$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1f5c700-f0d9-306f-b898-52542fd30489.roa File: a1f5c700-f0d9-306f-b898-52542fd30489.roa (raw, json) Hash identifier: tDOdrUOQhfgP6FAipgz7TwQUS3NsIZXoDgVTHGvtGWE= Subject key identifier: 52:CE:79:26:77:2C:87:42:69:A9:09:AD:AD:AC:24:A5:AA:4A:90:75 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D07AD05ABD1D9BD98BDD1DC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1f5c700-f0d9-306f-b898-52542fd30489.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 16625 IP address blocks: 23.200.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:05:ab:d1:d9:bd:98:bd:d1:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=446dd88e-3495-43e6-ba43-3e8e9e342e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fa:38:52:7f:ef:d3:bf:70:1f:e7:71:b8:22: 23:41:6c:5a:82:e7:c0:44:59:6c:37:4b:7d:24:41: e4:a2:81:14:47:45:53:a3:cf:63:18:f4:33:16:b7: 0d:56:ad:5a:35:7f:e5:1a:82:0a:55:61:94:b5:7e: 29:e8:b5:0d:3c:b6:cd:6b:72:35:3c:5f:59:3e:00: dd:1e:8e:eb:4e:d1:5b:e5:92:dd:b3:b1:f2:5e:b7: 3d:b9:b9:aa:23:1e:9b:55:ef:45:06:c8:49:17:74: ae:e9:94:e0:8e:06:e1:98:77:d4:7f:d6:14:6b:b7: f3:c6:9f:f4:67:0f:c8:85:75:e8:38:89:d9:9b:67: be:81:90:a4:12:7c:a7:f3:9c:f4:8b:e8:ae:da:83: e0:01:df:ae:4f:11:cd:9d:78:99:72:21:86:14:be: 15:35:01:af:00:cd:c0:be:ee:7d:88:93:c2:39:b2: 81:fc:0b:58:58:39:fc:7d:fd:f9:3b:4a:9c:1a:0e: 51:6e:c3:2c:ff:42:4c:58:f3:c9:dc:a2:19:ed:fc: c2:a9:c7:0e:60:c7:b9:bb:e4:f6:ec:75:8a:62:71: 13:42:08:ee:54:78:b3:da:52:3d:44:de:69:24:61: 43:6c:85:09:02:13:03:45:49:db:f8:80:a1:39:95: bf:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CE:79:26:77:2C:87:42:69:A9:09:AD:AD:AC:24:A5:AA:4A:90:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1f5c700-f0d9-306f-b898-52542fd30489.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:c6:63:49:05:69:4d:9d:30:91:8c:60:e0:65:05:71:d5:81: ed:ae:7b:3e:c7:50:41:50:e2:30:16:c0:04:04:29:ac:06:c6: 8a:75:65:78:4e:9a:80:d5:bf:8b:aa:7e:5b:ce:85:c3:da:0b: 1d:ef:7f:b1:1f:59:a2:93:fc:c1:74:13:2f:c8:7f:ad:d5:d8: 6b:ec:c3:34:be:cd:41:54:4e:89:75:2b:21:9f:6c:e6:08:a3: 27:9e:cb:8c:76:aa:27:46:53:59:1a:b8:03:63:7f:ac:89:64: 22:25:ae:70:4c:b6:cd:cf:17:dc:d8:61:7b:e4:6e:9a:39:d4: f5:94:d1:4e:3c:6a:01:53:bd:c9:37:f2:57:d2:41:81:3b:46: 5b:7b:c6:b4:bb:88:77:83:e0:a2:2a:03:dd:a0:51:30:68:61: b2:3c:b5:37:5a:0f:cf:2c:89:11:97:92:c2:95:5c:11:52:96: 02:f8:cc:37:31:0a:a3:0e:a2:19:f8:50:01:1e:6b:48:1a:dd: d2:8e:89:d4:ef:eb:2e:b5:91:96:e5:fa:57:ca:4c:45:d5:dc: d5:8b:bc:a3:d8:b9:fd:ed:47:76:64:65:fc:a9:86:1a:46:00: 80:32:ac:26:b3:e0:5f:93:f9:d8:30:a4:6e:c7:8a:b4:84:d9: 3e:0c:27:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrQWr0dm9mL3R3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk NDQ2ZGQ4OGUtMzQ5NS00M2U2LWJhNDMtM2U4ZTllMzQyZTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPo4Un/v079wH+dxuCIjQWxagufARFlsN0t9 JEHkooEUR0VTo89jGPQzFrcNVq1aNX/lGoIKVWGUtX4p6LUNPLbNa3I1PF9ZPgDd Ho7rTtFb5ZLds7HyXrc9ubmqIx6bVe9FBshJF3Su6ZTgjgbhmHfUf9YUa7fzxp/0 Zw/IhXXoOInZm2e+gZCkEnyn85z0i+iu2oPgAd+uTxHNnXiZciGGFL4VNQGvAM3A vu59iJPCObKB/AtYWDn8ff35O0qcGg5RbsMs/0JMWPPJ3KIZ7fzCqccOYMe5u+T2 7HWKYnETQgjuVHiz2lI9RN5pJGFDbIUJAhMDRUnb+IChOZW/3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLOeSZ3LIdCaakJra2sJKWqSpB1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTFmNWM3MDAtZjBkOS0z MDZmLWI4OTgtNTI1NDJmZDMwNDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8g4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjGY0kFaU2dMJGMYOBlBXHVge2uez7HUEFQ4jAWwAQEKawGxop1ZXhO moDVv4uqflvOhcPaCx3vf7EfWaKT/MF0Ey/If63V2GvswzS+zUFUTol1KyGfbOYI oyeey4x2qidGU1kauANjf6yJZCIlrnBMts3PF9zYYXvkbpo51PWU0U48agFTvck3 8lfSQYE7Rlt7xrS7iHeD4KIqA92gUTBoYbI8tTdaD88siRGXksKVXBFSlgL4zDcx CqMOohn4UAEea0ga3dKOidTv6y61kZbl+lfKTEXV3NWLvKPYuf3tR3ZkZfyphhpG AIAyrCaz4F+T+dgwpG7HirSE2T4MJ+Y= -----END CERTIFICATE-----Generated at Mon Mar 2 17:10:56 2026 by rpki-client