$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68410924-245d-3311-8732-59122f328e47.roa File: 68410924-245d-3311-8732-59122f328e47.roa (raw, json) Hash identifier: KXag+tfWkzAQgrsztdkHRYUN6Li6e2jThVX9ZhDturs= Subject key identifier: 90:99:93:EA:9F:8E:1B:31:21:F8:AD:BB:75:38:62:66:12:23:97:BF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D07AD074DC03B64FAAAA61540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68410924-245d-3311-8732-59122f328e47.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 16625 IP address blocks: 23.200.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:07:4d:c0:3b:64:fa:aa:a6:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=3f597b42-0844-4594-91de-59e4df97fb6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:58:ab:6f:10:ee:f2:25:6e:e3:d5:e1:e2:40: 0b:7c:1b:f3:d9:53:cf:1b:8b:26:79:57:d9:62:26: ad:93:ff:a4:bf:25:35:8d:95:4e:f6:52:15:4c:ca: 37:79:0e:27:fc:64:ab:0d:a4:a0:30:de:51:51:ef: 86:77:9f:a1:74:57:df:fa:d2:17:e3:ea:79:fa:36: 08:29:ae:19:c1:83:7b:f6:36:cb:f9:bd:29:45:12: ec:77:87:f2:9c:91:06:6a:e2:78:98:94:b2:04:99: 2a:e0:67:39:cf:64:55:89:3e:53:14:e8:01:e4:fe: f5:46:c5:66:55:db:ac:2f:8b:02:a8:3d:bd:08:cd: 8c:fc:83:e0:bb:15:ab:20:5f:df:32:ed:b0:e0:e9: d0:7b:a6:85:66:4a:35:3b:2b:ec:95:ed:d0:61:fb: f7:a2:a6:90:c2:d4:4f:82:6f:82:d9:df:7b:ba:b3: 37:b0:af:d4:a9:af:37:5c:92:e1:89:17:0a:df:a6: 00:a8:54:3f:42:74:90:a7:be:db:7c:be:06:1d:c9: 52:21:40:64:2e:03:d4:ca:2b:93:8c:47:c5:b8:cf: 58:f5:46:67:f1:60:d9:c3:6c:ad:b8:5d:0a:92:d9: 3d:86:b3:72:1a:be:08:45:42:20:fe:1d:d7:3c:06: f9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:99:93:EA:9F:8E:1B:31:21:F8:AD:BB:75:38:62:66:12:23:97:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68410924-245d-3311-8732-59122f328e47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:3f:13:a2:b3:a6:f6:13:a2:d6:4d:3a:07:74:9b:8a:c5:67: 42:f3:4e:b1:8c:51:5e:53:76:e8:bf:ed:ae:ce:33:be:97:6f: 6a:76:fd:a2:57:7b:32:5a:03:18:66:21:67:f3:fc:2e:a3:93: ab:c3:7a:51:c4:b5:6f:dd:80:40:ed:e8:cb:68:35:05:26:28: fb:93:a5:f5:fa:21:b9:c5:8d:9f:15:71:c1:22:55:e5:33:1c: c1:6a:c6:85:a8:d5:1d:4a:c7:dc:90:ac:17:b1:19:4a:d3:dd: 0e:7a:8e:cd:8e:e6:45:5b:f9:35:6d:14:3f:bb:19:30:ea:57: 57:f5:49:58:2b:d0:64:ab:7a:13:a5:f4:7b:30:7a:75:74:3a: c3:54:62:84:07:33:88:36:4f:5c:eb:11:b1:af:15:af:83:e1: d2:13:1a:f4:de:c4:0c:75:15:74:5a:3c:58:9f:dc:5b:84:0b: 0b:28:da:a7:06:fe:d8:18:2d:07:27:0e:04:3e:e3:b4:3e:d6: 84:44:99:49:b9:53:b0:24:8a:0c:67:c9:4b:c1:93:46:27:0c: e4:93:d1:43:a3:80:6c:0b:03:d4:e5:49:23:a0:0f:61:65:15: 7a:cc:95:22:23:2e:f4:fd:35:b0:01:90:09:57:ca:fb:82:0e: 57:24:10:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrQdNwDtk+qqmFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk M2Y1OTdiNDItMDg0NC00NTk0LTkxZGUtNTllNGRmOTdmYjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlirbxDu8iVu49Xh4kALfBvz2VPPG4smeVfZ Yiatk/+kvyU1jZVO9lIVTMo3eQ4n/GSrDaSgMN5RUe+Gd5+hdFff+tIX4+p5+jYI Ka4ZwYN79jbL+b0pRRLsd4fynJEGauJ4mJSyBJkq4Gc5z2RViT5TFOgB5P71RsVm VdusL4sCqD29CM2M/IPguxWrIF/fMu2w4OnQe6aFZko1Oyvsle3QYfv3oqaQwtRP gm+C2d97urM3sK/Uqa83XJLhiRcK36YAqFQ/QnSQp77bfL4GHclSIUBkLgPUyiuT jEfFuM9Y9UZn8WDZw2ytuF0Kktk9hrNyGr4IRUIg/h3XPAb5RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCZk+qfjhsxIfitu3U4YmYSI5e/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjg0MTA5MjQtMjQ1ZC0z MzExLTg3MzItNTkxMjJmMzI4ZTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8joMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABg/E6KzpvYTotZNOgd0m4rFZ0LzTrGMUV5Tdui/7a7OM76Xb2p2/aJX ezJaAxhmIWfz/C6jk6vDelHEtW/dgEDt6MtoNQUmKPuTpfX6IbnFjZ8VccEiVeUz HMFqxoWo1R1Kx9yQrBexGUrT3Q56js2O5kVb+TVtFD+7GTDqV1f1SVgr0GSrehOl 9HswenV0OsNUYoQHM4g2T1zrEbGvFa+D4dITGvTexAx1FXRaPFif3FuECwso2qcG /tgYLQcnDgQ+47Q+1oREmUm5U7AkigxnyUvBk0YnDOST0UOjgGwLA9TlSSOgD2Fl FXrMlSIjLvT9NbABkAlXyvuCDlckEMs= -----END CERTIFICATE-----Generated at Mon Mar 2 13:53:04 2026 by rpki-client