$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/023d9560-25ce-3d8b-bbae-05297072b9ad.roa File: 023d9560-25ce-3d8b-bbae-05297072b9ad.roa (raw, json) Hash identifier: /IgJEPH1U+ilYlkzxpPYp+Sd0im0iGXPfNm5jxQfck4= Subject key identifier: 13:0D:2C:DD:89:52:7D:45:F0:2A:9E:FF:95:EB:18:85:2A:29:B3:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D0912AEC19FC1D4CA608F11C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/023d9560-25ce-3d8b-bbae-05297072b9ad.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.202.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:ae:c1:9f:c1:d4:ca:60:8f:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=f21b060d-4b18-43dc-8235-c82522055500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e3:f4:7b:a1:d1:e5:2e:ec:af:7d:91:f6:4a: bf:40:df:bb:c9:31:e1:cb:b1:d9:bb:c9:13:5d:53: 47:95:d9:2f:7b:0d:fb:b8:bb:14:51:5e:b4:27:ee: b7:6d:84:4a:0b:25:78:33:60:4a:db:58:37:80:a3: 08:36:8d:c2:8e:57:c3:09:d5:88:4c:63:cf:c2:22: f1:e1:37:d8:10:be:24:a4:47:42:37:05:46:0e:e5: c3:c2:5b:c6:df:ed:a8:93:f7:dd:68:6b:4c:65:f0: 74:87:18:43:82:ab:83:b7:f4:7a:b6:07:b8:40:5f: 88:ab:9e:ae:14:43:70:00:13:c6:77:78:69:93:cb: 7e:8d:ea:d8:ea:db:ca:c8:81:f1:c8:e2:67:cd:90: 39:f8:32:88:84:04:5d:66:0c:ae:63:24:f3:b3:d1: 2e:e4:8f:8e:15:3d:85:f3:97:6e:da:44:a5:df:1d: 63:62:e2:df:13:28:45:2d:64:f0:0a:32:79:a5:f0: f1:9c:06:5b:22:8f:62:f5:1c:c8:f9:78:0e:ae:dc: 40:79:e8:04:11:a9:9d:98:21:28:52:e0:76:dc:a4: ee:53:03:67:bf:55:43:b0:59:02:d3:2b:e8:6c:f0: 86:e8:be:ce:ec:a8:d7:da:81:3f:8f:8f:c8:92:da: be:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:0D:2C:DD:89:52:7D:45:F0:2A:9E:FF:95:EB:18:85:2A:29:B3:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/023d9560-25ce-3d8b-bbae-05297072b9ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4a:bf:0d:20:73:65:15:41:aa:47:57:fb:0e:24:b3:2f:c9: 36:d8:d2:4b:9e:49:f9:79:d6:1e:4a:af:59:96:5d:0e:6c:6a: 5e:65:29:f7:23:d2:5a:ad:e1:cc:69:e1:8e:84:7b:e3:9d:e7: 71:3f:08:a7:a8:20:c7:a5:3b:c0:40:55:9a:1d:27:65:4a:4a: 6c:bf:dd:92:38:c0:58:92:c8:22:40:b6:df:5a:2c:32:64:63: da:e6:d3:d4:a1:cb:21:7e:ac:95:dc:f2:ee:1e:40:9c:a2:a2: d2:92:bf:3b:99:fb:07:9d:18:da:6e:bc:a9:8a:23:8e:fd:07: 00:3a:0f:93:eb:22:81:e5:5c:53:61:cf:ee:16:f5:9f:09:5d: 02:f5:ab:55:7a:3b:93:e8:55:d9:6b:f3:12:81:66:cc:47:73: ca:db:af:03:1b:ec:a2:d0:c2:da:f6:9b:0b:7b:91:67:4e:19: c9:86:bf:26:38:df:1e:4a:73:b7:cb:71:d8:a7:53:7a:10:11: ee:a1:31:d0:1b:06:79:39:ea:ec:44:26:45:cd:ca:85:57:7f: df:5c:b5:6d:33:ec:c7:5c:54:f6:de:4f:84:4e:1f:4b:aa:ed: 89:94:0e:17:a6:5a:56:1c:71:13:b5:10:5e:ef:71:68:d4:b2: 83:05:47:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEq7Bn8HUymCPEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZjIxYjA2MGQtNGIxOC00M2RjLTgyMzUtYzgyNTIyMDU1NTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOP0e6HR5S7sr32R9kq/QN+7yTHhy7HZu8kT XVNHldkvew37uLsUUV60J+63bYRKCyV4M2BK21g3gKMINo3CjlfDCdWITGPPwiLx 4TfYEL4kpEdCNwVGDuXDwlvG3+2ok/fdaGtMZfB0hxhDgquDt/R6tge4QF+Iq56u FENwABPGd3hpk8t+jerY6tvKyIHxyOJnzZA5+DKIhARdZgyuYyTzs9Eu5I+OFT2F 85du2kSl3x1jYuLfEyhFLWTwCjJ5pfDxnAZbIo9i9RzI+XgOrtxAeegEEamdmCEo UuB23KTuUwNnv1VDsFkC0yvobPCG6L7O7KjX2oE/j4/Iktq+awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMNLN2JUn1F8Cqe/5XrGIUqKbPaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDIzZDk1NjAtMjVjZS0z ZDhiLWJiYWUtMDUyOTcwNzJiOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8p5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChKvw0gc2UVQapHV/sOJLMvyTbY0kueSfl51h5Kr1mWXQ5sal5lKfcj 0lqt4cxp4Y6Ee+Od53E/CKeoIMelO8BAVZodJ2VKSmy/3ZI4wFiSyCJAtt9aLDJk Y9rm09ShyyF+rJXc8u4eQJyiotKSvzuZ+wedGNpuvKmKI479BwA6D5PrIoHlXFNh z+4W9Z8JXQL1q1V6O5PoVdlr8xKBZsxHc8rbrwMb7KLQwtr2mwt7kWdOGcmGvyY4 3x5Kc7fLcdinU3oQEe6hMdAbBnk56uxEJkXNyoVXf99ctW0z7MdcVPbeT4ROH0uq 7YmUDhemWlYccRO1EF7vcWjUsoMFR28= -----END CERTIFICATE-----Generated at Sat Mar 7 08:43:34 2026 by rpki-client