$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a24d6ba-de41-3047-855a-035e760e8905.roa File: 5a24d6ba-de41-3047-855a-035e760e8905.roa (raw, json) Hash identifier: D6tUMV1z2wk5IuRcqOOCtGMFwQew+biZ7VJfVHjnc30= Subject key identifier: 10:53:61:5C:CA:61:10:4A:34:C0:40:29:95:75:BC:FD:4F:C8:34:21 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CBF174801AEEAFB864DC4F180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a24d6ba-de41-3047-855a-035e760e8905.roa Signing time: Wed 04 Feb 2026 02:00:31 +0000 ROA not before: Wed 04 Feb 2026 02:00:31 +0000 ROA not after: Tue 05 May 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.55.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bf:17:48:01:ae:ea:fb:86:4d:c4:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 4 02:00:31 2026 GMT Not After : May 5 01:00:31 2026 GMT Subject: CN=87ac00a8-d06c-498f-b949-bbde90bcd2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:91:1c:38:0c:8b:28:84:c8:13:d6:92:f3:ed: 48:9c:e3:42:26:cb:30:6a:89:77:c7:47:3a:c2:61: fd:4d:a0:2e:f2:6e:c6:a1:af:59:6d:30:78:03:62: ff:21:11:ba:e2:b7:95:66:c2:5e:79:99:3e:12:6b: 3e:df:ce:90:f9:99:b7:56:cf:75:f7:67:54:33:ec: 96:8b:e7:f3:a9:5a:4f:3c:46:97:52:d7:59:68:3e: 77:76:3b:3d:65:2a:a8:3f:c9:c4:1d:59:b8:0e:26: 04:cd:31:ed:88:1d:ff:f4:17:f6:c6:6a:c3:f3:15: b3:1d:ba:5a:f2:de:3c:ee:a6:72:41:67:16:c1:4e: cf:3b:39:70:84:39:2a:26:cf:e1:4d:04:b9:96:46: 2d:86:85:87:e9:3e:9e:18:73:fe:25:fa:09:cf:1a: fc:ec:e9:77:9f:37:ba:54:3c:5c:4f:c4:07:77:68: df:65:4d:74:7f:07:4e:64:79:3a:89:6f:37:ae:a4: 05:2a:b8:44:55:aa:fb:51:03:d5:e2:06:fa:3b:ae: 6b:38:65:20:e0:9c:5c:c9:ac:32:75:63:8e:34:55: 40:7a:71:79:07:80:09:17:cd:bf:ac:ad:a9:3e:b2: c1:39:f9:4e:6c:1e:94:6f:1e:44:8a:4e:d3:f4:42: 86:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:53:61:5C:CA:61:10:4A:34:C0:40:29:95:75:BC:FD:4F:C8:34:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a24d6ba-de41-3047-855a-035e760e8905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.55.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:6b:34:b3:20:49:f5:65:1d:03:b6:9f:7d:85:9e:1f:ef:a0: f9:2d:7c:78:7d:95:45:19:62:70:92:f5:64:36:47:be:0f:0b: 6c:7d:ed:ab:3c:da:61:9d:23:24:2b:00:00:e7:f9:0b:4c:e8: 8f:5c:a4:69:4f:b6:43:9e:bf:3d:f9:ef:53:0a:a4:fa:a7:0a: e8:5d:55:70:69:33:fb:35:10:b6:93:96:b9:5d:1b:a4:db:09: a3:aa:9c:19:be:3a:64:c8:0a:33:e7:55:b3:ea:2a:12:97:6f: 98:6d:82:4c:ef:7c:61:0a:35:29:d4:94:54:23:60:12:a5:90: 8b:73:6b:06:60:06:d8:c9:d5:2d:bd:64:75:58:57:0d:4f:d8: 6c:ba:25:88:d3:d0:b0:5d:67:57:37:29:dd:74:35:6d:de:ad: 6d:b3:be:51:f5:42:a8:28:e7:07:7e:4b:b4:54:fa:50:33:93: a1:fa:7f:d7:4f:c2:e8:e5:2e:6d:8b:de:a9:d2:a0:fc:c4:ed: 39:58:8d:fc:e7:38:86:ac:ec:04:91:d1:44:54:62:06:44:17: 35:61:65:02:74:d0:72:3b:b2:61:39:16:4d:0a:0b:26:06:f1: fb:a7:6d:d2:5b:3d:3c:f1:5c:88:bd:49:79:89:83:af:f5:ef: 44:f2:87:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy/F0gBrur7hk3E8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk ODdhYzAwYTgtZDA2Yy00OThmLWI5NDktYmJkZTkwYmNkMmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZEcOAyLKITIE9aS8+1InONCJsswaol3x0c6 wmH9TaAu8m7Goa9ZbTB4A2L/IRG64reVZsJeeZk+Ems+386Q+Zm3Vs9192dUM+yW i+fzqVpPPEaXUtdZaD53djs9ZSqoP8nEHVm4DiYEzTHtiB3/9Bf2xmrD8xWzHbpa 8t487qZyQWcWwU7POzlwhDkqJs/hTQS5lkYthoWH6T6eGHP+JfoJzxr87Ol3nze6 VDxcT8QHd2jfZU10fwdOZHk6iW83rqQFKrhEVar7UQPV4gb6O65rOGUg4Jxcyawy dWOONFVAenF5B4AJF82/rK2pPrLBOflObB6Ubx5Eik7T9EKGGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBTYVzKYRBKNMBAKZV1vP1PyDQhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWEyNGQ2YmEtZGU0MS0z MDQ3LTg1NWEtMDM1ZTc2MGU4OTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRrNLMgSfVlHQO2n32Fnh/voPktfHh9lUUZYnCS9WQ2R74PC2x97as8 2mGdIyQrAADn+QtM6I9cpGlPtkOevz3571MKpPqnCuhdVXBpM/s1ELaTlrldG6Tb CaOqnBm+OmTICjPnVbPqKhKXb5htgkzvfGEKNSnUlFQjYBKlkItzawZgBtjJ1S29 ZHVYVw1P2Gy6JYjT0LBdZ1c3Kd10NW3erW2zvlH1Qqgo5wd+S7RU+lAzk6H6f9dP wujlLm2L3qnSoPzE7TlYjfznOIas7ASR0URUYgZEFzVhZQJ00HI7smE5Fk0KCyYG 8funbdJbPTzxXIi9SXmJg6/170Tyhx8= -----END CERTIFICATE-----Generated at Mon Mar 2 12:00:26 2026 by rpki-client