$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/109bb562-bbda-31a6-a501-8f6db523a68a.roa File: 109bb562-bbda-31a6-a501-8f6db523a68a.roa (raw, json) Hash identifier: Qxk5nSF3HrjdQkj/YfK2kls4vdoWiO8JD7Y0Yk0/Ct8= Subject key identifier: 2D:95:AD:90:6F:18:FA:EA:22:39:0E:AF:B5:63:98:00:4E:AA:BE:2C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D07AD1761663D7DF51AD73200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/109bb562-bbda-31a6-a501-8f6db523a68a.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.201.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:17:61:66:3d:7d:f5:1a:d7:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=f72555c1-c8ef-44a1-9248-cc41ca2a07d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:48:b2:a7:9b:99:47:96:2b:c1:ec:37:f8:81: 1c:f9:ab:c4:24:0f:43:56:38:f4:62:b7:58:22:07: d1:c8:27:62:a6:64:ef:f5:fd:c7:0b:9a:bb:7c:bd: 69:c7:8d:52:18:f7:d1:70:e7:a1:be:24:34:df:7a: 1b:ec:76:44:ae:9e:2c:de:a6:5c:64:db:4f:d5:0c: 53:38:a5:4f:53:d4:e2:54:8c:76:f7:de:ae:86:88: 11:fb:8e:e3:66:d4:f6:66:bd:f5:92:18:1d:55:c1: 91:7a:c2:21:3c:66:12:7d:92:26:16:07:f0:8d:4d: 13:bb:36:6b:a9:34:fe:60:17:7e:0d:9e:bd:52:71: d6:60:1c:9b:14:38:7b:af:4a:28:e5:ed:04:d1:e6: d0:0d:b8:61:22:d2:29:75:97:14:46:6c:d9:f4:22: ec:f5:2a:3f:1e:fc:0c:8c:97:92:b6:ac:50:54:ec: 75:da:95:b0:23:de:92:27:4e:97:06:7b:03:c6:01: 3a:56:7b:30:fa:56:ba:c3:d0:a6:58:5e:dc:1e:f7: ce:e7:bb:ca:44:45:aa:0f:40:8f:26:e6:ac:33:ed: 3c:7b:58:f0:49:0f:c1:73:ea:ba:ba:5e:5d:06:90: ec:2e:fe:00:61:8d:d7:b7:fe:f6:59:b1:cd:dd:ca: 31:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:95:AD:90:6F:18:FA:EA:22:39:0E:AF:B5:63:98:00:4E:AA:BE:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/109bb562-bbda-31a6-a501-8f6db523a68a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:92:fc:25:19:14:8d:a0:2d:14:f6:48:ba:16:8c:a5:c8:4b: 3e:4d:47:d1:eb:20:aa:c6:ff:72:c6:c9:1a:03:c3:53:1f:ee: b3:83:2f:74:86:75:91:83:95:65:c0:ff:3e:c2:81:bf:1f:ed: 29:ca:d8:fa:aa:30:d0:ce:c8:f4:74:b0:ff:1b:8a:ce:7d:05: 65:6d:83:09:f7:cf:c0:30:14:19:5d:da:55:00:f9:f1:e7:a7: ce:40:93:9a:fc:86:90:5f:fc:bd:f2:65:f2:b8:40:7f:c1:3d: 85:ee:7c:8f:e8:f4:a9:0e:09:0f:aa:f3:82:e5:c8:b0:eb:7e: e5:b7:21:7a:43:72:f9:59:80:b9:e1:20:9f:99:eb:63:76:7b: fa:2d:83:14:00:6c:66:e0:d9:a4:32:e1:66:4f:ac:2f:da:4a: 08:db:04:2a:81:43:f2:d7:01:0c:23:09:96:87:bc:34:7f:cf: 02:45:57:9f:e7:70:35:7f:aa:98:f1:82:8a:26:c7:09:9c:15: 5e:e4:0b:b6:d0:64:33:2d:24:20:ba:a8:56:57:2d:00:7e:8d: 13:e2:27:f2:5d:8c:fa:e8:c3:39:5e:80:ee:3b:61:be:9e:50: a4:46:b1:a1:a7:90:7c:30:70:82:de:cb:46:29:d1:2a:80:5b: 1b:3d:75:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrRdhZj199RrXMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk ZjcyNTU1YzEtYzhlZi00NGExLTkyNDgtY2M0MWNhMmEwN2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUiyp5uZR5Yrwew3+IEc+avEJA9DVjj0YrdY IgfRyCdipmTv9f3HC5q7fL1px41SGPfRcOehviQ033ob7HZErp4s3qZcZNtP1QxT OKVPU9TiVIx2996uhogR+47jZtT2Zr31khgdVcGResIhPGYSfZImFgfwjU0TuzZr qTT+YBd+DZ69UnHWYBybFDh7r0oo5e0E0ebQDbhhItIpdZcURmzZ9CLs9So/HvwM jJeStqxQVOx12pWwI96SJ06XBnsDxgE6Vnsw+la6w9CmWF7cHvfO57vKREWqD0CP JuasM+08e1jwSQ/Bc+q6ul5dBpDsLv4AYY3Xt/72WbHN3coxuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2VrZBvGPrqIjkOr7VjmABOqr4sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTA5YmI1NjItYmJkYS0z MWE2LWE1MDEtOGY2ZGI1MjNhNjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8kYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGS/CUZFI2gLRT2SLoWjKXISz5NR9HrIKrG/3LGyRoDw1Mf7rODL3SG dZGDlWXA/z7Cgb8f7SnK2PqqMNDOyPR0sP8bis59BWVtgwn3z8AwFBld2lUA+fHn p85Ak5r8hpBf/L3yZfK4QH/BPYXufI/o9KkOCQ+q84LlyLDrfuW3IXpDcvlZgLnh IJ+Z62N2e/otgxQAbGbg2aQy4WZPrC/aSgjbBCqBQ/LXAQwjCZaHvDR/zwJFV5/n cDV/qpjxgoomxwmcFV7kC7bQZDMtJCC6qFZXLQB+jRPiJ/JdjProwzlegO47Yb6e UKRGsaGnkHwwcILey0Yp0SqAWxs9dXo= -----END CERTIFICATE-----Generated at Mon Mar 2 06:36:28 2026 by rpki-client