$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3e02f1a-7f9b-39d3-93e9-df62b07f2a32.roa File: a3e02f1a-7f9b-39d3-93e9-df62b07f2a32.roa (raw, json) Hash identifier: Q9mdty8o8WFcHni8IUx/YkpaR1gLVwzuOdZwyROMzTA= Subject key identifier: 8A:4B:89:82:92:51:CA:8D:B8:EA:C5:31:67:3F:95:89:03:05:39:46 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D0647B0F1A6639618A92D0480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3e02f1a-7f9b-39d3-93e9-df62b07f2a32.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 16625 IP address blocks: 23.199.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:b0:f1:a6:63:96:18:a9:2d:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=30f81fdc-9269-457d-93d8-1a6ad5fe0ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e3:c1:b3:6b:30:55:58:77:8d:30:f7:95:b7: 6d:92:21:f8:34:2e:d4:eb:62:55:60:0c:f2:77:64: fe:74:57:dd:4b:82:db:73:64:73:34:2f:00:b5:58: 0a:37:18:6d:f5:b7:ef:d0:39:cb:fd:4c:d7:08:5d: cb:ce:6a:81:f0:82:28:12:79:3c:2b:c0:72:11:30: 58:f3:d4:95:cb:90:46:db:5a:d2:27:1e:65:ec:31: 44:62:fa:93:96:5d:44:5b:02:c4:97:0d:48:86:12: fb:ec:1d:9b:3e:e9:2c:7d:66:04:96:64:bf:8f:3d: ed:3b:d5:ac:00:08:76:7d:97:f0:2b:a6:c6:7e:c3: 0f:5b:11:72:a3:b0:20:af:fa:40:31:a4:c2:a0:19: fb:23:61:3f:1f:23:32:87:9b:26:b4:c0:fe:45:d6: 22:d0:2e:a1:b2:77:71:34:8b:69:86:62:d6:e5:02: 14:47:de:83:22:3f:f1:24:86:73:4e:a3:4f:68:12: 3b:dd:c3:5c:4b:9d:b3:8a:78:96:e4:44:c0:9f:80: 54:e5:07:0e:8a:ed:36:12:98:ab:c5:d5:b5:4c:83: 31:d2:c2:ee:e4:a0:ee:5b:3a:d1:ca:e8:d1:62:17: 47:bb:3c:c6:7f:65:a0:8c:42:6b:c3:65:89:0f:98: 95:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4B:89:82:92:51:CA:8D:B8:EA:C5:31:67:3F:95:89:03:05:39:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3e02f1a-7f9b-39d3-93e9-df62b07f2a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:5d:7a:41:3a:98:92:06:07:9f:e9:32:39:85:f3:65:e5:f5: d6:c3:bc:2c:aa:8d:71:a6:87:d8:9b:ed:fc:8c:75:06:9e:df: 3a:48:54:94:da:33:cc:e4:f1:2c:ce:0e:43:a8:d5:1a:2c:78: d4:8f:5c:6d:33:38:b9:27:e2:ca:2f:8c:c0:8e:01:a1:f6:5d: de:54:8b:75:af:34:52:d3:69:58:d5:bf:6e:16:c6:f5:4f:db: 98:c8:4c:54:1b:b9:32:ad:67:2a:59:78:0f:ed:fe:ea:e1:44: 35:58:2c:05:fe:79:a0:37:0f:ea:9b:fd:eb:1e:7e:76:04:0b: d6:cd:59:f1:94:77:ef:b9:5b:43:b9:de:5f:5d:36:d7:e8:62: 98:e5:b9:08:5e:18:6d:7a:56:95:31:75:83:81:5c:ec:22:57: 30:a5:d4:0d:a6:07:9b:ab:ed:d8:b0:22:7b:17:e2:9b:ad:67: ce:c3:46:28:a1:be:b3:15:76:b8:6f:c0:51:20:99:c3:d5:18: 09:3d:cf:0a:7d:2a:16:d5:47:44:74:9b:fd:65:07:eb:74:dc: 68:e8:84:46:14:e2:b7:6f:bf:54:bc:64:1f:e3:04:41:26:98: 4d:2b:a2:8a:bd:17:5c:fa:ce:88:1e:7e:66:36:24:31:a4:30: 86:6e:a4:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0GR7DxpmOWGKktBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk MzBmODFmZGMtOTI2OS00NTdkLTkzZDgtMWE2YWQ1ZmUwZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuPBs2swVVh3jTD3lbdtkiH4NC7U62JVYAzy d2T+dFfdS4Lbc2RzNC8AtVgKNxht9bfv0DnL/UzXCF3LzmqB8IIoEnk8K8ByETBY 89SVy5BG21rSJx5l7DFEYvqTll1EWwLElw1IhhL77B2bPuksfWYElmS/jz3tO9Ws AAh2fZfwK6bGfsMPWxFyo7Agr/pAMaTCoBn7I2E/HyMyh5smtMD+RdYi0C6hsndx NItphmLW5QIUR96DIj/xJIZzTqNPaBI73cNcS52ziniW5ETAn4BU5QcOiu02Epir xdW1TIMx0sLu5KDuWzrRyujRYhdHuzzGf2WgjEJrw2WJD5iVIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpLiYKSUcqNuOrFMWc/lYkDBTlGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTNlMDJmMWEtN2Y5Yi0z OWQzLTkzZTktZGY2MmIwN2YyYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8fwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVdekE6mJIGB5/pMjmF82Xl9dbDvCyqjXGmh9ib7fyMdQae3zpIVJTa M8zk8SzODkOo1RoseNSPXG0zOLkn4sovjMCOAaH2Xd5Ui3WvNFLTaVjVv24WxvVP 25jITFQbuTKtZypZeA/t/urhRDVYLAX+eaA3D+qb/esefnYEC9bNWfGUd++5W0O5 3l9dNtfoYpjluQheGG16VpUxdYOBXOwiVzCl1A2mB5ur7diwInsX4putZ87DRiih vrMVdrhvwFEgmcPVGAk9zwp9KhbVR0R0m/1lB+t03GjohEYU4rdvv1S8ZB/jBEEm mE0rooq9F1z6zogefmY2JDGkMIZupC8= -----END CERTIFICATE-----Generated at Mon Mar 2 05:55:34 2026 by rpki-client