$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a9aa6b8-ae24-33d1-9470-93738dd66f9c.roa File: 3a9aa6b8-ae24-33d1-9470-93738dd66f9c.roa (raw, json) Hash identifier: SGQ1d8ozr5hYuzxIlI5WRFH6qjcOSKATRTiS3RnZGxw= Subject key identifier: 64:AE:5A:FD:B2:6D:14:16:50:F2:46:A1:D1:F9:AC:8D:D4:A5:E3:5B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D037D1C4A7A918BD53E26F580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a9aa6b8-ae24-33d1-9470-93738dd66f9c.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 20940 IP address blocks: 23.193.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:1c:4a:7a:91:8b:d5:3e:26:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=398f2a83-a052-4b81-a776-655ec2312f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:09:0c:24:44:ac:64:e6:e4:df:97:e6:c5:6e: 76:02:23:59:d6:df:b8:4e:52:25:28:56:63:36:3a: 8f:7c:b1:7c:28:b8:02:b0:14:02:06:83:2e:3c:68: e9:ce:35:57:e8:23:51:f3:ae:34:68:32:97:76:84: d3:62:d3:79:86:7d:30:29:48:55:d0:ea:6d:07:88: fb:5f:b9:9c:a0:24:34:07:2f:b3:69:e2:0e:a7:18: 4e:fa:df:39:ce:54:2c:7a:af:2e:96:23:45:2b:15: 31:fb:dc:4d:b6:6d:14:2f:1f:0d:c4:6f:7f:7b:c4: 81:4a:a6:00:ae:2c:c6:a8:1a:9a:cf:b3:3d:c7:9b: 9e:2f:b5:94:5c:77:b1:ef:c4:6a:66:31:87:e8:b1: 9a:90:82:44:e7:80:a6:bd:c5:75:29:d1:14:be:eb: 09:60:ef:15:77:c6:f9:2a:83:6c:95:cf:2c:ef:34: 82:42:7c:ed:7d:f8:19:20:86:86:10:4f:a2:58:31: ac:08:ed:c5:41:63:e8:54:14:1f:e7:d4:1f:26:93: a6:4f:7a:ca:20:b0:56:32:82:f7:93:3a:2f:53:be: d9:99:76:16:bb:d4:ce:01:90:ae:d7:13:b3:ee:d1: 28:7b:c4:f2:52:b6:2b:b3:03:a7:e8:55:84:dc:05: e5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AE:5A:FD:B2:6D:14:16:50:F2:46:A1:D1:F9:AC:8D:D4:A5:E3:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a9aa6b8-ae24-33d1-9470-93738dd66f9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.193.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a3:36:2c:39:7e:c8:b1:de:21:e2:19:23:4a:28:e0:73:29: fc:f1:20:42:d9:09:0e:2c:c2:77:b9:ab:68:3e:68:05:86:f9: a0:8a:91:12:d0:b6:3b:73:69:6b:1a:5d:12:2f:4a:a3:95:15: fc:5b:eb:0a:72:9e:34:d4:fa:5a:7c:2a:20:92:27:c8:2e:21: b9:db:4e:30:1c:65:10:5a:18:1d:96:57:29:b0:5e:3f:bf:e4: 6c:1a:79:4b:3b:d3:fb:a2:b4:e3:b6:50:72:78:ed:71:e9:cf: 7b:a7:50:9f:91:f9:29:d9:f3:5c:99:5d:4d:7e:56:15:4b:4e: d7:dc:5d:cd:93:a9:e4:bb:0d:64:00:ff:32:d5:96:53:42:d5: 86:d6:01:4f:46:10:40:d5:53:30:5c:5b:a9:05:76:e2:96:3d: 83:b0:a8:cf:37:b4:56:52:ef:75:ff:8f:90:e2:9f:9f:fd:d2: 0c:d5:71:67:5f:7c:80:ef:76:d6:5e:34:6a:45:67:17:c9:c3: 43:1d:4c:09:6d:12:c0:e4:04:aa:ed:67:21:f5:be:89:db:e4: d1:43:b1:01:eb:e2:db:d2:3b:4f:ce:3d:c0:5d:eb:94:35:d9: 2b:78:8d:5d:87:23:3f:de:27:5c:95:b2:07:1f:f1:3b:05:2e: fe:2e:07:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfRxKepGL1T4m9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk Mzk4ZjJhODMtYTA1Mi00YjgxLWE3NzYtNjU1ZWMyMzEyZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwkMJESsZObk35fmxW52AiNZ1t+4TlIlKFZj NjqPfLF8KLgCsBQCBoMuPGjpzjVX6CNR8640aDKXdoTTYtN5hn0wKUhV0OptB4j7 X7mcoCQ0By+zaeIOpxhO+t85zlQseq8uliNFKxUx+9xNtm0ULx8NxG9/e8SBSqYA rizGqBqaz7M9x5ueL7WUXHex78RqZjGH6LGakIJE54CmvcV1KdEUvusJYO8Vd8b5 KoNslc8s7zSCQnztffgZIIaGEE+iWDGsCO3FQWPoVBQf59QfJpOmT3rKILBWMoL3 kzovU77ZmXYWu9TOAZCu1xOz7tEoe8TyUrYrswOn6FWE3AXlowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSuWv2ybRQWUPJGodH5rI3UpeNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2E5YWE2YjgtYWUyNC0z M2QxLTk0NzAtOTM3MzhkZDY2ZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8G3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+jNiw5fsix3iHiGSNKKOBzKfzxIELZCQ4swne5q2g+aAWG+aCKkRLQ tjtzaWsaXRIvSqOVFfxb6wpynjTU+lp8KiCSJ8guIbnbTjAcZRBaGB2WVymwXj+/ 5GwaeUs70/uitOO2UHJ47XHpz3unUJ+R+SnZ81yZXU1+VhVLTtfcXc2TqeS7DWQA /zLVllNC1YbWAU9GEEDVUzBcW6kFduKWPYOwqM83tFZS73X/j5Din5/90gzVcWdf fIDvdtZeNGpFZxfJw0MdTAltEsDkBKrtZyH1vonb5NFDsQHr4tvSO0/OPcBd65Q1 2St4jV2HIz/eJ1yVsgcf8TsFLv4uByE= -----END CERTIFICATE-----Generated at Mon Mar 2 06:53:01 2026 by rpki-client