$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7280f0f7-753f-3726-8c58-46f61c70923e.roa File: 7280f0f7-753f-3726-8c58-46f61c70923e.roa (raw, json) Hash identifier: 2l6Kss1ejHsvqfc+oZzSUqRd2qbEPCAkS901a+kqFvc= Subject key identifier: 01:DC:8B:C0:79:1C:D6:0F:A6:7B:5A:75:97:09:53:64:F1:E8:92:47 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2BDA2EA75923EAFC11B6F500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7280f0f7-753f-3726-8c58-46f61c70923e.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.220.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:2e:a7:59:23:ea:fc:11:b6:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=f5571829-a9cd-44b1-b4c8-d4df1e32c412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:16:59:76:9f:7c:6e:f2:33:1a:4c:30:db: 7e:6a:11:fe:ed:be:b0:c7:24:5f:17:2a:f7:b8:b5: 31:bf:42:64:79:b6:3b:3d:b1:f9:8e:a4:3e:19:b3: 92:af:f2:b5:0c:0d:03:44:3c:53:63:1a:81:25:e1: c1:cd:8f:2a:50:3d:a5:47:f8:5b:46:b5:b1:89:cd: ff:77:c1:26:23:c2:1d:13:ca:e3:2c:40:fc:6f:9b: 92:53:69:6b:41:6c:ad:0c:37:1a:9a:8f:4e:05:d5: 8e:9f:15:02:72:e5:f5:82:48:2d:88:62:cc:91:77: 61:74:99:81:f6:d8:99:e9:d7:02:23:8d:5d:10:c4: 1f:d6:c8:d1:9a:d7:0f:b9:a6:7d:9b:e4:48:f9:f0: 7c:3c:c8:26:57:7d:76:51:29:98:9b:7a:57:21:df: 1f:a9:62:1a:61:94:d0:2a:f3:5e:b4:4e:39:64:cc: d9:b6:56:23:d7:23:2b:71:3f:63:0c:54:bf:5d:16: 2b:c5:1d:1f:82:f3:62:e0:8a:ae:17:9e:cd:89:db: 0d:b4:00:63:b2:53:10:f8:df:15:cd:11:f9:df:6d: c9:c4:b5:65:82:f1:07:9b:02:f6:82:f7:24:2e:3d: 2e:f9:b3:a9:39:74:1f:09:48:92:1d:18:1c:00:9c: 63:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DC:8B:C0:79:1C:D6:0F:A6:7B:5A:75:97:09:53:64:F1:E8:92:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7280f0f7-753f-3726-8c58-46f61c70923e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:23:2f:3b:0e:22:94:12:0c:ad:ed:d8:94:bd:c9:88:9c:d6: 0a:dd:cc:ae:f2:d7:9e:2c:38:b6:d3:56:7e:fc:ef:da:6d:cf: 92:87:4d:00:3e:b2:a6:00:df:7a:a0:7d:be:38:e7:92:d9:3d: 56:5f:7c:56:e4:25:5d:a0:a3:f8:28:e1:93:40:08:e4:62:ac: b8:81:2c:ef:d3:73:c8:8d:5f:e8:48:e0:27:13:bb:25:c9:17: 13:32:2d:66:43:46:2b:ec:8d:34:5d:1f:31:56:04:78:80:b3: a1:80:cd:e5:49:4c:78:1e:a3:a9:0e:7e:b6:0f:b4:c5:61:c7: 67:3a:5f:d6:46:00:d6:4a:2b:9c:b9:9a:58:1a:e6:14:c9:80: f2:fd:0f:21:31:dd:57:d7:b2:cd:ca:d3:f7:c6:a0:e0:3d:fc: 05:84:d2:3b:6f:67:0d:48:2d:5a:76:e5:86:52:93:0e:58:c8: 36:8d:5c:4b:73:1a:04:d0:98:86:e3:73:ef:94:96:9e:a8:84: 5e:9d:12:17:3f:13:71:ba:bb:67:d8:b1:70:80:ad:2b:b8:5a: da:53:bc:66:b9:76:c9:09:a6:9c:09:84:b4:72:69:9a:3c:39: a4:7d:a3:03:3c:87:dd:fc:fd:14:d0:22:3c:1e:de:b7:6b:07: 13:c3:c1:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2i6nWSPq/BG29QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZjU1NzE4MjktYTljZC00NGIxLWI0YzgtZDRkZjFlMzJjNDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx04WWXaffG7yMxpMMNt+ahH+7b6wxyRfFyr3 uLUxv0JkebY7PbH5jqQ+GbOSr/K1DA0DRDxTYxqBJeHBzY8qUD2lR/hbRrWxic3/ d8EmI8IdE8rjLED8b5uSU2lrQWytDDcamo9OBdWOnxUCcuX1gkgtiGLMkXdhdJmB 9tiZ6dcCI41dEMQf1sjRmtcPuaZ9m+RI+fB8PMgmV312USmYm3pXId8fqWIaYZTQ KvNetE45ZMzZtlYj1yMrcT9jDFS/XRYrxR0fgvNi4IquF57NidsNtABjslMQ+N8V zRH5323JxLVlgvEHmwL2gvckLj0u+bOpOXQfCUiSHRgcAJxjtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHci8B5HNYPpntadZcJU2Tx6JJHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzI4MGYwZjctNzUzZi0z NzI2LThjNTgtNDZmNjFjNzA5MjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9xOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwjLzsOIpQSDK3t2JS9yYic1grdzK7y154sOLbTVn7879ptz5KHTQA+ sqYA33qgfb4455LZPVZffFbkJV2go/go4ZNACORirLiBLO/Tc8iNX+hI4CcTuyXJ FxMyLWZDRivsjTRdHzFWBHiAs6GAzeVJTHgeo6kOfrYPtMVhx2c6X9ZGANZKK5y5 mlga5hTJgPL9DyEx3VfXss3K0/fGoOA9/AWE0jtvZw1ILVp25YZSkw5YyDaNXEtz GgTQmIbjc++Ulp6ohF6dEhc/E3G6u2fYsXCArSu4WtpTvGa5dskJppwJhLRyaZo8 OaR9owM8h938/RTQIjwe3rdrBxPDwTg= -----END CERTIFICATE-----Generated at Thu Mar 26 17:04:02 2026 by rpki-client