$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ab7571d-81c6-3bfe-a3bf-fe66d1a27634.roa File: 7ab7571d-81c6-3bfe-a3bf-fe66d1a27634.roa (raw, json) Hash identifier: ywWrL0KE9P1t1HtL7Z0l4PN/6ZLdPn2JLEx2+3MSDTU= Subject key identifier: EE:38:A9:B2:3B:8B:7A:A3:AE:93:C7:F4:07:33:EC:35:D8:CC:50:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CCD0CA6D9A7F3C73FA6CB5C40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ab7571d-81c6-3bfe-a3bf-fe66d1a27634.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.32.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:a6:d9:a7:f3:c7:3f:a6:cb:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=c091fad8-ac34-46f7-b305-6a8c52362e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:53:9e:f8:71:64:bb:ff:56:88:d5:2e:2f:e6: 02:38:6f:b4:25:ae:a2:61:c8:c9:5a:ff:fb:92:58: 8d:c4:61:aa:85:1d:e2:be:88:ee:9d:e3:24:32:fd: 10:c5:8c:53:3c:bc:e5:3d:e4:15:71:2a:53:a3:b6: 84:84:b8:d2:68:f8:cb:93:20:cd:df:83:a5:77:cf: eb:b8:ab:8d:5b:6e:d1:05:c0:01:9b:f3:42:41:35: f6:60:80:7d:f0:7b:c1:f2:c2:76:8b:c8:ad:52:48: d7:f1:85:5d:a7:0b:c6:94:7e:27:b1:95:81:ec:ba: 7e:84:06:16:db:32:56:04:9b:71:68:cd:73:c5:04: fb:22:c8:a1:e5:14:ff:fe:e2:b2:c8:9b:3c:f5:38: de:4a:49:5f:67:1e:6f:7e:a8:25:64:97:97:1a:51: 9e:fe:27:75:1a:fa:85:f3:52:7e:0a:f8:03:68:18: ec:f6:fd:15:99:64:55:09:a8:62:ce:25:bb:7f:45: 6f:31:ea:39:f2:f1:1c:c6:cc:5c:7f:8e:3c:96:22: 89:7e:e3:7c:bb:ed:cf:11:8f:be:06:10:2a:07:44: b4:02:d1:21:cc:1c:7c:20:46:e9:66:ef:00:81:aa: b2:ca:2a:b1:3c:96:12:07:7f:76:d8:9a:a0:ba:78: bc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:38:A9:B2:3B:8B:7A:A3:AE:93:C7:F4:07:33:EC:35:D8:CC:50:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ab7571d-81c6-3bfe-a3bf-fe66d1a27634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:c3:51:61:86:77:3e:04:8a:2b:c9:45:99:f1:25:3f:80:e7: 47:ab:7a:93:48:c7:19:da:60:be:a4:ea:c0:12:5a:2f:5b:5a: 4e:4a:09:fb:fe:d8:79:48:f6:eb:c9:6c:82:02:06:e4:87:c2: 89:9a:66:69:93:a2:de:40:8c:df:3f:3d:8d:4e:b9:00:40:b7: b0:46:ae:23:5b:93:34:83:88:ce:60:70:fc:7f:6e:ba:55:fe: 20:1e:52:f6:cf:da:dd:52:13:b5:72:7b:7f:71:09:c3:ca:3b: 40:96:4f:e0:bc:c8:a2:34:a5:d2:3c:9a:20:57:48:09:14:99: 17:ba:76:17:ad:55:cf:70:07:ea:64:d6:8a:a1:f8:1c:e1:00: d4:62:c9:71:bd:5a:94:40:1f:7f:b1:57:a6:bc:4c:95:56:57: 76:77:e7:50:3a:ff:e3:40:f4:a9:75:11:c1:b6:46:52:b9:a9: ca:65:f1:56:57:a7:ef:7f:0f:94:3f:db:52:bb:7c:32:0a:2c: da:71:b2:91:f1:19:e5:98:f3:2c:dc:c2:91:bf:a1:95:63:ca: fa:14:08:43:6d:97:d2:d9:87:79:4c:f7:ab:43:06:79:3a:dc: 0e:08:01:3a:7d:11:c9:bc:9e:ca:04:d3:3e:0e:bc:a3:f4:1d: 61:f5:33:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDKbZp/PHP6bLXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk YzA5MWZhZDgtYWMzNC00NmY3LWIzMDUtNmE4YzUyMzYyZThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlOe+HFku/9WiNUuL+YCOG+0Ja6iYcjJWv/7 kliNxGGqhR3ivojuneMkMv0QxYxTPLzlPeQVcSpTo7aEhLjSaPjLkyDN34Old8/r uKuNW27RBcABm/NCQTX2YIB98HvB8sJ2i8itUkjX8YVdpwvGlH4nsZWB7Lp+hAYW 2zJWBJtxaM1zxQT7Isih5RT//uKyyJs89TjeSklfZx5vfqglZJeXGlGe/id1GvqF 81J+CvgDaBjs9v0VmWRVCahiziW7f0VvMeo58vEcxsxcf448liKJfuN8u+3PEY++ BhAqB0S0AtEhzBx8IEbpZu8AgaqyyiqxPJYSB3922Jqguni8XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO44qbI7i3qjrpPH9Acz7DXYzFD4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2FiNzU3MWQtODFjNi0z YmZlLWEzYmYtZmU2NmQxYTI3NjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7DUWGGdz4EiivJRZnxJT+A50erepNIxxnaYL6k6sASWi9bWk5KCfv+ 2HlI9uvJbIICBuSHwomaZmmTot5AjN8/PY1OuQBAt7BGriNbkzSDiM5gcPx/brpV /iAeUvbP2t1SE7Vye39xCcPKO0CWT+C8yKI0pdI8miBXSAkUmRe6dhetVc9wB+pk 1oqh+BzhANRiyXG9WpRAH3+xV6a8TJVWV3Z351A6/+NA9Kl1EcG2RlK5qcpl8VZX p+9/D5Q/21K7fDIKLNpxspHxGeWY8yzcwpG/oZVjyvoUCENtl9LZh3lM96tDBnk6 3A4IATp9Ecm8nsoE0z4OvKP0HWH1M/E= -----END CERTIFICATE-----Generated at Sun Mar 1 23:12:10 2026 by rpki-client