$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12fae700-0f7b-3fa1-9a88-ded6fe07b906.roa File: 12fae700-0f7b-3fa1-9a88-ded6fe07b906.roa (raw, json) Hash identifier: pJNkqHicyoWtZueIbGNkhDlqgJOTeaHBg0yj7b/ExUM= Subject key identifier: A9:A6:CE:B1:5D:92:06:44:78:CC:70:29:B1:B7:87:2B:BF:8D:D0:9C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C8476CCD783CDD45B46DA6000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12fae700-0f7b-3fa1-9a88-ded6fe07b906.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 35994 IP address blocks: 23.207.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:cc:d7:83:cd:d4:5b:46:da:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=298a4ceb-ee9a-4e49-a32f-306390abb8c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c6:31:de:36:90:e3:5d:7f:f0:60:d0:e2:d7: 60:e5:d4:b8:64:5a:18:e6:ed:ae:26:3b:fc:de:df: 66:68:14:cd:84:2f:6e:d3:5c:42:b1:69:27:42:46: 94:ca:81:f8:bb:8b:e2:3b:62:a7:26:7c:df:3b:13: f2:c2:2f:0d:72:03:58:ad:b9:fb:b7:d0:6b:8d:23: 01:f0:3a:f7:44:67:54:9e:50:c7:af:82:0e:c4:b2: e9:a2:29:19:4c:24:db:e6:9a:61:4f:63:b7:20:cd: 0e:b9:64:99:aa:4b:5a:d5:1f:6c:82:ed:99:96:4b: 24:5b:f1:fc:2b:86:54:a5:9b:da:73:e4:6f:b8:1e: 6d:ad:6d:d1:11:d2:4c:a6:ff:cd:64:bd:e0:53:19: 85:bd:76:a6:d8:c8:62:af:96:e5:67:da:85:11:19: f9:29:49:0b:29:f9:fc:83:ad:a8:fa:fb:ae:7c:42: fa:ec:e3:d7:86:5e:92:d0:8f:9a:eb:95:8b:06:43: ae:77:72:77:4c:ae:11:c1:12:4d:a9:23:72:01:50: 25:be:c8:de:f9:ce:a4:90:04:c4:b5:45:58:39:ba: 03:ef:f4:65:fc:08:95:a5:da:ba:d6:20:80:68:0a: 06:7b:32:83:21:8b:42:9c:bd:bc:6a:29:33:52:e9: 42:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A6:CE:B1:5D:92:06:44:78:CC:70:29:B1:B7:87:2B:BF:8D:D0:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12fae700-0f7b-3fa1-9a88-ded6fe07b906.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:f1:97:c2:a6:94:08:e9:63:dd:3f:14:d4:5f:e9:4e:d7:36: ed:f3:83:a3:8d:62:77:a1:9e:a5:b2:33:df:a2:21:41:45:01: c3:59:40:d1:34:4e:21:c1:19:bd:4e:92:3b:b1:b7:d1:a7:3a: 21:c0:f0:2d:85:74:c4:d9:7d:76:7c:63:69:5b:a1:99:04:db: ab:a4:6f:c7:0d:f1:34:31:b7:2d:a2:69:36:f2:bc:7b:ed:43: e5:16:73:79:6b:95:15:70:df:35:f8:bd:17:32:e8:d7:50:5e: 52:75:d9:62:4c:f6:41:98:5c:51:68:d7:ee:53:0c:77:5c:fa: 3e:4f:80:72:c9:0a:a2:ed:72:44:72:c4:60:5f:ed:08:8b:4d: ac:a9:a0:6f:33:fe:80:12:63:b2:01:42:aa:0b:23:a0:3e:72: 63:07:5e:02:3f:cc:36:b4:b7:d0:18:23:5a:3d:37:62:7d:8d: 65:0f:d7:79:63:4a:59:9d:28:9b:3d:c9:6c:94:ca:84:72:bb: ad:03:21:e2:86:33:14:38:ba:4a:de:34:1d:f4:2f:4b:e7:b8: 17:7c:e3:6c:2a:17:09:3f:d3:fc:da:2c:9d:55:a2:c2:8b:e6: 22:db:d4:bb:71:a6:17:dc:6e:4d:d4:b7:9b:d9:06:92:69:35: 7d:6d:b0:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdszXg83UW0baYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk Mjk4YTRjZWItZWU5YS00ZTQ5LWEzMmYtMzA2MzkwYWJiOGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cYx3jaQ411/8GDQ4tdg5dS4ZFoY5u2uJjv8 3t9maBTNhC9u01xCsWknQkaUyoH4u4viO2KnJnzfOxPywi8NcgNYrbn7t9BrjSMB 8Dr3RGdUnlDHr4IOxLLpoikZTCTb5pphT2O3IM0OuWSZqkta1R9sgu2ZlkskW/H8 K4ZUpZvac+RvuB5trW3REdJMpv/NZL3gUxmFvXam2Mhir5blZ9qFERn5KUkLKfn8 g62o+vuufEL67OPXhl6S0I+a65WLBkOud3J3TK4RwRJNqSNyAVAlvsje+c6kkATE tUVYOboD7/Rl/AiVpdq61iCAaAoGezKDIYtCnL28aikzUulCNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmmzrFdkgZEeMxwKbG3hyu/jdCcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTJmYWU3MDAtMGY3Yi0z ZmExLTlhODgtZGVkNmZlMDdiOTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8+qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfxl8KmlAjpY90/FNRf6U7XNu3zg6ONYnehnqWyM9+iIUFFAcNZQNE0 TiHBGb1Okjuxt9GnOiHA8C2FdMTZfXZ8Y2lboZkE26ukb8cN8TQxty2iaTbyvHvt Q+UWc3lrlRVw3zX4vRcy6NdQXlJ12WJM9kGYXFFo1+5TDHdc+j5PgHLJCqLtckRy xGBf7QiLTaypoG8z/oASY7IBQqoLI6A+cmMHXgI/zDa0t9AYI1o9N2J9jWUP13lj SlmdKJs9yWyUyoRyu60DIeKGMxQ4ukreNB30L0vnuBd842wqFwk/0/zaLJ1VosKL 5iLb1Ltxphfcbk3Ut5vZBpJpNX1tsJs= -----END CERTIFICATE-----Generated at Mon Mar 2 00:45:49 2026 by rpki-client