$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4aaf835-035d-3087-b131-ce7386d0e1c7.roa File: c4aaf835-035d-3087-b131-ce7386d0e1c7.roa (raw, json) Hash identifier: M+R7010PhwMdm91x4bfEOU9rtY808UUP/mex5/SGBek= Subject key identifier: C5:CF:1E:9F:39:14:B6:38:34:A9:6C:A3:B3:E7:BC:18:F4:34:0E:A3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2BDA292922DB8EFF8EAD0300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4aaf835-035d-3087-b131-ce7386d0e1c7.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.221.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:29:29:22:db:8e:ff:8e:ad:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=520dd7d4-1158-48f6-8682-61bbecec933b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:15:ca:f5:84:49:40:59:e1:63:54:85:c4:66: 19:51:30:78:36:1f:af:65:a2:d9:c3:08:26:e1:dd: 71:41:b1:dd:5e:a9:13:f7:3a:4c:6c:e2:0f:e9:12: 79:3e:c0:8c:01:ad:9c:b8:76:ca:ed:48:b8:7c:5d: 3c:cc:e8:e0:38:82:35:c5:00:11:5c:99:52:59:66: b1:01:58:e6:91:43:18:d7:c0:62:29:62:76:19:de: e5:6b:79:89:c5:11:bf:a3:85:1e:89:56:36:c6:b7: 01:80:82:66:86:0e:90:82:9b:63:13:4f:05:e8:17: 0a:17:bb:64:94:17:d0:06:cb:1a:a7:92:4e:67:24: 9c:43:7a:88:6a:74:75:e1:12:b4:d4:3d:e9:b1:79: bc:1a:88:38:d5:55:97:6e:34:f7:88:db:f9:a8:57: 96:4c:42:70:3b:46:54:b4:af:a2:04:d4:7b:d5:c0: 39:53:9d:cf:1a:b2:10:dd:ca:61:9d:a7:ec:d7:00: 8a:82:f2:1c:9b:37:4f:25:3c:25:4f:d9:df:12:a3: e2:e1:89:5c:fe:ad:4e:50:f0:98:1e:75:8e:eb:3f: 5b:5a:59:1b:8a:a0:9c:33:ce:c4:f1:8b:16:7f:1d: d2:6a:77:a8:36:2a:8f:fd:ea:36:71:d1:83:32:2e: fa:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CF:1E:9F:39:14:B6:38:34:A9:6C:A3:B3:E7:BC:18:F4:34:0E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4aaf835-035d-3087-b131-ce7386d0e1c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:84:92:3e:22:d8:cb:07:df:cf:d1:f5:ae:55:90:ff:60:f9: 94:00:17:4c:5f:4e:8d:fb:88:0b:39:80:df:e1:d3:70:22:17: cb:a4:13:50:08:cf:d8:c8:9f:98:c4:b3:98:9a:6e:65:09:da: d3:b2:3a:34:ef:ab:10:cc:3b:fe:0a:9e:d3:bb:26:7d:cb:8a: 65:ad:c2:2a:a9:d6:18:1a:fd:71:ba:03:87:6a:7b:33:08:71: fc:89:78:eb:52:42:a3:a4:13:99:09:16:25:8c:bf:f6:65:26: 99:58:d2:2e:69:7a:5e:1e:1a:66:85:4c:cd:93:b8:28:ee:a6: f7:15:e4:e1:9a:56:0e:a8:96:65:12:0b:ab:4f:fe:34:c5:c3: eb:f0:2e:d0:1c:8a:7a:26:03:1e:f3:c7:a7:ef:ff:92:24:8e: 98:82:53:ce:af:b0:aa:45:76:9a:98:93:cb:42:97:fb:f0:2a: 22:aa:2e:c4:03:57:db:bd:74:61:3a:c1:67:ad:94:be:55:a3: 1d:91:c6:c2:e5:82:a8:38:d4:41:f0:24:4d:3f:b0:67:b2:2c: b3:76:0c:c5:a6:e6:d3:8d:32:16:82:1d:a1:03:d3:31:47:de: 78:a5:9f:2b:88:ba:63:81:76:b1:9d:d9:f2:28:21:5d:4a:da: b0:48:94:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2ikpItuO/46tAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NTIwZGQ3ZDQtMTE1OC00OGY2LTg2ODItNjFiYmVjZWM5MzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxXK9YRJQFnhY1SFxGYZUTB4Nh+vZaLZwwgm 4d1xQbHdXqkT9zpMbOIP6RJ5PsCMAa2cuHbK7Ui4fF08zOjgOII1xQARXJlSWWax AVjmkUMY18BiKWJ2Gd7la3mJxRG/o4UeiVY2xrcBgIJmhg6QgptjE08F6BcKF7tk lBfQBssap5JOZyScQ3qIanR14RK01D3psXm8Gog41VWXbjT3iNv5qFeWTEJwO0ZU tK+iBNR71cA5U53PGrIQ3cphnafs1wCKgvIcmzdPJTwlT9nfEqPi4Ylc/q1OUPCY HnWO6z9bWlkbiqCcM87E8YsWfx3SaneoNiqP/eo2cdGDMi76zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXPHp85FLY4NKlso7PnvBj0NA6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzRhYWY4MzUtMDM1ZC0z MDg3LWIxMzEtY2U3Mzg2ZDBlMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF93eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKEkj4i2MsH38/R9a5VkP9g+ZQAF0xfTo37iAs5gN/h03AiF8ukE1AI z9jIn5jEs5iabmUJ2tOyOjTvqxDMO/4KntO7Jn3LimWtwiqp1hga/XG6A4dqezMI cfyJeOtSQqOkE5kJFiWMv/ZlJplY0i5pel4eGmaFTM2TuCjupvcV5OGaVg6olmUS C6tP/jTFw+vwLtAcinomAx7zx6fv/5IkjpiCU86vsKpFdpqYk8tCl/vwKiKqLsQD V9u9dGE6wWetlL5Vox2RxsLlgqg41EHwJE0/sGeyLLN2DMWm5tONMhaCHaED0zFH 3nilnyuIumOBdrGd2fIoIV1K2rBIlN8= -----END CERTIFICATE-----Generated at Thu Mar 26 03:50:58 2026 by rpki-client