$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2e285cd-c618-3cfe-b874-5b552520ce4e.roa File: f2e285cd-c618-3cfe-b874-5b552520ce4e.roa (raw, json) Hash identifier: uFnhKHrudAn2dO6H/sRCMPeI9ISK/XJYodhELKRdSmU= Subject key identifier: 05:E8:4C:0A:FA:02:CD:8F:17:E4:FC:B4:FC:DB:01:4E:DE:23:7B:DF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2BDA2F862B47AE643A7D7080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2e285cd-c618-3cfe-b874-5b552520ce4e.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 16625 IP address blocks: 23.220.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:2f:86:2b:47:ae:64:3a:7d:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=bd0dd67e-6acb-4b17-9c96-b6c98dde6c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b9:96:9e:ac:4c:0b:18:b3:05:d0:ea:3d:cd: 2f:93:50:07:50:e5:c0:72:be:60:19:bc:e4:9b:c6: de:20:66:f8:3b:82:21:cd:14:0c:65:41:32:ea:8a: 2c:86:51:fa:ae:c2:62:3d:53:38:18:35:15:57:d1: 9e:f0:38:6b:95:72:6b:14:cf:ff:48:94:8b:8c:a4: 07:ed:b6:29:d0:78:06:65:07:e7:e5:29:e4:07:e4: 57:6b:c8:bb:c0:ca:d3:4b:5b:cc:36:c4:cd:5a:57: 3f:58:0f:24:6a:81:e1:63:74:ed:d2:05:6f:64:c4: c8:e1:50:d5:22:72:39:7d:ca:29:62:59:69:55:9c: dc:8e:be:12:28:dd:5e:f7:7c:3d:7e:58:72:3f:e9: d8:8f:85:22:92:5f:92:07:59:9a:85:e5:60:69:1f: ac:ec:f0:62:7e:56:9f:72:e3:22:3f:63:3a:c5:82: 16:f7:0b:ab:6c:90:0d:88:de:5a:b3:b2:6b:06:df: 2c:13:c2:1b:b4:a8:eb:14:8f:a2:ae:d9:9c:e8:2b: 5c:0c:12:32:3c:1f:81:ef:83:48:91:55:96:4a:f3: ca:6f:86:29:36:24:93:3a:24:9e:cd:97:f8:e4:f0: 13:9c:b9:aa:34:e1:cb:2f:7b:76:e5:ca:0d:24:82: 23:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E8:4C:0A:FA:02:CD:8F:17:E4:FC:B4:FC:DB:01:4E:DE:23:7B:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2e285cd-c618-3cfe-b874-5b552520ce4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:71:d9:d1:42:9d:7d:d8:7b:40:9b:bd:aa:12:0e:c6:c3:87: f6:6b:45:eb:3f:16:4a:a9:61:17:cb:cb:81:fb:e3:8f:81:69: 9d:ff:d9:58:35:11:3d:7d:46:e9:b6:a8:b5:7e:e9:bf:12:f3: cf:62:28:8b:dc:0b:a0:4b:8b:af:b6:95:7f:eb:b9:be:aa:82: 06:43:d3:eb:ed:b4:71:35:6e:5c:80:28:78:a2:34:b6:45:08: 44:d4:55:26:c7:4b:4c:6f:48:58:83:5f:eb:b5:b4:11:82:08: ad:1d:91:48:83:a5:b3:44:65:b9:35:b9:18:fe:95:1e:37:3a: 64:d0:f7:6e:a6:28:50:33:d0:ef:59:b6:36:b5:81:e7:31:a6: 1c:59:64:a8:3e:f2:bc:40:94:1d:4d:91:8e:d1:37:ad:75:27: 10:a6:44:38:13:6c:5f:ae:37:c7:1f:0e:03:a6:bd:8d:85:d6: 36:bd:af:29:7c:d0:ce:76:a9:2e:b0:ba:cd:ac:82:3c:19:4c: 4a:c2:ef:ad:47:22:5c:6d:5e:12:9f:0d:9f:ba:31:c3:e5:0e: 65:68:7c:ed:f7:aa:4f:e8:93:b0:0b:05:09:da:e8:91:76:e4: 21:ac:ec:b4:81:10:36:f2:be:6d:b6:21:a9:59:0e:be:a9:29: 77:89:4f:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2i+GK0euZDp9cIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YmQwZGQ2N2UtNmFjYi00YjE3LTljOTYtYjZjOThkZGU2YzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLmWnqxMCxizBdDqPc0vk1AHUOXAcr5gGbzk m8beIGb4O4IhzRQMZUEy6ooshlH6rsJiPVM4GDUVV9Ge8DhrlXJrFM//SJSLjKQH 7bYp0HgGZQfn5SnkB+RXa8i7wMrTS1vMNsTNWlc/WA8kaoHhY3Tt0gVvZMTI4VDV InI5fcopYllpVZzcjr4SKN1e93w9flhyP+nYj4Uikl+SB1maheVgaR+s7PBiflaf cuMiP2M6xYIW9wurbJANiN5as7JrBt8sE8IbtKjrFI+irtmc6CtcDBIyPB+B74NI kVWWSvPKb4YpNiSTOiSezZf45PATnLmqNOHLL3t25coNJIIjOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXoTAr6As2PF+T8tPzbAU7eI3vfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjJlMjg1Y2QtYzYxOC0z Y2ZlLWI4NzQtNWI1NTI1MjBjZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9yMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChx2dFCnX3Ye0CbvaoSDsbDh/ZrRes/FkqpYRfLy4H744+BaZ3/2Vg1 ET19Rum2qLV+6b8S889iKIvcC6BLi6+2lX/rub6qggZD0+vttHE1blyAKHiiNLZF CETUVSbHS0xvSFiDX+u1tBGCCK0dkUiDpbNEZbk1uRj+lR43OmTQ926mKFAz0O9Z tja1gecxphxZZKg+8rxAlB1NkY7RN611JxCmRDgTbF+uN8cfDgOmvY2F1ja9ryl8 0M52qS6wus2sgjwZTErC761HIlxtXhKfDZ+6McPlDmVofO33qk/ok7ALBQna6JF2 5CGs7LSBEDbyvm22IalZDr6pKXeJT1g= -----END CERTIFICATE-----Generated at Thu Mar 26 10:11:13 2026 by rpki-client