$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/867e4fa6-dc6f-311d-a0a1-13ef3472b803.roa File: 867e4fa6-dc6f-311d-a0a1-13ef3472b803.roa (raw, json) Hash identifier: F23TNyVVJ0Ab06Hf01tLpRCyWtFqCx67aUs2bH1g7DU= Subject key identifier: A3:B4:46:43:F0:46:09:9C:2A:73:BB:18:B6:AB:BE:26:46:E5:95:EF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CAE5EAC77B93DEB710CBA3180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/867e4fa6-dc6f-311d-a0a1-13ef3472b803.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 45899 IP address blocks: 23.32.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:ac:77:b9:3d:eb:71:0c:ba:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=ff7c452c-eea7-49cb-9f7a-5d1a958d3e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cd:1b:c8:23:c3:8a:91:77:67:ea:da:74:12: ee:80:e2:8a:f5:88:4a:4d:9b:d9:55:43:09:13:6e: f1:a8:d2:d3:8f:9e:40:8c:58:4e:07:71:0b:5e:93: 43:8e:48:f3:94:e0:09:a0:e9:8c:a1:d6:d2:e0:bc: f9:79:b9:33:fe:ed:2f:bc:69:55:68:55:f0:b0:56: 6f:88:47:41:55:59:c0:6b:e3:62:74:b9:e0:44:3f: a6:8b:d2:cb:95:e6:d0:c0:33:90:0d:b4:e1:b1:39: 82:77:64:3f:e6:3a:69:b2:e7:f8:82:cd:ff:02:49: 5f:db:f1:0a:49:51:b2:06:59:d3:8f:b8:ee:37:24: 46:d0:99:27:c0:a9:c3:27:d6:40:6d:b1:34:e1:19: 9f:ae:11:8e:c8:9b:e1:11:a5:b1:77:ae:fc:ea:28: 50:83:e4:d4:5b:88:bb:9c:6f:98:6f:ce:d3:b1:3b: eb:36:b9:35:3b:68:65:2f:85:f2:49:b2:ec:98:69: 3a:a1:e2:6b:9a:66:fd:4f:b5:df:fb:3d:eb:fe:59: 01:db:79:67:f7:c7:9c:2f:f5:2c:a6:29:30:41:02: 7a:cd:74:ec:a0:88:85:0e:cf:7d:47:1c:67:63:e0: a3:90:1c:7f:a3:b8:49:45:c5:e8:36:1c:4f:e4:be: 97:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B4:46:43:F0:46:09:9C:2A:73:BB:18:B6:AB:BE:26:46:E5:95:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/867e4fa6-dc6f-311d-a0a1-13ef3472b803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d7:c1:51:be:34:81:31:e4:a9:20:a0:44:ca:35:5e:24:11: 8b:27:8c:b0:6c:24:73:ce:36:06:48:43:4a:74:6e:ce:a2:1a: 9e:30:35:4f:18:88:21:ef:09:94:ad:4b:6f:cb:0c:23:cc:e2: 0f:c7:88:0d:9a:f6:5d:6b:1f:81:42:85:90:12:99:34:d2:23: b6:59:d6:25:0b:33:f1:f2:24:19:9c:bc:75:63:39:ed:44:3a: e1:7b:89:33:15:b9:b4:60:c9:4c:ee:3e:97:c7:94:56:7a:d0: 48:72:2a:d7:5e:3c:89:92:1e:b5:6d:af:70:04:f8:b9:ef:67: ce:01:bb:96:da:a8:f4:26:6f:d1:d3:c1:0d:e5:d5:04:b2:30: 0a:4c:28:0e:3f:85:dd:d4:5d:1b:f2:9f:e9:44:e4:6d:5b:da: a6:81:11:33:70:e9:de:35:4f:39:49:9a:58:ab:6d:98:df:23: da:d4:15:d9:82:75:44:0b:a7:74:7c:d3:c0:65:e4:f3:65:fe: 54:d5:82:8c:d5:a0:75:b1:ac:e0:49:ee:f5:6c:e4:48:af:73: fc:e1:44:f8:0f:a4:1d:99:09:89:8d:10:f6:08:d6:45:ba:63: 60:95:ee:bb:2a:dd:72:c2:1c:2e:dc:72:e9:7a:5a:2a:86:ae: 31:dd:e8:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXqx3uT3rcQy6MYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmY3YzQ1MmMtZWVhNy00OWNiLTlmN2EtNWQxYTk1OGQzZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc0byCPDipF3Z+radBLugOKK9YhKTZvZVUMJ E27xqNLTj55AjFhOB3ELXpNDjkjzlOAJoOmModbS4Lz5ebkz/u0vvGlVaFXwsFZv iEdBVVnAa+NidLngRD+mi9LLlebQwDOQDbThsTmCd2Q/5jppsuf4gs3/Aklf2/EK SVGyBlnTj7juNyRG0JknwKnDJ9ZAbbE04RmfrhGOyJvhEaWxd6786ihQg+TUW4i7 nG+Yb87TsTvrNrk1O2hlL4XySbLsmGk6oeJrmmb9T7Xf+z3r/lkB23ln98ecL/Us pikwQQJ6zXTsoIiFDs99RxxnY+CjkBx/o7hJRcXoNhxP5L6XnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKO0RkPwRgmcKnO7GLarviZG5ZXvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODY3ZTRmYTYtZGM2Zi0z MTFkLWEwYTEtMTNlZjM0NzJiODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyD5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7XwVG+NIEx5KkgoETKNV4kEYsnjLBsJHPONgZIQ0p0bs6iGp4wNU8Y iCHvCZStS2/LDCPM4g/HiA2a9l1rH4FChZASmTTSI7ZZ1iULM/HyJBmcvHVjOe1E OuF7iTMVubRgyUzuPpfHlFZ60EhyKtdePImSHrVtr3AE+LnvZ84Bu5baqPQmb9HT wQ3l1QSyMApMKA4/hd3UXRvyn+lE5G1b2qaBETNw6d41TzlJmlirbZjfI9rUFdmC dUQLp3R808Bl5PNl/lTVgozVoHWxrOBJ7vVs5Eivc/zhRPgPpB2ZCYmNEPYI1kW6 Y2CV7rsq3XLCHC7ccul6WiqGrjHd6Ps= -----END CERTIFICATE-----Generated at Sun Mar 1 23:16:11 2026 by rpki-client