$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a62e32e-de24-3699-99f8-b3d6c7355292.roa File: 1a62e32e-de24-3699-99f8-b3d6c7355292.roa (raw, json) Hash identifier: qi70JBA7RSYdp6wqhFY8ubLEFGgf0Qna9wJLdP6Pt40= Subject key identifier: 54:FE:FD:C8:94:CD:DA:99:1F:B0:C2:10:D1:03:41:7B:51:FD:A3:3D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D0647B02CE9C68E9FF9AB3F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a62e32e-de24-3699-99f8-b3d6c7355292.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.199.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:b0:2c:e9:c6:8e:9f:f9:ab:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=a0b5085d-e846-4bde-9d0d-e8b6832b2e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:22:f9:4a:82:bf:0c:b7:ee:07:77:35:e7:41: ea:c2:2e:56:f3:3c:a0:7a:9a:f3:1b:77:ec:fd:91: 7e:44:76:5e:a8:1b:42:89:8e:3b:d8:24:1d:a4:b7: df:cb:56:4d:07:47:1a:ba:9e:00:f9:3e:e5:19:0b: 61:1d:d8:b7:9c:5e:e3:c7:d9:54:77:49:1b:c1:fa: 18:cc:72:15:dd:8a:8d:c9:e9:fd:3f:9f:34:bf:62: 28:72:0b:49:2b:43:55:d3:9d:01:13:7e:42:e7:06: 6d:9f:ad:5a:d2:a3:78:65:6b:d3:98:4e:28:4d:5b: da:d9:8f:bc:49:9c:bf:3e:28:24:99:00:78:fb:23: 50:c3:62:43:c7:94:64:ac:4d:e4:3a:b4:01:58:d5: 9b:69:c9:ea:21:b3:29:91:00:27:67:21:c7:c9:ff: 10:d1:3f:c9:73:43:07:de:66:ab:ab:d1:6e:a2:ac: b8:3f:ff:64:7e:1c:d4:5b:08:02:e9:b9:2e:61:87: 9d:7b:75:af:25:77:6b:33:a1:85:54:76:bd:1b:ae: 52:61:d1:6d:9a:a3:eb:f8:83:ca:c1:c6:d6:7e:27: a6:85:be:7b:4b:03:fb:8d:87:7b:3f:19:50:6f:00: cc:b0:30:74:be:5c:2e:5b:46:16:ac:9c:08:93:a4: 6f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FE:FD:C8:94:CD:DA:99:1F:B0:C2:10:D1:03:41:7B:51:FD:A3:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a62e32e-de24-3699-99f8-b3d6c7355292.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b3:f3:74:ea:49:8e:e6:8e:50:b3:c6:21:de:15:03:54:6e: 89:2a:c3:80:9c:4e:c0:ce:39:85:f2:17:d6:08:bb:dd:e0:e1: df:7a:84:91:35:21:80:41:21:ef:4f:d9:97:de:9d:3f:96:2e: 17:33:e4:63:db:8c:cf:93:ec:4d:5b:b5:4f:9e:74:cc:02:ae: 20:eb:82:fb:b2:03:4c:e3:c4:76:5b:e8:be:0b:0b:f7:16:13: 21:10:01:f5:e2:19:7a:87:94:f2:21:d2:e2:46:ea:44:0c:c4: dc:d7:b1:42:27:79:84:f1:dd:e7:d7:c2:0a:5a:31:de:a3:a9: c5:1b:0c:85:99:1c:75:41:e0:91:6f:e2:53:0a:28:41:b5:fe: 23:49:20:d4:12:69:7e:d5:0d:5c:7c:bc:3d:f8:af:d1:d8:b2: 04:d6:a3:13:a3:e9:31:c4:b8:9b:b8:fe:94:95:d0:ff:ea:c2: 7e:93:c8:cc:f4:9f:08:c2:4a:66:6f:81:c3:53:b6:61:29:c1: 0e:3a:4e:c9:15:4b:eb:4f:b9:ff:f3:8d:5e:e9:6e:b6:e3:2a: f3:c5:05:2b:e3:a0:c6:dd:74:4e:ec:9e:eb:72:ad:ed:29:00: 27:9f:31:52:96:58:19:30:de:75:e6:66:61:99:a2:f3:68:54: 9a:5c:7a:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0GR7As6caOn/mrP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk YTBiNTA4NWQtZTg0Ni00YmRlLTlkMGQtZThiNjgzMmIyZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyL5SoK/DLfuB3c150Hqwi5W8zygeprzG3fs /ZF+RHZeqBtCiY472CQdpLffy1ZNB0caup4A+T7lGQthHdi3nF7jx9lUd0kbwfoY zHIV3YqNyen9P580v2IocgtJK0NV050BE35C5wZtn61a0qN4ZWvTmE4oTVva2Y+8 SZy/PigkmQB4+yNQw2JDx5RkrE3kOrQBWNWbacnqIbMpkQAnZyHHyf8Q0T/Jc0MH 3marq9Fuoqy4P/9kfhzUWwgC6bkuYYede3WvJXdrM6GFVHa9G65SYdFtmqPr+IPK wcbWfiemhb57SwP7jYd7PxlQbwDMsDB0vlwuW0YWrJwIk6RvIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFT+/ciUzdqZH7DCENEDQXtR/aM9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWE2MmUzMmUtZGUyNC0z Njk5LTk5ZjgtYjNkNmM3MzU1MjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8dAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKz83TqSY7mjlCzxiHeFQNUbokqw4CcTsDOOYXyF9YIu93g4d96hJE1 IYBBIe9P2ZfenT+WLhcz5GPbjM+T7E1btU+edMwCriDrgvuyA0zjxHZb6L4LC/cW EyEQAfXiGXqHlPIh0uJG6kQMxNzXsUIneYTx3efXwgpaMd6jqcUbDIWZHHVB4JFv 4lMKKEG1/iNJINQSaX7VDVx8vD34r9HYsgTWoxOj6THEuJu4/pSV0P/qwn6TyMz0 nwjCSmZvgcNTtmEpwQ46TskVS+tPuf/zjV7pbrbjKvPFBSvjoMbddE7snutyre0p ACefMVKWWBkw3nXmZmGZovNoVJpceu4= -----END CERTIFICATE-----Generated at Sun Mar 1 23:17:49 2026 by rpki-client