$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b4cd7fbc-9065-3000-bd4e-f83a71ab0faa.roa File: b4cd7fbc-9065-3000-bd4e-f83a71ab0faa.roa (raw, json) Hash identifier: 5I/QpjPj9ivmMcWDaSxL8vKGTo1fbeW1EWqxwWZqMlc= Subject key identifier: 3D:DB:2B:3D:31:EA:9F:30:AC:F1:9A:B4:EF:46:B7:17:AE:83:18:B3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CA5F735A41A3E057038936F20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b4cd7fbc-9065-3000-bd4e-f83a71ab0faa.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.14.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:35:a4:1a:3e:05:70:38:93:6f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=75937977-dc7e-4a98-8111-993c8896dd0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:aa:bc:15:a0:2c:95:92:05:43:d6:8b:98:1f: af:51:3d:5c:10:49:02:cf:62:05:05:7f:04:ff:c4: 8b:83:71:70:78:2a:47:5e:7c:24:f3:37:ac:81:dc: a3:d6:a5:8b:f5:54:b7:22:98:18:db:7c:ec:7a:5e: 1e:38:83:c1:16:d9:cf:0a:0c:52:47:3d:77:8c:e8: a0:22:75:c3:93:95:7e:9f:e7:63:ea:b4:d9:55:aa: f7:ca:5f:53:54:ad:35:3f:fa:91:9d:9a:80:46:38: f4:cb:b5:92:70:a5:b4:5f:13:b4:7b:44:2a:ff:76: be:e5:8d:75:11:89:87:6f:e1:e2:f5:9c:ab:53:23: 65:5f:d5:17:a3:bc:2f:6b:02:68:76:d5:39:93:b6: 23:f3:22:1c:21:97:47:92:72:b9:62:55:b6:11:22: 45:d9:d2:2e:63:3c:ad:dd:04:4d:f9:c1:2e:c3:a8: 73:61:11:f9:1e:18:31:90:b9:f0:26:0e:eb:b4:4b: 35:b7:58:e5:4b:b9:08:f0:0a:28:77:24:30:a9:2c: 3b:6f:57:2c:8b:68:de:12:d1:d4:e0:26:a4:95:9d: 96:32:0d:5b:ee:c7:62:fa:44:50:bb:62:d6:e9:e5: 75:38:72:25:3b:04:16:f5:29:ec:cf:bf:15:30:aa: 7a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DB:2B:3D:31:EA:9F:30:AC:F1:9A:B4:EF:46:B7:17:AE:83:18:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b4cd7fbc-9065-3000-bd4e-f83a71ab0faa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.14.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:d4:7d:b7:39:1e:60:cc:f8:97:ee:1f:6d:ff:d8:b3:59:94: d7:1e:d0:50:72:d8:43:1b:1c:67:39:e0:d1:66:43:5b:d9:b0: 0b:a7:b9:81:ba:6c:b2:f9:f5:2c:07:f6:bf:c8:7f:2c:9c:70: 8f:52:89:7f:5a:3b:62:4e:64:04:2d:74:77:93:5f:70:83:c2: 85:0c:f8:7f:e2:98:0b:17:c4:f1:97:7b:c6:79:2b:2d:3d:01: ca:f1:82:2d:26:5b:18:07:53:78:4a:b0:07:1f:8e:31:16:e1: f8:c6:68:5a:41:8c:86:46:3f:d5:12:83:9d:a9:fa:31:0c:57: 56:d5:02:12:d0:03:3a:6d:e6:af:b0:ec:58:0d:1c:47:fb:30: 78:e4:b0:e5:d3:54:69:27:f2:02:0d:70:a9:86:08:22:08:0b: 11:35:b1:ff:93:7b:d2:93:c8:ed:e4:6a:ca:5d:3c:d6:60:a8: 7a:8f:b4:5d:56:af:6c:da:06:eb:5c:23:b7:c8:43:51:59:8e: b7:6d:e1:2a:0c:ae:e8:eb:57:d0:c3:d5:f6:74:b6:22:4d:62: 60:be:a9:ae:73:b4:0f:aa:53:3d:37:03:61:d8:41:e2:92:20: 6f:7f:bf:5b:e1:7f:0e:c9:75:de:14:39:52:93:0d:44:49:4c: b0:c7:98:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9zWkGj4FcDiTbyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk NzU5Mzc5NzctZGM3ZS00YTk4LTgxMTEtOTkzYzg4OTZkZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqq8FaAslZIFQ9aLmB+vUT1cEEkCz2IFBX8E /8SLg3FweCpHXnwk8zesgdyj1qWL9VS3IpgY23zsel4eOIPBFtnPCgxSRz13jOig InXDk5V+n+dj6rTZVar3yl9TVK01P/qRnZqARjj0y7WScKW0XxO0e0Qq/3a+5Y11 EYmHb+Hi9ZyrUyNlX9UXo7wvawJodtU5k7Yj8yIcIZdHknK5YlW2ESJF2dIuYzyt 3QRN+cEuw6hzYRH5HhgxkLnwJg7rtEs1t1jlS7kI8AoodyQwqSw7b1csi2jeEtHU 4CaklZ2WMg1b7sdi+kRQu2LW6eV1OHIlOwQW9Snsz78VMKp6UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3bKz0x6p8wrPGatO9GtxeugxizMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjRjZDdmYmMtOTA2NS0z MDAwLWJkNGUtZjgzYTcxYWIwZmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFw5XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrUfbc5HmDM+JfuH23/2LNZlNce0FBy2EMbHGc54NFmQ1vZsAunuYG6 bLL59SwH9r/IfyyccI9SiX9aO2JOZAQtdHeTX3CDwoUM+H/imAsXxPGXe8Z5Ky09 Acrxgi0mWxgHU3hKsAcfjjEW4fjGaFpBjIZGP9USg52p+jEMV1bVAhLQAzpt5q+w 7FgNHEf7MHjksOXTVGkn8gINcKmGCCIICxE1sf+Te9KTyO3kaspdPNZgqHqPtF1W r2zaButcI7fIQ1FZjrdt4SoMrujrV9DD1fZ0tiJNYmC+qa5ztA+qUz03A2HYQeKS IG9/v1vhfw7Jdd4UOVKTDURJTLDHmAQ= -----END CERTIFICATE-----Generated at Mon Mar 2 02:35:44 2026 by rpki-client