$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fa61cd3-2035-3be4-905a-2942784b566b.roa File: 1fa61cd3-2035-3be4-905a-2942784b566b.roa (raw, json) Hash identifier: /6+lFbwydXw4tsxm5JfhbfgywsER9tIoXb3kP1o4tLM= Subject key identifier: 3E:4A:85:9C:27:3E:2E:21:D6:6A:A1:5F:D7:C1:23:F5:34:65:10:84 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D07AD17EC32C8B0DE31B29500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fa61cd3-2035-3be4-905a-2942784b566b.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.201.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:17:ec:32:c8:b0:de:31:b2:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=2468408f-765f-4696-ad80-17052bcaec86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:48:44:d4:79:34:b0:38:80:19:49:33:6f:a0: aa:dc:64:c7:eb:34:7e:75:9c:04:e5:1e:1a:a9:49: 2b:e2:7a:f6:5a:b5:1f:4c:f6:a2:77:2b:3d:0b:89: f6:77:76:23:15:7f:ff:75:01:d2:98:5c:b3:68:ff: 2f:bc:2a:d4:8d:23:69:9f:2c:c0:77:d7:e8:1e:68: 47:6a:d9:da:78:64:12:e4:53:61:27:ab:92:c0:11: a6:f0:51:67:62:28:6a:44:47:0f:70:41:89:a8:8a: 92:20:3d:03:68:11:d6:60:55:96:7e:59:5d:78:fc: 28:7d:b9:67:cd:62:a5:b4:fb:ce:22:53:18:25:60: 73:3a:02:e3:d1:f2:a8:46:a4:68:e6:07:26:8b:c6: 3e:a3:c6:e8:72:63:17:bf:53:61:cf:e4:93:98:46: 76:6a:74:ef:42:b2:69:ee:48:38:48:45:f8:47:93: e0:91:b3:45:17:88:e6:15:30:1a:2f:bd:87:19:e7: 0f:3c:8d:b8:26:e1:8a:5e:1c:de:58:23:cf:c2:94: 82:01:74:fd:e1:d7:ab:96:f3:8a:43:97:99:0a:d4: 70:f9:9e:13:1a:b5:02:47:71:1a:02:7a:78:7a:6a: fc:ce:c0:b3:2e:02:b4:1b:9e:e5:5d:a0:f9:a7:59: f9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4A:85:9C:27:3E:2E:21:D6:6A:A1:5F:D7:C1:23:F5:34:65:10:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fa61cd3-2035-3be4-905a-2942784b566b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:15:f9:9b:c7:d5:1c:d3:ac:be:69:d5:da:75:ef:1a:8f:ad: 14:86:af:73:03:65:fb:86:55:3f:53:fb:a7:7b:12:85:ac:cb: ae:47:81:06:8e:24:15:50:ef:a4:94:6c:3c:11:64:6b:b1:70: 8a:cb:40:ba:1d:f8:0a:49:1c:d8:9d:c7:67:d2:17:f8:4c:0e: 18:0a:f2:75:73:07:b0:48:13:68:ee:9a:65:b2:4f:36:64:8b: 4b:75:06:c2:ce:e9:28:22:1d:f3:b2:df:0a:23:f3:1e:aa:d6: 8d:15:da:01:e4:92:20:af:96:10:9d:d4:6d:fd:92:5d:53:67: 82:b5:73:6f:e6:25:bc:3d:fe:c9:d5:69:5c:6a:fd:43:e1:64: 3e:ff:e2:f4:4f:99:ee:e6:d2:da:31:b1:c9:b5:38:8c:ec:51: 14:05:e6:ea:17:90:2a:fc:b4:30:1d:d8:f2:9f:ec:4e:23:4c: 51:4c:a8:07:11:e1:65:6d:87:72:bf:eb:78:a3:72:ff:eb:cb: f7:ff:b2:8b:72:5b:a7:65:00:d4:d9:a5:e8:37:79:23:f6:04: eb:3f:63:c4:68:73:a5:b8:f0:57:bd:c4:c9:a0:f5:62:70:71: 3f:f2:3d:a3:16:7a:29:d0:54:b4:6d:34:5a:34:06:49:c8:c6: 86:6a:7e:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrRfsMsiw3jGylQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk MjQ2ODQwOGYtNzY1Zi00Njk2LWFkODAtMTcwNTJiY2FlYzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEhE1Hk0sDiAGUkzb6Cq3GTH6zR+dZwE5R4a qUkr4nr2WrUfTPaidys9C4n2d3YjFX//dQHSmFyzaP8vvCrUjSNpnyzAd9foHmhH atnaeGQS5FNhJ6uSwBGm8FFnYihqREcPcEGJqIqSID0DaBHWYFWWflldePwofbln zWKltPvOIlMYJWBzOgLj0fKoRqRo5gcmi8Y+o8bocmMXv1Nhz+STmEZ2anTvQrJp 7kg4SEX4R5PgkbNFF4jmFTAaL72HGecPPI24JuGKXhzeWCPPwpSCAXT94derlvOK Q5eZCtRw+Z4TGrUCR3EaAnp4emr8zsCzLgK0G57lXaD5p1n5FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5KhZwnPi4h1mqhX9fBI/U0ZRCEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWZhNjFjZDMtMjAzNS0z YmU0LTkwNWEtMjk0Mjc4NGI1NjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8ksMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYV+ZvH1RzTrL5p1dp17xqPrRSGr3MDZfuGVT9T+6d7EoWsy65HgQaO JBVQ76SUbDwRZGuxcIrLQLod+ApJHNidx2fSF/hMDhgK8nVzB7BIE2jummWyTzZk i0t1BsLO6SgiHfOy3woj8x6q1o0V2gHkkiCvlhCd1G39kl1TZ4K1c2/mJbw9/snV aVxq/UPhZD7/4vRPme7m0toxscm1OIzsURQF5uoXkCr8tDAd2PKf7E4jTFFMqAcR 4WVth3K/63ijcv/ry/f/sotyW6dlANTZpeg3eSP2BOs/Y8Roc6W48Fe9xMmg9WJw cT/yPaMWeinQVLRtNFo0BknIxoZqfgA= -----END CERTIFICATE-----Generated at Mon Mar 2 12:48:44 2026 by rpki-client