$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4566e1b5-eaa1-30a4-a042-b25c0e370e6d.roa File: 4566e1b5-eaa1-30a4-a042-b25c0e370e6d.roa (raw, json) Hash identifier: cwpvjC9YWFvX7caT+9o8nkWl7ZPKqKnb4eTD0P3Ohjw= Subject key identifier: EE:9D:D0:33:4B:82:CD:E8:DA:E7:7D:D8:EC:C3:03:D5:86:F9:DE:BF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C50D190CF871A9A62C28E7F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4566e1b5-eaa1-30a4-a042-b25c0e370e6d.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 20940 IP address blocks: 23.56.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:90:cf:87:1a:9a:62:c2:8e:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=87841aab-55d6-4ef9-a6b8-32ad70e0f42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:ae:94:2c:c8:20:7f:0b:74:63:c6:e0:36: f2:4e:75:d5:ad:fd:19:c9:7a:82:c9:a1:1c:d7:04: bc:33:d4:20:c8:3f:0f:f7:29:46:d9:3a:91:60:ea: 2a:68:34:5f:8d:35:ea:c7:83:0d:9b:c5:42:8c:bf: f6:89:a5:b3:e0:77:28:0a:f1:d7:1f:f1:23:45:7e: 71:59:08:6a:a0:64:32:c5:fe:0d:07:bd:f9:0d:08: 28:6f:43:6e:0f:83:7e:6a:54:fc:79:76:f8:b7:b1: 9d:80:49:be:15:3d:d2:5a:d6:f0:b1:b3:a1:3d:d1: fe:a0:b2:2a:1d:49:c2:c5:8a:9e:79:58:70:f3:25: ca:d0:f7:e4:09:88:ff:61:c2:21:fa:c1:39:88:78: ab:9c:63:ac:23:29:19:7d:83:3b:a1:fd:ba:87:9d: f5:30:e5:8b:74:be:a7:02:92:db:cd:8e:ee:ca:b9: 46:49:36:09:f8:cd:bd:db:87:3f:ec:c1:35:e6:c7: 3d:df:22:af:46:6e:a7:a8:96:aa:5b:eb:38:9b:ad: fc:9b:53:d3:71:41:3b:f1:2c:1d:67:33:18:05:cb: c1:dc:64:93:61:dd:fd:40:4c:30:8b:38:51:42:09: 3e:be:dc:b7:1c:b0:c8:d8:f3:8d:24:2c:bf:ae:cb: 5d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9D:D0:33:4B:82:CD:E8:DA:E7:7D:D8:EC:C3:03:D5:86:F9:DE:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4566e1b5-eaa1-30a4-a042-b25c0e370e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.56.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:f9:e7:40:4d:79:c0:18:a4:c7:de:f2:a5:d9:b6:e5:c0:dd: 26:1a:c9:28:39:a8:42:ff:89:46:5c:e7:bd:0d:db:d8:a9:99: 8b:da:88:36:00:de:01:14:9f:d1:89:32:f4:e5:94:75:5b:aa: 4d:53:53:21:a7:6d:7c:bf:e8:36:23:d1:65:90:cb:b5:33:8a: 23:0e:1b:8b:2b:97:4e:a4:67:ae:b9:fa:05:b5:93:a3:a0:34: 8f:c0:04:5f:2e:fd:79:3a:90:3c:33:bb:d9:41:18:17:79:46: dc:48:58:5e:13:57:e5:a1:bd:ec:44:d6:72:e2:71:cd:91:12: 74:b0:66:28:80:f3:4d:c1:1b:b2:da:f4:7c:5b:c9:96:2e:17: 5a:ce:4e:32:f9:b2:51:75:e4:50:b3:78:c0:e6:85:46:50:4c: 96:fc:b2:16:41:2d:f8:4c:6c:a1:30:5c:65:0e:59:f3:a9:7c: 93:22:ac:91:7e:89:f5:65:b9:0d:61:68:d0:77:a0:33:11:9f: 6a:4f:3d:3f:68:2d:24:de:96:e6:67:57:d4:bb:f1:c5:d7:3c: b7:77:be:15:3a:0c:be:d9:23:12:2c:af:74:cf:86:ac:f8:58: f0:bf:98:05:32:31:3b:2d:ee:19:71:cd:95:7a:bc:c9:be:46: 6d:47:35:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0ZDPhxqaYsKOf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk ODc4NDFhYWItNTVkNi00ZWY5LWE2YjgtMzJhZDcwZTBmNDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUGulCzIIH8LdGPG4DbyTnXVrf0ZyXqCyaEc 1wS8M9QgyD8P9ylG2TqRYOoqaDRfjTXqx4MNm8VCjL/2iaWz4HcoCvHXH/EjRX5x WQhqoGQyxf4NB735DQgob0NuD4N+alT8eXb4t7GdgEm+FT3SWtbwsbOhPdH+oLIq HUnCxYqeeVhw8yXK0PfkCYj/YcIh+sE5iHirnGOsIykZfYM7of26h531MOWLdL6n ApLbzY7uyrlGSTYJ+M2924c/7ME15sc93yKvRm6nqJaqW+s4m638m1PTcUE78Swd ZzMYBcvB3GSTYd39QEwwizhRQgk+vty3HLDI2PONJCy/rstdnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6d0DNLgs3o2ud92OzDA9WG+d6/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDU2NmUxYjUtZWFhMS0z MGE0LWEwNDItYjI1YzBlMzcwZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADf550BNecAYpMfe8qXZtuXA3SYaySg5qEL/iUZc570N29ipmYvaiDYA 3gEUn9GJMvTllHVbqk1TUyGnbXy/6DYj0WWQy7UziiMOG4srl06kZ665+gW1k6Og NI/ABF8u/Xk6kDwzu9lBGBd5RtxIWF4TV+WhvexE1nLicc2REnSwZiiA803BG7La 9HxbyZYuF1rOTjL5slF15FCzeMDmhUZQTJb8shZBLfhMbKEwXGUOWfOpfJMirJF+ ifVluQ1haNB3oDMRn2pPPT9oLSTeluZnV9S78cXXPLd3vhU6DL7ZIxIsr3TPhqz4 WPC/mAUyMTst7hlxzZV6vMm+Rm1HNaM= -----END CERTIFICATE-----Generated at Sun Mar 1 22:37:49 2026 by rpki-client