$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37f0effb-9d60-3b35-b7a6-9d0754f41ef2.roa File: 37f0effb-9d60-3b35-b7a6-9d0754f41ef2.roa (raw, json) Hash identifier: GJ7KWr7V4rPYi6CLJ6HoWmAuPM8NcbQ/2DUc0EJJAsg= Subject key identifier: 4C:01:D0:84:99:0A:7B:DA:E1:FB:8D:33:D0:94:DC:63:A5:F2:51:9B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1B1A249217525165D9612D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37f0effb-9d60-3b35-b7a6-9d0754f41ef2.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.213.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:24:92:17:52:51:65:d9:61:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=2f0dd5f5-712e-4088-ac9d-76f28c341ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8b:5d:ad:0c:44:cb:18:f4:51:6a:e9:66:e8: cb:fd:86:43:8d:16:5c:5f:28:96:ab:9b:ad:cf:fc: a9:2f:3a:27:7b:8a:b8:0c:1d:67:74:cd:2c:de:36: 09:b7:46:da:66:72:80:73:5a:c2:75:79:aa:cf:9c: 9b:86:89:38:58:09:3b:02:66:c5:0d:5c:77:2a:bc: 22:0e:b7:50:db:09:0d:f2:da:f4:54:af:1b:c1:3f: ef:1a:b2:e2:ee:e0:24:7c:6b:95:cf:2b:11:39:dc: f1:78:d6:22:49:fa:75:47:b5:0c:15:53:6c:1c:d9: d9:d0:6e:d6:d7:3b:ec:b3:2d:37:29:01:8d:2d:77: e1:37:97:9c:92:d4:12:c8:53:b1:f9:8f:4d:d0:d2: 70:6d:b9:50:e0:f9:15:2a:12:2e:90:f7:90:28:71: 54:9c:37:5a:96:19:2d:a3:b7:e7:a8:88:66:8b:4f: 73:d0:22:48:b8:95:ac:3e:15:4b:64:49:40:af:b5: aa:d3:c3:42:50:9f:60:19:5e:42:b2:07:8d:2b:9b: e8:7f:22:09:7e:13:08:81:f2:83:43:31:67:37:5a: 2b:64:ad:b7:29:08:3c:37:56:45:16:9e:b6:d9:82: 9a:e5:7e:a9:18:0f:5b:03:69:74:66:13:a7:c2:2d: e7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:01:D0:84:99:0A:7B:DA:E1:FB:8D:33:D0:94:DC:63:A5:F2:51:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37f0effb-9d60-3b35-b7a6-9d0754f41ef2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:77:b2:26:4c:98:68:f5:22:34:5c:e3:a7:32:b3:d2:ce:49: a4:15:9e:8d:ed:9e:c0:22:b8:92:61:31:ad:15:69:b2:2e:bd: 30:d7:a8:e9:14:5a:66:ef:6d:e7:a8:71:d6:67:c5:02:d9:14: 4f:31:31:63:d9:eb:4d:b0:63:b0:a6:11:38:40:38:a5:2e:cf: 24:d5:e7:88:b2:d3:b7:c4:57:3f:33:4e:ae:1d:07:dc:15:48: a9:0f:b3:db:2f:88:b8:3c:1a:80:98:0b:8d:1a:96:01:c6:78: 0f:72:27:b1:49:04:4c:51:b4:5a:a7:ad:dc:1a:74:20:8d:16: a5:86:63:d1:8e:8b:f3:7f:ac:c3:c1:50:79:e9:a4:42:65:25: a7:54:c7:db:da:70:62:44:81:f5:bd:df:94:a3:b2:f8:ce:52: 41:7f:f3:c3:81:33:c2:5d:15:1b:cd:cf:54:d2:6b:df:66:3f: db:5f:ee:01:58:50:3a:3d:0a:b0:f4:3b:6d:50:2a:f3:b0:79: 4c:01:db:28:d0:f6:41:82:e6:d5:1b:e0:45:8f:c4:ea:4c:61: b1:a2:fe:fb:a8:d1:cf:55:8a:d4:84:4d:7f:8a:6c:0e:a6:24: 15:58:06:4b:62:84:f3:69:20:0e:a1:50:0d:a9:e3:e4:3d:a5: 5e:76:da:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGiSSF1JRZdlhLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MmYwZGQ1ZjUtNzEyZS00MDg4LWFjOWQtNzZmMjhjMzQxZWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4tdrQxEyxj0UWrpZujL/YZDjRZcXyiWq5ut z/ypLzone4q4DB1ndM0s3jYJt0baZnKAc1rCdXmqz5ybhok4WAk7AmbFDVx3Krwi DrdQ2wkN8tr0VK8bwT/vGrLi7uAkfGuVzysROdzxeNYiSfp1R7UMFVNsHNnZ0G7W 1zvssy03KQGNLXfhN5ecktQSyFOx+Y9N0NJwbblQ4PkVKhIukPeQKHFUnDdalhkt o7fnqIhmi09z0CJIuJWsPhVLZElAr7Wq08NCUJ9gGV5CsgeNK5vofyIJfhMIgfKD QzFnN1orZK23KQg8N1ZFFp622YKa5X6pGA9bA2l0ZhOnwi3n/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwB0ISZCnva4fuNM9CU3GOl8lGbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzdmMGVmZmItOWQ2MC0z YjM1LWI3YTYtOWQwNzU0ZjQxZWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9UrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHF3siZMmGj1IjRc46cys9LOSaQVno3tnsAiuJJhMa0VabIuvTDXqOkU WmbvbeeocdZnxQLZFE8xMWPZ602wY7CmEThAOKUuzyTV54iy07fEVz8zTq4dB9wV SKkPs9sviLg8GoCYC40algHGeA9yJ7FJBExRtFqnrdwadCCNFqWGY9GOi/N/rMPB UHnppEJlJadUx9vacGJEgfW935SjsvjOUkF/88OBM8JdFRvNz1TSa99mP9tf7gFY UDo9CrD0O21QKvOweUwB2yjQ9kGC5tUb4EWPxOpMYbGi/vuo0c9VitSETX+KbA6m JBVYBktihPNpIA6hUA2p4+Q9pV522s0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:40:58 2026 by rpki-client