$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21a3daee-c9ff-37a8-8c49-19504c82dbd6.roa File: 21a3daee-c9ff-37a8-8c49-19504c82dbd6.roa (raw, json) Hash identifier: hQs8jzUS20B1G/B7jhtgKKpn92UtvJDrFsE3wfbkWz0= Subject key identifier: 2F:9D:AD:4F:8A:13:A9:98:E1:B6:BE:A7:55:10:C1:A6:46:AE:D0:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D07AD0665C37C0FFE8E677480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21a3daee-c9ff-37a8-8c49-19504c82dbd6.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.200.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:06:65:c3:7c:0f:fe:8e:67:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=1d5dc865-6a63-43f8-8c82-e1af629dddb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:09:f1:2d:d6:6b:b8:ee:6d:97:23:f6:d4:26: e8:ae:67:d9:0e:fe:0b:9e:e5:7a:27:3d:eb:df:2d: f0:13:02:cc:62:82:f7:c1:4f:74:82:f8:cb:1a:ba: 53:81:ec:be:99:df:38:d3:65:86:8d:c1:69:b7:de: 1b:cd:3b:1e:01:f6:74:29:46:63:aa:21:73:ea:06: 3b:f6:6e:3e:bf:c7:da:3d:80:20:77:c9:81:85:72: 58:b0:f4:88:ae:ae:ea:b3:0b:d8:b9:14:6a:0e:da: 64:85:ac:fe:86:9e:66:82:4c:fc:af:14:ac:24:84: 77:9e:97:dc:35:6c:fa:fd:d2:38:b4:36:60:85:f3: fb:b1:85:e3:f0:11:3c:60:f8:a5:ab:a6:68:3c:25: 4a:1d:5b:1d:05:e6:ba:d0:2e:36:b9:cf:10:8b:e8: 1b:4f:d5:e4:90:a2:58:42:d6:65:1d:d6:c0:fb:97: bd:68:a9:db:e6:86:9b:6e:12:72:d1:c0:78:9f:7c: ca:55:c3:27:77:f7:5e:3f:0e:9d:c5:96:78:c8:16: c7:4e:4d:cd:bd:02:8f:69:ca:02:b4:d1:f6:aa:49: 76:12:17:b5:a4:3a:a3:e9:e3:44:a2:1e:a4:3f:f9: 6e:a9:fa:3d:a6:af:54:45:58:7c:f8:fb:aa:84:d6: 60:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9D:AD:4F:8A:13:A9:98:E1:B6:BE:A7:55:10:C1:A6:46:AE:D0:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21a3daee-c9ff-37a8-8c49-19504c82dbd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:f2:59:68:0b:aa:26:05:67:43:5c:c3:29:af:b9:15:f0:e0: 02:05:08:f3:35:8a:80:5e:67:29:c7:84:eb:a4:07:71:e7:32: c7:ff:40:ab:1a:f5:c8:71:e8:a3:9a:dd:03:23:37:f1:da:47: df:75:88:99:42:2b:8f:04:41:84:fa:5d:60:77:cb:92:41:3d: d8:22:45:4d:58:1c:64:95:23:7a:eb:d1:89:97:49:0d:48:1c: 39:99:46:b7:3e:82:09:78:4d:cb:6a:b7:08:83:3d:2f:68:b5: b5:dc:af:e9:3f:47:aa:fb:5c:f7:fa:00:e4:d2:a9:04:c3:15: a7:eb:1c:b0:6b:3d:56:ed:b8:25:50:ac:c6:d9:94:4d:1e:37: d6:1b:95:2c:e0:23:b0:ce:5c:c0:7e:0c:1f:57:20:f3:cd:57: 25:53:6c:bf:38:f2:60:9c:37:36:f4:f0:62:a5:9c:00:22:6e: 9a:1c:0f:37:da:08:52:41:bf:10:22:e2:47:e7:36:ee:e7:60: ba:f5:45:1a:72:62:a1:5d:93:7c:ff:57:6f:cc:c1:e0:f4:c5: 5a:00:c3:bd:b2:ef:0f:8d:e1:5a:fa:85:86:10:af:38:54:4d: 56:3a:24:67:b8:72:ef:35:43:a6:05:c0:16:ee:79:21:4e:40: 65:16:f9:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrQZlw3wP/o5ndIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk MWQ1ZGM4NjUtNmE2My00M2Y4LThjODItZTFhZjYyOWRkZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwnxLdZruO5tlyP21CbormfZDv4LnuV6Jz3r 3y3wEwLMYoL3wU90gvjLGrpTgey+md8402WGjcFpt94bzTseAfZ0KUZjqiFz6gY7 9m4+v8faPYAgd8mBhXJYsPSIrq7qswvYuRRqDtpkhaz+hp5mgkz8rxSsJIR3npfc NWz6/dI4tDZghfP7sYXj8BE8YPilq6ZoPCVKHVsdBea60C42uc8Qi+gbT9XkkKJY QtZlHdbA+5e9aKnb5oabbhJy0cB4n3zKVcMnd/dePw6dxZZ4yBbHTk3NvQKPacoC tNH2qkl2Ehe1pDqj6eNEoh6kP/luqfo9pq9URVh8+PuqhNZg9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+drU+KE6mY4ba+p1UQwaZGrtANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjFhM2RhZWUtYzlmZi0z N2E4LThjNDktMTk1MDRjODJkYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8iQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvyWWgLqiYFZ0NcwymvuRXw4AIFCPM1ioBeZynHhOukB3HnMsf/QKsa 9chx6KOa3QMjN/HaR991iJlCK48EQYT6XWB3y5JBPdgiRU1YHGSVI3rr0YmXSQ1I HDmZRrc+ggl4TctqtwiDPS9otbXcr+k/R6r7XPf6AOTSqQTDFafrHLBrPVbtuCVQ rMbZlE0eN9YblSzgI7DOXMB+DB9XIPPNVyVTbL848mCcNzb08GKlnAAibpocDzfa CFJBvxAi4kfnNu7nYLr1RRpyYqFdk3z/V2/MweD0xVoAw72y7w+N4Vr6hYYQrzhU TVY6JGe4cu81Q6YFwBbueSFOQGUW+VA= -----END CERTIFICATE-----Generated at Mon Mar 2 08:33:47 2026 by rpki-client