$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2bf3023-67db-3d5c-a293-dc042994c919.roa File: b2bf3023-67db-3d5c-a293-dc042994c919.roa (raw, json) Hash identifier: 2qmnp9er00xQePLO65puJ/o0E6p931k32Jl54jPDShw= Subject key identifier: 44:1A:FD:7F:58:5C:E3:8D:22:E1:33:9D:2D:87:5F:36:36:E9:9D:04 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CA5F72328ADDB1CE80780AB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2bf3023-67db-3d5c-a293-dc042994c919.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.11.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:23:28:ad:db:1c:e8:07:80:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=ebc74f8a-db59-4816-87d4-d126260d3514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7c:b6:8c:3b:de:69:8a:d6:2c:18:16:59:3c: 0d:41:0c:47:ea:4f:69:c5:ed:b4:e6:a9:f1:4b:c3: 17:91:8a:67:f7:6f:d1:9a:bc:b3:7f:a5:fb:4c:40: ba:17:0b:c9:01:d8:00:14:78:b6:d5:4e:e8:e8:10: a4:03:9b:91:77:4e:c8:c6:e4:8d:e2:2b:67:2c:fd: 7f:48:d4:bf:f5:21:00:e9:34:0a:60:f8:62:f5:e1: 6d:e3:96:b5:40:d1:48:84:be:d5:1d:7c:48:cc:4f: 67:2e:03:6c:49:dd:64:75:17:97:b4:bf:4b:57:d6: 60:cf:07:f1:aa:e2:ed:15:ee:68:29:56:fd:1f:a0: 19:84:67:ff:9f:84:04:f9:a4:ba:1f:46:e2:a1:4d: 72:f9:a8:19:bf:b9:86:1a:44:c3:b1:cc:bd:d8:7c: 91:86:4c:9f:21:52:95:58:0b:7c:cf:d9:34:a8:60: 5a:bd:ef:13:af:fb:e9:5a:bf:e7:09:6c:1d:76:8a: 84:ea:59:42:cb:7e:48:15:61:6c:e8:d2:f7:5f:2f: 59:f8:58:49:14:ae:cc:36:d9:34:15:00:09:d6:b4: 25:62:74:0a:b9:84:39:22:49:5e:f5:a8:ea:95:4d: 9e:fd:61:64:ec:ba:49:b2:ec:ba:6b:32:4e:95:b8: 14:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1A:FD:7F:58:5C:E3:8D:22:E1:33:9D:2D:87:5F:36:36:E9:9D:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2bf3023-67db-3d5c-a293-dc042994c919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.11.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a0:17:e8:4c:72:5c:2f:71:df:50:13:bf:32:fc:91:a2:c8: b8:a6:53:d8:96:0f:ae:b3:f5:fb:e6:37:69:93:0d:ce:74:f8: 52:51:90:40:4e:fb:c3:6b:de:a4:f9:08:77:86:5f:ce:6d:f1: 89:7e:a2:be:0c:f2:36:e7:34:ad:45:99:19:a6:69:3f:45:4f: 0f:c7:b1:42:15:f7:bb:03:28:9e:ea:36:cb:21:5e:cf:ba:72: 2d:c7:5c:b3:5d:0e:2d:ab:c6:0e:f9:0b:01:e2:85:9a:d0:55: eb:ec:91:f1:da:58:4c:c8:a1:a1:fc:36:09:e0:ce:14:7b:36: a0:41:3a:79:49:a9:82:38:a0:5a:12:a3:26:99:ef:32:97:ef: d0:c5:4f:52:e6:9c:ce:6b:8d:ac:99:1b:fb:43:0d:67:8a:c0: 23:fc:9b:3a:8a:ad:bd:c5:d6:22:11:1e:f3:36:5d:42:02:f7: e5:b4:e1:6b:94:0e:c6:e3:db:af:60:05:31:25:a0:04:fb:42: 11:f2:79:62:2b:a3:9a:81:ae:20:3d:36:8c:00:01:a5:5f:cb: e9:76:49:e7:eb:a3:58:b9:39:f0:e0:62:5a:3c:fe:be:3b:58: df:61:2d:92:66:83:70:c3:29:b0:4b:fb:f6:2f:d8:8d:c5:34: ac:c5:3f:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9yMordsc6AeAq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk ZWJjNzRmOGEtZGI1OS00ODE2LTg3ZDQtZDEyNjI2MGQzNTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHy2jDveaYrWLBgWWTwNQQxH6k9pxe205qnx S8MXkYpn92/Rmryzf6X7TEC6FwvJAdgAFHi21U7o6BCkA5uRd07IxuSN4itnLP1/ SNS/9SEA6TQKYPhi9eFt45a1QNFIhL7VHXxIzE9nLgNsSd1kdReXtL9LV9Zgzwfx quLtFe5oKVb9H6AZhGf/n4QE+aS6H0bioU1y+agZv7mGGkTDscy92HyRhkyfIVKV WAt8z9k0qGBave8Tr/vpWr/nCWwddoqE6llCy35IFWFs6NL3Xy9Z+FhJFK7MNtk0 FQAJ1rQlYnQKuYQ5Ikle9ajqlU2e/WFk7LpJsuy6azJOlbgUbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQa/X9YXOONIuEznS2HXzY26Z0EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjJiZjMwMjMtNjdkYi0z ZDVjLWEyOTMtZGMwNDI5OTRjOTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHigF+hMclwvcd9QE78y/JGiyLimU9iWD66z9fvmN2mTDc50+FJRkEBO +8Nr3qT5CHeGX85t8Yl+or4M8jbnNK1FmRmmaT9FTw/HsUIV97sDKJ7qNsshXs+6 ci3HXLNdDi2rxg75CwHihZrQVevskfHaWEzIoaH8NgngzhR7NqBBOnlJqYI4oFoS oyaZ7zKX79DFT1LmnM5rjayZG/tDDWeKwCP8mzqKrb3F1iIRHvM2XUIC9+W04WuU Dsbj269gBTEloAT7QhHyeWIro5qBriA9NowAAaVfy+l2Sefro1i5OfDgYlo8/r47 WN9hLZJmg3DDKbBL+/Yv2I3FNKzFPyw= -----END CERTIFICATE-----Generated at Sun Mar 1 23:16:06 2026 by rpki-client