$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffa79d38-a6f1-3031-9319-0f58b285b01a.roa File: ffa79d38-a6f1-3031-9319-0f58b285b01a.roa (raw, json) Hash identifier: I1Hh/YtZZb6RGg6N226dL/J3uV91THcPP0laBhT8ynA= Subject key identifier: 51:24:A7:B2:19:90:06:CC:CB:5B:81:CB:7D:B2:A3:D2:EC:72:D3:2F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2BDA27DBB976CC970391DD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffa79d38-a6f1-3031-9319-0f58b285b01a.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.220.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:27:db:b9:76:cc:97:03:91:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=c6690990-f3cb-41df-adb4-b430c4c27958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:fe:bb:fa:ff:5f:20:21:e9:14:f1:fb:8c: 7a:06:4d:21:6b:df:cd:56:ab:d0:38:90:6b:59:c3: dd:c9:f2:25:bd:d7:5f:ba:ac:65:0e:23:50:69:ae: 98:ca:ed:98:55:8e:7c:55:bc:1b:1d:9b:47:93:1c: 33:8b:e4:40:ff:49:07:bc:3a:af:d1:e0:44:b0:4e: 3f:5a:b1:33:6e:45:4f:d5:a2:1f:10:80:18:b6:86: bd:df:36:ae:ff:e7:93:78:a6:b3:89:7b:16:75:b0: ea:3d:40:63:63:88:41:26:e8:36:1f:7c:43:b3:ba: fd:da:23:de:c6:e3:0f:13:cd:41:2a:7a:c4:e5:fd: 5c:ab:8a:d9:71:bb:69:11:93:60:19:fd:77:59:de: dd:90:5f:35:c2:0f:19:55:ff:81:3e:eb:11:c1:61: ad:e2:76:66:11:8e:ba:6a:fe:79:10:58:42:f6:18: 1f:e5:50:8c:1e:f4:e3:59:11:58:89:be:b1:cd:2c: 79:de:34:67:c7:73:82:cb:f9:cb:e4:29:bf:db:75: 34:53:8c:e9:a8:5b:29:fd:7b:a9:49:81:bc:01:82: a7:e6:2a:eb:db:e9:21:d5:a8:5f:73:04:5a:6a:4b: 6f:0d:f2:30:aa:c1:fa:be:01:45:cc:da:81:21:fb: fd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:24:A7:B2:19:90:06:CC:CB:5B:81:CB:7D:B2:A3:D2:EC:72:D3:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffa79d38-a6f1-3031-9319-0f58b285b01a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:35:81:da:dd:ac:85:f5:7c:6e:a0:62:e2:0a:bc:ea:40:4c: ec:d4:dc:7a:6c:a1:c9:f6:9b:da:75:f4:5c:1b:9c:a0:23:a5: 2b:f6:7c:97:b5:c3:a8:56:fc:fe:3a:b5:cd:6d:80:6b:75:e5: 60:83:52:7d:7e:3e:55:e7:cb:36:55:f6:90:79:71:bd:13:58: aa:9b:e2:f2:f8:0a:fe:8b:d9:91:84:a3:76:06:1d:2d:bd:04: fc:b6:7b:ae:03:b9:36:5c:6f:0d:46:16:8e:db:bf:35:8f:18: cd:34:7e:aa:66:6b:f0:a6:15:2c:ac:26:3f:12:e0:75:f3:2d: 61:c0:64:76:56:de:fc:30:ee:4a:0c:82:b7:77:e0:f9:c4:87: 4a:58:2c:ea:53:95:0f:6d:80:fc:75:0a:45:d1:8c:59:9a:64: 0a:29:b8:aa:3c:23:e1:95:5a:43:bf:7d:6c:cb:91:14:cd:c7: de:7f:c2:40:10:96:c6:57:13:17:03:ad:3b:39:3f:eb:da:f3: 09:fb:e7:6b:6f:49:c6:94:cf:ab:39:af:73:8f:6d:bf:29:f9: 3a:38:c3:63:1d:52:24:0b:65:1a:52:52:e4:09:64:c3:27:53: a9:45:68:8e:b8:59:5c:84:f9:15:c7:65:b9:51:6c:de:a1:66: b0:0b:72:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2ifbuXbMlwOR3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YzY2OTA5OTAtZjNjYi00MWRmLWFkYjQtYjQzMGM0YzI3OTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1X+u/r/XyAh6RTx+4x6Bk0ha9/NVqvQOJBr WcPdyfIlvddfuqxlDiNQaa6Yyu2YVY58VbwbHZtHkxwzi+RA/0kHvDqv0eBEsE4/ WrEzbkVP1aIfEIAYtoa93zau/+eTeKaziXsWdbDqPUBjY4hBJug2H3xDs7r92iPe xuMPE81BKnrE5f1cq4rZcbtpEZNgGf13Wd7dkF81wg8ZVf+BPusRwWGt4nZmEY66 av55EFhC9hgf5VCMHvTjWRFYib6xzSx53jRnx3OCy/nL5Cm/23U0U4zpqFsp/Xup SYG8AYKn5irr2+kh1ahfcwRaaktvDfIwqsH6vgFFzNqBIfv9BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEkp7IZkAbMy1uBy32yo9LsctMvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmZhNzlkMzgtYTZmMS0z MDMxLTkzMTktMGY1OGIyODViMDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9zAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADo1gdrdrIX1fG6gYuIKvOpATOzU3Hpsocn2m9p19FwbnKAjpSv2fJe1 w6hW/P46tc1tgGt15WCDUn1+PlXnyzZV9pB5cb0TWKqb4vL4Cv6L2ZGEo3YGHS29 BPy2e64DuTZcbw1GFo7bvzWPGM00fqpma/CmFSysJj8S4HXzLWHAZHZW3vww7koM grd34PnEh0pYLOpTlQ9tgPx1CkXRjFmaZAopuKo8I+GVWkO/fWzLkRTNx95/wkAQ lsZXExcDrTs5P+va8wn752tvScaUz6s5r3OPbb8p+To4w2MdUiQLZRpSUuQJZMMn U6lFaI64WVyE+RXHZblRbN6hZrALci8= -----END CERTIFICATE-----Generated at Thu Mar 26 05:23:41 2026 by rpki-client