$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae22ceb0-b9c3-3591-aceb-eb7738a1ff79.roa File: ae22ceb0-b9c3-3591-aceb-eb7738a1ff79.roa (raw, json) Hash identifier: xHn7YWQHgKj92cwdAxh+bou6pbSdOtmJ8rSVqywfXxg= Subject key identifier: 13:78:10:51:AE:EF:39:05:56:D6:C8:78:4C:47:B4:9F:0B:1D:59:B7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D07AD0689855F87F8E7AAB780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae22ceb0-b9c3-3591-aceb-eb7738a1ff79.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.200.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:06:89:85:5f:87:f8:e7:aa:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=2d1cc264-a746-4c85-8c41-2ba7eb1a6047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ae:4b:80:cc:3e:11:27:9f:42:ab:62:82:f1: 90:45:35:86:45:f6:a4:e9:4e:5c:9a:a8:a7:61:7b: b2:b2:28:5b:8e:fb:0a:be:3d:56:1c:38:fb:a0:74: 4c:65:5c:f8:7c:36:c8:7a:10:b5:e2:74:5a:d1:c1: dc:7f:29:32:33:cc:0d:5f:ad:76:a3:c6:d7:2a:b5: b0:a0:cf:55:0c:9f:2f:70:57:bd:4e:f6:75:22:f0: a4:e9:ea:ab:eb:e7:d3:c0:6b:60:4a:31:d2:20:f6: 56:0e:4e:63:90:65:25:de:f1:74:be:d5:4e:e0:53: f5:fa:aa:1a:1f:76:a9:05:82:43:33:57:1a:0c:a2: 5d:70:ff:33:08:bf:7b:de:65:e2:7c:2b:d1:1b:cc: 19:88:76:1b:ce:89:dc:21:89:71:6c:0c:1f:09:5f: b8:58:28:67:29:bc:1a:b3:5e:27:a0:20:31:66:df: cc:19:df:b7:29:c6:a2:fe:a0:ed:85:37:b5:78:6b: 34:c5:1f:aa:a5:d0:4e:a3:db:ba:37:65:05:4c:3c: 9f:ff:5d:23:23:30:12:d2:a2:2a:e0:a8:f2:54:6b: d4:51:fd:99:61:f2:48:e3:3e:fb:a7:8a:07:0e:11: a3:bf:45:f1:52:fe:be:21:b2:e2:b3:a6:85:10:41: 04:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:78:10:51:AE:EF:39:05:56:D6:C8:78:4C:47:B4:9F:0B:1D:59:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae22ceb0-b9c3-3591-aceb-eb7738a1ff79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:4c:b6:d2:a7:07:86:22:33:be:f7:21:fe:84:1c:d6:61:3e: f3:5c:95:63:55:17:b3:53:c2:d4:98:0a:2a:07:8a:55:ed:62: 30:72:54:64:6a:ef:f3:65:a5:81:17:93:9a:21:d1:87:c6:b2: 8e:9e:05:6e:e0:45:ad:dd:5a:be:6c:aa:00:4c:42:3f:c8:e3: 13:ee:c6:92:da:ed:f5:92:cc:32:98:4d:e0:0f:d8:85:06:2f: 0e:3a:6c:d3:ba:39:6b:10:f6:41:9f:e6:76:03:d1:e6:73:03: df:4d:6b:75:ba:c8:81:15:80:73:b5:ff:dc:b6:c0:ce:3a:ae: fb:67:19:6c:fe:e8:32:76:0c:94:97:05:b3:86:67:a1:41:85: 51:59:9c:e4:71:f3:c0:0b:0d:ba:73:97:f4:3f:46:d3:25:b0: d8:47:a7:55:5c:5f:17:c4:a7:b9:c2:87:14:15:71:cb:b2:53: bf:b5:99:f9:55:f6:93:48:59:7e:1b:27:67:59:56:44:62:36: 3b:fb:a2:c7:57:f2:fb:2e:fb:d5:f5:c7:2d:95:77:ff:11:b4: e3:05:3d:e3:99:5a:e9:4c:df:de:97:5e:17:a1:23:4c:23:08: 67:5e:cb:a5:1d:b4:6e:b0:2b:b8:de:69:9a:27:32:02:5c:a1: ec:20:0b:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrQaJhV+H+Oeqt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk MmQxY2MyNjQtYTc0Ni00Yzg1LThjNDEtMmJhN2ViMWE2MDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq5LgMw+ESefQqtigvGQRTWGRfak6U5cmqin YXuysihbjvsKvj1WHDj7oHRMZVz4fDbIehC14nRa0cHcfykyM8wNX612o8bXKrWw oM9VDJ8vcFe9TvZ1IvCk6eqr6+fTwGtgSjHSIPZWDk5jkGUl3vF0vtVO4FP1+qoa H3apBYJDM1caDKJdcP8zCL973mXifCvRG8wZiHYbzoncIYlxbAwfCV+4WChnKbwa s14noCAxZt/MGd+3Kcai/qDthTe1eGs0xR+qpdBOo9u6N2UFTDyf/10jIzAS0qIq 4KjyVGvUUf2ZYfJI4z77p4oHDhGjv0XxUv6+IbLis6aFEEEEiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBN4EFGu7zkFVtbIeExHtJ8LHVm3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWUyMmNlYjAtYjljMy0z NTkxLWFjZWItZWI3NzM4YTFmZjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8idMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhMttKnB4YiM773If6EHNZhPvNclWNVF7NTwtSYCioHilXtYjByVGRq 7/NlpYEXk5oh0YfGso6eBW7gRa3dWr5sqgBMQj/I4xPuxpLa7fWSzDKYTeAP2IUG Lw46bNO6OWsQ9kGf5nYD0eZzA99Na3W6yIEVgHO1/9y2wM46rvtnGWz+6DJ2DJSX BbOGZ6FBhVFZnORx88ALDbpzl/Q/RtMlsNhHp1VcXxfEp7nChxQVccuyU7+1mflV 9pNIWX4bJ2dZVkRiNjv7osdX8vsu+9X1xy2Vd/8RtOMFPeOZWulM396XXhehI0wj CGdey6UdtG6wK7jeaZonMgJcoewgC6Q= -----END CERTIFICATE-----Generated at Mon Mar 2 08:05:16 2026 by rpki-client