$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc01fc0c-00dc-3d37-b1de-a080c4fe6116.roa File: cc01fc0c-00dc-3d37-b1de-a080c4fe6116.roa (raw, json) Hash identifier: Av19g2WKL0TWlKsZbMUNfh7h368hlR2QaUCGu2xA5Xg= Subject key identifier: 60:2E:C2:49:A1:3E:6D:DE:D5:B3:A8:FF:DB:21:29:08:90:46:3F:7E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2BDA2C90434D0923E08BE758 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc01fc0c-00dc-3d37-b1de-a080c4fe6116.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 16625 IP address blocks: 23.223.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:2c:90:43:4d:09:23:e0:8b:e7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=af8e8259-565a-4a59-9de1-5ec61c28d199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a3:1b:d5:9f:8a:36:62:ca:7a:08:70:92:80: fc:3d:ef:79:88:34:64:2d:72:bc:fd:b5:7a:f5:d3: 0c:ed:b8:47:47:9f:07:e4:07:cd:1e:42:36:3a:43: 89:68:eb:8b:b3:8c:a0:1b:07:90:b2:b5:5e:f7:98: 5b:62:3e:bc:30:a4:92:37:20:0c:af:c1:f4:c2:eb: 33:7f:45:57:32:f7:33:f8:04:fb:59:b4:91:0d:bd: 1d:f2:23:aa:23:55:7d:fd:18:af:2b:6c:0d:e1:6f: 3d:3f:8d:f3:2f:77:6c:87:ac:53:97:8c:9a:20:d4: 2c:26:8d:44:3b:b9:e9:d5:55:ae:7e:e7:8c:ab:e4: c2:9d:c7:1a:7d:eb:45:28:fa:26:1f:fb:da:fe:6d: fe:87:88:19:97:14:65:03:fb:87:23:0b:49:5c:97: 33:24:75:56:22:48:cd:ef:43:64:1b:db:38:e0:04: d2:02:c9:ca:52:fb:76:73:5f:a5:5c:70:c5:72:a1: 1a:8f:eb:75:b3:0a:92:35:e4:43:96:32:41:30:f5: 89:96:91:71:f2:a4:b3:33:30:27:9e:50:65:91:a0: 41:e4:55:16:5b:5f:7f:b3:b5:56:44:84:2a:7e:86: a0:91:62:63:af:7a:d8:ab:26:ed:40:5c:ff:93:a7: 4e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2E:C2:49:A1:3E:6D:DE:D5:B3:A8:FF:DB:21:29:08:90:46:3F:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc01fc0c-00dc-3d37-b1de-a080c4fe6116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:b3:ee:7f:72:dd:2a:dc:30:53:11:b9:fc:d6:76:1e:3c:ed: 32:ad:f4:4f:85:cd:b2:11:89:29:46:c1:1b:c7:f9:d8:91:12: 7b:43:3e:a2:6d:9c:b9:9d:2f:7e:7e:4f:a0:20:ff:6c:17:17: 0d:95:a2:48:ce:83:53:fa:21:19:fd:ad:69:09:cc:ce:8b:21: 60:91:38:56:b5:e3:55:3a:69:26:0e:b9:f3:6c:1d:e6:61:52: f0:41:3c:85:35:63:ae:4b:d1:d3:93:bc:52:97:98:b8:c4:be: 85:2c:e6:20:20:c3:43:38:10:a9:ae:4c:e6:85:76:d0:0f:4f: 5a:b3:ab:24:84:d4:f1:31:d7:d1:ab:df:27:d6:65:a4:81:c7: 7f:9d:c2:6b:94:a7:77:81:1e:f5:93:2a:96:13:d3:2d:a6:64: ba:62:e0:53:fd:df:37:da:db:f2:41:9d:05:e6:7d:77:a5:1f: 8e:df:a5:fb:73:1b:3f:2b:de:84:a4:ea:c9:95:9e:36:d0:8d: f5:ba:72:94:9d:f9:19:71:00:8b:25:66:1d:0a:cc:66:1b:b7: 99:f0:16:13:dd:4f:6f:9a:16:92:2a:8a:b0:5d:49:cc:b5:b1: 1d:ef:cb:1f:27:0f:07:0f:74:83:d4:a0:cd:14:3e:b0:e1:53: 96:02:67:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2iyQQ00JI+CL51gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YWY4ZTgyNTktNTY1YS00YTU5LTlkZTEtNWVjNjFjMjhkMTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqMb1Z+KNmLKeghwkoD8Pe95iDRkLXK8/bV6 9dMM7bhHR58H5AfNHkI2OkOJaOuLs4ygGweQsrVe95hbYj68MKSSNyAMr8H0wusz f0VXMvcz+AT7WbSRDb0d8iOqI1V9/RivK2wN4W89P43zL3dsh6xTl4yaINQsJo1E O7np1VWufueMq+TCnccafetFKPomH/va/m3+h4gZlxRlA/uHIwtJXJczJHVWIkjN 70NkG9s44ATSAsnKUvt2c1+lXHDFcqEaj+t1swqSNeRDljJBMPWJlpFx8qSzMzAn nlBlkaBB5FUWW19/s7VWRIQqfoagkWJjr3rYqybtQFz/k6dOXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAuwkmhPm3e1bOo/9shKQiQRj9+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2MwMWZjMGMtMDBkYy0z ZDM3LWIxZGUtYTA4MGM0ZmU2MTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF9+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiz7n9y3SrcMFMRufzWdh487TKt9E+FzbIRiSlGwRvH+diREntDPqJt nLmdL35+T6Ag/2wXFw2VokjOg1P6IRn9rWkJzM6LIWCROFa141U6aSYOufNsHeZh UvBBPIU1Y65L0dOTvFKXmLjEvoUs5iAgw0M4EKmuTOaFdtAPT1qzqySE1PEx19Gr 3yfWZaSBx3+dwmuUp3eBHvWTKpYT0y2mZLpi4FP93zfa2/JBnQXmfXelH47fpftz Gz8r3oSk6smVnjbQjfW6cpSd+RlxAIslZh0KzGYbt5nwFhPdT2+aFpIqirBdScy1 sR3vyx8nDwcPdIPUoM0UPrDhU5YCZ2Y= -----END CERTIFICATE-----Generated at Thu Mar 26 11:37:02 2026 by rpki-client