$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fcc0b5ba-64eb-3a5d-8576-13d099f11375.roa File: fcc0b5ba-64eb-3a5d-8576-13d099f11375.roa (raw, json) Hash identifier: 3oKsFBfoKIRmIjc1dMNhjHBUNoLG4nyAslkIkJn88bo= Subject key identifier: 1F:13:A8:52:EE:14:2E:6F:00:90:2E:CF:BA:F8:C2:22:8D:0D:5C:BB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D343A2B7D12D200F7C9C82B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fcc0b5ba-64eb-3a5d-8576-13d099f11375.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 20940 IP address blocks: 23.220.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:2b:7d:12:d2:00:f7:c9:c8:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=a537d90c-5783-42e6-a03d-3cb3264bd320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:10:5a:52:6e:05:96:f6:47:3c:f6:0e:d8:db: 59:03:41:96:19:7e:2b:8f:e2:fa:a8:23:54:08:48: 3d:2f:6a:fa:d3:b5:f1:ad:64:a9:14:da:7a:b5:58: 36:ae:d7:99:36:45:83:83:a2:43:93:3c:e1:ec:71: 1b:01:e2:b2:4d:a3:eb:c4:14:a8:db:e9:9e:f0:41: f7:d6:82:3f:07:f7:15:a9:dd:b3:ec:b9:a6:41:6b: 21:84:f4:0e:f5:13:99:65:84:4e:5d:eb:83:6d:47: ba:be:50:0b:2c:ce:2d:a4:56:46:55:c2:05:0c:e2: 21:03:f1:9a:3d:74:f5:48:f6:6a:77:e7:e2:76:09: 85:5c:a4:5a:ee:02:00:e5:07:af:37:9c:7b:49:c7: 07:84:55:cf:85:0d:e3:b0:8d:6a:8d:f8:09:8d:d4: 0d:95:88:3a:13:d2:9d:af:b3:cb:d9:24:cc:87:48: 36:be:bc:c7:08:ae:4b:06:d4:ab:fb:d0:3b:ab:d9: 34:8d:cd:cc:02:b3:5e:e5:d9:d4:9a:ba:cc:55:24: 04:c7:b8:20:5f:88:19:03:50:23:50:3b:51:8c:a2: 5c:cd:fb:e6:94:68:84:f3:f2:13:00:07:ab:99:78: 30:b9:b6:b6:5d:62:95:bb:21:68:7f:98:32:ae:02: ce:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:13:A8:52:EE:14:2E:6F:00:90:2E:CF:BA:F8:C2:22:8D:0D:5C:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fcc0b5ba-64eb-3a5d-8576-13d099f11375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:4f:ce:b9:aa:15:ec:8b:29:51:5b:ed:22:83:dd:de:13:51: 6e:31:ab:7c:98:c1:b9:4b:d8:11:86:a5:a1:5f:59:75:30:cc: 2d:79:7a:08:c7:4d:55:8d:40:c7:08:65:23:10:af:77:93:41: d0:35:e6:62:64:8d:35:16:9d:8a:75:61:a2:13:59:0d:03:c3: 5a:16:78:16:f4:e1:e5:5c:57:ee:74:8c:e2:b4:44:8c:a7:45: fd:f6:83:24:13:5a:80:a9:ca:53:84:03:3e:57:0f:1e:1d:7a: 6e:3b:6f:94:a5:18:d8:a6:88:6b:47:62:3f:30:62:16:97:2a: fc:0a:fa:2f:30:82:a7:11:2f:40:95:9f:a5:5c:29:68:00:4e: 56:e5:b2:39:21:c4:2b:0d:bd:76:0d:c8:d8:a8:64:fb:5f:1a: cc:34:c3:0f:3a:82:8d:d3:13:1d:2a:99:bf:0c:5e:1f:cb:a8: af:39:f2:ed:e3:4f:1e:22:3d:5a:d0:46:73:06:5d:60:88:33: 1a:f8:e6:42:f1:c4:b8:d7:07:6c:54:94:27:fb:62:e9:90:78: 78:93:1f:49:d9:39:e2:07:6e:e6:94:8c:11:4c:ac:62:83:0f: 43:1f:61:8c:32:b6:d7:89:7a:cc:01:d3:03:ac:73:d8:07:1e: d9:b9:03:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00Oit9EtIA98nIK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk YTUzN2Q5MGMtNTc4My00MmU2LWEwM2QtM2NiMzI2NGJkMzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hBaUm4FlvZHPPYO2NtZA0GWGX4rj+L6qCNU CEg9L2r607XxrWSpFNp6tVg2rteZNkWDg6JDkzzh7HEbAeKyTaPrxBSo2+me8EH3 1oI/B/cVqd2z7LmmQWshhPQO9ROZZYROXeuDbUe6vlALLM4tpFZGVcIFDOIhA/Ga PXT1SPZqd+fidgmFXKRa7gIA5QevN5x7SccHhFXPhQ3jsI1qjfgJjdQNlYg6E9Kd r7PL2STMh0g2vrzHCK5LBtSr+9A7q9k0jc3MArNe5dnUmrrMVSQEx7ggX4gZA1Aj UDtRjKJczfvmlGiE8/ITAAermXgwuba2XWKVuyFof5gyrgLOQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8TqFLuFC5vAJAuz7r4wiKNDVy7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmNjMGI1YmEtNjRlYi0z YTVkLTg1NzYtMTNkMDk5ZjExMzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9yRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJPzrmqFeyLKVFb7SKD3d4TUW4xq3yYwblL2BGGpaFfWXUwzC15egjH TVWNQMcIZSMQr3eTQdA15mJkjTUWnYp1YaITWQ0Dw1oWeBb04eVcV+50jOK0RIyn Rf32gyQTWoCpylOEAz5XDx4dem47b5SlGNimiGtHYj8wYhaXKvwK+i8wgqcRL0CV n6VcKWgATlblsjkhxCsNvXYNyNioZPtfGsw0ww86go3TEx0qmb8MXh/LqK858u3j Tx4iPVrQRnMGXWCIMxr45kLxxLjXB2xUlCf7YumQeHiTH0nZOeIHbuaUjBFMrGKD D0MfYYwytteJeswB0wOsc9gHHtm5A9A= -----END CERTIFICATE-----Generated at Thu Mar 26 13:57:59 2026 by rpki-client