$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaff624a-7bc4-36d9-ab33-f9400e20c551.roa File: aaff624a-7bc4-36d9-ab33-f9400e20c551.roa (raw, json) Hash identifier: iipKLW/xdN03qoVekuIqmNpYoDk5m1+vqlT57oX70ic= Subject key identifier: B8:88:31:15:F6:7B:8D:39:1C:58:70:AF:29:6B:FF:8B:37:5C:C7:60 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D037D2218E99412569538BB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaff624a-7bc4-36d9-ab33-f9400e20c551.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16625 IP address blocks: 23.197.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:22:18:e9:94:12:56:95:38:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=96d2e6b0-2bdc-4eff-a714-9adb0b7861b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cf:1e:97:5c:c2:25:73:6b:fe:2b:68:65:69: e3:9e:0b:2e:69:26:4d:0d:f0:84:a1:55:71:6f:e4: fa:d7:06:de:d9:cf:4e:f5:29:cb:9a:f3:69:7e:06: b2:a2:3e:a1:ae:54:d2:09:57:c3:26:d0:dd:34:0f: 0a:37:8a:78:7b:85:d4:18:ce:f8:b1:36:d6:ea:98: e4:24:02:1e:c9:c2:82:51:90:54:61:5b:0d:12:9a: 1a:49:3e:2e:1f:f9:21:6c:20:d0:12:19:38:82:63: 4a:b8:19:df:12:e0:43:14:a0:20:79:ff:64:96:cb: 11:8b:4e:30:99:a6:bb:ed:0f:44:ac:e7:ec:d6:d6: 92:7f:fb:92:0d:b5:bc:99:a6:49:0f:2f:aa:58:9e: 33:c5:a5:a8:d8:8a:cf:a3:8d:c2:98:14:8f:1b:65: 2a:20:4d:e2:cd:51:fb:b1:ee:33:fc:37:7c:52:b7: 12:3f:08:4e:6e:2e:7b:a1:0d:37:9d:de:eb:dd:0c: c3:b1:21:64:0a:2a:d7:59:92:1b:bc:e0:40:b4:6d: 2f:07:cf:7a:bf:92:fa:63:53:01:a9:49:be:d5:b1: 8d:c5:32:36:24:b4:7e:dd:9a:dc:57:2a:70:7a:61: e6:6d:69:ff:d1:8d:bf:09:c0:80:51:27:35:f6:c2: eb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:88:31:15:F6:7B:8D:39:1C:58:70:AF:29:6B:FF:8B:37:5C:C7:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaff624a-7bc4-36d9-ab33-f9400e20c551.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:bf:ee:51:bf:a2:f9:14:1b:3c:b5:a9:13:9a:a8:32:5f:ac: cc:0a:64:ed:ec:3f:cf:3c:e6:12:68:90:b0:5b:ec:52:ef:3b: 58:83:36:c8:56:e8:a4:2f:60:7c:63:6a:b7:fb:c2:19:ad:0c: 04:18:92:1f:22:9a:5f:42:db:25:75:31:a8:ac:12:29:a6:d2: a2:10:a2:bd:a0:2c:a0:1b:64:33:af:d7:62:7d:99:9c:9b:b9: 94:65:0b:36:c5:50:1b:b6:e3:16:3f:bb:50:d9:9f:bc:b5:e3: b8:2b:16:97:45:ed:42:75:e8:08:14:22:4e:c8:f7:02:a6:f5: f9:4f:c6:37:69:06:cd:1f:d7:cc:7f:0d:27:30:8a:93:94:4e: 8b:bc:a3:cf:0e:08:8d:22:66:11:6e:e0:7f:15:2a:0f:a4:54: c6:8b:08:7a:9b:c8:81:e9:f8:a7:40:8f:21:8e:bd:d9:b5:b8: 01:cc:6c:83:5f:19:1e:80:84:5e:08:e8:b1:72:23:b4:01:93: ca:1e:ea:98:a0:e1:35:0e:e6:ef:e0:fb:e2:cf:42:32:cf:c3: 0f:7b:36:c9:60:2f:0b:bd:02:12:eb:56:6e:eb:93:62:d0:40: dd:c0:70:f7:5f:a1:3e:b6:ef:f4:2a:93:b2:6b:ca:71:91:6d: ac:fd:2a:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfSIY6ZQSVpU4u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk OTZkMmU2YjAtMmJkYy00ZWZmLWE3MTQtOWFkYjBiNzg2MWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc8el1zCJXNr/itoZWnjngsuaSZNDfCEoVVx b+T61wbe2c9O9SnLmvNpfgayoj6hrlTSCVfDJtDdNA8KN4p4e4XUGM74sTbW6pjk JAIeycKCUZBUYVsNEpoaST4uH/khbCDQEhk4gmNKuBnfEuBDFKAgef9klssRi04w maa77Q9ErOfs1taSf/uSDbW8maZJDy+qWJ4zxaWo2IrPo43CmBSPG2UqIE3izVH7 se4z/Dd8UrcSPwhObi57oQ03nd7r3QzDsSFkCirXWZIbvOBAtG0vB896v5L6Y1MB qUm+1bGNxTI2JLR+3ZrcVypwemHmbWn/0Y2/CcCAUSc19sLrmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiIMRX2e405HFhwrylr/4s3XMdgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWFmZjYyNGEtN2JjNC0z NmQ5LWFiMzMtZjk0MDBlMjBjNTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8VkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIu/7lG/ovkUGzy1qROaqDJfrMwKZO3sP8885hJokLBb7FLvO1iDNshW 6KQvYHxjarf7whmtDAQYkh8iml9C2yV1MaisEimm0qIQor2gLKAbZDOv12J9mZyb uZRlCzbFUBu24xY/u1DZn7y147grFpdF7UJ16AgUIk7I9wKm9flPxjdpBs0f18x/ DScwipOUTou8o88OCI0iZhFu4H8VKg+kVMaLCHqbyIHp+KdAjyGOvdm1uAHMbINf GR6AhF4I6LFyI7QBk8oe6pig4TUO5u/g++LPQjLPww97NslgLwu9AhLrVm7rk2LQ QN3AcPdfoT627/Qqk7JrynGRbaz9Ks0= -----END CERTIFICATE-----Generated at Mon Mar 2 11:11:42 2026 by rpki-client