$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/168ebb6b-8e6b-3ce8-9635-4fe2245c3b19.roa File: 168ebb6b-8e6b-3ce8-9635-4fe2245c3b19.roa (raw, json) Hash identifier: cayx/pJvVvFqBVUst9Wq8YK/xXvS7egVRCe5e0gti84= Subject key identifier: 8D:59:20:89:14:0F:33:85:6F:52:6C:A1:BB:F6:BA:14:99:26:2C:16 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2A74C8A263875ADF63F33D60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/168ebb6b-8e6b-3ce8-9635-4fe2245c3b19.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 35994 IP address blocks: 23.218.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:c8:a2:63:87:5a:df:63:f3:3d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=3a3f617b-01cc-4033-aa79-a252c1b0bcb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:76:89:d7:34:10:68:2d:1e:23:24:54:fb:8b: 25:69:e2:e3:66:14:eb:4a:5d:f2:0e:a6:41:43:fd: bc:2e:d5:12:f5:f4:3a:e4:53:34:e9:71:97:a0:06: f6:c2:c9:b7:7b:0b:61:71:68:09:3b:65:4b:57:59: 31:e1:84:a1:e3:80:08:0a:f4:b7:82:5e:a3:42:e1: b4:bb:0f:a1:2b:b2:72:47:45:c0:4e:2e:20:c4:03: c8:7b:52:9c:ab:43:a2:00:f9:c6:bf:e4:84:7d:88: 07:8e:49:b8:d0:a3:7b:23:36:f1:1d:77:c0:a3:15: 4c:94:ec:6b:80:b4:2b:67:33:30:16:a9:97:00:c1: f4:ac:37:a3:06:bc:94:39:bb:5c:d5:1c:32:ac:25: df:19:d3:4a:6f:cb:4f:c2:c2:d5:58:65:4b:df:ca: 86:64:d1:e0:d5:d2:18:0b:a5:6f:c6:5d:1d:cf:22: f7:44:27:39:70:26:22:42:11:40:59:c6:a6:ae:46: 0f:fb:85:bd:a7:38:bb:7b:4d:1f:ff:30:bf:78:c1: f8:5e:f9:2d:9d:87:6e:58:3f:39:98:e6:5a:9d:84: 6e:59:ea:90:3c:60:47:c9:f0:c7:f8:cd:05:fc:92: ad:09:dc:b4:71:c7:ee:ee:03:66:22:de:0a:fb:d8: 8a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:59:20:89:14:0F:33:85:6F:52:6C:A1:BB:F6:BA:14:99:26:2C:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/168ebb6b-8e6b-3ce8-9635-4fe2245c3b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:39:ba:d4:eb:de:a9:8b:94:67:07:c1:1e:ef:c4:9d:ab:1b: bc:54:6c:5a:3b:fc:2f:de:7b:f3:7b:08:37:69:ac:24:81:2d: b7:8a:a9:e1:c0:bc:40:b7:4e:e7:6b:09:f3:ee:58:8d:c7:64: 63:54:a3:7a:3c:a2:bd:6a:a2:f9:b8:b9:59:4f:f6:df:5a:0e: 9e:61:95:13:8c:4f:68:04:47:70:8b:d4:a5:5a:05:7b:e8:eb: 4a:1f:fb:dd:39:d0:99:eb:d2:47:7c:a5:49:9c:e7:8d:7b:29: 35:c9:fd:34:b4:9a:04:46:08:ad:50:de:85:91:3d:99:93:03: c1:8c:b3:90:28:a0:74:95:49:1c:cc:42:0a:a9:51:16:39:ea: 1a:e3:23:3a:01:88:85:7b:ac:30:41:a9:f0:74:9f:2b:ef:ff: c0:7c:45:7f:57:ae:5d:70:35:59:67:a7:77:cc:80:51:a1:0e: 24:f2:23:23:94:05:b1:ac:a7:1e:9f:0d:12:f8:96:83:b2:63: 06:c0:51:50:db:78:0c:2a:33:82:00:6c:04:8c:59:5d:84:b1: ad:3a:f5:93:82:b1:43:44:7a:7f:ee:21:64:ff:4a:5b:96:1f: 4a:57:0b:ac:f2:8e:b1:2d:2d:9c:ee:1d:b7:f4:6b:3d:c3:89: c4:dc:a5:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdMiiY4da32PzPWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk M2EzZjYxN2ItMDFjYy00MDMzLWFhNzktYTI1MmMxYjBiY2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3aJ1zQQaC0eIyRU+4slaeLjZhTrSl3yDqZB Q/28LtUS9fQ65FM06XGXoAb2wsm3ewthcWgJO2VLV1kx4YSh44AICvS3gl6jQuG0 uw+hK7JyR0XATi4gxAPIe1Kcq0OiAPnGv+SEfYgHjkm40KN7IzbxHXfAoxVMlOxr gLQrZzMwFqmXAMH0rDejBryUObtc1RwyrCXfGdNKb8tPwsLVWGVL38qGZNHg1dIY C6Vvxl0dzyL3RCc5cCYiQhFAWcamrkYP+4W9pzi7e00f/zC/eMH4XvktnYduWD85 mOZanYRuWeqQPGBHyfDH+M0F/JKtCdy0ccfu7gNmIt4K+9iKbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1ZIIkUDzOFb1Jsobv2uhSZJiwWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTY4ZWJiNmItOGU2Yi0z Y2U4LTk2MzUtNGZlMjI0NWMzYjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9pSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIo5utTr3qmLlGcHwR7vxJ2rG7xUbFo7/C/ee/N7CDdprCSBLbeKqeHA vEC3TudrCfPuWI3HZGNUo3o8or1qovm4uVlP9t9aDp5hlROMT2gER3CL1KVaBXvo 60of+9050Jnr0kd8pUmc5417KTXJ/TS0mgRGCK1Q3oWRPZmTA8GMs5AooHSVSRzM QgqpURY56hrjIzoBiIV7rDBBqfB0nyvv/8B8RX9Xrl1wNVlnp3fMgFGhDiTyIyOU BbGspx6fDRL4loOyYwbAUVDbeAwqM4IAbASMWV2Esa069ZOCsUNEen/uIWT/SluW H0pXC6zyjrEtLZzuHbf0az3DicTcpes= -----END CERTIFICATE-----Generated at Thu Mar 26 05:19:59 2026 by rpki-client