$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/435854e9-84df-339d-b3dc-d2cf4ace8d7b.roa File: 435854e9-84df-339d-b3dc-d2cf4ace8d7b.roa (raw, json) Hash identifier: KolBCrPMKmWsqy/aatM2VaE0WEKnGJW76AgTfBswOYw= Subject key identifier: EB:24:A1:4A:58:64:30:95:AF:57:06:91:6A:CD:A6:CD:AE:B9:24:2F Certificate issuer: /CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Certificate serial: 010D0C9F4328584CB121E2BBE39994E574051A00 Authority key identifier: 6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/435854e9-84df-339d-b3dc-d2cf4ace8d7b.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 398951 IP address blocks: 23.130.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:e2:bb:e3:99:94:e5:74:05:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=3e8280f0-8a88-4ebd-b4e4-eeb8f3462024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:f2:d2:99:bc:bc:41:91:28:a6:41:77:1f:1f: 1c:80:9b:04:2b:fb:f1:4e:3f:37:ca:eb:32:7b:78: a0:e0:18:f1:39:27:25:a4:b6:5d:89:98:6a:41:f4: b1:64:49:a3:99:d2:8a:d9:42:1d:3f:48:d5:6d:c7: df:03:61:dd:85:f0:2b:68:e1:67:5d:99:a8:a5:d5: 7e:97:77:cb:1e:e7:61:f8:c3:95:b7:87:eb:3e:4a: a0:97:dd:95:1b:fb:2e:6a:40:30:6a:91:d5:2b:39: ff:cc:e2:01:cc:85:e0:21:7a:41:71:20:57:61:39: d7:78:fa:59:b7:b1:6b:77:11:32:3e:a1:e4:a1:f8: 90:a2:a7:84:59:23:68:fc:7c:04:4a:d0:bc:c2:9c: 9b:b8:1f:22:a8:79:f9:33:f7:1f:40:a8:95:e6:53: 46:ac:20:f4:70:33:de:ec:07:3b:b7:1d:b2:75:7b: 84:2c:2c:a0:b3:fd:66:71:9e:81:b9:44:f2:84:a2: fa:d6:54:62:78:19:db:a3:dc:05:8e:0a:4f:97:a9: af:f2:2b:2c:be:ba:91:9b:5e:c3:7b:aa:6f:05:8a: 44:15:38:97:ce:30:95:a6:e2:d5:09:e3:d4:39:14: ad:43:8e:4a:b5:84:e3:2d:bf:d3:8f:d5:4d:66:74: 51:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:24:A1:4A:58:64:30:95:AF:57:06:91:6A:CD:A6:CD:AE:B9:24:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/435854e9-84df-339d-b3dc-d2cf4ace8d7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl X509v3 Authority Key Identifier: keyid:6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer sbgp-ipAddrBlock: critical IPv4: 23.130.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:8e:0f:0d:e5:69:09:87:0e:00:d4:28:a6:83:03:bb:38:e0: b6:43:10:01:0a:19:0b:d9:da:da:68:a1:75:a5:2f:8b:ec:96: 45:77:65:b4:be:a0:28:ed:2a:87:11:06:33:19:df:ae:73:4b: 16:a7:c1:39:c1:0b:9d:69:b8:91:1d:70:55:7c:62:f4:14:da: 98:e5:1d:a1:18:9e:ca:a6:f4:86:54:e0:e0:cc:85:e5:ef:0a: 8b:b0:35:09:77:60:83:a2:c5:4e:0b:00:71:41:6d:f0:8b:ae: c6:bc:22:cb:60:c6:ee:0f:a6:ea:e5:2e:5d:74:87:1d:de:d5: d9:a9:e9:1c:f3:83:d4:62:c7:d4:16:d9:78:08:20:ca:e3:27: 1c:b2:1a:67:5b:6b:65:97:79:a9:44:d1:b7:f7:f9:4b:9e:bc: f5:4c:a3:68:ad:12:e1:01:1a:54:cf:31:fa:64:13:87:7c:18: a5:36:a9:8f:e0:fb:a8:47:54:3a:3d:33:e9:6e:61:73:fb:2d: 0b:db:b1:b1:8d:8c:ac:f5:c1:9d:21:b6:5a:6f:48:22:ee:eb: b5:09:bb:d5:b4:ef:af:c4:9e:4b:54:7f:5e:c9:27:0c:43:67: a3:1b:e8:80:25:ae:8b:3d:0e:27:d3:a9:de:a3:ac:34:f7:8f: 57:4d:45:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIeK745mU5XQFGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmNWNkOGEtZjkwMy00MTc2LTk3YTctNjY3MWU0OWIx YzliMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk M2U4MjgwZjAtOGE4OC00ZWJkLWI0ZTQtZWViOGYzNDYyMDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fLSmby8QZEopkF3Hx8cgJsEK/vxTj83yusy e3ig4BjxOSclpLZdiZhqQfSxZEmjmdKK2UIdP0jVbcffA2HdhfAraOFnXZmopdV+ l3fLHudh+MOVt4frPkqgl92VG/suakAwapHVKzn/zOIBzIXgIXpBcSBXYTnXePpZ t7FrdxEyPqHkofiQoqeEWSNo/HwEStC8wpybuB8iqHn5M/cfQKiV5lNGrCD0cDPe 7Ac7tx2ydXuELCygs/1mcZ6BuUTyhKL61lRieBnbo9wFjgpPl6mv8issvrqRm17D e6pvBYpEFTiXzjCVpuLVCePUORStQ45KtYTjLb/Tj9VNZnRR2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOskoUpYZDCVr1cGkWrNps2uuSQvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NmY1 Y2Q4YS1mOTAzLTQxNzYtOTdhNy02NjcxZTQ5YjFjOWIvNDM1ODU0ZTktODRkZi0z MzlkLWIzZGMtZDJjZjRhY2U4ZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODZmNWNkOGEtZjkwMy00MTc2LTk3 YTctNjY3MWU0OWIxYzliLzg2ZjVjZDhhLWY5MDMtNDE3Ni05N2E3LTY2NzFlNDli MWM5Yi5jcmwwHwYDVR0jBBgwFoAUajTL2XXyS8rb791JQFJ7g8nK5UEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NmY1Y2Q4YS1mOTAzLTQxNzYtOTdhNy02Njcx ZTQ5YjFjOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4I8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMiODw3laQmHDgDUKKaDA7s44LZDEAEKGQvZ2tpooXWlL4vslkV3ZbS+ oCjtKocRBjMZ365zSxanwTnBC51puJEdcFV8YvQU2pjlHaEYnsqm9IZU4ODMheXv CouwNQl3YIOixU4LAHFBbfCLrsa8Istgxu4PpurlLl10hx3e1dmp6Rzzg9Rix9QW 2XgIIMrjJxyyGmdba2WXealE0bf3+UuevPVMo2itEuEBGlTPMfpkE4d8GKU2qY/g +6hHVDo9M+luYXP7LQvbsbGNjKz1wZ0htlpvSCLu67UJu9W076/EnktUf17JJwxD Z6Mb6IAlros9DifTqd6jrDT3j1dNRVU= -----END CERTIFICATE-----Generated at Mon Mar 2 14:59:24 2026 by rpki-client