$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/657b15c9-e350-3e2a-8c00-5a6fa2d88955.roa File: 657b15c9-e350-3e2a-8c00-5a6fa2d88955.roa (raw, json) Hash identifier: N6xYOFe+JLEjeV0OXZb0GbQnTto8smnLY5r/18EDouU= Subject key identifier: BA:67:9A:00:3C:A4:7D:61:6C:2F:7F:1E:F7:14:A4:53:6D:25:93:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1F4A48C6777825584DD2B140 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/657b15c9-e350-3e2a-8c00-5a6fa2d88955.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 45899 IP address blocks: 23.48.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:48:c6:77:78:25:58:4d:d2:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=d5a37de9-cebd-40f0-b0f2-f3135cec445a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5b:30:18:05:0f:1d:55:c5:34:ed:79:79:27: f5:a2:6d:f5:5d:3b:b0:15:00:99:66:7c:7b:69:87: 72:b4:e6:3b:a0:2c:7c:e3:56:2a:11:d6:cc:83:78: 91:d9:28:cd:47:b5:cc:81:66:84:ab:db:f8:0b:b7: 13:3b:f2:c9:60:45:77:c2:b6:96:ee:de:f1:12:a7: 13:34:d2:62:d4:bd:84:45:dd:68:8c:f2:42:7a:37: 5b:8b:e0:03:c5:ed:2d:33:42:0d:4c:46:47:21:4c: 5c:a6:fb:e9:eb:43:29:07:72:20:e9:a2:ae:46:e0: a6:55:5f:66:6a:46:06:b8:1f:82:2b:fa:26:81:20: 80:fe:9f:10:50:1c:4e:c9:58:df:b7:d7:8c:20:1d: 4b:3c:b2:88:52:b4:3a:a4:da:1e:01:8f:ff:20:fc: 28:86:5e:c6:85:d8:7d:d5:8a:e3:24:d4:34:4b:0a: a4:ad:f7:5b:43:fc:0a:82:fe:f5:4c:94:f6:b1:eb: 70:4f:13:4f:40:22:b9:3e:01:70:70:ae:d3:0f:28: 53:d9:24:16:1a:07:dd:0e:5a:48:77:ab:72:41:18: 6d:76:c6:cf:2d:9e:5e:db:74:ed:c3:b1:0e:ce:aa: 95:58:bf:96:d7:d9:b5:06:5c:73:bb:96:7c:e9:86: 10:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:67:9A:00:3C:A4:7D:61:6C:2F:7F:1E:F7:14:A4:53:6D:25:93:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/657b15c9-e350-3e2a-8c00-5a6fa2d88955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:2c:2e:f1:71:95:c0:7c:ca:ca:a9:98:e3:cf:55:de:a0:e4: 79:21:b1:cd:c9:cb:98:22:23:82:77:f9:c9:38:4b:43:ea:58: 27:65:38:da:19:35:94:12:1f:40:9c:8b:f2:bd:83:a0:8d:4b: 5b:9a:fc:59:ec:e8:38:fd:a3:f5:63:78:a3:0b:9a:04:07:61: 3e:61:f3:d2:09:8d:60:54:51:1d:ec:84:86:ed:fc:2a:cf:92: ba:83:bb:06:db:a9:71:70:a9:e4:e5:0d:9e:9b:2d:2d:0f:87: 92:f6:f6:c1:97:29:e8:a4:da:30:77:1e:57:e6:e7:17:09:f1: 73:3f:8d:44:7a:0c:70:da:fb:a1:73:2e:65:b0:2c:fa:b6:c3: 5a:aa:91:cc:75:8b:ee:2c:40:75:df:70:41:1c:16:22:4d:f5: 47:b5:39:a8:ec:2c:e9:1d:2a:12:2f:ba:7c:07:e3:7e:91:ee: 44:6d:52:34:b5:e6:6d:79:5f:5b:6b:49:70:0c:ba:54:8b:eb: 04:f0:6f:9d:a4:42:c1:12:58:1d:26:72:17:a0:d3:45:ab:5c: 03:16:6a:35:ad:5e:e8:b3:08:c6:56:17:7c:99:9b:b4:7c:4c: 76:73:36:c0:bd:ee:15:7f:60:c9:50:4c:03:e3:6c:fb:c8:d1: 9b:3e:90:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSkjGd3glWE3SsUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZDVhMzdkZTktY2ViZC00MGYwLWIwZjItZjMxMzVjZWM0NDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VswGAUPHVXFNO15eSf1om31XTuwFQCZZnx7 aYdytOY7oCx841YqEdbMg3iR2SjNR7XMgWaEq9v4C7cTO/LJYEV3wraW7t7xEqcT NNJi1L2ERd1ojPJCejdbi+ADxe0tM0INTEZHIUxcpvvp60MpB3Ig6aKuRuCmVV9m akYGuB+CK/omgSCA/p8QUBxOyVjft9eMIB1LPLKIUrQ6pNoeAY//IPwohl7Ghdh9 1YrjJNQ0SwqkrfdbQ/wKgv71TJT2setwTxNPQCK5PgFwcK7TDyhT2SQWGgfdDlpI d6tyQRhtdsbPLZ5e23Ttw7EOzqqVWL+W19m1Blxzu5Z86YYQfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpnmgA8pH1hbC9/HvcUpFNtJZPaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjU3YjE1YzktZTM1MC0z ZTJhLThjMDAtNWE2ZmEyZDg4OTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzA4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMsLvFxlcB8ysqpmOPPVd6g5Hkhsc3Jy5giI4J3+ck4S0PqWCdlONoZ NZQSH0Cci/K9g6CNS1ua/Fns6Dj9o/VjeKMLmgQHYT5h89IJjWBUUR3shIbt/CrP krqDuwbbqXFwqeTlDZ6bLS0Ph5L29sGXKeik2jB3Hlfm5xcJ8XM/jUR6DHDa+6Fz LmWwLPq2w1qqkcx1i+4sQHXfcEEcFiJN9Ue1OajsLOkdKhIvunwH436R7kRtUjS1 5m15X1trSXAMulSL6wTwb52kQsESWB0mcheg00WrXAMWajWtXuizCMZWF3yZm7R8 THZzNsC97hV/YMlQTAPjbPvI0Zs+kJ0= -----END CERTIFICATE-----Generated at Thu Mar 26 03:38:42 2026 by rpki-client