$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cc636ea-60a5-35b8-9359-30ea5ca21cfe.roa File: 4cc636ea-60a5-35b8-9359-30ea5ca21cfe.roa (raw, json) Hash identifier: hJeLW8HE2DbzS6RWCSXosrmNU4Q8jj0TdN2sbyCmI7s= Subject key identifier: 01:ED:67:BF:0B:79:CF:E1:AD:2B:77:98:4C:4E:0D:5E:B8:14:CD:79 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CB5520E6DAD6EFF83238BE880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cc636ea-60a5-35b8-9359-30ea5ca21cfe.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 20940 IP address blocks: 23.194.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:52:0e:6d:ad:6e:ff:83:23:8b:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=a80c875a-92a3-4fdd-b624-0f738da455f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:70:37:40:aa:04:d0:57:6f:76:77:ec:a2:57: 3a:aa:73:3d:08:91:66:9b:d5:13:c5:72:72:eb:d3: 99:a5:79:5b:58:ec:ec:f4:c8:25:c7:a5:2d:74:f7: 03:0c:f6:a4:1d:85:96:e7:f5:6a:0d:6d:e0:b3:a6: 73:15:20:16:79:27:63:f2:01:e7:18:77:03:6a:ba: 13:82:1f:42:a0:d7:1b:ce:66:b1:0e:86:c5:8f:9d: 8e:20:25:02:f9:95:9d:37:61:29:c4:03:b8:a7:c4: 0b:8c:21:b8:84:a5:e9:c2:14:b3:aa:7a:3e:44:fc: c0:95:aa:39:2a:e1:cd:19:5c:29:67:71:88:32:0c: 97:cb:35:25:9e:e0:f6:f0:cb:84:95:5f:6c:c5:40: db:59:b7:e9:4e:23:ee:cc:58:dd:c6:3f:80:f8:1a: 84:3a:1c:b2:98:1f:16:de:25:6e:04:51:77:7f:b2: 0c:86:f9:24:93:91:1c:2f:d4:8f:5c:e3:59:ce:38: 23:af:dd:af:45:66:04:c9:a2:b5:01:5b:26:8d:30: e9:80:a9:46:fd:1e:52:43:75:5f:fa:11:61:4e:29: 49:75:db:ac:75:cf:d7:03:47:d2:73:37:69:ce:4f: ad:b1:69:79:f6:93:93:34:e1:28:84:41:80:ac:28: 58:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:ED:67:BF:0B:79:CF:E1:AD:2B:77:98:4C:4E:0D:5E:B8:14:CD:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cc636ea-60a5-35b8-9359-30ea5ca21cfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:e5:bf:42:c3:b5:01:f4:78:17:a3:ca:14:fc:cc:b3:c1:7b: d9:33:37:8e:18:1b:1a:75:2c:00:d6:be:c4:25:56:de:92:fb: 66:74:dc:d5:ff:bd:5f:dc:cb:9b:15:dc:97:71:78:a7:9f:90: 37:54:81:05:76:c2:57:2a:20:a5:02:29:d6:8e:9c:ef:bd:3b: 5d:c2:a3:20:7d:91:e6:22:94:c0:ca:09:11:c7:96:1c:41:52: c8:d1:12:19:61:de:b6:00:79:46:a7:4b:4c:74:c4:0e:3e:7c: 16:1f:10:f6:c9:19:cd:16:f1:b7:a1:da:b3:db:52:72:21:24: dd:f4:7b:e8:7e:24:9e:c7:b0:cb:99:34:28:05:aa:04:f8:81: e6:9c:fc:c8:67:a7:a4:7c:96:19:78:a7:ed:49:31:28:01:a4: 41:68:53:7b:27:f9:2a:fb:6b:a7:06:a8:93:d2:c2:ff:39:33: 2f:f2:19:ee:8c:13:63:f9:2d:32:6c:e1:41:83:e0:62:aa:61: dc:51:37:f8:9e:3c:44:d9:d8:55:19:0f:ae:7c:3d:42:5b:4c: 3a:94:45:00:68:d6:92:57:55:60:01:29:91:8e:90:5a:43:ca: f4:14:33:19:d4:d1:29:8d:fa:be:73:c8:47:34:43:71:98:a2: 38:00:00:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1Ug5trW7/gyOL6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk YTgwYzg3NWEtOTJhMy00ZmRkLWI2MjQtMGY3MzhkYTQ1NWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHA3QKoE0Fdvdnfsolc6qnM9CJFmm9UTxXJy 69OZpXlbWOzs9Mglx6UtdPcDDPakHYWW5/VqDW3gs6ZzFSAWeSdj8gHnGHcDaroT gh9CoNcbzmaxDobFj52OICUC+ZWdN2EpxAO4p8QLjCG4hKXpwhSzqno+RPzAlao5 KuHNGVwpZ3GIMgyXyzUlnuD28MuElV9sxUDbWbfpTiPuzFjdxj+A+BqEOhyymB8W 3iVuBFF3f7IMhvkkk5EcL9SPXONZzjgjr92vRWYEyaK1AVsmjTDpgKlG/R5SQ3Vf +hFhTilJddusdc/XA0fSczdpzk+tsWl59pOTNOEohEGArChYswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHtZ78Lec/hrSt3mExODV64FM15MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGNjNjM2ZWEtNjBhNS0z NWI4LTkzNTktMzBlYTVjYTIxY2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8LLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvlv0LDtQH0eBejyhT8zLPBe9kzN44YGxp1LADWvsQlVt6S+2Z03NX/ vV/cy5sV3JdxeKefkDdUgQV2wlcqIKUCKdaOnO+9O13CoyB9keYilMDKCRHHlhxB UsjREhlh3rYAeUanS0x0xA4+fBYfEPbJGc0W8beh2rPbUnIhJN30e+h+JJ7HsMuZ NCgFqgT4geac/Mhnp6R8lhl4p+1JMSgBpEFoU3sn+Sr7a6cGqJPSwv85My/yGe6M E2P5LTJs4UGD4GKqYdxRN/iePETZ2FUZD658PUJbTDqURQBo1pJXVWABKZGOkFpD yvQUMxnU0SmN+r5zyEc0Q3GYojgAABI= -----END CERTIFICATE-----Generated at Sun Mar 1 22:59:33 2026 by rpki-client