$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f0b5ad6-1fb7-3746-8afb-f3d8056ac3df.roa File: 3f0b5ad6-1fb7-3746-8afb-f3d8056ac3df.roa (raw, json) Hash identifier: ChuHodnhVkkbnlffG45Ks4J/6aWhIi/LCRKPd13fd1Q= Subject key identifier: 4D:92:0D:F9:69:F9:23:E3:3E:F1:44:55:EA:35:E0:1F:2E:8F:9E:5F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CA5F722A2C083BF3D7878A560 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f0b5ad6-1fb7-3746-8afb-f3d8056ac3df.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.7.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:22:a2:c0:83:bf:3d:78:78:a5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=533ffdf2-c5b0-4e1d-936b-a74922a3fd4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ef:38:31:26:ed:84:6f:6c:ea:2b:58:23:c1: 25:eb:b1:a8:74:0e:14:65:39:a6:d8:81:49:bc:a2: 7c:c7:25:91:07:01:26:3d:26:67:e0:1f:88:87:2a: 26:a8:0c:69:35:14:e0:ff:10:f2:f6:89:f9:41:94: 0f:0e:49:b7:ad:aa:8b:d9:ad:56:57:d7:ba:14:48: 50:f0:26:c0:40:16:e2:51:59:9d:49:e8:8e:e4:59: 1e:b4:76:08:4c:e4:ef:04:2f:12:59:12:da:54:be: 88:47:03:b1:ea:b3:8d:22:c7:73:38:10:68:9f:6d: 06:8a:fe:42:40:97:e2:b7:3f:a5:0f:9d:1a:e7:54: bc:63:6b:a9:4e:c6:73:f6:a8:e9:3a:0e:d8:17:dc: c8:ca:25:00:bc:09:a4:c8:0a:f3:7b:46:1c:a0:5f: 06:b6:d4:2c:2e:37:c5:f6:19:21:14:08:94:8e:0c: cd:42:88:ec:29:0d:f5:9c:99:21:81:3a:f1:e5:61: ce:5b:4a:81:8f:db:75:c2:8c:6c:65:3f:ab:1e:f6: 90:2f:c6:8e:ae:17:a9:c1:68:2b:eb:1f:78:70:0d: a9:ba:b8:d8:5d:78:c4:0e:ae:70:06:04:32:53:48: e6:85:af:79:2a:e5:4b:04:4f:f3:08:40:9a:49:10: bc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:92:0D:F9:69:F9:23:E3:3E:F1:44:55:EA:35:E0:1F:2E:8F:9E:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f0b5ad6-1fb7-3746-8afb-f3d8056ac3df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.7.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:7e:d1:bd:2b:33:48:94:d2:b1:da:c7:bc:13:fa:f3:a5:5d: e2:c1:e1:3f:15:49:74:17:68:65:df:26:f3:c0:be:94:18:37: 44:1d:36:11:0e:0a:dc:05:05:f1:96:31:dc:32:ab:c7:06:56: 38:1d:24:a3:01:a7:c7:cb:a6:21:93:56:0e:e4:21:a6:32:0e: a3:16:c2:5e:6d:eb:87:e0:8b:4c:10:bc:f6:d9:b5:37:ce:74: 5c:c6:14:63:65:f7:67:a9:83:1a:e0:0f:b5:94:5a:bc:e2:07: 11:87:00:62:64:fd:44:bd:a0:2d:36:93:81:76:61:f0:56:5f: fb:12:db:04:79:aa:3f:fb:f3:fa:3a:75:c0:d8:d7:34:03:09: 05:0f:55:5b:4e:74:d8:bb:7f:50:fc:5a:2c:0b:92:ed:aa:e3: 97:1d:d2:a9:28:0d:42:6a:90:cb:26:68:c5:ad:b9:c1:cd:8c: ec:fe:38:ef:85:0a:0c:6d:9d:d0:89:42:eb:e8:99:5d:27:a0: b0:69:23:42:27:94:a5:86:73:b6:01:12:4d:4d:c5:eb:34:26: 5e:d2:a9:ff:d0:d4:19:31:bb:bd:5e:ad:cd:55:11:fc:1a:7d: 94:75:f3:7c:fc:13:3e:01:50:15:b3:ce:42:10:e4:05:5a:1d: cf:ee:d1:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9yKiwIO/PXh4pWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk NTMzZmZkZjItYzViMC00ZTFkLTkzNmItYTc0OTIyYTNmZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+84MSbthG9s6itYI8El67GodA4UZTmm2IFJ vKJ8xyWRBwEmPSZn4B+IhyomqAxpNRTg/xDy9on5QZQPDkm3raqL2a1WV9e6FEhQ 8CbAQBbiUVmdSeiO5FketHYITOTvBC8SWRLaVL6IRwOx6rONIsdzOBBon20Giv5C QJfitz+lD50a51S8Y2upTsZz9qjpOg7YF9zIyiUAvAmkyArze0YcoF8GttQsLjfF 9hkhFAiUjgzNQojsKQ31nJkhgTrx5WHOW0qBj9t1woxsZT+rHvaQL8aOrhepwWgr 6x94cA2purjYXXjEDq5wBgQyU0jmha95KuVLBE/zCECaSRC8IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2SDflp+SPjPvFEVeo14B8uj55fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2YwYjVhZDYtMWZiNy0z NzQ2LThhZmItZjNkODA1NmFjM2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAId+0b0rM0iU0rHax7wT+vOlXeLB4T8VSXQXaGXfJvPAvpQYN0QdNhEO CtwFBfGWMdwyq8cGVjgdJKMBp8fLpiGTVg7kIaYyDqMWwl5t64fgi0wQvPbZtTfO dFzGFGNl92epgxrgD7WUWrziBxGHAGJk/US9oC02k4F2YfBWX/sS2wR5qj/78/o6 dcDY1zQDCQUPVVtOdNi7f1D8WiwLku2q45cd0qkoDUJqkMsmaMWtucHNjOz+OO+F CgxtndCJQuvomV0noLBpI0InlKWGc7YBEk1Nxes0Jl7Sqf/Q1Bkxu71erc1VEfwa fZR183z8Ez4BUBWzzkIQ5AVaHc/u0Zg= -----END CERTIFICATE-----Generated at Mon Mar 2 13:23:02 2026 by rpki-client