$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08825d7a-816d-305d-8e50-8167b3827d91.roa File: 08825d7a-816d-305d-8e50-8167b3827d91.roa (raw, json) Hash identifier: Jut5fxqspdw5fIqhwZSBWlS+G4y5fJeauEFqYqTXAPM= Subject key identifier: D1:3C:4F:4C:ED:30:1F:65:11:50:A1:0F:F8:1F:6F:F6:33:EE:43:8F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D343A2B970BB5C84A61EE9780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08825d7a-816d-305d-8e50-8167b3827d91.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 20940 IP address blocks: 23.221.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:2b:97:0b:b5:c8:4a:61:ee:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=cf4df9f1-def0-4027-b347-dd68968540c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ec:da:5c:f5:cc:16:e0:08:81:a6:a2:f9:34: 7a:dc:b8:08:e6:de:5f:16:67:c0:88:27:f0:01:3a: 9b:e7:13:30:75:1b:6a:3e:69:5b:52:06:6b:09:ac: c0:5f:87:ef:99:f5:61:88:a2:fb:f4:99:1f:44:0b: 53:69:9f:d1:17:eb:ef:70:aa:1d:03:15:6b:b6:57: d9:5d:75:e8:7f:c7:c9:a1:a4:ec:f6:b9:71:4e:07: 4c:6e:d9:84:d1:8d:59:a0:93:07:1d:c9:d4:de:ff: 65:8c:37:a6:4d:f7:0f:9d:4a:dd:34:71:de:d7:c3: 0f:c8:2f:4e:f5:97:b5:16:60:a8:4f:6c:ae:d2:ba: 58:e9:68:31:d0:4b:c7:da:25:fd:2f:b1:33:c8:2b: 41:a3:4e:75:36:3d:ae:20:7b:ad:49:2e:2a:5e:75: 5d:32:32:14:22:ff:4c:46:60:f8:f2:de:3f:ce:d8: 19:d8:07:20:9b:21:93:78:1f:c7:90:da:8f:07:3e: 66:0f:e9:cf:d6:d8:8c:97:bc:fc:d3:d0:35:fe:f1: 70:4c:38:5c:61:cc:72:e2:ec:d4:0a:d1:b4:a3:e0: ad:e3:4f:1d:be:69:98:e0:24:33:a7:e3:95:d3:da: 09:49:10:78:a0:5f:f8:58:19:0b:df:1b:98:2f:aa: 18:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3C:4F:4C:ED:30:1F:65:11:50:A1:0F:F8:1F:6F:F6:33:EE:43:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08825d7a-816d-305d-8e50-8167b3827d91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ac:9b:fd:b7:6d:cd:a1:cc:da:b5:27:4b:31:55:41:33:c9: 59:26:37:b3:2d:c4:48:62:42:9d:64:52:cc:18:31:2c:ff:7a: 4c:76:7b:3a:50:0d:b1:24:99:f1:45:c4:0b:82:e3:bf:f3:97: d0:cc:a9:f4:6a:dd:3c:f8:59:06:71:6a:ac:25:66:d6:b3:af: 55:50:74:04:5e:75:a4:3f:07:fa:a7:ff:92:bf:5a:3f:c5:e4: ed:f5:56:ce:2b:03:5c:eb:7a:8c:6f:44:cf:b7:d0:0e:2b:f4: 85:1b:34:fa:75:c6:90:25:c3:a0:45:59:72:30:6f:cd:16:03: 50:e2:68:8c:ca:1d:fc:69:1f:17:24:e6:3b:83:2e:35:bf:72: b9:6a:6b:b0:4e:85:7b:6d:ea:b6:02:7b:59:8a:90:f3:c6:43: 9e:8c:c6:8a:c2:70:fe:40:5f:8d:a4:8b:20:c6:f7:0f:45:7c: b1:74:ce:c7:eb:2b:41:13:9a:c2:57:fa:c9:98:df:c9:3f:f6: 1d:83:02:73:8c:3c:ff:4d:85:6b:e6:0a:af:dd:46:5a:ff:fc: 2c:05:5e:b7:70:d4:85:77:58:04:7d:0f:29:93:02:73:37:80: ea:3d:eb:d9:9b:2b:99:70:74:a3:77:e8:46:19:f3:d2:a1:99: 7a:8d:bb:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00OiuXC7XISmHul4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk Y2Y0ZGY5ZjEtZGVmMC00MDI3LWIzNDctZGQ2ODk2ODU0MGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+zaXPXMFuAIgaai+TR63LgI5t5fFmfAiCfw ATqb5xMwdRtqPmlbUgZrCazAX4fvmfVhiKL79JkfRAtTaZ/RF+vvcKodAxVrtlfZ XXXof8fJoaTs9rlxTgdMbtmE0Y1ZoJMHHcnU3v9ljDemTfcPnUrdNHHe18MPyC9O 9Ze1FmCoT2yu0rpY6Wgx0EvH2iX9L7EzyCtBo051Nj2uIHutSS4qXnVdMjIUIv9M RmD48t4/ztgZ2AcgmyGTeB/HkNqPBz5mD+nP1tiMl7z809A1/vFwTDhcYcxy4uzU CtG0o+Ct408dvmmY4CQzp+OV09oJSRB4oF/4WBkL3xuYL6oYxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNE8T0ztMB9lEVChD/gfb/Yz7kOPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDg4MjVkN2EtODE2ZC0z MDVkLThlNTAtODE2N2IzODI3ZDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF90pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKsm/23bc2hzNq1J0sxVUEzyVkmN7MtxEhiQp1kUswYMSz/ekx2ezpQ DbEkmfFFxAuC47/zl9DMqfRq3Tz4WQZxaqwlZtazr1VQdARedaQ/B/qn/5K/Wj/F 5O31Vs4rA1zreoxvRM+30A4r9IUbNPp1xpAlw6BFWXIwb80WA1DiaIzKHfxpHxck 5juDLjW/crlqa7BOhXtt6rYCe1mKkPPGQ56MxorCcP5AX42kiyDG9w9FfLF0zsfr K0ETmsJX+smY38k/9h2DAnOMPP9NhWvmCq/dRlr//CwFXrdw1IV3WAR9DymTAnM3 gOo969mbK5lwdKN36EYZ89KhmXqNuzQ= -----END CERTIFICATE-----Generated at Thu Mar 26 03:54:01 2026 by rpki-client