$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a16f492-2e97-3eac-af0c-5ced4cfe29e2.roa File: 6a16f492-2e97-3eac-af0c-5ced4cfe29e2.roa (raw, json) Hash identifier: sORwhU+Y1DnqQ5QCjnSacZYgCZlJHSD+EdJUxxiJn40= Subject key identifier: 15:6E:BA:D2:52:ED:A2:9C:C1:6E:B1:83:C4:18:5F:F8:A8:48:57:59 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CA75C6A3D82093DE1D41F7340 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a16f492-2e97-3eac-af0c-5ced4cfe29e2.roa Signing time: Mon 26 Jan 2026 14:00:41 +0000 ROA not before: Mon 26 Jan 2026 14:00:41 +0000 ROA not after: Sun 26 Apr 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.4.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:5c:6a:3d:82:09:3d:e1:d4:1f:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 26 14:00:41 2026 GMT Not After : Apr 26 13:00:41 2026 GMT Subject: CN=5b2fa3e8-512b-4471-81bd-18ea2adb9454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:88:a7:75:69:b0:9b:21:68:0a:aa:86:56: 22:50:d2:dd:ee:79:1a:df:2c:c5:72:1f:b5:c4:92: aa:7b:7f:70:1c:e9:8b:fd:c2:8d:0b:8f:d2:c8:e5: f4:d7:2c:0b:a1:b5:fe:22:50:00:35:45:ee:5e:e1: 2b:7a:a4:c5:88:a8:21:04:d7:e8:eb:7e:66:cf:10: d2:ca:d5:1e:c8:ff:cf:93:31:33:e2:24:78:f8:db: 7c:e0:21:65:f6:6c:de:6d:cb:44:d7:13:84:61:1c: 98:44:1f:6a:3f:04:44:f9:25:93:56:d5:3d:e3:73: ff:5d:c9:41:00:27:bd:82:d0:f8:35:1e:ab:88:7f: 63:3d:ee:8c:bc:62:c3:fb:0e:fb:bf:1f:0e:2f:ef: ef:fe:38:44:87:04:5f:eb:dc:f3:af:26:8e:91:5c: 5a:d5:90:c9:bb:0b:cc:b8:f4:78:c0:3b:46:95:1a: bd:9b:4d:b6:2e:57:d5:ac:0d:61:68:78:38:7a:b7: 77:03:1d:0a:c2:e2:9e:28:eb:a8:df:d5:7a:20:ca: 33:34:ab:1e:06:23:54:b4:fc:8b:37:77:02:6d:f5: 9e:21:de:93:3a:7d:87:37:b5:41:5d:07:3c:d5:87: bd:0b:53:c2:ee:7e:60:31:d3:b3:a5:5d:ff:0c:4b: 58:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6E:BA:D2:52:ED:A2:9C:C1:6E:B1:83:C4:18:5F:F8:A8:48:57:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a16f492-2e97-3eac-af0c-5ced4cfe29e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.4.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:40:1e:eb:4a:44:91:0c:ad:89:ec:7a:17:dd:06:46:03:73: e2:9c:d2:0f:f1:06:7d:0f:7b:2b:91:cd:bf:ba:da:ff:6e:75: 50:fc:52:86:80:28:c5:f5:97:cf:f6:cb:19:b9:5a:d8:09:a0: 11:fb:18:4e:5f:14:6e:84:c3:da:7b:93:d6:34:34:92:28:1e: 5e:0f:54:6f:74:fb:d3:ea:9b:ae:cd:eb:53:70:d5:c7:70:ee: 8c:08:db:4d:ef:56:8c:de:ca:aa:18:ce:6d:8d:f7:68:4e:de: 85:da:d4:15:b3:72:70:0e:28:6e:46:3a:e4:58:be:96:54:18: 65:48:f6:2b:af:1f:a7:82:b0:27:ca:ff:4b:64:ac:dd:5d:92: 9a:78:1c:45:ce:d5:e0:b3:e5:76:43:ac:d0:9f:99:ad:ba:b5: 3e:63:29:fb:be:80:35:1b:b5:ab:f7:15:d2:61:a4:d0:b9:96: 77:bb:4c:c2:a6:47:b4:6c:79:8f:cb:ba:a6:95:cd:81:1f:cf: bd:6c:e4:cf:52:99:40:a3:25:2c:3a:58:95:2d:58:3f:c4:ee: 85:74:ad:ee:c5:b0:1c:32:0f:16:1d:8f:2f:61:9e:29:b1:7e: a7:48:3d:ad:64:d5:21:82:cb:d1:96:1a:92:e8:dc:0d:b8:f4: f7:61:07:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEynXGo9ggk94dQfc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEyNjE0MDA0MVoXDTI2MDQyNjEzMDA0MVowLzEtMCsGA1UEAxMk NWIyZmEzZTgtNTEyYi00NDcxLTgxYmQtMThlYTJhZGI5NDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufSIp3VpsJshaAqqhlYiUNLd7nka3yzFch+1 xJKqe39wHOmL/cKNC4/SyOX01ywLobX+IlAANUXuXuEreqTFiKghBNfo635mzxDS ytUeyP/PkzEz4iR4+Nt84CFl9mzebctE1xOEYRyYRB9qPwRE+SWTVtU943P/XclB ACe9gtD4NR6riH9jPe6MvGLD+w77vx8OL+/v/jhEhwRf69zzryaOkVxa1ZDJuwvM uPR4wDtGlRq9m022LlfVrA1haHg4erd3Ax0KwuKeKOuo39V6IMozNKseBiNUtPyL N3cCbfWeId6TOn2HN7VBXQc81Ye9C1PC7n5gMdOzpV3/DEtYaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVuutJS7aKcwW6xg8QYX/ioSFdZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmExNmY0OTItMmU5Ny0z ZWFjLWFmMGMtNWNlZDRjZmUyOWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBAHutKRJEMrYnsehfdBkYDc+Kc0g/xBn0PeyuRzb+62v9udVD8UoaA KMX1l8/2yxm5WtgJoBH7GE5fFG6Ew9p7k9Y0NJIoHl4PVG90+9Pqm67N61Nw1cdw 7owI203vVozeyqoYzm2N92hO3oXa1BWzcnAOKG5GOuRYvpZUGGVI9iuvH6eCsCfK /0tkrN1dkpp4HEXO1eCz5XZDrNCfma26tT5jKfu+gDUbtav3FdJhpNC5lne7TMKm R7RseY/LuqaVzYEfz71s5M9SmUCjJSw6WJUtWD/E7oV0re7FsBwyDxYdjy9hnimx fqdIPa1k1SGCy9GWGpLo3A249PdhB5o= -----END CERTIFICATE-----Generated at Mon Mar 2 00:29:57 2026 by rpki-client