$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a823fc36-07a5-3fbf-bbce-bdeb5514a09c.roa File: a823fc36-07a5-3fbf-bbce-bdeb5514a09c.roa (raw, json) Hash identifier: LHEruRcexdd31TwQR4TAB7AO1gSSw2RZLosXPL0Curw= Subject key identifier: 96:12:31:C1:76:B1:D5:BF:AA:01:4A:31:66:F9:FF:E5:94:14:27:8C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D0647B06DF1DC69EFDECCBEC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a823fc36-07a5-3fbf-bbce-bdeb5514a09c.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 7545 IP address blocks: 23.199.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:b0:6d:f1:dc:69:ef:de:cc:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=2dcb693d-5dfb-4652-8d28-a765fa570451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:72:12:62:4a:86:d3:a4:ea:e3:56:d3:9b:ff: 2b:d1:3d:b2:53:86:78:5e:5e:f7:ca:10:31:5e:ed: 4b:0c:b2:ea:e2:ed:69:11:1e:0d:52:66:9e:0d:98: dd:0d:78:d9:de:eb:61:c5:96:cd:5e:18:fa:b3:c2: 34:4d:38:3a:55:6f:49:67:d4:2f:8b:65:14:d5:e2: 13:50:98:ae:9e:90:5a:78:a6:1f:94:36:f2:36:d3: f2:30:5e:5a:a2:85:98:af:67:83:56:c1:8e:3a:62: 6c:5c:6e:2c:04:e4:62:1f:87:f3:31:b8:d0:bd:e6: 22:ac:21:f6:c9:67:a4:5c:72:4a:06:e2:f7:0a:58: 81:16:27:07:4c:2c:a9:82:1d:bd:6a:3f:30:b6:a9: 53:dc:3d:5a:1f:6d:1a:37:a0:de:eb:7b:91:87:bc: 3c:97:07:78:0e:ac:f0:05:8f:0c:17:0e:42:75:c1: dd:fc:f1:a7:ac:d6:b1:a8:fe:9e:21:36:d7:68:fd: e8:f1:85:9d:e1:c8:46:59:0a:e1:0e:cd:21:07:dc: 0b:1f:c1:d2:4d:96:8e:75:65:a9:76:59:d1:1b:6d: 62:a5:a6:13:14:2e:f1:5a:14:bb:4d:25:00:0e:3c: f9:aa:39:6d:f2:73:26:ad:de:0f:31:a0:4f:e1:93: 13:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:12:31:C1:76:B1:D5:BF:AA:01:4A:31:66:F9:FF:E5:94:14:27:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a823fc36-07a5-3fbf-bbce-bdeb5514a09c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f1:93:7d:d4:89:19:dc:e4:1c:92:51:74:75:3d:c4:f0:0e: 78:e3:82:e4:9b:25:50:4b:48:92:34:26:63:4a:04:70:72:2c: 1a:7e:36:6e:d6:15:e1:26:77:2d:be:5b:39:ae:8b:3b:8f:6e: 15:5c:47:22:79:ca:76:e8:95:01:51:2f:a1:6c:6b:e3:50:35: 25:7b:ea:a7:74:97:08:ce:a7:04:51:9a:84:0a:6e:be:f9:4f: ce:b1:27:99:bb:91:61:19:07:78:d1:3b:40:73:63:37:ca:c2: f8:c4:f4:6c:80:3d:44:73:54:69:3b:c1:03:57:39:a9:5b:99: 79:c8:81:f3:f7:5c:5c:84:35:61:88:67:bf:c9:06:8f:2b:a2: ff:e0:37:7c:30:63:bd:9c:7a:ae:ab:46:bc:40:12:d7:ca:56: c2:47:67:1b:a7:72:ef:30:e8:04:88:cc:0c:d5:d0:67:67:ce: 7d:7e:61:eb:a0:88:3a:75:77:d7:bb:12:d1:04:42:eb:91:21: ab:20:5a:20:9d:96:a4:f4:2f:ae:8c:f6:93:a1:6b:57:b5:08: 58:46:a7:90:ad:8e:88:b6:07:05:51:39:2f:3e:c0:14:9e:3a: fc:47:e7:05:3d:32:9e:40:ee:b2:37:d3:d0:90:53:00:f4:7f: 12:fa:3f:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0GR7Bt8dxp797MvsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk MmRjYjY5M2QtNWRmYi00NjUyLThkMjgtYTc2NWZhNTcwNDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nISYkqG06Tq41bTm/8r0T2yU4Z4Xl73yhAx Xu1LDLLq4u1pER4NUmaeDZjdDXjZ3uthxZbNXhj6s8I0TTg6VW9JZ9Qvi2UU1eIT UJiunpBaeKYflDbyNtPyMF5aooWYr2eDVsGOOmJsXG4sBORiH4fzMbjQveYirCH2 yWekXHJKBuL3CliBFicHTCypgh29aj8wtqlT3D1aH20aN6De63uRh7w8lwd4Dqzw BY8MFw5CdcHd/PGnrNaxqP6eITbXaP3o8YWd4chGWQrhDs0hB9wLH8HSTZaOdWWp dlnRG21ipaYTFC7xWhS7TSUADjz5qjlt8nMmrd4PMaBP4ZMTVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYSMcF2sdW/qgFKMWb5/+WUFCeMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTgyM2ZjMzYtMDdhNS0z ZmJmLWJiY2UtYmRlYjU1MTRhMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8dGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPxk33UiRnc5BySUXR1PcTwDnjjguSbJVBLSJI0JmNKBHByLBp+Nm7W FeEmdy2+WzmuizuPbhVcRyJ5ynbolQFRL6Fsa+NQNSV76qd0lwjOpwRRmoQKbr75 T86xJ5m7kWEZB3jRO0BzYzfKwvjE9GyAPURzVGk7wQNXOalbmXnIgfP3XFyENWGI Z7/JBo8rov/gN3wwY72ceq6rRrxAEtfKVsJHZxuncu8w6ASIzAzV0Gdnzn1+Yeug iDp1d9e7EtEEQuuRIasgWiCdlqT0L66M9pOha1e1CFhGp5Ctjoi2BwVROS8+wBSe OvxH5wU9Mp5A7rI309CQUwD0fxL6PyE= -----END CERTIFICATE-----Generated at Sun Mar 1 22:44:40 2026 by rpki-client