$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd8a47c-7f66-31ca-ae8b-78a2595b8ec1.roa File: 1dd8a47c-7f66-31ca-ae8b-78a2595b8ec1.roa (raw, json) Hash identifier: 7ndTRB7zPbFc4txmNjOnleobvSL4XwkuKk0wRLcA+t8= Subject key identifier: 7D:E5:69:5D:7C:3A:04:BA:42:1B:4F:0D:21:38:93:67:9F:60:5C:24 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D19B4BE29F29F1D9C9606B480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd8a47c-7f66-31ca-ae8b-78a2595b8ec1.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 16625 IP address blocks: 23.204.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:be:29:f2:9f:1d:9c:96:06:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=71f61e78-4d67-45cd-84d0-c1afe66cd9de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9d:3f:3a:c3:3f:47:11:fb:f9:d5:ef:b2:f3: 97:c7:b4:3e:4d:1c:90:45:57:83:8c:8f:bf:98:b4: 21:2b:d3:cf:8e:da:48:53:6d:ee:0a:bb:42:0e:37: ac:b6:6a:3e:cf:8f:aa:cb:43:ad:32:90:2b:ec:9b: 25:c2:bf:4f:35:fd:4b:9a:08:7e:81:cd:b1:48:44: 70:ae:35:0a:dd:20:5f:4f:72:7a:83:e1:6d:6f:68: ba:aa:ec:63:98:fc:a2:00:10:53:50:24:7f:4d:88: 67:02:20:cf:b8:50:d8:32:21:c3:51:e5:3f:9a:d6: bb:37:e8:d1:0d:95:5e:b9:3a:74:24:5b:07:7e:e7: 3e:0c:36:1e:d6:0a:63:d3:de:b0:14:fa:96:d7:16: 75:40:9c:c5:af:e7:49:d6:b5:91:30:5b:ca:75:63: 37:2c:eb:45:33:0d:d0:b1:39:0e:6e:d0:5e:e3:35: c6:8d:71:b9:44:b1:9f:e6:76:cf:c8:ae:b7:16:87: 00:7e:18:b8:13:0f:87:7f:cc:14:d5:ef:36:d6:dc: 3c:99:d1:1d:f4:6b:4f:14:3d:2b:30:c9:59:e7:86: 64:07:00:35:75:35:69:4f:cf:c3:85:f7:d2:43:00: fd:f5:b1:c4:06:49:61:98:b3:86:1c:64:89:91:44: 30:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E5:69:5D:7C:3A:04:BA:42:1B:4F:0D:21:38:93:67:9F:60:5C:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd8a47c-7f66-31ca-ae8b-78a2595b8ec1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:9a:84:bc:93:73:ae:d3:be:8b:7e:ab:e9:66:e5:ef:a2:63: 6e:3b:25:88:c9:ca:95:a4:da:1c:aa:05:40:c3:97:79:e8:8d: cd:4e:f8:a6:46:62:51:b3:3f:41:af:aa:14:6a:7d:29:59:e7: 81:c5:18:9f:4e:88:53:1e:18:dd:e8:d7:7e:01:b1:48:7b:53: c5:dd:53:16:57:68:43:e0:8d:a1:bb:04:d4:52:a2:a3:36:a6: c6:3a:db:8e:46:e9:c1:61:e8:70:8d:b9:af:8f:21:d1:a5:bf: 2e:23:70:e7:ba:08:56:3a:3b:50:a0:a5:bc:0b:5b:df:c8:1b: a0:08:31:b5:d4:71:a0:8f:79:07:ad:04:5e:65:33:62:98:dc: d3:e4:b8:0a:bb:65:d3:a0:12:59:5c:44:3e:71:51:5b:cb:89: 60:22:72:6d:f5:de:c9:61:3b:bd:3a:23:b1:bf:57:d2:a4:dc: 07:fe:71:ac:86:6b:c9:d4:d7:98:6f:b4:92:0e:a8:80:f0:47: 11:0a:ec:9d:c7:eb:31:51:9d:36:e7:c9:ae:56:46:52:e4:ad: 5d:7a:73:7d:19:e2:f5:79:c1:b4:ea:cb:d2:79:66:7d:4b:4a: a9:70:e4:8f:28:e0:de:9c:a3:52:fc:a5:0b:39:30:ec:5d:2b: dc:5d:04:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtL4p8p8dnJYGtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NzFmNjFlNzgtNGQ2Ny00NWNkLTg0ZDAtYzFhZmU2NmNkOWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp0/OsM/RxH7+dXvsvOXx7Q+TRyQRVeDjI+/ mLQhK9PPjtpIU23uCrtCDjestmo+z4+qy0OtMpAr7Jslwr9PNf1Lmgh+gc2xSERw rjUK3SBfT3J6g+Ftb2i6quxjmPyiABBTUCR/TYhnAiDPuFDYMiHDUeU/mta7N+jR DZVeuTp0JFsHfuc+DDYe1gpj096wFPqW1xZ1QJzFr+dJ1rWRMFvKdWM3LOtFMw3Q sTkObtBe4zXGjXG5RLGf5nbPyK63FocAfhi4Ew+Hf8wU1e821tw8mdEd9GtPFD0r MMlZ54ZkBwA1dTVpT8/DhffSQwD99bHEBklhmLOGHGSJkUQwFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3laV18OgS6QhtPDSE4k2efYFwkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWRkOGE0N2MtN2Y2Ni0z MWNhLWFlOGItNzhhMjU5NWI4ZWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8ycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeahLyTc67Tvot+q+lm5e+iY247JYjJypWk2hyqBUDDl3nojc1O+KZG YlGzP0GvqhRqfSlZ54HFGJ9OiFMeGN3o134BsUh7U8XdUxZXaEPgjaG7BNRSoqM2 psY6245G6cFh6HCNua+PIdGlvy4jcOe6CFY6O1CgpbwLW9/IG6AIMbXUcaCPeQet BF5lM2KY3NPkuAq7ZdOgEllcRD5xUVvLiWAicm313slhO706I7G/V9Kk3Af+cayG a8nU15hvtJIOqIDwRxEK7J3H6zFRnTbnya5WRlLkrV16c30Z4vV5wbTqy9J5Zn1L Sqlw5I8o4N6co1L8pQs5MOxdK9xdBNw= -----END CERTIFICATE-----Generated at Thu Mar 26 03:43:29 2026 by rpki-client