$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b4e9a97a-e463-3032-82c8-80b4179ae3a3.roa File: b4e9a97a-e463-3032-82c8-80b4179ae3a3.roa (raw, json) Hash identifier: EisIeEmtLxFxi3ndBKz6MxxMT7niCHYMgRv7PWMpE7s= Subject key identifier: 04:CA:C0:AF:90:70:5D:9D:1C:F1:05:0A:A9:E0:F0:C3:00:7C:A9:97 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D343A2A6DFD1C15E4A7EF11C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b4e9a97a-e463-3032-82c8-80b4179ae3a3.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 21342 IP address blocks: 23.48.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:2a:6d:fd:1c:15:e4:a7:ef:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=a2084367-3bbf-4305-af6f-ef2430709f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7d:cc:ae:1a:f1:01:37:fe:e1:6b:ee:f1:80: 7d:e0:16:f3:2e:d3:8f:80:bc:fc:ae:39:37:09:80: 67:b4:46:00:ff:da:f7:f8:16:b5:6b:f3:e4:27:a8: f9:a7:5b:bc:81:86:63:23:96:79:02:79:93:e9:1e: 40:72:9f:3b:7a:28:62:48:2a:28:44:20:8e:9d:b9: 82:59:b8:22:86:27:ba:09:65:c0:23:88:0f:c0:d5: ad:48:31:f1:95:70:bc:f4:89:19:61:cc:9c:c7:f4: ae:b5:ff:5f:c0:ed:ef:18:c6:f9:ec:6b:e5:e8:4b: 24:6e:d2:55:31:a1:25:f0:34:0e:76:00:a2:c5:31: 48:21:ed:74:ae:e1:ce:82:de:21:64:d1:27:85:ce: da:23:4b:3a:43:cd:97:d5:14:e6:81:75:e3:9c:cc: 4b:8a:17:b6:88:0e:c8:84:fd:60:1a:9c:9d:b9:01: 68:c7:be:95:58:93:ba:ea:dc:69:ac:b6:6a:64:9b: 3f:35:1c:a1:0c:4f:bc:02:43:21:6e:1e:0e:da:44: 28:35:f0:9b:8f:54:6d:2f:ac:e3:7e:57:bf:ac:5e: c5:f9:f4:23:8e:19:3a:43:a0:37:f6:58:a4:de:d5: e3:2f:bd:4b:30:12:94:d7:8e:dc:05:4e:dc:ab:e7: 0e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CA:C0:AF:90:70:5D:9D:1C:F1:05:0A:A9:E0:F0:C3:00:7C:A9:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b4e9a97a-e463-3032-82c8-80b4179ae3a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ed:1a:b8:26:1b:f7:9f:26:12:22:8f:27:52:8e:cf:32:d1: 25:13:05:3e:7a:c4:0d:36:a3:b5:aa:82:50:1a:d4:53:a3:0d: 0c:ac:d4:0a:81:2a:86:31:2b:dd:c3:1a:32:69:15:57:74:da: c7:ad:ba:a1:a2:09:d8:64:6a:f5:8b:c6:2c:45:73:4c:fb:b9: 38:87:51:3d:0a:6f:b8:90:c2:f8:65:e1:b3:c6:b1:16:de:f8: d3:63:42:1e:b6:75:2e:a6:6a:a4:e5:0a:6a:06:1c:9d:93:c6: 10:5f:74:91:2d:ab:3b:7b:bc:0c:06:0e:13:b1:93:f1:3b:aa: 95:89:bf:4a:6c:6b:c8:27:13:0e:0e:a0:e4:7b:2a:ea:3a:cf: 7d:8e:6d:20:4e:61:a9:38:a3:f3:68:e6:87:60:68:84:9e:e4: 6d:6e:6a:c1:75:7d:bc:8b:76:69:81:37:9c:36:75:62:ef:c9: 34:69:25:99:f5:0e:a8:33:41:13:3c:1e:79:c2:c1:86:ce:e2: 1b:5e:8e:5c:c2:9d:18:df:b3:76:69:95:4c:fe:18:7e:55:b9: e2:61:e4:b6:79:b4:25:de:06:cb:a2:ef:b3:64:03:cb:90:9c: c4:47:41:6f:57:04:b8:93:22:e2:a1:44:a9:84:71:4b:f3:02: 8c:c9:4e:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00Oipt/RwV5KfvEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk YTIwODQzNjctM2JiZi00MzA1LWFmNmYtZWYyNDMwNzA5ZjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm33MrhrxATf+4Wvu8YB94BbzLtOPgLz8rjk3 CYBntEYA/9r3+Ba1a/PkJ6j5p1u8gYZjI5Z5AnmT6R5Acp87eihiSCooRCCOnbmC Wbgihie6CWXAI4gPwNWtSDHxlXC89IkZYcycx/Sutf9fwO3vGMb57Gvl6EskbtJV MaEl8DQOdgCixTFIIe10ruHOgt4hZNEnhc7aI0s6Q82X1RTmgXXjnMxLihe2iA7I hP1gGpyduQFox76VWJO66txprLZqZJs/NRyhDE+8AkMhbh4O2kQoNfCbj1RtL6zj fle/rF7F+fQjjhk6Q6A39lik3tXjL71LMBKU147cBU7cq+cOgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATKwK+QcF2dHPEFCqng8MMAfKmXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjRlOWE5N2EtZTQ2My0z MDMyLTgyYzgtODBiNDE3OWFlM2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbtGrgmG/efJhIijydSjs8y0SUTBT56xA02o7WqglAa1FOjDQys1AqB KoYxK93DGjJpFVd02setuqGiCdhkavWLxixFc0z7uTiHUT0Kb7iQwvhl4bPGsRbe +NNjQh62dS6maqTlCmoGHJ2TxhBfdJEtqzt7vAwGDhOxk/E7qpWJv0psa8gnEw4O oOR7Kuo6z32ObSBOYak4o/No5odgaISe5G1uasF1fbyLdmmBN5w2dWLvyTRpJZn1 DqgzQRM8HnnCwYbO4htejlzCnRjfs3ZplUz+GH5VueJh5LZ5tCXeBsui77NkA8uQ nMRHQW9XBLiTIuKhRKmEcUvzAozJTs4= -----END CERTIFICATE-----Generated at Thu Mar 26 08:34:53 2026 by rpki-client