$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d252c42d-0687-3a06-b713-cbf6ffca93bb.roa File: d252c42d-0687-3a06-b713-cbf6ffca93bb.roa (raw, json) Hash identifier: pBsYwkbJfnYl/vlreJsCTe3N6XBFnIN59HyIU4Zx34c= Subject key identifier: 55:67:71:1E:81:62:46:FD:3A:E1:35:3A:DD:A0:D5:8C:9C:EE:7B:85 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D0647B1241E2B348300E59300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d252c42d-0687-3a06-b713-cbf6ffca93bb.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.199.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:b1:24:1e:2b:34:83:00:e5:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=7503b701-045a-4fd4-a3d9-447a25a3128e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4e:3c:59:29:9e:8f:69:8a:a0:f8:a3:20:dd: 3b:98:0d:c4:35:33:18:72:db:f2:2e:b4:b5:f8:05: 58:af:49:89:87:57:d2:54:8d:82:67:4b:ff:a7:e0: c2:2c:b9:34:43:1f:4d:5e:73:b1:a6:88:5f:db:6e: 9b:00:7f:94:fc:09:3d:4b:f7:41:82:ff:4d:48:74: db:81:65:52:4b:e1:fc:1c:e8:4d:df:70:4f:57:1e: 6b:24:91:93:3b:85:39:9f:c8:3b:c3:0a:fa:05:ad: 4c:5d:94:59:c4:df:97:06:f6:eb:69:d6:5d:80:25: 83:83:76:2e:6f:82:b9:42:20:24:f9:be:94:b8:4b: 24:b4:13:d4:cc:ab:8f:8e:72:16:1c:d2:49:54:9b: 74:95:2f:60:3f:e2:58:91:cf:5a:95:07:f4:38:c6: 1d:59:f9:ea:5e:16:45:be:18:fd:38:0c:c0:1b:15: 45:04:b9:2c:80:78:e9:45:85:d1:02:96:f3:60:e9: 6b:9d:a1:ff:8a:55:35:3c:73:0b:53:cd:b3:1a:7e: 22:bf:17:9c:ab:9d:9b:8f:ac:55:52:e4:b5:91:c0: b8:cb:c5:92:98:2e:9d:81:78:da:c2:fd:c9:5a:39: e0:94:a7:a3:5c:24:fb:35:38:c2:32:f7:ec:6b:bf: 3f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:67:71:1E:81:62:46:FD:3A:E1:35:3A:DD:A0:D5:8C:9C:EE:7B:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d252c42d-0687-3a06-b713-cbf6ffca93bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:40:47:a4:77:33:8f:db:65:f4:57:3e:a9:0b:fb:91:2e:9a: ae:7b:42:d0:f7:5c:7a:1d:2a:41:3e:37:28:07:2c:59:b1:87: ea:d3:ee:23:29:87:ff:46:cf:8c:c2:61:e7:75:09:2b:39:eb: a9:59:61:dc:28:7d:b9:6a:c2:d3:67:a5:3e:48:a7:18:04:0f: 18:3a:89:15:10:ac:6c:ee:d2:3e:68:df:ae:5e:16:38:3a:24: 7b:4b:4d:f2:31:5e:29:b5:a0:aa:aa:d4:d9:fe:0f:2f:23:06: ae:ff:42:4d:f8:f7:24:54:85:25:8b:b3:c6:20:cb:5f:3d:28: 04:04:99:e7:e0:d0:9f:38:99:40:9b:3f:08:8c:ec:ed:b3:be: eb:b0:44:23:e2:cb:87:80:00:c4:22:27:84:5e:b7:be:e8:ba: b9:57:9c:4f:01:7d:db:8f:84:41:21:64:4e:ce:7f:1d:d8:c0: f6:3c:61:fa:06:7a:3d:ed:5b:4b:99:26:da:9c:ef:97:10:b7: 32:18:f1:eb:fa:3c:0b:2b:53:1b:c1:85:f5:16:48:45:a5:b6: 10:35:f2:43:84:b8:a1:82:9a:6d:11:d9:e6:33:4b:50:9d:62: f2:78:52:e0:25:dc:3d:3f:9d:ac:0e:e1:c4:40:bc:b1:e9:4c: e1:d5:57:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0GR7EkHis0gwDlkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk NzUwM2I3MDEtMDQ1YS00ZmQ0LWEzZDktNDQ3YTI1YTMxMjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt048WSmej2mKoPijIN07mA3ENTMYctvyLrS1 +AVYr0mJh1fSVI2CZ0v/p+DCLLk0Qx9NXnOxpohf226bAH+U/Ak9S/dBgv9NSHTb gWVSS+H8HOhN33BPVx5rJJGTO4U5n8g7wwr6Ba1MXZRZxN+XBvbradZdgCWDg3Yu b4K5QiAk+b6UuEsktBPUzKuPjnIWHNJJVJt0lS9gP+JYkc9alQf0OMYdWfnqXhZF vhj9OAzAGxVFBLksgHjpRYXRApbzYOlrnaH/ilU1PHMLU82zGn4ivxecq52bj6xV UuS1kcC4y8WSmC6dgXjawv3JWjnglKejXCT7NTjCMvfsa78/KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVncR6BYkb9OuE1Ot2g1Yyc7nuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDI1MmM0MmQtMDY4Ny0z YTA2LWI3MTMtY2JmNmZmY2E5M2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8f9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRAR6R3M4/bZfRXPqkL+5Eumq57QtD3XHodKkE+NygHLFmxh+rT7iMp h/9Gz4zCYed1CSs566lZYdwofblqwtNnpT5IpxgEDxg6iRUQrGzu0j5o365eFjg6 JHtLTfIxXim1oKqq1Nn+Dy8jBq7/Qk349yRUhSWLs8Ygy189KAQEmefg0J84mUCb PwiM7O2zvuuwRCPiy4eAAMQiJ4Ret77ourlXnE8BfduPhEEhZE7Ofx3YwPY8YfoG ej3tW0uZJtqc75cQtzIY8ev6PAsrUxvBhfUWSEWlthA18kOEuKGCmm0R2eYzS1Cd YvJ4UuAl3D0/nawO4cRAvLHpTOHVV0M= -----END CERTIFICATE-----Generated at Sun Mar 1 23:12:17 2026 by rpki-client