$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95d9d2f2-8c57-36bd-b06b-8de16e4a5fd9.roa File: 95d9d2f2-8c57-36bd-b06b-8de16e4a5fd9.roa (raw, json) Hash identifier: PDfAkgo6a5tqbYcwOwpUWjW2adNdPv9Or/svq/RWdl0= Subject key identifier: 47:CF:E5:95:C2:7C:4E:16:52:B8:F7:B8:4F:15:98:87:39:2C:F3:84 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D0912A7E98A8EAEA56A0F54C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95d9d2f2-8c57-36bd-b06b-8de16e4a5fd9.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.203.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:a7:e9:8a:8e:ae:a5:6a:0f:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=45bef320-c39a-437e-87c8-a01bc3a149a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:20:2a:50:89:67:e0:7e:7f:ac:c5:ed:27:00: 96:f5:07:4f:ad:4e:ab:4c:11:d4:70:bf:9d:3b:13: 6b:2b:4b:8f:61:6b:96:d3:ca:db:80:ea:c0:85:6c: 41:62:dd:e4:bf:1d:9f:8d:f6:be:47:74:3b:ec:02: fd:de:0a:b9:2b:85:69:85:11:6f:70:7c:ba:71:f6: 01:6d:6b:45:60:c7:29:0a:37:02:75:25:e4:7d:72: dd:70:e1:16:7e:d6:91:5b:a8:4b:40:15:dd:d6:5f: a6:81:e8:3e:23:30:ad:c4:a8:4f:a5:92:20:92:f3: b6:af:d8:f4:8c:a2:2a:5d:77:8c:ba:00:a0:99:b4: 09:7e:9b:20:0b:2c:0e:6c:d2:6c:f2:af:ee:59:66: db:0f:f7:94:4f:cf:d0:10:6e:49:fa:62:45:f9:7e: cc:f1:87:38:71:4b:0d:91:f6:34:38:16:ed:b7:f9: 23:eb:47:59:83:ae:e2:cd:36:a9:2f:85:e7:6d:3a: 27:42:01:d4:cb:f9:7d:bc:5c:a0:f7:bd:37:36:8c: 97:8a:82:36:4c:e2:a2:23:6c:99:47:51:bb:45:f7: 57:72:bd:47:03:b8:dc:8c:cb:db:9d:31:68:d6:c6: c4:15:52:8c:74:9e:ec:c6:28:ea:db:b2:0d:f3:e7: 1e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CF:E5:95:C2:7C:4E:16:52:B8:F7:B8:4F:15:98:87:39:2C:F3:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95d9d2f2-8c57-36bd-b06b-8de16e4a5fd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:14:49:a4:04:f0:4a:f2:7f:7e:59:ba:8a:f3:61:f3:d6:6c: 7e:07:d6:e1:79:3b:36:80:a2:2c:0e:f9:33:1a:8b:ec:e8:3d: 15:61:83:44:55:e9:f0:04:6e:08:9c:5b:67:60:47:9d:20:31: 2d:e9:1f:83:d3:e9:7b:79:9d:ae:ba:d0:80:92:20:56:21:d1: d4:fd:dc:d2:cc:7e:51:55:ae:a4:75:34:8b:fd:7b:7c:f4:b9: 0a:85:04:10:4d:e4:ed:3b:23:80:96:bf:b0:1b:f1:8d:df:9e: e3:a6:72:6e:33:d5:58:a2:ee:4a:f8:c6:46:43:0d:e6:c1:01: aa:41:30:09:b2:28:16:b5:dc:e1:51:16:10:e6:61:0c:23:36: 46:15:18:12:f7:c0:fa:8f:b8:05:9d:9b:7d:51:fc:59:00:16: af:55:d3:95:79:29:a5:f5:d5:6a:dc:15:37:5e:a1:2c:8a:1b: fd:53:a3:ef:58:9b:47:18:66:12:9d:33:48:61:4d:80:ad:87: 65:8c:2d:31:e3:9c:fd:7d:65:ae:99:22:25:5c:27:85:b4:0d: ea:7a:06:26:55:6f:a4:5e:c4:bf:c3:da:e0:27:a2:07:2e:44: fa:fe:36:c7:77:cf:76:61:d3:2b:d3:1d:ce:76:f7:bd:d6:99: 56:0d:6d:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEqfpio6upWoPVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NDViZWYzMjAtYzM5YS00MzdlLTg3YzgtYTAxYmMzYTE0OWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSAqUIln4H5/rMXtJwCW9QdPrU6rTBHUcL+d OxNrK0uPYWuW08rbgOrAhWxBYt3kvx2fjfa+R3Q77AL93gq5K4VphRFvcHy6cfYB bWtFYMcpCjcCdSXkfXLdcOEWftaRW6hLQBXd1l+mgeg+IzCtxKhPpZIgkvO2r9j0 jKIqXXeMugCgmbQJfpsgCywObNJs8q/uWWbbD/eUT8/QEG5J+mJF+X7M8Yc4cUsN kfY0OBbtt/kj60dZg67izTapL4XnbTonQgHUy/l9vFyg9703NoyXioI2TOKiI2yZ R1G7RfdXcr1HA7jcjMvbnTFo1sbEFVKMdJ7sxijq27IN8+ceBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfP5ZXCfE4WUrj3uE8VmIc5LPOEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTVkOWQyZjItOGM1Ny0z NmJkLWIwNmItOGRlMTZlNGE1ZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8uAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQUSaQE8Eryf35ZuorzYfPWbH4H1uF5OzaAoiwO+TMai+zoPRVhg0RV 6fAEbgicW2dgR50gMS3pH4PT6Xt5na660ICSIFYh0dT93NLMflFVrqR1NIv9e3z0 uQqFBBBN5O07I4CWv7Ab8Y3fnuOmcm4z1Vii7kr4xkZDDebBAapBMAmyKBa13OFR FhDmYQwjNkYVGBL3wPqPuAWdm31R/FkAFq9V05V5KaX11WrcFTdeoSyKG/1To+9Y m0cYZhKdM0hhTYCth2WMLTHjnP19Za6ZIiVcJ4W0Dep6BiZVb6RexL/D2uAnogcu RPr+Nsd3z3Zh0yvTHc52973WmVYNbVM= -----END CERTIFICATE-----Generated at Sat Mar 7 08:39:08 2026 by rpki-client