$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f0dbed6-ac56-3494-a20e-84ee4e0b8a6d.roa File: 0f0dbed6-ac56-3494-a20e-84ee4e0b8a6d.roa (raw, json) Hash identifier: ipqpoq19s2tejFEP2pa5owXaGFFv2wANQ03cF69qyms= Subject key identifier: A8:09:D2:46:3C:8B:30:A7:73:E1:D9:E4:D8:FA:9F:F2:1B:A1:C3:2C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D19B4C3B871F25CC4FB8FC980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f0dbed6-ac56-3494-a20e-84ee4e0b8a6d.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 16625 IP address blocks: 23.206.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:c3:b8:71:f2:5c:c4:fb:8f:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=94ef6cea-99dd-4977-a319-33f8a55020a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c6:8c:f5:b8:16:a6:bd:e1:2c:24:8c:a4:c8: dd:12:32:84:8f:1f:2b:04:b5:8d:82:0b:27:63:56: 62:1e:bc:c6:37:e0:e2:05:9f:44:0b:d4:52:24:78: aa:96:ec:51:38:52:ff:7a:15:b7:bb:e6:c6:5d:d1: 97:2a:26:d9:80:8c:15:97:83:f6:af:83:4e:8b:5a: f0:16:7e:0c:d1:ad:b8:e1:64:96:87:06:c3:0b:7e: 61:b2:30:28:f8:59:8d:82:93:0e:86:1d:31:6e:bb: 5c:47:1c:10:6d:fe:a0:ae:e2:12:4f:52:8a:26:e0: 6e:a5:b1:8d:23:76:50:d3:0b:2b:35:9c:ec:ab:0f: 58:f8:19:17:3d:49:92:e2:85:41:fb:70:6b:2f:e9: de:f9:23:48:e2:c0:f6:ab:4b:fa:bb:ae:80:dc:c7: 1b:5c:0e:c5:a7:a0:d8:0d:97:d8:3c:9c:1b:56:6c: 14:29:fa:9c:9b:05:3e:82:03:1c:24:18:e0:eb:59: 2a:25:59:cb:04:09:03:59:b0:84:a0:2f:4b:59:5b: ca:d0:c2:2d:1e:50:14:e2:47:05:fe:dc:e2:4a:62: c4:a9:e1:5c:b7:cf:a1:b1:3e:8f:7b:7f:1d:ec:3f: 53:e6:80:7d:21:30:08:db:f0:7b:e1:ef:9b:a1:b8: 68:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:09:D2:46:3C:8B:30:A7:73:E1:D9:E4:D8:FA:9F:F2:1B:A1:C3:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f0dbed6-ac56-3494-a20e-84ee4e0b8a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:e8:89:ab:5b:45:94:7a:9f:97:09:e9:60:f3:bd:d2:44:a0: d5:6e:7e:b4:ce:6f:1c:c6:bd:29:aa:d2:f4:89:91:ee:00:b5: fc:66:5f:e7:42:a5:57:c3:6b:6e:3d:5d:b6:e2:15:3f:01:87: ad:0a:94:af:2d:e6:69:35:2a:eb:27:ee:0d:4e:24:d3:32:6f: 82:31:da:f6:ea:a9:c6:ea:b9:c0:7c:94:c3:b1:37:98:ab:8e: ad:4e:25:96:f1:a8:58:2c:52:57:1f:11:4a:73:2e:84:6a:14: 4d:18:af:cd:4b:33:37:62:bc:02:c9:8e:85:d5:4a:8b:26:ed: 4f:7e:3a:50:43:0f:46:21:6c:c0:da:11:88:6f:31:66:e0:cc: 1a:5e:a7:f7:a0:99:c0:1b:55:cb:a7:18:6a:d6:e1:ba:c4:a3: 47:b5:05:a7:24:8c:7f:e6:9d:8a:28:62:93:5b:66:33:0f:76: 18:41:1f:69:d7:f1:60:a2:d8:41:53:90:a8:a8:3e:0a:56:4b: 41:46:d3:dc:e7:cb:19:e8:e9:ae:88:9f:9c:63:58:7e:18:f0: 18:81:48:8d:8a:19:a3:ac:19:ac:7b:11:7a:53:6f:c2:40:b4: b9:ac:bd:07:b4:43:95:59:61:c4:6e:ad:fb:3d:aa:e6:eb:cb: 59:5a:59:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtMO4cfJcxPuPyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk OTRlZjZjZWEtOTlkZC00OTc3LWEzMTktMzNmOGE1NTAyMGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8aM9bgWpr3hLCSMpMjdEjKEjx8rBLWNggsn Y1ZiHrzGN+DiBZ9EC9RSJHiqluxROFL/ehW3u+bGXdGXKibZgIwVl4P2r4NOi1rw Fn4M0a244WSWhwbDC35hsjAo+FmNgpMOhh0xbrtcRxwQbf6gruIST1KKJuBupbGN I3ZQ0wsrNZzsqw9Y+BkXPUmS4oVB+3BrL+ne+SNI4sD2q0v6u66A3McbXA7Fp6DY DZfYPJwbVmwUKfqcmwU+ggMcJBjg61kqJVnLBAkDWbCEoC9LWVvK0MItHlAU4kcF /tziSmLEqeFct8+hsT6Pe38d7D9T5oB9ITAI2/B74e+bobho1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgJ0kY8izCnc+HZ5Nj6n/IbocMsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGYwZGJlZDYtYWM1Ni0z NDk0LWEyMGUtODRlZTRlMGI4YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF878MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/oiatbRZR6n5cJ6WDzvdJEoNVufrTObxzGvSmq0vSJke4AtfxmX+dC pVfDa249XbbiFT8Bh60KlK8t5mk1Kusn7g1OJNMyb4Ix2vbqqcbqucB8lMOxN5ir jq1OJZbxqFgsUlcfEUpzLoRqFE0Yr81LMzdivALJjoXVSosm7U9+OlBDD0YhbMDa EYhvMWbgzBpep/egmcAbVcunGGrW4brEo0e1BackjH/mnYooYpNbZjMPdhhBH2nX 8WCi2EFTkKioPgpWS0FG09znyxno6a6In5xjWH4Y8BiBSI2KGaOsGax7EXpTb8JA tLmsvQe0Q5VZYcRurfs9qubry1laWWU= -----END CERTIFICATE-----Generated at Thu Mar 26 12:22:44 2026 by rpki-client