$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/73db4ae1-4f5a-3bde-80bf-d58a67e2f295.roa File: 73db4ae1-4f5a-3bde-80bf-d58a67e2f295.roa (raw, json) Hash identifier: +xBw+VbUSCytMpq50Xz9sYIAcTHMofnc0L1F5ThJDXo= Subject key identifier: 35:9E:38:16:8F:55:34:9B:58:CB:C7:C5:76:AE:7B:F9:A8:49:EA:B9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D24E10D82479EED97A86C8E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/73db4ae1-4f5a-3bde-80bf-d58a67e2f295.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 16625 IP address blocks: 23.198.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:0d:82:47:9e:ed:97:a8:6c:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=9f51bd13-259f-4218-8e40-0900cae15b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:af:b1:57:d7:a3:77:53:72:03:1b:ed:9a:f8: 55:d6:91:fd:18:37:81:b3:f0:57:b0:81:9d:30:29: d4:18:77:82:37:c3:6c:77:3a:37:76:2e:95:8d:e5: 5f:ed:65:e1:e7:4e:5b:f1:c2:c2:82:76:de:c8:05: b0:b9:98:80:57:77:21:97:c3:ca:da:13:57:2d:c9: 7c:ca:7f:c1:d0:98:c3:90:6d:10:ba:a0:33:1c:29: 8d:b1:0b:df:5d:9f:ca:8a:f2:80:7d:6e:b0:3e:ae: 3b:97:04:33:7f:1a:ca:34:6c:b0:4c:15:6c:19:25: d9:a4:0a:c0:26:ac:c4:de:b2:d2:e5:73:cc:d5:15: 8d:a5:15:b2:db:8b:d1:ae:58:56:e1:e5:93:3d:97: f6:8d:f8:ec:17:6a:81:f9:11:49:a9:2a:2a:db:49: 9e:f5:80:c5:25:ee:29:86:02:8f:7f:ae:b1:02:44: 31:55:6c:f4:ba:28:6d:a8:6b:77:a1:32:d4:a2:b4: f6:c5:d7:5d:f9:4f:a4:b5:98:49:9c:b6:3c:a5:29: d3:89:04:c0:54:bd:df:a9:a8:ee:d2:ac:4a:9c:ed: 21:1e:90:35:b2:82:ae:82:6a:6c:3d:0e:89:8e:5e: d4:55:f1:aa:9d:4a:7f:28:b6:d2:99:00:ae:12:35: 62:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9E:38:16:8F:55:34:9B:58:CB:C7:C5:76:AE:7B:F9:A8:49:EA:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/73db4ae1-4f5a-3bde-80bf-d58a67e2f295.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:a6:93:db:e6:2f:b8:1b:aa:cb:e0:f9:0d:82:c6:ae:ad:fa: 12:4a:e6:3a:c6:2d:cb:29:5b:86:4c:4e:d0:76:0f:6b:e8:96: c5:16:a3:85:65:d8:13:7b:fb:5a:c7:f8:ba:39:92:d7:c9:a9: d2:4b:67:28:8c:b8:2c:2d:d4:11:98:d9:41:3a:53:f6:6a:53: cf:6d:ce:73:6a:95:bc:7b:2c:eb:f4:3e:fc:8e:6a:a8:7e:e7: a8:68:0d:dd:b3:d9:2a:ab:ad:26:25:8c:a1:7b:3d:8b:b8:f4: ac:9b:16:8b:7b:b1:64:8b:82:88:2c:c1:cf:a7:e5:c4:46:b2: 61:22:a6:00:d0:08:07:eb:61:06:b8:15:34:84:0b:7a:ab:79: c4:04:cc:b1:66:d9:ab:db:70:52:1a:7c:2d:35:72:77:27:98: 08:50:fe:5f:42:5a:09:c8:70:83:f6:0a:39:23:31:13:bb:0b: 54:73:a6:fb:c3:0f:fd:ab:a0:18:fd:f8:db:82:1c:f3:c9:ac: 79:d4:98:7f:e7:b3:5d:37:7f:84:f0:04:f2:f1:7d:23:53:d3: 5b:75:81:6d:c3:71:4e:15:52:b4:c0:cd:ee:e6:39:1b:61:54: a8:15:e9:6d:45:a7:1c:e4:44:75:56:05:0c:0b:fe:64:72:47: 9f:ad:c2:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Q2CR57tl6hsjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OWY1MWJkMTMtMjU5Zi00MjE4LThlNDAtMDkwMGNhZTE1YjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq+xV9ejd1NyAxvtmvhV1pH9GDeBs/BXsIGd MCnUGHeCN8Nsdzo3di6VjeVf7WXh505b8cLCgnbeyAWwuZiAV3chl8PK2hNXLcl8 yn/B0JjDkG0QuqAzHCmNsQvfXZ/KivKAfW6wPq47lwQzfxrKNGywTBVsGSXZpArA JqzE3rLS5XPM1RWNpRWy24vRrlhW4eWTPZf2jfjsF2qB+RFJqSoq20me9YDFJe4p hgKPf66xAkQxVWz0uihtqGt3oTLUorT2xddd+U+ktZhJnLY8pSnTiQTAVL3fqaju 0qxKnO0hHpA1soKugmpsPQ6Jjl7UVfGqnUp/KLbSmQCuEjViRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWeOBaPVTSbWMvHxXaue/moSeq5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzNkYjRhZTEtNGY1YS0z YmRlLTgwYmYtZDU4YTY3ZTJmMjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8bwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACemk9vmL7gbqsvg+Q2Cxq6t+hJK5jrGLcspW4ZMTtB2D2volsUWo4Vl 2BN7+1rH+Lo5ktfJqdJLZyiMuCwt1BGY2UE6U/ZqU89tznNqlbx7LOv0PvyOaqh+ 56hoDd2z2SqrrSYljKF7PYu49KybFot7sWSLgogswc+n5cRGsmEipgDQCAfrYQa4 FTSEC3qrecQEzLFm2avbcFIafC01cncnmAhQ/l9CWgnIcIP2CjkjMRO7C1RzpvvD D/2roBj9+NuCHPPJrHnUmH/ns103f4TwBPLxfSNT01t1gW3DcU4VUrTAze7mORth VKgV6W1FpxzkRHVWBQwL/mRyR5+twho= -----END CERTIFICATE-----Generated at Thu Mar 26 07:04:11 2026 by rpki-client