$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14442922-3d83-34ba-8a93-4b0482b63290.roa File: 14442922-3d83-34ba-8a93-4b0482b63290.roa (raw, json) Hash identifier: J61FLsA1YRTmcCqtu7WoiZ6zy4A9OAW5dkiNKnIKG9M= Subject key identifier: 33:E0:B2:E7:4B:76:0E:7D:D6:26:18:91:81:DB:FD:11:1C:51:B4:3C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D343A2B360B55AC3FAF085C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14442922-3d83-34ba-8a93-4b0482b63290.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 20940 IP address blocks: 23.213.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:2b:36:0b:55:ac:3f:af:08:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=ffbc4ad7-63d3-4496-a400-fb3b5b50e2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6a:59:b1:be:c7:c2:3d:38:7a:10:1e:70:ae: d4:56:fa:e8:72:b4:51:a3:30:bd:ed:19:ee:9a:fa: 5c:3a:49:c4:96:09:9a:a5:4a:1a:1d:47:b9:f1:8f: b2:d5:c3:5b:b1:b0:99:05:44:de:4f:ba:6a:cf:c0: 16:b4:37:7e:85:49:fc:08:38:f0:c4:90:a1:81:6a: 6e:b8:4e:1d:18:5d:e9:82:fa:eb:a3:b7:f3:87:fc: b9:bc:35:41:01:f8:5a:c1:a3:18:4b:71:64:3c:66: 3a:de:0e:da:75:01:e3:df:b9:05:c1:db:ee:ad:d3: 62:74:16:2e:56:71:06:4b:52:63:15:3d:64:91:82: dc:8a:ca:84:69:a5:71:28:72:8e:40:0a:ff:81:3e: 8a:92:20:76:99:90:a4:20:da:f7:6f:36:b6:98:fa: 82:b2:4d:23:df:d8:df:fa:66:01:10:17:5d:8a:cb: 80:5e:19:c2:c0:f9:70:76:93:c8:65:d3:11:c4:e2: d8:10:7a:b9:56:0e:c4:22:d7:0d:20:21:48:a7:29: d5:f7:2a:d9:21:1e:39:4b:9f:62:0d:e3:b5:2d:27: f0:69:70:c4:02:f5:4d:4f:ef:37:8a:90:fb:6a:60: 55:76:fe:d9:7e:56:c1:63:2c:13:7e:d6:9d:06:c9: 07:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E0:B2:E7:4B:76:0E:7D:D6:26:18:91:81:DB:FD:11:1C:51:B4:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14442922-3d83-34ba-8a93-4b0482b63290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:57:8e:4f:74:02:95:82:d4:84:d8:6f:56:3a:ce:a1:ae:e6: 6b:8a:f5:c3:6f:10:37:f2:8b:3c:b3:c4:87:30:71:2c:83:a9: 77:cc:8a:21:a8:4e:e4:fd:67:06:f7:e6:b3:a7:50:78:5f:cf: 0a:74:3b:dd:0f:ad:85:7c:19:bf:c2:55:fa:f7:ce:42:07:f3: 34:77:28:55:30:f8:4c:c4:5d:30:2b:64:b2:dc:96:61:45:59: f3:8c:ac:1c:3d:66:1d:c7:66:27:e2:b0:1a:37:54:75:85:a8: 04:42:95:01:91:db:3a:99:43:2a:5f:4b:fc:8b:d5:34:dc:c6: 86:4c:2b:56:d6:7e:7e:18:4e:7b:f3:e6:c0:bc:8e:e5:b0:7f: 71:a6:21:88:aa:6c:21:89:78:7d:fb:6f:c2:28:3e:32:74:c6: 95:d3:64:28:f8:2e:03:45:8d:20:fe:11:70:25:a3:09:82:d9: 6c:81:bd:40:a6:cc:12:00:71:09:6a:1e:ab:8f:52:66:76:5b: fd:42:40:44:a7:81:e9:5e:a1:63:7a:d2:87:99:bd:74:9b:d0: e1:ad:92:79:35:58:9a:35:aa:2b:23:b4:1d:ae:f6:0d:d3:99: 2a:30:ec:ce:36:7e:cc:89:58:10:93:82:d1:4e:6d:5d:90:ad: 3f:a4:09:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00Ois2C1WsP68IXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk ZmZiYzRhZDctNjNkMy00NDk2LWE0MDAtZmIzYjViNTBlMmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWpZsb7Hwj04ehAecK7UVvrocrRRozC97Rnu mvpcOknElgmapUoaHUe58Y+y1cNbsbCZBUTeT7pqz8AWtDd+hUn8CDjwxJChgWpu uE4dGF3pgvrro7fzh/y5vDVBAfhawaMYS3FkPGY63g7adQHj37kFwdvurdNidBYu VnEGS1JjFT1kkYLcisqEaaVxKHKOQAr/gT6KkiB2mZCkINr3bza2mPqCsk0j39jf +mYBEBddisuAXhnCwPlwdpPIZdMRxOLYEHq5Vg7EItcNICFIpynV9yrZIR45S59i DeO1LSfwaXDEAvVNT+83ipD7amBVdv7ZflbBYywTftadBskHNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPgsudLdg591iYYkYHb/REcUbQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTQ0NDI5MjItM2Q4My0z NGJhLThhOTMtNGIwNDgyYjYzMjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9WcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZXjk90ApWC1ITYb1Y6zqGu5muK9cNvEDfyizyzxIcwcSyDqXfMiiGo TuT9Zwb35rOnUHhfzwp0O90PrYV8Gb/CVfr3zkIH8zR3KFUw+EzEXTArZLLclmFF WfOMrBw9Zh3HZifisBo3VHWFqARClQGR2zqZQypfS/yL1TTcxoZMK1bWfn4YTnvz 5sC8juWwf3GmIYiqbCGJeH37b8IoPjJ0xpXTZCj4LgNFjSD+EXAlowmC2WyBvUCm zBIAcQlqHquPUmZ2W/1CQESngeleoWN60oeZvXSb0OGtknk1WJo1qisjtB2u9g3T mSow7M42fsyJWBCTgtFObV2QrT+kCQI= -----END CERTIFICATE-----Generated at Thu Mar 26 21:37:38 2026 by rpki-client