$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5e28a06-9e4f-30d4-9837-b0b9835d8828.roa File: c5e28a06-9e4f-30d4-9837-b0b9835d8828.roa (raw, json) Hash identifier: lAUgU0/TWNJSR9xudaMPKCceXYAHHf+BKbPZna+pGPc= Subject key identifier: E6:26:18:85:AD:8E:21:32:E4:7E:04:77:64:E4:1A:E1:D6:6D:50:C2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C5501351E0F2D20AB06233348 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5e28a06-9e4f-30d4-9837-b0b9835d8828.roa Signing time: Sun 28 Dec 2025 02:00:30 +0000 ROA not before: Sun 28 Dec 2025 02:00:30 +0000 ROA not after: Sat 28 Mar 2026 01:00:30 +0000 asID: 20940 IP address blocks: 23.221.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:55:01:35:1e:0f:2d:20:ab:06:23:33:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 28 02:00:30 2025 GMT Not After : Mar 28 01:00:30 2026 GMT Subject: CN=3b4313d3-b83a-4a00-8fb3-2f4eb88bcae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fd:31:33:6b:04:e4:e0:13:a4:84:3f:e7:84: 20:f4:0d:ab:0b:d2:99:fa:0b:e0:9e:24:0d:fa:12: 13:e1:18:ee:49:23:c1:3b:dd:6c:42:1b:f5:19:7e: fa:d7:ee:25:85:45:ba:60:11:6b:ba:69:cb:5f:bb: d1:97:e1:00:11:74:c1:0a:61:c3:72:36:e6:92:13: e9:da:95:64:1e:a4:ca:db:27:b2:18:b3:18:27:13: 38:ae:fa:1e:5f:ba:84:0d:3d:2c:5b:9b:4b:aa:bd: 75:b0:e1:95:69:ed:9f:28:bb:72:6f:dc:03:d4:bf: e6:76:6f:b3:94:f6:17:fb:b2:2e:42:01:d8:26:4b: d7:62:87:8e:d4:80:d8:ea:2d:aa:41:ff:6b:54:fd: c2:f6:16:9d:d6:13:ca:f5:fd:d4:76:b5:3a:16:e2: 9f:1e:83:31:a9:fe:aa:b3:17:a7:a5:73:c2:9e:27: 63:8a:79:db:bc:0b:60:18:b6:07:90:c4:f1:8e:bc: eb:2f:d7:b0:27:a1:99:54:48:5c:e3:34:27:51:93: 0e:93:aa:ee:0a:ec:73:6f:02:ee:93:3a:d1:5e:ed: ff:16:ad:d7:6f:f1:e7:0f:49:95:01:4c:b6:3b:0c: 08:58:e6:44:4c:85:57:e9:52:6d:fd:87:25:6a:c4: 33:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:26:18:85:AD:8E:21:32:E4:7E:04:77:64:E4:1A:E1:D6:6D:50:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5e28a06-9e4f-30d4-9837-b0b9835d8828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c9:07:a8:dd:2d:8d:3c:26:f5:fc:2c:0f:87:5d:cf:63:eb: 00:62:97:5c:a0:14:98:ed:25:23:7a:c8:f7:a2:b8:f5:99:f8: d5:67:cc:ee:0d:b6:6a:e4:d2:8f:65:27:79:af:8d:c5:df:79: ae:07:52:65:61:07:a8:0f:a1:9e:fc:54:35:cb:f6:6a:79:7d: e9:b6:b7:dd:40:14:83:61:1e:22:1d:47:92:12:93:26:23:76: 67:1d:f6:ee:52:0a:bc:e9:1c:46:fb:33:fb:08:f7:a0:5c:dd: 86:05:d2:ff:15:2c:26:37:87:2c:8e:1d:60:c7:50:e9:84:2d: fb:93:d1:4a:f1:7d:59:fa:14:ec:fb:16:8c:a0:ef:f3:b9:f2: d9:2e:0a:a0:5f:97:4e:1f:ff:68:20:50:36:30:46:b9:f0:15: d7:3e:e2:40:49:48:fd:9f:72:84:cc:cc:08:83:f4:e0:ee:f3: 81:40:0c:e5:97:80:ff:3d:2f:2e:2f:46:f8:27:76:d2:87:04: b2:d9:3d:b0:8a:10:30:03:d2:4f:57:de:1b:9b:e2:6f:35:19: 95:4e:31:96:45:d8:64:43:ef:2a:78:63:7b:98:5e:a0:8d:26: 9a:8e:8b:03:6a:70:63:7b:45:15:8f:70:57:ec:5f:29:2d:df: 77:d1:a2:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExVATUeDy0gqwYjM0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIyODAyMDAzMFoXDTI2MDMyODAxMDAzMFowLzEtMCsGA1UEAxMk M2I0MzEzZDMtYjgzYS00YTAwLThmYjMtMmY0ZWI4OGJjYWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP0xM2sE5OATpIQ/54Qg9A2rC9KZ+gvgniQN +hIT4RjuSSPBO91sQhv1GX761+4lhUW6YBFrumnLX7vRl+EAEXTBCmHDcjbmkhPp 2pVkHqTK2yeyGLMYJxM4rvoeX7qEDT0sW5tLqr11sOGVae2fKLtyb9wD1L/mdm+z lPYX+7IuQgHYJkvXYoeO1IDY6i2qQf9rVP3C9had1hPK9f3UdrU6FuKfHoMxqf6q sxenpXPCnidjinnbvAtgGLYHkMTxjrzrL9ewJ6GZVEhc4zQnUZMOk6ruCuxzbwLu kzrRXu3/Fq3Xb/HnD0mVAUy2OwwIWOZETIVX6VJt/YclasQz3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYmGIWtjiEy5H4Ed2TkGuHWbVDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzVlMjhhMDYtOWU0Zi0z MGQ0LTk4MzctYjBiOTgzNWQ4ODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF93QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDJB6jdLY08JvX8LA+HXc9j6wBil1ygFJjtJSN6yPeiuPWZ+NVnzO4N tmrk0o9lJ3mvjcXfea4HUmVhB6gPoZ78VDXL9mp5fem2t91AFINhHiIdR5ISkyYj dmcd9u5SCrzpHEb7M/sI96Bc3YYF0v8VLCY3hyyOHWDHUOmELfuT0UrxfVn6FOz7 Foyg7/O58tkuCqBfl04f/2ggUDYwRrnwFdc+4kBJSP2fcoTMzAiD9ODu84FADOWX gP89Ly4vRvgndtKHBLLZPbCKEDAD0k9X3hub4m81GZVOMZZF2GRD7yp4Y3uYXqCN JpqOiwNqcGN7RRWPcFfsXykt33fRoq8= -----END CERTIFICATE-----Generated at Mon Mar 2 01:14:04 2026 by rpki-client