$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60c1782f-b4dd-3f10-9967-45ae6cff76c0.roa File: 60c1782f-b4dd-3f10-9967-45ae6cff76c0.roa (raw, json) Hash identifier: SoQYY/Y6VGsZFb2PQxhjqgOmK3etVzyIfI6TrQyPQrc= Subject key identifier: E1:82:41:F7:B6:C5:AE:BF:7F:97:6C:42:46:72:58:93:2C:66:BF:E2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D0912AD684BBD5BDCCBA7BF40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60c1782f-b4dd-3f10-9967-45ae6cff76c0.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 16625 IP address blocks: 23.202.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:ad:68:4b:bd:5b:dc:cb:a7:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=b45d740c-7c8c-4d8c-8518-38a4177de1fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:b4:e2:38:fc:71:a2:ec:3c:b2:46:26:90: 0a:1d:77:52:36:52:ff:ae:e4:58:25:30:13:3d:7f: 71:0d:54:bb:d5:08:f4:08:a5:e4:d6:dd:4f:6c:db: 4e:6c:fe:57:c8:a1:d1:0f:b9:93:d2:52:12:88:3a: df:a7:62:a8:0b:ec:89:23:ea:4e:53:94:bb:bf:e8: a4:af:5a:a3:24:95:48:40:fd:4d:2f:da:a0:cd:62: 47:dc:8c:b7:8a:93:89:23:83:9c:9d:3f:27:41:33: c7:cf:a7:b3:54:98:72:0d:c2:0d:9f:28:88:e4:70: d2:66:4c:c5:64:7f:48:f4:f7:9e:37:56:73:91:8c: 39:69:27:c3:53:d5:80:82:59:56:da:d8:89:82:6f: cd:6d:0f:ca:40:6d:59:08:ec:3a:d1:c8:ea:53:2f: a1:3e:86:8f:85:5d:91:66:0c:3a:96:d2:53:91:51: 79:d1:bc:71:91:75:8b:4e:a6:19:9c:be:56:b8:59: a8:59:ba:6c:cf:7f:c7:70:eb:df:d0:0e:7f:af:b0: 60:51:69:10:6d:b0:0a:ff:26:11:5f:1f:c7:20:ab: 42:6c:75:f3:74:8f:30:9b:5b:d9:1c:0f:81:1b:f9: 43:3a:2d:fb:cd:f3:2b:e0:1f:a9:22:6b:09:01:0d: 61:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:82:41:F7:B6:C5:AE:BF:7F:97:6C:42:46:72:58:93:2C:66:BF:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60c1782f-b4dd-3f10-9967-45ae6cff76c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:15:62:19:a2:83:7d:02:c5:63:56:6b:d1:c3:ca:23:a6:0f: 72:57:a8:9f:d5:60:14:67:d7:bb:49:0b:0f:49:a5:7c:31:2e: 1d:52:c9:9e:da:e6:3c:f5:d9:40:3a:e6:8f:99:e5:5e:a0:0d: 3d:da:58:64:2c:f3:c5:e5:b9:55:f0:b1:d2:70:ab:13:b3:bb: 24:0e:cb:1d:0f:a8:d5:b3:04:9d:35:ef:09:b9:75:39:01:aa: f9:08:d0:81:d3:75:b2:c0:09:dc:55:9e:68:f3:36:40:8b:78: 47:9b:a8:aa:86:e8:76:47:45:2b:9e:d0:94:66:4e:8b:51:99: e5:7e:96:f0:44:02:3d:cc:b5:81:38:18:1b:c9:cf:22:96:84: b5:62:5e:0a:95:8c:be:fb:87:f1:ad:58:8e:a1:d2:5e:1b:74: 28:7c:f9:18:3f:b3:23:51:83:65:06:94:e3:1e:74:8f:0f:42: 23:da:83:24:32:27:9d:f1:49:2d:e2:30:d4:5e:0e:0f:92:0c: 28:c1:37:3e:fd:3c:dd:19:63:9c:eb:09:11:9f:6a:6e:0e:a4: ac:0c:16:bd:c5:97:36:77:79:28:6c:35:36:0a:88:8d:30:bd: 5a:62:80:fd:90:7d:79:79:54:0a:7e:5a:d6:6f:d6:e9:45:3b: 3e:45:c3:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEq1oS71b3Munv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk YjQ1ZDc0MGMtN2M4Yy00ZDhjLTg1MTgtMzhhNDE3N2RlMWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKW04jj8caLsPLJGJpAKHXdSNlL/ruRYJTAT PX9xDVS71Qj0CKXk1t1PbNtObP5XyKHRD7mT0lISiDrfp2KoC+yJI+pOU5S7v+ik r1qjJJVIQP1NL9qgzWJH3Iy3ipOJI4OcnT8nQTPHz6ezVJhyDcINnyiI5HDSZkzF ZH9I9PeeN1ZzkYw5aSfDU9WAgllW2tiJgm/NbQ/KQG1ZCOw60cjqUy+hPoaPhV2R Zgw6ltJTkVF50bxxkXWLTqYZnL5WuFmoWbpsz3/HcOvf0A5/r7BgUWkQbbAK/yYR Xx/HIKtCbHXzdI8wm1vZHA+BG/lDOi37zfMr4B+pImsJAQ1h2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGCQfe2xa6/f5dsQkZyWJMsZr/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjBjMTc4MmYtYjRkZC0z ZjEwLTk5NjctNDVhZTZjZmY3NmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8oAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0VYhmig30CxWNWa9HDyiOmD3JXqJ/VYBRn17tJCw9JpXwxLh1SyZ7a 5jz12UA65o+Z5V6gDT3aWGQs88XluVXwsdJwqxOzuyQOyx0PqNWzBJ017wm5dTkB qvkI0IHTdbLACdxVnmjzNkCLeEebqKqG6HZHRSue0JRmTotRmeV+lvBEAj3MtYE4 GBvJzyKWhLViXgqVjL77h/GtWI6h0l4bdCh8+Rg/syNRg2UGlOMedI8PQiPagyQy J53xSS3iMNReDg+SDCjBNz79PN0ZY5zrCRGfam4OpKwMFr3FlzZ3eShsNTYKiI0w vVpigP2QfXl5VAp+WtZv1ulFOz5Fw1w= -----END CERTIFICATE-----Generated at Thu Mar 26 07:51:07 2026 by rpki-client