$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca31aaff-e399-3195-8a19-e16e897013f3.roa File: ca31aaff-e399-3195-8a19-e16e897013f3.roa (raw, json) Hash identifier: u+g8EYp+a/vUQHWYFix4OVEzLPKI8IWhI9YAIdXdZHM= Subject key identifier: A3:24:38:55:DE:C9:AA:22:41:66:9A:27:D9:08:AA:7C:D7:86:D3:92 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C55012DD87EE0B7D1FF15AE40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca31aaff-e399-3195-8a19-e16e897013f3.roa Signing time: Sun 28 Dec 2025 02:00:30 +0000 ROA not before: Sun 28 Dec 2025 02:00:30 +0000 ROA not after: Sat 28 Mar 2026 01:00:30 +0000 asID: 6762 IP address blocks: 23.197.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:55:01:2d:d8:7e:e0:b7:d1:ff:15:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 28 02:00:30 2025 GMT Not After : Mar 28 01:00:30 2026 GMT Subject: CN=549b71c3-8470-476b-bca5-99bd97a07d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b6:8c:18:e0:3a:9c:bf:94:a1:19:6d:3b:5e: 6b:b4:f6:7b:19:b2:c8:c1:16:a9:64:b5:61:f6:58: c1:13:41:d8:7d:e1:f5:65:f3:56:45:49:d3:91:19: 45:14:e5:3b:cb:73:7f:9b:50:81:d1:86:4f:96:b5: 56:2e:29:11:cb:ce:c6:13:66:c0:87:1d:fe:48:d5: 11:0a:2d:01:d5:9e:9c:ca:a6:a9:57:17:ea:ec:f6: ba:5d:4a:a7:51:5b:d1:05:a6:c6:65:33:3f:05:7a: dc:fc:1a:29:8b:14:61:33:84:60:18:6d:ad:79:88: c0:cd:24:0d:32:0c:c3:3e:be:12:e0:61:0d:ca:62: c2:11:40:43:e9:b8:e6:5e:2d:d9:bf:43:ad:a7:20: 51:0a:67:3c:08:c1:5a:a9:78:a6:03:83:20:d2:52: e2:fa:01:d3:48:d7:13:0e:09:1d:0c:3e:03:5e:22: 07:64:7d:54:bb:72:94:1f:c8:3f:1e:78:ab:eb:d0: 57:08:3b:fa:a2:b0:19:85:85:4a:41:c7:1b:ee:80: 74:c5:a2:7b:ec:8c:8a:b3:65:47:11:f2:2c:4e:a5: 79:33:33:2c:bd:fb:24:ec:fd:80:2a:18:a5:f3:fe: 43:c6:24:e0:b1:d4:1a:19:34:ca:03:f8:e8:fd:25: 60:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:24:38:55:DE:C9:AA:22:41:66:9A:27:D9:08:AA:7C:D7:86:D3:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca31aaff-e399-3195-8a19-e16e897013f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:93:2f:b1:30:28:f6:a6:14:5f:84:6e:d9:c9:28:c3:d5:7c: 40:00:68:f4:15:99:47:1b:71:f3:f0:94:e8:1c:a9:c2:e7:c8: 01:f3:26:e2:6b:4d:8f:ab:b6:ab:1c:91:98:fd:f3:da:f5:68: c7:0e:e3:ea:49:ed:0b:d9:78:d1:0c:d5:a9:5d:2d:0b:3c:5f: 27:48:8f:a8:8e:6f:12:41:a8:c4:90:47:e8:14:3c:60:bd:73: 58:df:44:d3:7d:56:18:78:70:8c:a1:4f:59:6f:6c:4b:3d:d6: 94:9d:10:2f:5d:ca:7f:bb:9f:50:ac:c1:40:8d:c9:70:24:76: d7:f1:59:f0:e4:be:64:3a:d3:70:8d:7b:ab:0a:0a:21:e0:e7: 76:1b:1e:9b:ee:e6:6e:50:f4:12:df:7b:22:e5:8a:7c:84:bf: 98:46:3c:39:59:bf:80:ef:ac:a8:9f:60:25:83:07:cb:a8:2a: 78:ed:d1:0c:5e:cc:ae:f7:41:39:f6:b0:3f:3f:64:cc:bb:63: df:1e:aa:2b:d9:ad:ad:bd:5a:2d:fe:91:60:35:0d:e0:d4:8b: 7f:93:4f:d6:1a:fd:32:4c:14:8f:24:ee:bb:2f:2d:84:e9:89: 57:5f:56:bd:66:3d:cb:07:2f:09:5b:7e:38:fc:b9:f0:b4:62: a4:b4:ca:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExVAS3YfuC30f8VrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIyODAyMDAzMFoXDTI2MDMyODAxMDAzMFowLzEtMCsGA1UEAxMk NTQ5YjcxYzMtODQ3MC00NzZiLWJjYTUtOTliZDk3YTA3ZDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7aMGOA6nL+UoRltO15rtPZ7GbLIwRapZLVh 9ljBE0HYfeH1ZfNWRUnTkRlFFOU7y3N/m1CB0YZPlrVWLikRy87GE2bAhx3+SNUR Ci0B1Z6cyqapVxfq7Pa6XUqnUVvRBabGZTM/BXrc/BopixRhM4RgGG2teYjAzSQN MgzDPr4S4GENymLCEUBD6bjmXi3Zv0OtpyBRCmc8CMFaqXimA4Mg0lLi+gHTSNcT DgkdDD4DXiIHZH1Uu3KUH8g/Hnir69BXCDv6orAZhYVKQccb7oB0xaJ77IyKs2VH EfIsTqV5MzMsvfsk7P2AKhil8/5DxiTgsdQaGTTKA/jo/SVgBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMkOFXeyaoiQWaaJ9kIqnzXhtOSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2EzMWFhZmYtZTM5OS0z MTk1LThhMTktZTE2ZTg5NzAxM2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8XIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeTL7EwKPamFF+EbtnJKMPVfEAAaPQVmUcbcfPwlOgcqcLnyAHzJuJr TY+rtqsckZj989r1aMcO4+pJ7QvZeNEM1aldLQs8XydIj6iObxJBqMSQR+gUPGC9 c1jfRNN9Vhh4cIyhT1lvbEs91pSdEC9dyn+7n1CswUCNyXAkdtfxWfDkvmQ603CN e6sKCiHg53YbHpvu5m5Q9BLfeyLlinyEv5hGPDlZv4DvrKifYCWDB8uoKnjt0Qxe zK73QTn2sD8/ZMy7Y98eqivZra29Wi3+kWA1DeDUi3+TT9Ya/TJMFI8k7rsvLYTp iVdfVr1mPcsHLwlbfjj8ufC0YqS0yvc= -----END CERTIFICATE-----Generated at Mon Mar 2 05:44:30 2026 by rpki-client