$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/861a5bb1-8072-3877-992c-0bfdf9dd920e.roa File: 861a5bb1-8072-3877-992c-0bfdf9dd920e.roa (raw, json) Hash identifier: 8rrE+CCkjBmIOQTGZnPGEN+iy+4kbhDN/Vxp+ccNDSY= Subject key identifier: D7:93:D2:71:B9:16:86:9A:7B:B6:02:AA:8B:A4:72:11:53:88:D5:32 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2BDA3422D5307C57312EA7C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/861a5bb1-8072-3877-992c-0bfdf9dd920e.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.222.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:34:22:d5:30:7c:57:31:2e:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=afa5db73-0a63-4783-b085-c8e1208bb92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d4:5d:ef:f2:21:fc:15:54:22:3a:b5:fe:fd: 23:24:65:be:cf:ca:84:6d:9e:67:6a:7c:ca:a3:b5: 4c:26:4b:07:f9:52:4b:6c:ed:48:6b:e0:cb:62:df: dc:f0:1a:90:3e:ad:83:70:a4:10:43:ce:31:44:81: 27:92:d7:09:a2:25:6a:07:78:52:23:f6:07:64:ea: 38:83:6e:06:36:27:f1:67:87:93:27:51:ec:a4:46: cd:76:8c:4b:42:e8:18:5c:b2:59:a0:9f:e8:0d:4a: d3:70:28:ab:45:6e:42:06:f0:34:2d:93:b4:3f:77: 5f:ef:39:97:e5:39:41:08:b0:2b:0a:a9:af:da:d5: 47:0f:f5:e9:19:e0:3d:a8:17:5f:82:99:e2:fc:b1: d2:a1:e2:12:12:bf:ed:6c:7c:9f:31:61:b2:3e:e6: f2:e9:dc:da:fa:31:46:7e:8d:b3:05:95:09:79:c2: 8d:d9:b2:1c:18:8f:57:f4:37:11:e0:7e:85:a3:47: 26:7b:d3:49:9f:2a:4d:23:f4:99:d4:e6:59:12:44: c8:0d:57:87:47:c5:ee:b2:27:dc:af:7e:51:fb:7f: d0:23:04:ae:1a:46:fb:a1:bc:55:fa:b6:92:cc:1f: ed:81:de:08:99:13:76:4f:3d:97:f0:14:39:27:54: be:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:93:D2:71:B9:16:86:9A:7B:B6:02:AA:8B:A4:72:11:53:88:D5:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/861a5bb1-8072-3877-992c-0bfdf9dd920e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:90:d4:f3:5a:e5:9a:ca:9d:73:6f:59:cd:ce:c2:07:c6:4c: bf:03:58:ef:ae:ab:99:e4:d0:dd:5d:cd:3c:f8:27:a4:58:54: 9d:89:49:44:f0:6c:d7:33:74:57:e4:72:f9:db:be:83:15:fa: 35:b0:07:a4:2c:e2:5d:81:12:48:b4:90:82:4f:c7:6c:1e:7a: 1b:a5:1a:38:e6:1d:18:0b:7a:ac:11:8c:92:dd:0d:c9:fb:d5: b0:ca:08:8d:56:34:da:28:91:36:55:e4:69:f1:14:5e:df:46: 79:1a:ca:7e:5e:7d:e4:a3:4a:56:bb:a0:bc:e1:e0:20:bc:75: 57:fe:94:e7:05:56:b5:eb:5a:1f:98:8d:ba:1d:de:36:b0:7f: 9d:53:24:2e:1a:e4:da:a4:20:24:b5:3d:9c:5b:d2:f6:57:a2: 13:0f:b5:50:ac:e8:6b:55:d5:d4:47:49:5e:7e:56:48:8a:47: 8c:d5:8d:df:a7:87:9c:3b:55:55:c2:62:ca:cd:9d:89:3d:f5: b9:1d:cc:af:30:24:14:1c:92:0f:5e:d6:4f:04:f0:9e:d7:61: 80:dd:9d:e8:9b:37:43:b6:2c:c7:ce:5d:2a:5b:f7:88:d6:83: 0d:ca:7a:15:c9:dc:6b:bc:79:32:c9:92:d0:f0:5a:53:76:7a: 65:98:f1:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jQi1TB8VzEup8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YWZhNWRiNzMtMGE2My00NzgzLWIwODUtYzhlMTIwOGJiOTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntRd7/Ih/BVUIjq1/v0jJGW+z8qEbZ5nanzK o7VMJksH+VJLbO1Ia+DLYt/c8BqQPq2DcKQQQ84xRIEnktcJoiVqB3hSI/YHZOo4 g24GNifxZ4eTJ1HspEbNdoxLQugYXLJZoJ/oDUrTcCirRW5CBvA0LZO0P3df7zmX 5TlBCLArCqmv2tVHD/XpGeA9qBdfgpni/LHSoeISEr/tbHyfMWGyPuby6dza+jFG fo2zBZUJecKN2bIcGI9X9DcR4H6Fo0cme9NJnypNI/SZ1OZZEkTIDVeHR8Xusifc r35R+3/QIwSuGkb7obxV+raSzB/tgd4ImRN2Tz2X8BQ5J1S+MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeT0nG5Foaae7YCqoukchFTiNUyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODYxYTViYjEtODA3Mi0z ODc3LTk5MmMtMGJmZGY5ZGQ5MjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF97oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuQ1PNa5ZrKnXNvWc3OwgfGTL8DWO+uq5nk0N1dzTz4J6RYVJ2JSUTw bNczdFfkcvnbvoMV+jWwB6Qs4l2BEki0kIJPx2weehulGjjmHRgLeqwRjJLdDcn7 1bDKCI1WNNookTZV5GnxFF7fRnkayn5efeSjSla7oLzh4CC8dVf+lOcFVrXrWh+Y jbod3jawf51TJC4a5NqkICS1PZxb0vZXohMPtVCs6GtV1dRHSV5+VkiKR4zVjd+n h5w7VVXCYsrNnYk99bkdzK8wJBQckg9e1k8E8J7XYYDdneibN0O2LMfOXSpb94jW gw3KehXJ3Gu8eTLJktDwWlN2emWY8Wg= -----END CERTIFICATE-----Generated at Thu Mar 26 03:47:08 2026 by rpki-client