$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a572a0b1-1a57-3e9f-9b15-b285f4ec3fa0.roa File: a572a0b1-1a57-3e9f-9b15-b285f4ec3fa0.roa (raw, json) Hash identifier: N20YhCuEdaa+xL9XLAY923CiH4PLNQjPjxBcKsZh/k8= Subject key identifier: 0F:D3:F0:67:E7:19:2F:2D:81:3E:6A:C2:5E:6A:18:85:A0:80:ED:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D07AD173DA1D5E6CF89303080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a572a0b1-1a57-3e9f-9b15-b285f4ec3fa0.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 16625 IP address blocks: 23.201.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:17:3d:a1:d5:e6:cf:89:30:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=7e9b6a2c-7be0-424f-9b4c-b888ccc8e4f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:aa:98:f3:a9:88:ae:19:82:2a:4d:12:06: 2e:e2:e8:9b:01:6c:a2:72:96:1b:ef:9a:16:31:6c: da:bb:d6:09:9f:30:96:da:66:7a:fe:60:10:54:a4: 35:ae:23:a2:8a:fb:cc:f0:5e:fc:a1:47:eb:e8:46: bf:d0:6a:3a:e4:ac:1c:e2:6a:8b:f6:a6:95:90:c6: 8b:a3:db:49:13:ab:aa:e0:0e:87:f0:14:1d:2d:bb: 79:d1:0c:13:4e:b4:cd:b3:2c:7f:5f:33:c1:53:fb: fe:bd:fd:51:58:79:17:73:75:88:b6:8e:41:a1:66: 41:bc:1f:fa:52:d9:28:69:26:6e:2d:a9:50:3d:d2: 76:ae:44:bc:3c:14:26:fa:48:f8:80:53:03:ea:6c: 84:b8:4d:62:0a:d4:d3:a6:14:52:42:c6:78:d4:b1: 31:8d:37:6d:68:a4:5a:8e:52:c0:23:da:85:44:e9: 90:3d:68:ac:7c:0e:65:de:df:0d:d2:f3:76:5f:70: 11:a0:1a:fa:ac:7d:8e:93:7d:c9:d9:5d:62:12:14: e8:cf:66:82:10:a3:e0:dc:b6:7a:87:b7:86:d8:12: f5:d6:cf:74:dc:19:f6:bd:14:f6:d9:b4:2a:00:80: 71:ac:70:fd:69:c6:aa:1a:de:15:96:de:e4:ce:88: 4d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D3:F0:67:E7:19:2F:2D:81:3E:6A:C2:5E:6A:18:85:A0:80:ED:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a572a0b1-1a57-3e9f-9b15-b285f4ec3fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:f7:07:c0:a6:12:d9:61:2e:9b:af:6c:cf:ad:2a:ff:03:80: 82:7c:68:d3:63:07:f0:05:d5:88:bc:04:9a:8a:d4:9e:81:6a: a9:ae:83:a7:49:7e:ed:fc:bc:bf:ea:23:6c:42:66:4b:84:f9: e1:c2:23:17:e4:a1:17:77:ac:84:51:04:ba:fd:87:ad:69:9f: 39:59:32:10:70:18:d6:ee:3a:56:dd:55:73:4d:49:fc:60:25: e9:7f:f9:d4:10:75:3b:ee:4a:d3:6f:94:3f:3d:24:eb:c5:c0: fe:d7:17:5e:cb:0b:d6:da:d2:86:17:92:61:a4:be:a9:8c:43: a6:ba:ec:32:30:ba:71:17:21:51:fb:13:1c:5a:73:2e:31:d3: 19:1a:42:43:a1:7c:34:07:13:90:a3:fb:07:4f:44:ff:b4:11: 11:5a:53:90:f7:d5:f1:09:fb:b2:95:75:bb:2b:34:e9:a2:80: 22:b2:bb:d4:60:2c:f3:cd:48:9e:2f:70:00:1c:ca:0a:e6:08: e5:c4:d9:a6:1c:32:47:36:aa:d6:8c:6b:29:35:1b:5e:9f:53: 22:0a:3d:b5:3e:3b:ab:13:bf:b0:2c:e4:75:5e:c4:be:26:ca: 83:ee:d0:de:4c:6f:80:5c:ad:92:09:7c:ef:26:a4:1c:44:ce: a2:a3:c4:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrRc9odXmz4kwMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk N2U5YjZhMmMtN2JlMC00MjRmLTliNGMtYjg4OGNjYzhlNGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXKqmPOpiK4ZgipNEgYu4uibAWyicpYb75oW MWzau9YJnzCW2mZ6/mAQVKQ1riOiivvM8F78oUfr6Ea/0Go65Kwc4mqL9qaVkMaL o9tJE6uq4A6H8BQdLbt50QwTTrTNsyx/XzPBU/v+vf1RWHkXc3WIto5BoWZBvB/6 UtkoaSZuLalQPdJ2rkS8PBQm+kj4gFMD6myEuE1iCtTTphRSQsZ41LExjTdtaKRa jlLAI9qFROmQPWisfA5l3t8N0vN2X3ARoBr6rH2Ok33J2V1iEhToz2aCEKPg3LZ6 h7eG2BL11s903Bn2vRT22bQqAIBxrHD9acaqGt4Vlt7kzohNzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/T8GfnGS8tgT5qwl5qGIWggO0zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTU3MmEwYjEtMWE1Ny0z ZTlmLTliMTUtYjI4NWY0ZWMzZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF8kIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADj3B8CmEtlhLpuvbM+tKv8DgIJ8aNNjB/AF1Yi8BJqK1J6Baqmug6dJ fu38vL/qI2xCZkuE+eHCIxfkoRd3rIRRBLr9h61pnzlZMhBwGNbuOlbdVXNNSfxg Jel/+dQQdTvuStNvlD89JOvFwP7XF17LC9ba0oYXkmGkvqmMQ6a67DIwunEXIVH7 Exxacy4x0xkaQkOhfDQHE5Cj+wdPRP+0ERFaU5D31fEJ+7KVdbsrNOmigCKyu9Rg LPPNSJ4vcAAcygrmCOXE2aYcMkc2qtaMayk1G16fUyIKPbU+O6sTv7As5HVexL4m yoPu0N5Mb4BcrZIJfO8mpBxEzqKjxNY= -----END CERTIFICATE-----Generated at Thu Mar 26 03:43:19 2026 by rpki-client