$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/243c2121-9527-32f8-8657-ae22867f3928.roa File: 243c2121-9527-32f8-8657-ae22867f3928.roa (raw, json) Hash identifier: C1HgRpywTbUgYMxwHIRtpM2vGbjgyv2pEQd5qZUm6HQ= Subject key identifier: 50:8E:32:0B:FC:EF:0C:38:E4:80:7D:EE:83:5F:84:58:47:0B:17:E4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1F4A32720B3FB3F848D10C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/243c2121-9527-32f8-8657-ae22867f3928.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 16625 IP address blocks: 23.217.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:32:72:0b:3f:b3:f8:48:d1:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=3a105c09-aab0-4ed9-b13c-7291f4669052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3b:7d:b9:79:73:23:98:44:1d:5c:da:c9:46: 46:5f:3a:7b:e9:62:b6:ce:b4:c1:f8:61:e3:a3:7e: 43:55:de:fe:6a:34:41:15:b7:d9:61:70:df:f3:bd: 1f:e1:82:a3:8c:04:b0:f6:8d:de:d7:88:0e:59:e5: f1:45:13:d5:ed:25:a7:4a:42:cc:d7:4d:4c:ce:2e: 27:fe:73:b1:07:ef:31:60:71:d9:32:24:59:0b:03: 21:67:30:a4:71:0e:84:dd:6a:f4:78:c6:28:c3:4e: ac:69:1d:67:58:77:66:2a:d9:6f:82:ce:03:4d:4f: 02:05:a9:15:11:c6:7f:74:c1:14:03:74:75:02:81: 4c:a7:ae:0e:73:e9:da:e1:06:e6:53:1e:e9:a1:0b: 34:6c:46:3e:23:33:6f:ab:ce:b9:4d:9e:79:01:61: dd:51:9d:08:8a:21:ee:a0:cf:b1:3d:ab:b3:60:b1: d5:69:55:a4:c7:91:6e:5c:1a:36:a9:a9:bd:80:46: 54:4a:3e:ec:3b:5a:d3:6c:76:bf:4f:a3:79:72:cd: 68:b7:26:33:f7:20:cf:79:de:55:8a:47:88:f7:ec: 04:58:ae:c2:eb:62:41:63:b2:1d:30:52:d7:a4:66: f3:cb:75:a4:3f:65:77:37:2f:82:b1:7a:e6:d3:43: 7d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8E:32:0B:FC:EF:0C:38:E4:80:7D:EE:83:5F:84:58:47:0B:17:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/243c2121-9527-32f8-8657-ae22867f3928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ba:c4:bf:cb:f4:82:d0:a4:d8:8d:56:dd:33:e5:55:54:2e: 40:f1:d6:13:5f:0e:78:6a:25:ca:25:43:fb:e8:7c:d7:e5:03: b0:31:9e:b4:bf:9b:ce:e7:3a:6c:2d:2d:e2:e0:6d:9e:36:eb: 9c:e2:1c:62:f7:18:18:ac:2b:19:f3:7b:cb:0e:f0:e8:f2:0d: 3e:c2:0f:61:f8:b7:d6:8e:49:0e:05:cb:ee:f7:3a:b4:45:dc: 43:42:6d:06:5e:70:72:32:d7:f1:f3:8c:70:a9:4d:ab:cc:a3: 99:9b:57:12:54:74:a5:7a:e0:50:b5:79:35:82:63:4c:48:38: aa:11:b9:08:ae:01:8f:e2:64:88:dc:16:3b:c8:25:3d:7a:1e: 8f:12:a2:88:a5:ce:56:e3:6e:28:e1:d0:7e:c1:1f:8b:19:cf: 7e:93:79:1d:89:03:76:f8:02:96:1a:5b:de:ef:d4:76:70:bb: 91:32:68:5d:74:87:6b:93:d3:90:ff:94:38:3e:b2:80:de:45: 89:d9:bd:d8:df:18:32:45:b1:87:07:31:35:c2:6d:3f:31:90: 77:28:7f:8a:df:24:7e:5a:5b:23:6f:e9:cc:89:96:f7:af:62: 9c:a3:9c:33:9a:25:8e:3f:2c:84:25:2f:4d:94:e1:ec:7e:b7: 9d:58:59:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSjJyCz+z+EjRDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk M2ExMDVjMDktYWFiMC00ZWQ5LWIxM2MtNzI5MWY0NjY5MDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijt9uXlzI5hEHVzayUZGXzp76WK2zrTB+GHj o35DVd7+ajRBFbfZYXDf870f4YKjjASw9o3e14gOWeXxRRPV7SWnSkLM101Mzi4n /nOxB+8xYHHZMiRZCwMhZzCkcQ6E3Wr0eMYow06saR1nWHdmKtlvgs4DTU8CBakV EcZ/dMEUA3R1AoFMp64Oc+na4QbmUx7poQs0bEY+IzNvq865TZ55AWHdUZ0IiiHu oM+xPauzYLHVaVWkx5FuXBo2qam9gEZUSj7sO1rTbHa/T6N5cs1otyYz9yDPed5V ikeI9+wEWK7C62JBY7IdMFLXpGbzy3WkP2V3Ny+CsXrm00N90wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCOMgv87ww45IB97oNfhFhHCxfkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjQzYzIxMjEtOTUyNy0z MmY4LTg2NTctYWUyMjg2N2YzOTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9lwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGO6xL/L9ILQpNiNVt0z5VVULkDx1hNfDnhqJcolQ/vofNflA7AxnrS/ m87nOmwtLeLgbZ4265ziHGL3GBisKxnze8sO8OjyDT7CD2H4t9aOSQ4Fy+73OrRF 3ENCbQZecHIy1/HzjHCpTavMo5mbVxJUdKV64FC1eTWCY0xIOKoRuQiuAY/iZIjc FjvIJT16Ho8Sooilzlbjbijh0H7BH4sZz36TeR2JA3b4ApYaW97v1HZwu5EyaF10 h2uT05D/lDg+soDeRYnZvdjfGDJFsYcHMTXCbT8xkHcof4rfJH5aWyNv6cyJlvev YpyjnDOaJY4/LIQlL02U4ex+t51YWZ8= -----END CERTIFICATE-----Generated at Thu Mar 26 17:35:07 2026 by rpki-client