$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4228cd7a-c00f-3d4e-a508-389c70336c42.roa File: 4228cd7a-c00f-3d4e-a508-389c70336c42.roa (raw, json) Hash identifier: EtKI2OxyEheU6V6OPJMOy0nhraEKkV0G1Kfo9P7GiiI= Subject key identifier: 23:F6:B2:7E:3E:1F:75:88:41:C6:1E:51:62:A8:40:CF:98:08:CD:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D8EF9977F276CAB1CD3770BC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4228cd7a-c00f-3d4e-a508-389c70336c42.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 16625 IP address blocks: 23.217.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:97:7f:27:6c:ab:1c:d3:77:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=8c7b4796-f8d4-4dea-9029-e2fe4349346a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:15:80:03:2b:54:b1:ea:b1:2b:65:08:61: 76:84:d2:db:bd:ec:fa:ad:d5:df:ce:66:2b:9b:3d: a8:ee:23:14:2e:bf:50:bd:a1:43:e0:27:4a:6d:c8: df:1b:d6:3e:cc:87:64:b3:89:e5:81:f5:0d:32:21: 2e:a6:91:52:f6:57:9b:3d:c8:93:d2:c2:09:39:20: d2:13:1c:c5:79:7d:2c:8f:37:3f:b7:88:1a:62:9c: df:cd:eb:00:9d:78:51:17:41:86:f9:ca:f3:cf:40: 15:2c:be:65:b6:9b:93:a8:95:34:dc:42:8c:1f:45: 81:6d:11:2e:45:42:4f:9f:42:69:19:e0:4b:58:a6: 37:09:02:e2:14:f6:e7:9d:32:59:f3:33:03:98:4b: 0a:58:de:37:f9:84:3f:41:bf:cb:ec:7b:cd:2b:b4: 70:94:3f:af:15:a3:38:9a:93:97:86:ad:a5:2c:83: 92:82:75:f5:09:45:90:d8:49:6f:0e:53:57:b8:c1: d9:00:06:27:f5:50:35:4c:55:39:a3:99:03:35:14: f0:39:d5:be:d3:09:e4:14:67:a8:a2:50:17:33:86: 58:e7:7c:1f:aa:09:bf:17:83:1f:1d:ce:83:a5:2c: 77:0a:5e:e4:ce:4b:0f:c0:3a:fa:10:7e:5e:6d:97: c2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F6:B2:7E:3E:1F:75:88:41:C6:1E:51:62:A8:40:CF:98:08:CD:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4228cd7a-c00f-3d4e-a508-389c70336c42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b6:bf:9a:b7:a6:6c:9b:41:9f:76:e9:b0:e5:34:48:03:c3: f7:4d:7e:c2:4f:19:b3:87:b4:25:14:85:d5:63:40:eb:2b:91: 63:7d:2b:ab:42:a6:05:ed:5c:7a:9a:f1:4e:b9:ea:ff:4d:c4: 5c:2f:ad:a8:6b:98:6e:6c:a8:c1:77:1c:ea:74:b2:52:87:c4: 1b:77:7f:29:36:12:39:32:b8:20:79:9c:80:a3:55:aa:17:4d: 4c:b4:0b:a3:6d:51:eb:27:cf:32:58:4b:1d:c4:9f:9d:fa:b6: 3d:74:6e:7f:13:d9:4b:f4:57:07:24:39:c5:41:4e:6f:42:46: 08:0d:a7:62:5f:bf:06:fa:9c:da:81:dc:10:f6:5c:1d:04:fd: 05:10:7f:ed:41:f9:21:49:e0:79:b6:d6:d4:15:5a:85:10:d6: 42:58:b4:7b:d9:c5:44:13:78:b9:1f:e1:67:b2:3c:f0:33:3d: 0c:3c:8b:0b:82:09:29:6a:a5:4d:c0:c0:79:f9:4c:88:dc:8d: 1e:05:01:16:a4:1a:00:76:6b:1d:7e:2a:5c:ec:b3:1a:03:6c: 4f:99:58:5e:f3:c4:e6:9c:bd:65:05:ce:5e:6c:2d:67:4f:c3: 87:1d:9a:ed:65:c0:94:ab:19:92:fb:21:ad:9c:72:d2:9c:47: f7:10:ea:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+Zd/J2yrHNN3C8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OGM3YjQ3OTYtZjhkNC00ZGVhLTkwMjktZTJmZTQzNDkzNDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWEVgAMrVLHqsStlCGF2hNLbvez6rdXfzmYr mz2o7iMULr9QvaFD4CdKbcjfG9Y+zIdks4nlgfUNMiEuppFS9lebPciT0sIJOSDS ExzFeX0sjzc/t4gaYpzfzesAnXhRF0GG+crzz0AVLL5ltpuTqJU03EKMH0WBbREu RUJPn0JpGeBLWKY3CQLiFPbnnTJZ8zMDmEsKWN43+YQ/Qb/L7HvNK7RwlD+vFaM4 mpOXhq2lLIOSgnX1CUWQ2ElvDlNXuMHZAAYn9VA1TFU5o5kDNRTwOdW+0wnkFGeo olAXM4ZY53wfqgm/F4MfHc6DpSx3Cl7kzksPwDr6EH5ebZfCSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCP2sn4+H3WIQcYeUWKoQM+YCM3aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDIyOGNkN2EtYzAwZi0z ZDRlLWE1MDgtMzg5YzcwMzM2YzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9lUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADe2v5q3pmybQZ926bDlNEgDw/dNfsJPGbOHtCUUhdVjQOsrkWN9K6tC pgXtXHqa8U656v9NxFwvrahrmG5sqMF3HOp0slKHxBt3fyk2EjkyuCB5nICjVaoX TUy0C6NtUesnzzJYSx3En536tj10bn8T2Uv0VwckOcVBTm9CRggNp2Jfvwb6nNqB 3BD2XB0E/QUQf+1B+SFJ4Hm21tQVWoUQ1kJYtHvZxUQTeLkf4WeyPPAzPQw8iwuC CSlqpU3AwHn5TIjcjR4FARakGgB2ax1+KlzssxoDbE+ZWF7zxOacvWUFzl5sLWdP w4cdmu1lwJSrGZL7Ia2cctKcR/cQ6tI= -----END CERTIFICATE-----Generated at Wed May 13 07:24:05 2026 by rpki-client