$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40a2c4db-ab21-389c-b109-f8529e7aebf1.roa File: 40a2c4db-ab21-389c-b109-f8529e7aebf1.roa (raw, json) Hash identifier: gBQ5uXpnUSc6wFkLdanaqT+IU9EfXpUjqqu/OgZWqT0= Subject key identifier: 19:BF:5E:0B:75:8E:6F:AD:71:90:FA:2E:39:AB:66:C6:34:A3:D3:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CBF173DF19A1C610C30D5E000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40a2c4db-ab21-389c-b109-f8529e7aebf1.roa Signing time: Wed 04 Feb 2026 02:00:31 +0000 ROA not before: Wed 04 Feb 2026 02:00:31 +0000 ROA not after: Tue 05 May 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.53.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bf:17:3d:f1:9a:1c:61:0c:30:d5:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 4 02:00:31 2026 GMT Not After : May 5 01:00:31 2026 GMT Subject: CN=9d0d79f6-bf9a-47d9-a96f-2f1feb4f838e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:04:64:a5:b5:1c:72:72:67:27:77:82:6a:b2: 61:87:78:67:f3:41:c8:10:f0:60:d7:9e:7d:a1:a9: 51:75:fd:a4:3e:25:8f:5e:2c:8d:60:27:52:e9:d5: 68:24:19:e6:17:ad:e4:f4:e7:5d:75:1b:5c:80:fc: e8:8a:78:97:9a:06:57:7f:0e:f5:7a:4c:97:13:de: b3:b0:70:e6:74:e9:fa:b9:84:15:d3:63:58:37:1b: 70:75:bc:a1:18:90:6a:79:a0:b5:76:58:0c:e9:76: 22:40:f5:fd:45:cf:c4:9e:4b:50:af:5b:3e:f7:96: 4d:1e:51:5a:18:03:8a:49:1a:09:dd:39:3e:bd:e4: d9:de:d6:da:45:d8:be:9b:9f:e4:d4:09:46:55:6f: 30:a6:08:0a:60:f0:5d:f9:d6:bc:ff:d6:af:ed:4b: 14:a4:5f:61:c3:16:99:f7:34:9a:87:0a:bf:ee:7a: d4:2c:cd:f0:c5:0e:91:c4:2a:74:8e:45:b7:aa:4e: 6b:01:a2:be:01:57:b5:5a:cd:49:2b:2f:01:29:e5: 07:49:66:92:af:e4:7c:2b:00:dd:d9:be:51:18:5c: 45:57:75:b4:dc:af:6b:6e:0e:26:0d:cf:d6:27:28: 87:09:1f:9c:bd:5f:0e:76:ea:e6:24:60:af:12:a1: a1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BF:5E:0B:75:8E:6F:AD:71:90:FA:2E:39:AB:66:C6:34:A3:D3:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40a2c4db-ab21-389c-b109-f8529e7aebf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:16:ea:f2:3e:3c:5e:61:4a:81:bb:b2:c6:8b:3e:e3:f8:64: 18:cb:ae:83:99:ac:6c:9f:0c:2c:1d:4b:ec:2b:1d:0a:93:ae: ca:ba:47:b1:ac:cb:61:d1:a4:2a:7f:d9:85:6a:30:06:a9:9b: 2e:1b:9b:dd:dc:a7:e9:09:60:a8:94:26:89:f8:96:41:80:3d: 48:c7:dd:89:b8:77:36:3b:3c:22:26:75:7e:5c:45:11:64:db: 48:f3:8b:29:5f:09:57:d1:66:b3:b2:bc:21:0f:f8:fb:73:de: 56:cb:9e:35:da:f5:8e:6a:7b:82:b2:90:a3:e9:c9:dc:97:9f: 6a:60:3b:eb:1e:44:2e:81:6d:69:e5:76:0e:86:5f:a8:25:7a: 97:08:de:63:43:46:76:6e:4d:28:d0:c4:6a:49:68:ab:da:2f: 3a:47:4c:76:53:f5:f7:69:fc:db:3d:59:9c:6f:4e:c8:46:45: 08:bf:bb:69:2d:49:3a:2c:87:9b:9e:ef:4c:8b:83:21:ad:26: 2d:d2:0e:3c:41:ba:ba:fc:4a:eb:f5:6a:6c:1a:92:5d:50:f2: 7a:8b:c9:d1:9f:5f:eb:f4:58:0d:33:68:10:fe:72:3f:e3:1e: 79:f0:cc:a6:a7:08:33:68:2f:a4:42:4d:b2:eb:a8:8a:ab:d3: 75:cd:67:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy/Fz3xmhxhDDDV4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk OWQwZDc5ZjYtYmY5YS00N2Q5LWE5NmYtMmYxZmViNGY4MzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnARkpbUccnJnJ3eCarJhh3hn80HIEPBg1559 oalRdf2kPiWPXiyNYCdS6dVoJBnmF63k9OdddRtcgPzoiniXmgZXfw71ekyXE96z sHDmdOn6uYQV02NYNxtwdbyhGJBqeaC1dlgM6XYiQPX9Rc/EnktQr1s+95ZNHlFa GAOKSRoJ3Tk+veTZ3tbaRdi+m5/k1AlGVW8wpggKYPBd+da8/9av7UsUpF9hwxaZ 9zSahwq/7nrULM3wxQ6RxCp0jkW3qk5rAaK+AVe1Ws1JKy8BKeUHSWaSr+R8KwDd 2b5RGFxFV3W03K9rbg4mDc/WJyiHCR+cvV8OdurmJGCvEqGheQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBm/Xgt1jm+tcZD6LjmrZsY0o9P4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDBhMmM0ZGItYWIyMS0z ODljLWIxMDktZjg1MjllN2FlYmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzXdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAW6vI+PF5hSoG7ssaLPuP4ZBjLroOZrGyfDCwdS+wrHQqTrsq6R7Gs y2HRpCp/2YVqMAapmy4bm93cp+kJYKiUJon4lkGAPUjH3Ym4dzY7PCImdX5cRRFk 20jziylfCVfRZrOyvCEP+Ptz3lbLnjXa9Y5qe4KykKPpydyXn2pgO+seRC6BbWnl dg6GX6glepcI3mNDRnZuTSjQxGpJaKvaLzpHTHZT9fdp/Ns9WZxvTshGRQi/u2kt STosh5ue70yLgyGtJi3SDjxBurr8Suv1amwakl1Q8nqLydGfX+v0WA0zaBD+cj/j HnnwzKanCDNoL6RCTbLrqIqr03XNZ7o= -----END CERTIFICATE-----Generated at Mon Mar 2 15:00:06 2026 by rpki-client