$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a880be6-e645-31c7-8f83-82e6e241d53b.roa File: 3a880be6-e645-31c7-8f83-82e6e241d53b.roa (raw, json) Hash identifier: zVx8a7uYgK9sVbPr+baKS6yDlDa/+nS4DZZanjoe8Og= Subject key identifier: 8F:32:9D:15:65:65:29:D4:27:E4:82:FA:10:F4:68:48:EF:2D:D3:8A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1F4A2B737004F8F8BA48A1A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a880be6-e645-31c7-8f83-82e6e241d53b.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.217.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:2b:73:70:04:f8:f8:ba:48:a1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=7e002fcd-bf33-49a5-be61-18567960062a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:08:9d:36:64:4b:7f:4b:ea:34:2f:95:23:c3: 8c:dc:ea:b2:a3:a5:d8:68:78:cc:db:42:ba:2a:62: 28:28:4e:36:26:e5:0d:b7:b2:6c:96:01:d8:9b:0b: 9a:b4:c5:ff:84:6d:d3:12:b3:87:56:55:f9:32:43: d3:64:a1:41:b2:bc:46:aa:4d:11:95:e1:ca:69:5e: dd:69:fb:54:38:53:06:83:26:9e:9a:8d:a5:04:13: dc:7f:9e:9a:85:4e:17:3e:7b:85:36:bf:20:12:5c: f5:b7:7c:d5:7e:4c:15:77:87:d9:cf:54:26:fc:7e: ad:f0:5a:d5:30:77:16:3b:f1:e8:41:c8:4a:ae:48: 96:d3:1a:91:cc:5c:b3:51:3e:88:18:38:4f:86:70: a1:c0:35:2f:d0:7b:57:40:5f:4d:6f:84:53:99:94: 30:eb:33:06:00:ff:2a:78:d3:1e:4b:58:37:19:97: a4:ab:a3:8d:0f:f7:1d:09:07:ca:c6:ab:1e:ac:8c: 8b:cc:da:00:ca:a3:c9:74:c2:af:12:ba:c5:3e:c6: 30:63:cf:18:a6:70:8c:8c:31:5b:47:57:17:04:a8: 91:31:26:90:93:9c:ef:aa:8d:d8:0d:ae:7d:50:f5: bf:2c:83:d6:c8:28:2a:08:aa:22:95:49:a3:c3:c7: 47:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:32:9D:15:65:65:29:D4:27:E4:82:FA:10:F4:68:48:EF:2D:D3:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a880be6-e645-31c7-8f83-82e6e241d53b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:5b:b7:b1:77:97:86:a6:df:fc:e0:b7:6e:a6:9f:be:94:58: 60:f2:70:21:84:61:a0:31:3a:c7:0d:92:54:8a:8a:a7:df:6e: 4e:70:1e:dc:1b:2f:43:9a:49:2a:46:1d:e2:58:8a:21:ba:b0: d1:04:ab:fa:4f:50:67:79:dd:80:ff:54:a2:81:0f:f1:d9:e4: 24:56:33:55:2a:eb:14:70:9b:c0:98:30:78:98:ef:89:6c:4b: af:8e:0c:7c:8a:37:60:f9:4e:8c:43:57:de:62:bb:32:d5:ce: 4b:57:c1:2b:47:22:0a:e3:82:7b:56:91:ed:4d:e4:75:52:22: 74:30:f8:ff:24:c1:8a:39:57:f3:70:13:5d:9b:14:25:0c:b8: 31:96:46:f6:0b:3a:9f:13:bf:a9:c6:d0:11:a8:3b:d8:c9:45: 9a:ae:68:d5:de:0d:95:15:3d:18:a3:57:b1:42:6a:93:4f:b3: 98:4e:be:1f:50:61:75:be:aa:80:ad:0b:60:51:d4:27:b2:29: ea:60:fb:8f:98:82:42:ff:60:09:a5:9e:ba:ac:e8:05:02:14: 1f:d3:57:bd:43:bc:c2:a1:82:8e:11:21:50:10:df:0a:da:66: 0d:18:01:d6:71:7d:ed:76:a9:19:fd:42:c8:66:30:46:ca:b7: 23:1f:c9:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSitzcAT4+LpIoaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk N2UwMDJmY2QtYmYzMy00OWE1LWJlNjEtMTg1Njc5NjAwNjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAidNmRLf0vqNC+VI8OM3Oqyo6XYaHjM20K6 KmIoKE42JuUNt7JslgHYmwuatMX/hG3TErOHVlX5MkPTZKFBsrxGqk0RleHKaV7d aftUOFMGgyaemo2lBBPcf56ahU4XPnuFNr8gElz1t3zVfkwVd4fZz1Qm/H6t8FrV MHcWO/HoQchKrkiW0xqRzFyzUT6IGDhPhnChwDUv0HtXQF9Nb4RTmZQw6zMGAP8q eNMeS1g3GZekq6OND/cdCQfKxqserIyLzNoAyqPJdMKvErrFPsYwY88YpnCMjDFb R1cXBKiRMSaQk5zvqo3YDa59UPW/LIPWyCgqCKoilUmjw8dHuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8ynRVlZSnUJ+SC+hD0aEjvLdOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2E4ODBiZTYtZTY0NS0z MWM3LThmODMtODJlNmUyNDFkNTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9lgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1bt7F3l4am3/zgt26mn76UWGDycCGEYaAxOscNklSKiqffbk5wHtwb L0OaSSpGHeJYiiG6sNEEq/pPUGd53YD/VKKBD/HZ5CRWM1Uq6xRwm8CYMHiY74ls S6+ODHyKN2D5ToxDV95iuzLVzktXwStHIgrjgntWke1N5HVSInQw+P8kwYo5V/Nw E12bFCUMuDGWRvYLOp8Tv6nG0BGoO9jJRZquaNXeDZUVPRijV7FCapNPs5hOvh9Q YXW+qoCtC2BR1CeyKepg+4+YgkL/YAmlnrqs6AUCFB/TV71DvMKhgo4RIVAQ3wra Zg0YAdZxfe12qRn9QshmMEbKtyMfySM= -----END CERTIFICATE-----Generated at Thu Mar 26 03:44:48 2026 by rpki-client