$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af0d45a8-cd5e-3d90-ab9a-bc4d908a1446.roa File: af0d45a8-cd5e-3d90-ab9a-bc4d908a1446.roa (raw, json) Hash identifier: pbGR9PetOO22CssVEdrPOpT7/gzjp/4g0ntkwxUVzQM= Subject key identifier: EB:B5:06:46:7B:26:2D:37:37:4B:FE:82:2D:AC:B0:B5:CB:54:D6:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2BDA34539B5E0AB1B7536350 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af0d45a8-cd5e-3d90-ab9a-bc4d908a1446.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.222.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:34:53:9b:5e:0a:b1:b7:53:63:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=9c7a7576-c0c1-480a-b3d5-f8c5717bce1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:3b:fb:d1:ca:ba:f2:77:8d:66:6c:b8:8f: cb:aa:75:af:87:04:74:ec:63:01:97:68:f7:cf:51: af:5e:ae:de:dc:2c:76:c5:48:a7:93:6b:bf:15:35: fb:b4:82:fb:52:d9:b2:d5:48:ab:30:c3:83:8b:aa: 9e:b4:35:ff:c3:22:33:e4:dc:79:10:91:5f:f2:54: 58:a7:08:b0:9c:8a:79:1e:96:fb:a1:7b:c3:a6:a7: 2b:7a:c8:d9:ac:8f:7f:fe:03:d6:d5:14:94:00:71: 9e:c8:32:62:cb:93:b3:60:4e:ae:5f:29:10:5b:26: 92:40:85:16:94:f8:b9:10:3d:d9:e9:ec:b3:f7:42: e5:20:03:62:2c:4e:fc:58:0c:7e:ca:79:3e:a9:c9: d9:2c:d3:b9:19:5e:f8:98:93:5d:30:11:a2:fb:41: 23:c9:ea:42:06:18:37:1a:85:bf:34:7f:a4:7d:93: 12:ff:41:e6:6e:ab:82:36:43:bf:10:dd:e7:f8:8b: f7:6c:4a:81:12:f6:04:8f:21:6f:11:76:14:86:93: 18:73:59:1e:c8:64:7c:6a:4c:7c:69:50:18:7a:77: fd:6a:0a:2c:50:2a:43:83:d3:4e:58:bb:a7:6d:02: 86:4f:9d:c3:89:01:b5:dc:07:6d:bc:16:92:62:c0: a8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B5:06:46:7B:26:2D:37:37:4B:FE:82:2D:AC:B0:B5:CB:54:D6:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af0d45a8-cd5e-3d90-ab9a-bc4d908a1446.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d9:9d:c6:f9:af:01:b1:85:1a:8e:4c:17:74:37:b2:17:3d: df:50:5c:3b:86:e3:c0:5a:31:07:53:ed:df:b5:e0:36:b0:7f: 1e:02:3c:44:95:1e:c7:fa:0c:51:de:b9:8e:ab:03:d9:20:13: 24:7d:32:96:34:64:9e:0a:4f:4e:41:a8:26:6f:3e:77:a8:76: 87:0d:10:21:47:53:9f:18:50:8c:e9:c3:ca:70:73:b3:e9:46: e8:88:68:a6:49:a3:e2:25:bb:c8:f1:d2:fd:9c:72:13:94:a8: 23:ff:15:ff:5a:39:b2:d8:e3:c6:c8:2d:9f:cc:86:a4:b1:c1: f6:2c:9b:26:5b:e6:36:dd:c4:ec:d1:4c:cd:14:18:47:c2:29: 2c:d4:7f:ed:d2:3c:db:58:f0:30:02:be:15:b1:6a:23:f9:24: e1:79:f4:fa:cf:6b:88:e0:29:c2:00:57:9a:c2:b5:72:9c:87: cd:7c:18:65:e4:25:29:5c:fa:29:3c:db:11:60:c2:0c:52:f1: c5:d9:38:83:ad:ed:20:7c:83:18:de:40:24:cc:69:2c:97:37: 4b:ee:65:5f:a0:b5:36:49:1f:18:67:83:9d:44:b5:2a:b6:04: d3:38:d2:f6:b1:74:b3:24:4a:f5:6b:b3:39:90:21:84:c3:69: b5:e9:56:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jRTm14KsbdTY1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk OWM3YTc1NzYtYzBjMS00ODBhLWIzZDUtZjhjNTcxN2JjZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYQ7+9HKuvJ3jWZsuI/LqnWvhwR07GMBl2j3 z1GvXq7e3Cx2xUink2u/FTX7tIL7Utmy1UirMMODi6qetDX/wyIz5Nx5EJFf8lRY pwiwnIp5Hpb7oXvDpqcresjZrI9//gPW1RSUAHGeyDJiy5OzYE6uXykQWyaSQIUW lPi5ED3Z6eyz90LlIANiLE78WAx+ynk+qcnZLNO5GV74mJNdMBGi+0EjyepCBhg3 GoW/NH+kfZMS/0HmbquCNkO/EN3n+Iv3bEqBEvYEjyFvEXYUhpMYc1keyGR8akx8 aVAYenf9agosUCpDg9NOWLunbQKGT53DiQG13AdtvBaSYsCojwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOu1BkZ7Ji03N0v+gi2ssLXLVNYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWYwZDQ1YTgtY2Q1ZS0z ZDkwLWFiOWEtYmM0ZDkwOGExNDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF97yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXZncb5rwGxhRqOTBd0N7IXPd9QXDuG48BaMQdT7d+14Dawfx4CPESV Hsf6DFHeuY6rA9kgEyR9MpY0ZJ4KT05BqCZvPneodocNECFHU58YUIzpw8pwc7Pp RuiIaKZJo+Ilu8jx0v2cchOUqCP/Ff9aObLY48bILZ/MhqSxwfYsmyZb5jbdxOzR TM0UGEfCKSzUf+3SPNtY8DACvhWxaiP5JOF59PrPa4jgKcIAV5rCtXKch818GGXk JSlc+ik82xFgwgxS8cXZOIOt7SB8gxjeQCTMaSyXN0vuZV+gtTZJHxhng51EtSq2 BNM40vaxdLMkSvVrszmQIYTDabXpVio= -----END CERTIFICATE-----Generated at Thu Mar 26 15:27:20 2026 by rpki-client