$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d71f3c42-1291-3980-914a-66b62cd16b55.roa File: d71f3c42-1291-3980-914a-66b62cd16b55.roa (raw, json) Hash identifier: cjxBw96WCpB2UBV1dfixCOtHcou5PmjxxNQC92mmFyE= Subject key identifier: FD:D0:A6:83:FC:A8:FF:F0:09:8D:D2:F9:A7:23:9A:86:C1:E9:0E:ED Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D07AD0498FE732E15D70FB180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d71f3c42-1291-3980-914a-66b62cd16b55.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 35994 IP address blocks: 23.200.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:04:98:fe:73:2e:15:d7:0f:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=29b2abcb-12ab-4adc-bc5b-b1eb01a19049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1d:a4:38:a9:56:4f:27:dd:34:4c:5e:3e:21: 2b:58:9e:08:b7:22:f9:cf:28:8b:96:78:90:7d:21: ac:71:21:9e:c8:e6:9f:c8:01:74:cc:6c:ad:9e:8f: 74:18:8c:82:55:d9:4d:5a:ee:d8:17:66:f5:64:80: 07:8e:15:f6:2b:57:93:91:a0:8f:e8:f3:1d:f4:ec: 2d:8d:55:a0:f3:c2:54:c3:b0:d5:80:b3:7d:39:10: 1c:e6:b6:a5:2c:ec:ad:57:4d:70:3e:e7:f0:de:6f: 96:7d:40:ba:76:52:46:ec:b2:74:0d:f1:01:38:32: 60:78:ca:3e:6f:15:47:06:83:d4:1c:5c:31:e7:95: 3f:e8:ba:81:dd:b7:c4:9e:fc:74:f4:57:bb:2d:f1: b3:ba:90:07:47:b8:cf:04:b8:9c:6b:ff:e8:58:0e: 74:82:cf:02:1e:2b:51:2a:ac:f6:15:02:92:3f:72: dc:d4:19:a9:7b:81:ed:d4:7a:77:44:6d:4c:9b:4f: 7b:5d:c9:73:6b:07:39:26:98:1b:b2:f6:93:e9:bf: db:68:ff:30:9b:70:2d:04:6c:44:bf:53:c4:36:9e: b2:75:19:bd:c2:a3:81:f8:ec:05:0c:36:71:b4:e1: f5:9d:67:bf:cd:f2:4e:c5:fd:6c:26:16:c9:2f:51: 69:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D0:A6:83:FC:A8:FF:F0:09:8D:D2:F9:A7:23:9A:86:C1:E9:0E:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d71f3c42-1291-3980-914a-66b62cd16b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a3:6e:c1:e9:61:3e:e7:a6:dd:9d:1e:7f:86:c1:4b:1e:53: 60:19:be:98:47:cf:7b:d8:5b:25:c3:30:28:2d:29:c4:24:e6: 20:e7:75:48:bd:0e:3e:78:45:25:40:55:38:f8:02:f3:53:dc: cc:21:9f:1a:17:66:c3:b0:e9:71:73:d6:c3:af:5e:be:d0:33: 37:0b:0e:12:70:e5:ff:05:d9:a3:8c:10:2a:77:de:aa:e1:70: a5:ed:f1:8f:cf:1d:9b:31:69:6b:b5:4f:30:77:d8:ab:0e:e1: 73:bd:92:ac:3e:15:a8:61:28:39:2c:cc:da:06:67:aa:d4:8a: 3e:09:87:86:2c:d8:1f:d7:49:8c:ce:b5:65:d7:e4:0e:fc:a9: 91:15:4c:39:8e:e4:b1:57:30:f9:80:d6:ce:1e:1e:00:b8:31: 18:ea:1d:4c:6a:93:95:6a:f1:2d:ec:2b:b7:a8:d6:71:93:a1: ce:b1:d6:33:ac:cc:93:a3:2b:1b:a6:f3:c6:ca:85:ab:79:44: 74:ff:10:16:aa:66:c8:33:30:0f:2e:b8:0f:30:25:25:94:be: 21:3c:76:13:e0:02:d4:7d:74:5e:36:f6:29:3c:b2:fe:77:a6: 39:92:ba:7c:5e:6c:9f:7b:01:cd:f4:9d:12:42:fb:c0:7c:eb: bf:c8:4e:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrQSY/nMuFdcPsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk MjliMmFiY2ItMTJhYi00YWRjLWJjNWItYjFlYjAxYTE5MDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x2kOKlWTyfdNExePiErWJ4ItyL5zyiLlniQ fSGscSGeyOafyAF0zGytno90GIyCVdlNWu7YF2b1ZIAHjhX2K1eTkaCP6PMd9Owt jVWg88JUw7DVgLN9ORAc5ralLOytV01wPufw3m+WfUC6dlJG7LJ0DfEBODJgeMo+ bxVHBoPUHFwx55U/6LqB3bfEnvx09Fe7LfGzupAHR7jPBLica//oWA50gs8CHitR Kqz2FQKSP3Lc1Bmpe4Ht1Hp3RG1Mm097Xclzawc5JpgbsvaT6b/baP8wm3AtBGxE v1PENp6ydRm9wqOB+OwFDDZxtOH1nWe/zfJOxf1sJhbJL1FpnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3QpoP8qP/wCY3S+acjmobB6Q7tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDcxZjNjNDItMTI5MS0z OTgwLTkxNGEtNjZiNjJjZDE2YjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8gFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6jbsHpYT7npt2dHn+GwUseU2AZvphHz3vYWyXDMCgtKcQk5iDndUi9 Dj54RSVAVTj4AvNT3MwhnxoXZsOw6XFz1sOvXr7QMzcLDhJw5f8F2aOMECp33qrh cKXt8Y/PHZsxaWu1TzB32KsO4XO9kqw+FahhKDkszNoGZ6rUij4Jh4Ys2B/XSYzO tWXX5A78qZEVTDmO5LFXMPmA1s4eHgC4MRjqHUxqk5Vq8S3sK7eo1nGToc6x1jOs zJOjKxum88bKhat5RHT/EBaqZsgzMA8uuA8wJSWUviE8dhPgAtR9dF429ik8sv53 pjmSunxebJ97Ac30nRJC+8B867/IThQ= -----END CERTIFICATE-----Generated at Mon Mar 2 14:08:41 2026 by rpki-client