$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2d80523-ea9c-39c4-bd72-4387c46ba108.roa File: a2d80523-ea9c-39c4-bd72-4387c46ba108.roa (raw, json) Hash identifier: StemaL77oDywnocvptlOkgb6RFca3GVDtZy/+KYrTkc= Subject key identifier: 1D:8A:D0:6B:95:F1:80:2B:79:08:3F:4D:A3:7D:B2:52:B7:30:15:B7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CB121DC444A4FD249E838BC60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2d80523-ea9c-39c4-bd72-4387c46ba108.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.208.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:dc:44:4a:4f:d2:49:e8:38:bc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=7a3260c9-5cc4-478f-a274-c63af5750285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:37:62:b9:ef:6c:8c:32:7c:7a:16:ed:ae:e5: 4b:6e:e0:36:79:ce:78:0a:48:9b:7c:9e:f9:7e:ad: 4f:1b:cc:0f:dc:7d:60:71:e1:cb:8a:de:b3:5d:63: 3c:26:c7:bd:f2:1c:76:74:f3:c9:03:76:8a:bf:16: 53:c9:39:18:3e:ad:5b:6c:5c:46:18:66:66:12:57: 01:97:2c:93:a9:10:b1:49:24:90:3b:35:ac:bb:d3: 9f:1f:55:40:64:ab:c3:34:f2:cc:72:a9:d7:a0:ba: cd:0e:cd:7a:7e:60:d1:d2:68:ff:4f:b4:3f:32:a1: 45:05:6b:f5:f6:06:d1:05:ad:b4:91:83:7f:4a:45: d3:a3:f4:fa:73:af:f1:d6:74:64:09:7a:83:a8:f0: 0e:32:14:15:b4:e7:35:4a:a5:fb:6c:ae:c5:54:49: 11:86:fc:09:40:74:1e:3c:6e:7c:2a:2c:fe:da:d6: a8:8b:4d:03:3e:ee:75:76:db:6a:46:61:c5:9d:1d: 0d:20:ef:c7:c0:65:c3:5d:e9:1a:17:59:77:fd:23: 09:76:54:ae:ea:8e:79:84:a9:23:6c:3e:9b:47:b2: 0c:f2:ad:f2:95:b3:f7:ea:a0:6a:98:6b:d7:ad:cf: 6d:77:31:2c:c3:af:fe:4e:af:9a:5e:a1:e2:36:da: 1d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8A:D0:6B:95:F1:80:2B:79:08:3F:4D:A3:7D:B2:52:B7:30:15:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2d80523-ea9c-39c4-bd72-4387c46ba108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:01:e2:ca:74:cd:57:7a:67:64:1d:8e:87:8b:c4:2c:92:b6: 9a:49:10:95:51:67:35:7b:ed:3a:e9:72:d8:26:dc:80:e9:a0: d0:c2:f9:ee:d5:18:08:6c:07:f8:96:38:c5:72:a8:85:03:6a: 32:14:e5:96:91:a4:d5:29:51:27:bc:f6:c6:56:6f:25:8d:e3: e5:24:03:66:d9:4e:4f:f4:2e:0b:96:f2:f4:72:5d:0a:b4:f3: 7d:ec:af:be:49:d0:5c:94:15:9f:3e:90:32:f6:ab:8c:70:11: 5c:14:36:e3:d5:df:0f:45:fb:63:5c:01:39:88:97:aa:a7:8d: d2:a4:db:45:56:7e:9e:2c:fb:38:6a:0a:27:f4:8f:1f:00:ab: 51:e4:a1:87:18:fa:42:64:92:80:d9:cd:14:fd:75:d8:7a:e6: 83:b3:c0:19:e1:37:39:8e:77:26:85:1c:73:2a:31:1d:2e:35: c5:04:fb:62:be:10:16:a1:8f:51:26:80:75:89:82:67:d6:e6: 40:ae:e1:90:4b:d6:58:09:35:bd:d2:a3:29:04:bc:e6:45:83: eb:ff:71:f2:06:14:c8:c0:61:5c:64:bc:eb:45:e9:6e:69:93: b1:20:2f:ab:90:89:fa:34:02:5c:54:64:fa:57:48:47:73:94: fa:31:1b:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIdxESk/SSeg4vGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk N2EzMjYwYzktNWNjNC00NzhmLWEyNzQtYzYzYWY1NzUwMjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzdiue9sjDJ8ehbtruVLbuA2ec54CkibfJ75 fq1PG8wP3H1gceHLit6zXWM8Jse98hx2dPPJA3aKvxZTyTkYPq1bbFxGGGZmElcB lyyTqRCxSSSQOzWsu9OfH1VAZKvDNPLMcqnXoLrNDs16fmDR0mj/T7Q/MqFFBWv1 9gbRBa20kYN/SkXTo/T6c6/x1nRkCXqDqPAOMhQVtOc1SqX7bK7FVEkRhvwJQHQe PG58Kiz+2taoi00DPu51dttqRmHFnR0NIO/HwGXDXekaF1l3/SMJdlSu6o55hKkj bD6bR7IM8q3ylbP36qBqmGvXrc9tdzEsw6/+Tq+aXqHiNtodfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2K0GuV8YAreQg/TaN9slK3MBW3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTJkODA1MjMtZWE5Yy0z OWM0LWJkNzItNDM4N2M0NmJhMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9AfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQB4sp0zVd6Z2QdjoeLxCyStppJEJVRZzV77Trpctgm3IDpoNDC+e7V GAhsB/iWOMVyqIUDajIU5ZaRpNUpUSe89sZWbyWN4+UkA2bZTk/0LguW8vRyXQq0 833sr75J0FyUFZ8+kDL2q4xwEVwUNuPV3w9F+2NcATmIl6qnjdKk20VWfp4s+zhq Cif0jx8Aq1HkoYcY+kJkkoDZzRT9ddh65oOzwBnhNzmOdyaFHHMqMR0uNcUE+2K+ EBahj1EmgHWJgmfW5kCu4ZBL1lgJNb3SoykEvOZFg+v/cfIGFMjAYVxkvOtF6W5p k7EgL6uQifo0AlxUZPpXSEdzlPoxGxw= -----END CERTIFICATE-----Generated at Sun Mar 1 23:30:47 2026 by rpki-client