$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa05ac2c-04b2-37cb-998b-515c8a033ab8.roa File: aa05ac2c-04b2-37cb-998b-515c8a033ab8.roa (raw, json) Hash identifier: PMz0NGWwUi28tMbThy5j5MXyi0pAC5zqulUlsI34UBI= Subject key identifier: A7:79:EF:E4:28:60:51:2B:CC:6B:40:59:31:B9:04:07:74:DE:2A:E5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2BDA2D4F1E93D6EF053F2D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa05ac2c-04b2-37cb-998b-515c8a033ab8.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 16625 IP address blocks: 23.223.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:2d:4f:1e:93:d6:ef:05:3f:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=a782b2b0-82c3-439a-b1c0-366265802004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cd:f7:ba:48:5a:ab:c2:9b:1b:60:aa:a1:04: 40:4f:09:bb:b1:60:96:ea:25:82:65:26:1e:ec:8c: 06:ce:dd:96:51:21:bf:22:5a:f6:e0:85:01:e1:68: ea:8c:64:a8:64:0c:c5:fe:b5:e0:e3:64:db:94:36: 44:97:1a:dc:b7:4b:54:c7:91:12:c7:76:fe:e8:88: 93:c3:aa:e5:f5:37:f9:82:9e:17:8d:72:ea:be:5f: 2f:bf:63:e6:42:72:8e:b6:9c:b4:2b:25:e7:e8:6d: 7c:63:3b:fe:cd:ce:de:17:0f:fc:02:db:44:9e:eb: 32:98:ca:39:ad:69:2e:2d:ff:e6:b0:c7:51:21:dc: d0:06:67:22:ab:d9:96:1d:ab:32:27:77:ec:15:f4: f5:fa:8f:46:0e:4b:47:02:3b:0d:bb:d1:f5:7e:87: cd:a0:16:60:6a:cc:af:4a:5b:96:28:0e:9b:95:5b: b6:39:53:7b:38:ce:fa:1b:be:f1:c3:90:83:a2:57: 3d:00:37:8b:44:e8:0c:9a:4e:85:72:d9:ca:81:30: c2:8b:34:49:d6:d3:03:3d:f6:d7:68:d9:c7:9a:15: ae:23:e8:c6:78:f2:1b:fa:51:36:6a:bc:69:73:cd: fb:30:02:19:77:3a:d2:a2:a1:85:c2:57:43:0c:fe: bf:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:79:EF:E4:28:60:51:2B:CC:6B:40:59:31:B9:04:07:74:DE:2A:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa05ac2c-04b2-37cb-998b-515c8a033ab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:a3:19:a4:5d:c4:06:80:39:a9:59:08:22:30:29:85:37:f9: 95:4e:01:9e:ce:92:81:59:7f:ab:78:ad:c6:dd:87:17:76:db: 3f:75:0b:33:45:3d:f6:a0:35:ee:36:e1:ed:73:fa:73:f1:99: c2:cd:99:9a:d0:9f:92:c2:23:59:94:27:d1:ca:7d:eb:35:99: c7:ea:d9:2e:bd:4e:33:cf:05:4e:3e:41:c9:b1:70:da:18:02: e1:93:1b:b6:4f:15:47:d0:b4:f0:42:9b:0d:18:27:6b:fa:db: 1a:81:60:99:3c:8d:d4:60:9b:e3:be:18:fe:66:b6:89:91:f1: a2:2f:e9:b4:f7:1d:3c:34:4f:72:10:65:06:54:60:59:1e:1a: 59:d8:b5:3f:34:f0:8a:57:e6:da:9c:6c:66:01:0d:cf:f6:8d: c5:78:55:07:13:3a:84:ca:8c:7a:a0:4b:ed:94:08:51:09:51: 8d:27:2c:8a:88:81:18:01:c9:81:6b:61:cf:2e:8b:7e:12:46: de:5d:48:c3:f0:a2:58:e5:a7:11:c6:15:f5:86:2d:55:3f:a7: bb:22:02:26:46:78:db:c9:39:fe:d6:05:55:49:eb:fe:97:18: ca:7a:88:33:fc:b1:58:3c:47:dc:d7:42:11:3b:bf:9f:bf:28: e8:c5:90:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2i1PHpPW7wU/LYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YTc4MmIyYjAtODJjMy00MzlhLWIxYzAtMzY2MjY1ODAyMDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0s33ukhaq8KbG2CqoQRATwm7sWCW6iWCZSYe 7IwGzt2WUSG/Ilr24IUB4WjqjGSoZAzF/rXg42TblDZElxrct0tUx5ESx3b+6IiT w6rl9Tf5gp4XjXLqvl8vv2PmQnKOtpy0KyXn6G18Yzv+zc7eFw/8AttEnusymMo5 rWkuLf/msMdRIdzQBmciq9mWHasyJ3fsFfT1+o9GDktHAjsNu9H1fofNoBZgasyv SluWKA6blVu2OVN7OM76G77xw5CDolc9ADeLROgMmk6FctnKgTDCizRJ1tMDPfbX aNnHmhWuI+jGePIb+lE2arxpc837MAIZdzrSoqGFwldDDP6/MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKd57+QoYFErzGtAWTG5BAd03irlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWEwNWFjMmMtMDRiMi0z N2NiLTk5OGItNTE1YzhhMDMzYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyjGaRdxAaAOalZCCIwKYU3+ZVOAZ7OkoFZf6t4rcbdhxd22z91CzNF PfagNe424e1z+nPxmcLNmZrQn5LCI1mUJ9HKfes1mcfq2S69TjPPBU4+QcmxcNoY AuGTG7ZPFUfQtPBCmw0YJ2v62xqBYJk8jdRgm+O+GP5mtomR8aIv6bT3HTw0T3IQ ZQZUYFkeGlnYtT808IpX5tqcbGYBDc/2jcV4VQcTOoTKjHqgS+2UCFEJUY0nLIqI gRgByYFrYc8ui34SRt5dSMPwoljlpxHGFfWGLVU/p7siAiZGeNvJOf7WBVVJ6/6X GMp6iDP8sVg8R9zXQhE7v5+/KOjFkLk= -----END CERTIFICATE-----Generated at Thu Mar 26 16:37:44 2026 by rpki-client