$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bd51adf-28ba-32a3-9ada-3bdaa3a121b4.roa File: 6bd51adf-28ba-32a3-9ada-3bdaa3a121b4.roa (raw, json) Hash identifier: /dYx4DILNADzXyCiR5N9p+nQKsx0eI4D+jDC0137xLg= Subject key identifier: 13:57:24:03:3D:37:65:5D:45:D2:AF:0E:F3:A9:AE:B9:69:7C:71:FF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2BDA27AD22CC7B4C74516D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bd51adf-28ba-32a3-9ada-3bdaa3a121b4.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.220.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:27:ad:22:cc:7b:4c:74:51:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=d53bf9e8-4416-4fdc-a1d2-5c0b0f3f7017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:38:e2:44:da:a2:e4:d7:ca:a2:f7:d8:2f:5c: b6:14:eb:0b:e4:6a:61:a7:6f:1f:ae:dd:a2:64:32: 3c:6f:b1:24:18:ad:f5:29:73:93:3e:cd:1a:c9:3b: 73:82:c2:e5:f9:11:f3:01:fc:be:76:0a:4b:11:93: ad:f8:19:f9:1d:2c:49:74:1f:ab:6e:a2:ac:03:7f: 50:e4:19:98:ac:ef:5c:16:5e:78:12:24:20:b8:a2: 18:69:c0:a6:9a:0b:e7:57:00:0d:a2:36:17:ab:1e: 9f:cb:db:10:36:d9:1d:20:35:49:d7:ed:5c:44:ae: 94:6b:b2:f6:95:0f:6e:44:ff:4c:92:f4:c1:41:fc: db:3b:86:9f:9f:ba:6a:0f:52:97:1c:ae:80:e7:d6: 97:bb:1e:41:87:92:eb:ae:ac:c0:cd:46:b6:0e:72: 7b:e8:09:5d:32:ba:76:ed:4b:37:2a:f8:5a:d8:82: c8:53:51:12:9c:fe:b1:25:1f:af:75:ce:cc:3a:fe: 66:b6:0a:2e:ef:63:3b:c6:f7:e0:6a:de:40:02:87: e3:aa:ad:13:25:ea:67:e3:77:99:a7:92:26:4c:b5: e0:9b:23:d0:83:c0:19:58:6d:25:74:fe:fa:6a:d5: 54:49:b0:ef:99:5a:74:94:f4:4a:48:9f:1a:6f:7c: 6f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:57:24:03:3D:37:65:5D:45:D2:AF:0E:F3:A9:AE:B9:69:7C:71:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bd51adf-28ba-32a3-9ada-3bdaa3a121b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:8f:f4:1d:0f:d2:91:56:ca:09:d2:c8:95:9e:a4:6c:d3:14: 98:aa:49:80:e0:67:dd:00:c6:8c:56:f9:f8:8f:65:14:1e:a2: 17:b9:bd:35:b9:19:a7:59:a8:fd:41:88:95:e8:e0:0c:27:bb: 3f:f5:c9:02:8c:28:3c:f7:51:30:c2:a8:ca:5f:c9:a2:05:8c: 29:37:1b:e2:db:f4:e8:96:13:39:d2:ce:39:bc:35:d7:37:96: 91:d0:48:30:02:8a:59:f0:81:87:6c:43:ba:2d:0a:7c:43:d5: 21:c8:2a:ac:81:87:f9:62:6e:1b:7c:c3:28:ab:54:13:38:f4: c7:a0:34:25:34:50:72:54:4d:3c:32:0a:ab:19:d7:1d:77:5c: 48:2e:03:f7:4b:f9:f0:85:db:9b:a4:f7:2e:66:09:e1:79:c1: 2e:84:27:b9:4d:5f:80:80:c8:a7:dd:ca:b1:a5:7c:76:2a:73: ec:89:75:53:1d:aa:12:99:37:e9:55:ba:b9:3c:c3:ec:3f:f8: 3b:e4:97:6a:f9:59:5e:fb:81:ca:9f:c7:61:4f:80:fa:5e:6f: 66:4f:24:cc:91:5e:cf:9d:69:dd:08:cd:96:cc:f1:78:14:90: 61:57:b5:9e:30:d0:96:13:ed:24:de:36:a3:aa:3b:36:47:30: 7a:c8:91:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2ietIsx7THRRbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZDUzYmY5ZTgtNDQxNi00ZmRjLWExZDItNWMwYjBmM2Y3MDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDjiRNqi5NfKovfYL1y2FOsL5Gphp28frt2i ZDI8b7EkGK31KXOTPs0ayTtzgsLl+RHzAfy+dgpLEZOt+Bn5HSxJdB+rbqKsA39Q 5BmYrO9cFl54EiQguKIYacCmmgvnVwANojYXqx6fy9sQNtkdIDVJ1+1cRK6Ua7L2 lQ9uRP9MkvTBQfzbO4afn7pqD1KXHK6A59aXux5Bh5LrrqzAzUa2DnJ76AldMrp2 7Us3Kvha2ILIU1ESnP6xJR+vdc7MOv5mtgou72M7xvfgat5AAofjqq0TJepn43eZ p5ImTLXgmyPQg8AZWG0ldP76atVUSbDvmVp0lPRKSJ8ab3xvvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNXJAM9N2VdRdKvDvOprrlpfHH/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmJkNTFhZGYtMjhiYS0z MmEzLTlhZGEtM2JkYWEzYTEyMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ynMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuP9B0P0pFWygnSyJWepGzTFJiqSYDgZ90AxoxW+fiPZRQeohe5vTW5 GadZqP1BiJXo4Awnuz/1yQKMKDz3UTDCqMpfyaIFjCk3G+Lb9OiWEznSzjm8Ndc3 lpHQSDACilnwgYdsQ7otCnxD1SHIKqyBh/libht8wyirVBM49MegNCU0UHJUTTwy CqsZ1x13XEguA/dL+fCF25uk9y5mCeF5wS6EJ7lNX4CAyKfdyrGlfHYqc+yJdVMd qhKZN+lVurk8w+w/+Dvkl2r5WV77gcqfx2FPgPpeb2ZPJMyRXs+dad0IzZbM8XgU kGFXtZ4w0JYT7STeNqOqOzZHMHrIka4= -----END CERTIFICATE-----Generated at Thu Mar 26 05:18:27 2026 by rpki-client