$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa File: 0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa (raw, json) Hash identifier: tuwiHNt/2IfUXfVNz8pswattZv9lTzSe+XZ/XJR6QK0= Subject key identifier: 5C:44:72:1C:B0:0B:F6:1E:67:FE:E4:D4:96:CE:49:A8:5D:26:3C:45 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584CAE571367915B115B4774B760 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 16509 IP address blocks: 23.239.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:13:67:91:5b:11:5b:47:74:b7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=47b6fc69-0b49-47e3-bea8-aea1909a0f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:56:5a:8e:d2:aa:82:c8:36:ad:96:8e:14:73: f1:84:e3:26:38:be:ff:ff:db:64:99:12:0f:28:35: 45:8f:60:c3:f4:f9:2c:8b:94:67:ca:49:ea:16:82: 55:44:67:c0:c7:54:c6:6b:c1:93:d1:9b:e2:eb:e7: 20:48:16:33:8e:ff:f7:ce:6c:27:72:5d:c3:a2:84: 29:d1:cc:05:e0:62:5d:3c:f3:83:af:b7:25:96:d6: 32:e9:7d:a2:b4:a4:de:35:8e:30:b1:dc:bc:f7:3b: 2a:78:ce:c5:8a:b9:ed:ed:4f:da:da:d0:80:63:09: 15:5e:6f:ad:32:1c:fc:c6:30:68:72:0d:93:80:32: 90:7d:ad:44:87:cb:ad:34:69:7c:17:4f:76:12:02: 29:8a:bf:a4:a9:bf:d1:35:ca:2c:7e:b9:8b:83:6a: 14:86:8f:79:39:4b:39:80:ae:5a:43:3c:48:a3:a9: 5d:11:96:6b:82:52:0f:da:6c:62:23:f3:0a:4a:ef: d9:1b:d7:45:bf:80:b5:ac:6f:25:e3:8a:4c:f2:c9: 32:ab:a6:3f:56:fb:01:88:d4:bd:53:b5:39:17:0e: 51:a1:10:03:11:b4:31:8c:9d:6f:01:64:0a:f5:3f: 2c:b9:dc:fa:33:c7:e8:a0:4d:03:d1:bd:0e:1f:83: a3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:44:72:1C:B0:0B:F6:1E:67:FE:E4:D4:96:CE:49:A8:5D:26:3C:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:34:0f:cd:20:0b:d1:59:78:c3:a2:4a:3e:a1:24:67:ca:48: f6:12:46:4b:66:f0:d1:ed:04:b9:b0:31:4a:bf:c9:1e:c1:1f: 1e:0e:29:1a:0a:af:3b:fd:69:08:eb:3d:07:bf:81:e0:e3:93: 0c:11:4b:74:01:50:71:a1:10:38:d7:b2:20:7c:c2:fb:a5:f6: cc:f9:f0:26:49:2d:12:62:5c:d5:ec:d1:ae:94:78:3c:67:b1: 1a:9a:d1:79:40:74:bb:9a:01:03:2d:f7:00:11:94:b3:75:6a: ec:d8:25:7c:2f:f3:e0:b0:fc:46:73:d9:8b:ab:7a:19:f8:78: 60:8a:fc:f6:48:d2:a7:9f:12:71:f3:3f:ee:b3:35:6d:dd:9d: a0:ff:e6:b9:51:df:94:a7:ec:1d:88:27:6d:22:24:44:11:40: 81:b1:54:0f:8f:f5:49:52:d4:2d:58:23:b1:87:bd:72:08:53: 7f:32:07:0f:00:f1:20:9b:16:2d:d5:ea:4c:8c:80:12:87:a6: 39:56:8b:76:8f:ab:63:f1:45:d8:02:8b:6c:ef:21:fa:82:2c: 80:06:c4:7f:46:03:09:37:56:0f:a3:05:18:d2:ec:36:d1:5c: d2:ea:39:4f:38:63:52:26:c8:80:76:f7:59:43:33:30:c3:3e: a5:03:0e:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVxNnkVsRW0d0t2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NDdiNmZjNjktMGI0OS00N2UzLWJlYTgtYWVhMTkwOWEwZjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVZajtKqgsg2rZaOFHPxhOMmOL7//9tkmRIP KDVFj2DD9Pksi5RnyknqFoJVRGfAx1TGa8GT0Zvi6+cgSBYzjv/3zmwncl3DooQp 0cwF4GJdPPODr7clltYy6X2itKTeNY4wsdy89zsqeM7Firnt7U/a2tCAYwkVXm+t Mhz8xjBocg2TgDKQfa1Eh8utNGl8F092EgIpir+kqb/RNcosfrmLg2oUho95OUs5 gK5aQzxIo6ldEZZrglIP2mxiI/MKSu/ZG9dFv4C1rG8l44pM8skyq6Y/VvsBiNS9 U7U5Fw5RoRADEbQxjJ1vAWQK9T8sudz6M8fooE0D0b0OH4OjpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxEchywC/YeZ/7k1JbOSahdJjxFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMGY2YzlhYTQtNmU1YS0z NDQxLWIyMmEtOTc1Y2FiYzlmZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMs0D80gC9FZeMOiSj6hJGfKSPYSRktm8NHtBLmwMUq/yR7BHx4OKRoK rzv9aQjrPQe/geDjkwwRS3QBUHGhEDjXsiB8wvul9sz58CZJLRJiXNXs0a6UeDxn sRqa0XlAdLuaAQMt9wARlLN1auzYJXwv8+Cw/EZz2Yurehn4eGCK/PZI0qefEnHz P+6zNW3dnaD/5rlR35Sn7B2IJ20iJEQRQIGxVA+P9UlS1C1YI7GHvXIIU38yBw8A 8SCbFi3V6kyMgBKHpjlWi3aPq2PxRdgCi2zvIfqCLIAGxH9GAwk3Vg+jBRjS7DbR XNLqOU84Y1ImyIB291lDMzDDPqUDDiQ= -----END CERTIFICATE-----Generated at Mon Mar 2 13:25:21 2026 by rpki-client