$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d8f658e-3779-3059-800e-bb027f336e34.roa File: 5d8f658e-3779-3059-800e-bb027f336e34.roa (raw, json) Hash identifier: nLgrkV4TWgjw1kdvj2hVBjNSAiQ/MtXvD2EbcGsJbYU= Subject key identifier: 2E:CC:00:9D:B9:09:E2:6A:E5:46:76:AF:02:A8:E1:C7:53:63:64:B7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D0912AD78999F37A2A0552000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d8f658e-3779-3059-800e-bb027f336e34.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 16625 IP address blocks: 23.202.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:ad:78:99:9f:37:a2:a0:55:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=7c1a0b52-0b6a-45be-9f67-a975d9cc1540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9c:8d:d5:11:97:17:59:5f:c7:c3:b1:82:71: ed:19:50:77:76:f6:10:83:40:c9:81:80:d5:e4:c5: e0:7b:db:a6:7d:b4:33:fb:43:83:b3:a4:49:44:f4: 7c:5d:16:95:e7:83:c8:db:c3:b1:b9:ba:20:0b:ea: 4e:04:99:5f:f8:83:66:1f:92:b8:e4:9e:ce:29:19: dd:bb:f0:70:8c:ee:aa:63:f3:95:06:a3:31:0b:df: c8:2a:a1:97:dc:d7:99:db:24:a9:80:d3:e9:c2:22: 4f:30:fa:4e:06:45:89:6c:74:ab:26:b5:9b:9f:1a: 5b:b6:b6:c6:dd:f5:00:79:58:6d:6d:f5:7a:54:4e: 32:b5:5d:65:ea:3f:53:50:07:6d:86:38:c8:b7:4d: 44:3a:61:bb:85:b6:20:58:c5:b2:ec:2e:84:53:1e: 91:03:09:e6:81:75:0d:29:85:1a:70:51:5c:77:6b: fc:94:b8:07:bf:2c:62:59:88:f5:28:8e:4d:fb:e5: 43:3d:d3:9e:e0:f1:82:5e:17:26:14:32:02:81:c8: 46:20:62:bd:3f:df:09:1f:22:2d:d2:35:18:42:e9: d2:ab:93:8d:42:56:76:67:c7:43:26:af:f9:ce:48: ba:03:04:ad:75:ce:67:47:f9:73:5f:52:39:15:33: 41:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CC:00:9D:B9:09:E2:6A:E5:46:76:AF:02:A8:E1:C7:53:63:64:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d8f658e-3779-3059-800e-bb027f336e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:fc:81:2b:e6:5c:4d:7e:e2:48:fe:6c:30:8f:da:ec:e0:14: dd:b1:a3:45:40:39:c1:d5:13:77:1e:a2:5a:76:6f:4a:ed:c6: 2a:a5:8e:65:81:ba:e1:0e:41:69:ba:d1:98:0d:29:0f:23:3f: 27:38:95:3e:2d:ef:23:a7:95:ef:9b:76:a7:f8:bf:0e:36:74: b4:1a:dc:fa:81:d0:2e:42:79:eb:a9:54:15:09:47:55:e6:f5: 33:f7:53:12:2a:a7:20:29:3f:0e:2c:2d:1a:79:c2:4a:71:03: 7f:8e:a4:24:43:a5:82:36:01:79:69:73:81:ae:92:83:68:2b: 61:c4:cf:bf:7f:2a:19:c3:88:c7:ef:2b:39:e1:0f:ec:e4:47: 8f:dd:f6:ed:91:23:62:2b:41:d8:24:ad:a9:5c:19:13:ad:6f: ee:f4:ed:e0:b1:38:26:a1:2e:a3:92:13:48:47:e1:99:80:34: a7:9f:7e:d6:72:03:7e:22:7e:1d:9c:56:95:d9:29:0c:65:02: 92:16:bf:6d:01:ae:88:5d:32:f9:a2:92:69:50:4f:4f:c3:ac: d5:08:25:35:f0:96:7f:b6:00:41:f0:db:0b:52:cd:d7:e1:3b: 08:af:35:38:10:0e:0d:4a:67:25:84:67:e4:21:78:7a:5f:b3: 23:5b:d9:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEq14mZ83oqBVIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk N2MxYTBiNTItMGI2YS00NWJlLTlmNjctYTk3NWQ5Y2MxNTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJyN1RGXF1lfx8OxgnHtGVB3dvYQg0DJgYDV 5MXge9umfbQz+0ODs6RJRPR8XRaV54PI28OxubogC+pOBJlf+INmH5K45J7OKRnd u/BwjO6qY/OVBqMxC9/IKqGX3NeZ2ySpgNPpwiJPMPpOBkWJbHSrJrWbnxpbtrbG 3fUAeVhtbfV6VE4ytV1l6j9TUAdthjjIt01EOmG7hbYgWMWy7C6EUx6RAwnmgXUN KYUacFFcd2v8lLgHvyxiWYj1KI5N++VDPdOe4PGCXhcmFDICgchGIGK9P98JHyIt 0jUYQunSq5ONQlZ2Z8dDJq/5zki6AwStdc5nR/lzX1I5FTNBewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7MAJ25CeJq5UZ2rwKo4cdTY2S3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWQ4ZjY1OGUtMzc3OS0z MDU5LTgwMGUtYmIwMjdmMzM2ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8oQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABL8gSvmXE1+4kj+bDCP2uzgFN2xo0VAOcHVE3ceolp2b0rtxiqljmWB uuEOQWm60ZgNKQ8jPyc4lT4t7yOnle+bdqf4vw42dLQa3PqB0C5CeeupVBUJR1Xm 9TP3UxIqpyApPw4sLRp5wkpxA3+OpCRDpYI2AXlpc4GukoNoK2HEz79/KhnDiMfv KznhD+zkR4/d9u2RI2IrQdgkralcGROtb+707eCxOCahLqOSE0hH4ZmANKefftZy A34ifh2cVpXZKQxlApIWv20BrohdMvmikmlQT0/DrNUIJTXwln+2AEHw2wtSzdfh OwivNTgQDg1KZyWEZ+QheHpfsyNb2Tk= -----END CERTIFICATE-----Generated at Thu Mar 26 03:50:50 2026 by rpki-client