$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c798600-596d-3e77-bb5e-d24d01e64ba3.roa File: 3c798600-596d-3e77-bb5e-d24d01e64ba3.roa (raw, json) Hash identifier: dJR1spo2z9EQVz0/BKyF6K0Qw6qXewfoOVvccRvqtoU= Subject key identifier: 28:E8:36:E0:47:0D:AB:68:BE:F2:8A:4A:E0:66:78:83:C6:AF:EF:29 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1B1A580F473F26F518354900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c798600-596d-3e77-bb5e-d24d01e64ba3.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 16625 IP address blocks: 23.211.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:58:0f:47:3f:26:f5:18:35:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=04294055-070a-45fb-ad64-6d406a4f7c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:02:79:bf:d3:6a:f2:49:e2:ff:43:ca:7e:9a: 5e:96:e3:13:f7:e0:a8:ed:2d:ab:13:65:ce:9e:ae: ac:36:b2:99:1b:e7:2b:f2:fe:77:c1:b9:dc:05:da: 42:a2:f9:33:4a:11:5b:ca:0b:42:45:de:3b:32:ac: 80:9b:fc:9b:b7:ab:1d:a0:30:de:67:84:4a:97:1d: c3:3f:8f:a3:2c:78:f1:30:7a:11:bf:a6:a1:4e:00: 65:57:5d:f2:ce:61:2b:86:8f:3d:ac:08:23:31:f1: 9b:6a:f1:83:0c:dd:6a:97:12:ac:4d:94:d6:39:c0: cd:35:a1:ed:fa:20:55:a8:13:b5:f4:a2:1b:7b:c1: c8:0a:ef:14:d6:44:04:35:d6:56:66:f8:b2:c1:64: ef:cf:87:8b:b3:1a:9a:92:ff:74:f7:db:92:e3:06: e0:79:5d:ae:60:0f:0c:66:1f:c3:cc:88:dc:9d:c4: 1a:be:37:66:a4:dd:78:85:34:d5:2a:1e:5e:32:39: ef:33:a5:4b:d1:78:e9:1b:f0:dc:62:87:e0:52:31: f6:b4:96:b6:5b:ae:4b:eb:4e:3c:87:d9:0a:14:1e: 15:34:29:ad:67:0f:5c:bb:8c:04:c4:87:3f:fe:0e: f0:eb:43:fa:24:eb:1c:14:7e:e3:b6:2f:24:6c:df: 30:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E8:36:E0:47:0D:AB:68:BE:F2:8A:4A:E0:66:78:83:C6:AF:EF:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c798600-596d-3e77-bb5e-d24d01e64ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:aa:07:a2:b6:d6:5e:35:17:a6:33:1c:6f:fc:3e:c1:aa:61: 00:d7:f9:58:e8:f2:18:1c:b6:a9:58:a2:b0:7d:97:ce:ad:cf: d1:26:8e:2b:20:47:46:fe:1c:c8:31:36:8f:6c:f1:30:a7:08: 27:cc:12:81:9b:61:d2:29:34:88:99:65:5c:46:28:81:c9:11: 53:98:0b:2d:3b:a4:67:3e:b9:34:8f:7b:b4:ee:03:ba:5a:d5: 40:92:2c:ae:ed:73:6e:6d:18:91:55:a0:bc:28:9e:fe:fc:0f: cf:0b:56:2e:ca:9e:ca:4e:76:ae:dd:ef:5c:7e:3e:8e:92:84: 2d:c6:36:e2:3e:d3:4b:17:a7:0d:ef:99:9c:68:67:15:eb:74: 89:f7:0d:05:85:9f:22:98:ee:8a:93:0c:70:cc:f9:55:fe:fc: ce:55:c6:9f:97:8a:c2:1f:e5:5b:6e:31:b9:0c:79:ed:89:a3: 8d:e7:ef:40:62:e8:e3:da:1f:0c:fb:fc:88:76:31:ac:f7:a6: 7e:ad:24:c8:d0:b6:4b:4b:87:b1:35:e6:5d:ce:79:a4:10:a7: 59:9f:a4:f8:cd:81:bb:5d:7d:e5:e9:ac:65:06:1a:37:40:5d: 30:69:ff:f0:e3:63:b8:9d:45:c5:0d:7c:1a:9a:fc:e4:20:f1: 85:8d:ba:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGlgPRz8m9Rg1SQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MDQyOTQwNTUtMDcwYS00NWZiLWFkNjQtNmQ0MDZhNGY3YzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgJ5v9Nq8kni/0PKfppeluMT9+Co7S2rE2XO nq6sNrKZG+cr8v53wbncBdpCovkzShFbygtCRd47MqyAm/ybt6sdoDDeZ4RKlx3D P4+jLHjxMHoRv6ahTgBlV13yzmErho89rAgjMfGbavGDDN1qlxKsTZTWOcDNNaHt +iBVqBO19KIbe8HICu8U1kQENdZWZviywWTvz4eLsxqakv9099uS4wbgeV2uYA8M Zh/DzIjcncQavjdmpN14hTTVKh5eMjnvM6VL0XjpG/DcYofgUjH2tJa2W65L6048 h9kKFB4VNCmtZw9cu4wExIc//g7w60P6JOscFH7jti8kbN8wGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjoNuBHDatovvKKSuBmeIPGr+8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2M3OTg2MDAtNTk2ZC0z ZTc3LWJiNWUtZDI0ZDAxZTY0YmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9MQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWqB6K21l41F6YzHG/8PsGqYQDX+Vjo8hgctqlYorB9l86tz9Emjisg R0b+HMgxNo9s8TCnCCfMEoGbYdIpNIiZZVxGKIHJEVOYCy07pGc+uTSPe7TuA7pa 1UCSLK7tc25tGJFVoLwonv78D88LVi7KnspOdq7d71x+Po6ShC3GNuI+00sXpw3v mZxoZxXrdIn3DQWFnyKY7oqTDHDM+VX+/M5Vxp+XisIf5VtuMbkMee2Jo43n70Bi 6OPaHwz7/Ih2Maz3pn6tJMjQtktLh7E15l3OeaQQp1mfpPjNgbtdfeXprGUGGjdA XTBp//DjY7idRcUNfBqa/OQg8YWNurk= -----END CERTIFICATE-----Generated at Thu Mar 26 15:01:38 2026 by rpki-client