$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bdd57fe-1bf3-33b5-ada6-a95391ea3748.roa File: 6bdd57fe-1bf3-33b5-ada6-a95391ea3748.roa (raw, json) Hash identifier: gxTqQ52nkydAtpq0gfit/pid0KyyB05Z9s0x/V93W2Q= Subject key identifier: D8:60:D2:21:1B:6F:CE:20:8E:DC:BD:E6:1F:26:35:90:BF:11:36:C9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C953705438BD835D562194F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bdd57fe-1bf3-33b5-ada6-a95391ea3748.roa Signing time: Tue 20 Jan 2026 02:00:29 +0000 ROA not before: Tue 20 Jan 2026 02:00:29 +0000 ROA not after: Mon 20 Apr 2026 01:00:29 +0000 asID: 20940 IP address blocks: 23.66.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:95:37:05:43:8b:d8:35:d5:62:19:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 20 02:00:29 2026 GMT Not After : Apr 20 01:00:29 2026 GMT Subject: CN=d6c8af38-1598-4240-a2f8-1513939b8864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:21:a0:1c:25:f6:3d:6d:02:5c:01:ad:0a:7d: ef:b7:b0:c4:0c:4d:bb:83:fe:ae:bb:38:aa:c2:4f: ec:6f:f0:6c:3c:f8:82:7e:28:f7:7c:c0:de:1c:23: 5c:22:2a:b1:90:b1:fa:c3:de:f3:43:99:2d:14:60: 9f:00:c6:de:dc:73:19:d7:8e:77:54:6d:ab:9a:d0: 49:a7:65:e6:68:a7:2f:d6:5b:e7:c8:23:ec:e9:d8: 1d:cf:77:03:53:ed:c7:f5:c8:b3:c9:5f:e5:03:e7: 01:81:01:30:e9:15:43:4d:15:cf:75:53:b3:33:db: 97:cd:f7:c4:82:35:e2:fd:08:32:86:34:98:10:e2: 3a:17:a9:eb:2a:03:36:d8:39:88:92:79:61:c9:db: fc:11:d7:63:dd:29:16:d0:84:01:df:d7:a6:10:5d: 4f:df:9a:38:bc:ca:52:3f:e8:b0:dc:cc:2d:70:ab: 6c:af:78:46:5d:41:ed:95:ae:38:23:4d:ad:b8:42: 65:a1:65:fd:8a:38:87:27:a2:4d:73:ce:a7:32:3b: 86:78:52:e0:fd:30:cf:d0:8a:6d:16:b4:5e:e0:49: 3f:f9:53:f2:15:8e:92:b9:56:6b:a4:35:b4:ad:89: 20:92:72:ee:e5:c6:4f:71:fc:21:a2:ae:1a:c9:be: e2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:60:D2:21:1B:6F:CE:20:8E:DC:BD:E6:1F:26:35:90:BF:11:36:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bdd57fe-1bf3-33b5-ada6-a95391ea3748.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.66.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:6a:ef:f1:47:0f:c4:80:71:d7:5b:ac:2e:91:98:43:e8:0d: 34:b7:89:e1:6e:7f:80:5a:ed:68:4b:b8:51:b3:ef:0b:6c:89: 76:77:da:0a:f6:1e:d7:c4:e9:f2:e9:ce:4f:b9:c0:b7:a7:30: 18:87:bd:63:95:97:90:05:65:0d:9c:93:47:b2:ec:6e:11:d9: 32:d8:01:13:9c:87:6a:e9:17:b6:4c:29:40:23:a6:ed:53:86: fe:25:53:99:88:18:9d:4a:b9:45:b8:00:18:75:78:c1:39:38: 4f:ea:ba:5b:54:d2:a2:62:7f:c5:88:10:4b:34:62:bd:4f:2e: f5:a5:6e:cd:39:d1:fc:78:21:d4:41:07:a9:86:69:21:c2:91: 80:9d:37:d7:74:94:ca:79:f5:d9:ac:77:6d:3f:2c:db:45:d6: 84:bf:82:c1:f1:a2:55:4f:e5:f2:0f:a0:cb:05:14:d1:3f:49: 1e:85:44:ac:b6:c7:65:33:35:8e:e5:11:48:a5:aa:e4:ad:3b: 8c:46:8f:49:81:c5:d0:85:c5:de:0c:42:8b:8a:22:04:0b:fb: ce:59:88:14:29:02:1f:56:8e:50:e6:1d:51:82:8f:e7:8c:43: 08:98:d4:fd:74:b2:24:87:7f:2d:90:47:8b:2a:13:ff:10:e6: 49:8c:ab:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyVNwVDi9g11WIZTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEyMDAyMDAyOVoXDTI2MDQyMDAxMDAyOVowLzEtMCsGA1UEAxMk ZDZjOGFmMzgtMTU5OC00MjQwLWEyZjgtMTUxMzkzOWI4ODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCGgHCX2PW0CXAGtCn3vt7DEDE27g/6uuziq wk/sb/BsPPiCfij3fMDeHCNcIiqxkLH6w97zQ5ktFGCfAMbe3HMZ1453VG2rmtBJ p2XmaKcv1lvnyCPs6dgdz3cDU+3H9cizyV/lA+cBgQEw6RVDTRXPdVOzM9uXzffE gjXi/QgyhjSYEOI6F6nrKgM22DmIknlhydv8Eddj3SkW0IQB39emEF1P35o4vMpS P+iw3MwtcKtsr3hGXUHtla44I02tuEJloWX9ijiHJ6JNc86nMjuGeFLg/TDP0Ipt FrRe4Ek/+VPyFY6SuVZrpDW0rYkgknLu5cZPcfwhoq4ayb7iPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhg0iEbb84gjty95h8mNZC/ETbJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmJkZDU3ZmUtMWJmMy0z M2I1LWFkYTYtYTk1MzkxZWEzNzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0J8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhq7/FHD8SAcddbrC6RmEPoDTS3ieFuf4Ba7WhLuFGz7wtsiXZ32gr2 HtfE6fLpzk+5wLenMBiHvWOVl5AFZQ2ck0ey7G4R2TLYAROch2rpF7ZMKUAjpu1T hv4lU5mIGJ1KuUW4ABh1eME5OE/qultU0qJif8WIEEs0Yr1PLvWlbs050fx4IdRB B6mGaSHCkYCdN9d0lMp59dmsd20/LNtF1oS/gsHxolVP5fIPoMsFFNE/SR6FRKy2 x2UzNY7lEUilquStO4xGj0mBxdCFxd4MQouKIgQL+85ZiBQpAh9WjlDmHVGCj+eM QwiY1P10siSHfy2QR4sqE/8Q5kmMqx0= -----END CERTIFICATE-----Generated at Mon Mar 2 04:38:20 2026 by rpki-client