$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60cc6a95-a267-3f71-9e63-ff9aa554d322.roa File: 60cc6a95-a267-3f71-9e63-ff9aa554d322.roa (raw, json) Hash identifier: 7gkJqBnryz0ojnwU6yzp8C9/AtlQgA2AmqcWxvcxNKM= Subject key identifier: 84:6F:33:5F:13:E9:06:73:BE:80:5F:7B:CA:E5:8F:03:8D:DB:BF:A4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C3BE112BE44F2157C414E2500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60cc6a95-a267-3f71-9e63-ff9aa554d322.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.209.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:12:be:44:f2:15:7c:41:4e:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=e67bdd02-8bf8-422d-9229-15994ac56bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:80:94:8a:b4:91:76:ea:42:cb:67:44:3d:b4: 84:6c:2d:fa:cd:81:bb:23:b2:36:12:54:e8:4f:9c: 81:ff:53:4f:84:9c:d4:1a:f2:88:30:54:ba:24:8c: 63:1b:81:67:53:fd:70:99:8e:43:06:94:c7:d1:ab: 49:16:48:f6:c0:f9:e0:3c:f6:fd:1d:c4:c6:02:cc: f3:fc:cb:eb:79:8d:2f:41:dc:b6:73:1f:aa:99:e9: e5:52:9b:7c:af:2f:a7:2a:15:71:90:11:bc:ab:a9: de:21:40:14:40:4b:16:2e:64:d1:2f:33:25:b7:d4: b2:ae:47:72:60:ba:05:c5:31:3e:e2:41:c1:ca:67: 71:aa:f5:cc:b8:e9:74:3f:62:b1:2d:fd:9c:61:ac: 21:ca:cd:3d:51:af:1e:66:82:a5:4b:04:fe:86:5c: fe:88:6f:9f:87:e8:51:f4:6e:31:9e:d4:99:5e:f0: 46:9b:37:5f:6d:69:f1:1c:35:de:70:0c:02:6e:d1: 1a:d1:f1:62:01:f6:56:58:d9:61:a3:21:50:44:61: 08:fc:36:2a:ba:9e:05:45:07:ee:11:78:fb:0b:e5: 19:80:7b:59:64:50:e3:6c:f3:12:f2:25:61:c7:ec: 69:ec:41:9e:0b:ad:a7:bd:63:4d:72:38:2b:02:72: a7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6F:33:5F:13:E9:06:73:BE:80:5F:7B:CA:E5:8F:03:8D:DB:BF:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60cc6a95-a267-3f71-9e63-ff9aa554d322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c4:e9:ed:96:57:bd:66:ee:6a:bb:26:1e:4d:9c:94:1d:4e: c5:4c:f4:2a:74:d1:e5:5b:98:89:80:a4:f3:c5:52:67:d8:4c: 6a:e7:b3:1a:91:c0:b9:1b:4a:53:f3:b9:b5:55:4c:48:4a:40: a3:96:a4:1a:19:2b:13:f7:c1:21:f5:61:57:6e:64:bb:b2:a3: c4:c1:41:94:f5:d0:c5:27:2b:90:88:96:90:4c:14:c7:53:f3: b9:96:21:ff:e3:b5:52:78:f8:6b:75:42:91:39:01:13:d4:f3: a0:d0:79:c6:58:d7:35:fc:f5:a5:5e:54:a3:0f:4b:29:fa:c3: bc:d0:71:05:25:f6:e7:4c:99:09:2b:ac:c4:bd:90:7a:68:71: 3e:7a:30:55:0e:0c:6c:37:20:7b:71:19:47:56:35:fd:47:e5: 5a:40:e3:a9:59:86:72:96:29:07:c2:24:63:55:68:ba:1d:38: 98:c7:03:21:3d:85:76:ef:f8:06:5f:e3:7c:a5:41:c5:c2:63: cc:78:08:50:90:a1:30:59:06:15:10:0f:6c:7b:94:f9:ee:c8: a7:a3:d6:92:3b:45:30:ed:0f:48:70:42:70:26:b5:d0:09:26: 9d:0a:40:fa:69:2d:28:fc:7b:71:b4:9d:f9:ce:a5:04:28:4c: 25:37:e0:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74RK+RPIVfEFOJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk ZTY3YmRkMDItOGJmOC00MjJkLTkyMjktMTU5OTRhYzU2YmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4CUirSRdupCy2dEPbSEbC36zYG7I7I2ElTo T5yB/1NPhJzUGvKIMFS6JIxjG4FnU/1wmY5DBpTH0atJFkj2wPngPPb9HcTGAszz /MvreY0vQdy2cx+qmenlUpt8ry+nKhVxkBG8q6neIUAUQEsWLmTRLzMlt9Syrkdy YLoFxTE+4kHBymdxqvXMuOl0P2KxLf2cYawhys09Ua8eZoKlSwT+hlz+iG+fh+hR 9G4xntSZXvBGmzdfbWnxHDXecAwCbtEa0fFiAfZWWNlhoyFQRGEI/DYqup4FRQfu EXj7C+UZgHtZZFDjbPMS8iVhx+xp7EGeC62nvWNNcjgrAnKnjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRvM18T6QZzvoBfe8rljwON27+kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjBjYzZhOTUtYTI2Ny0z ZjcxLTllNjMtZmY5YWE1NTRkMzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/E6e2WV71m7mq7Jh5NnJQdTsVM9Cp00eVbmImApPPFUmfYTGrnsxqR wLkbSlPzubVVTEhKQKOWpBoZKxP3wSH1YVduZLuyo8TBQZT10MUnK5CIlpBMFMdT 87mWIf/jtVJ4+Gt1QpE5ARPU86DQecZY1zX89aVeVKMPSyn6w7zQcQUl9udMmQkr rMS9kHpocT56MFUODGw3IHtxGUdWNf1H5VpA46lZhnKWKQfCJGNVaLodOJjHAyE9 hXbv+AZf43ylQcXCY8x4CFCQoTBZBhUQD2x7lPnuyKej1pI7RTDtD0hwQnAmtdAJ Jp0KQPppLSj8e3G0nfnOpQQoTCU34CQ= -----END CERTIFICATE-----Generated at Mon Mar 2 02:54:54 2026 by rpki-client