7b:bb:4f:96:56:eb:78:71:4a:64:6d:e7:b7:5a:2f:aa: bb:02:92:ed:b4:fd:27:20:f9:88:09:ef:87:1e:8a:00:de:a0: 36:cf:a9:0c:34:af:96:65:a1:51:f9:92:ff:18:86:42:c5:30: 34:5a:7a:86:68:40:df:20:5f:5e:81:bf:11:4f:9e:be:67:68: cc:86:e9:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdMyLppmZoJ9j4uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NWRhODdmMDgtMWY0Ni00NGQ0LWJlN2YtZDcwMWQwZDlhNjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdQ9Cp7iPaiju0Wcum24mPGgwUY/Gbi+kfYz weZxTEC4mKVc6egjfdEZ7stpKKfteehTi4CcwiYB1yR3yprmFjC4edr2vjc/tK04 aevhniSEc8m8T+hUiCGhxZnpkIs+R4KzaMC2C3NMSUTHn+EaIi/JYGorfq342mxw aXCqJGPvmk+Wv3RhAsx+gvxVvieHDx4/bxuIWe972UeKqBCZl4JWy066dSuyfjRf 7kIp6EBxH8zkiLA9Fc1bZakhk0RSsg6EdngOofikcQuwxrtXPH95loBa0urDAiXD 1QMRaA6l2ortFISuauBzfOgl0xDx10QXoZWwWWQxKdqkUpDPNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhcwx+O2A0xr94Ls4WLSuom4mI3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWM1NzhmZTctZmEzOS0z NmUxLWJkNzctODM0NGFhNDMxNDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9tIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3Xo93AXMWkZPOA9N7yvjUAijRgvP8cWQIfWLWTIESap10OrbXIyFs4 tFpB+Qp60f+RzaQnznGn+ywS+EE8hi5CM/GZoZ01ruM2/djuLkmnRNfcEbCikJ4y aVNanxuTEkueEZVkxtVP9u14rfSas2RVjiiX1S1n4IQYrazOrF9CRz7VIcT1SO+L FpJEGA+xiON+SsG/kt0ingG2HhpCYIRQAjUjydQVlrMVYnEyemuECwDfbMD+e7tP llbreHFKZG3nt1ovqrsCku20/Scg+YgJ74ceigDeoDbPqQw0r5ZloVH5kv8YhkLF MDRaeoZoQN8gX16BvxFPnr5naMyG6Sw= -----END CERTIFICATE-----Generated at Thu Mar 26 05:21:48 2026 by rpki-client