$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4311bd16-b1c9-322d-9c2c-438bb2482f67.roa File: 4311bd16-b1c9-322d-9c2c-438bb2482f67.roa (raw, json) Hash identifier: gWF2IrYxjdJmeoX35SHG3RKSjDFj4OfoBF6+Y30bmac= Subject key identifier: 19:35:9F:63:F6:9E:09:60:A2:98:FD:4A:C5:25:0A:D8:19:6E:EF:46 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2A74CC3942E54C4617BB6F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4311bd16-b1c9-322d-9c2c-438bb2482f67.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 20940 IP address blocks: 23.219.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:cc:39:42:e5:4c:46:17:bb:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=40cf31ff-4dbd-4db8-9cdc-3805de2ed6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3d:95:15:ad:da:be:e1:11:d5:ab:77:f2:8a: 42:c5:5c:67:75:b0:a7:03:59:9e:74:44:ed:77:53: 6a:71:75:c4:81:89:db:f1:bb:08:f7:82:48:8b:29: 04:2f:77:1e:ea:ba:fd:1d:bf:46:ab:d5:9a:6f:20: 49:e6:5d:af:eb:bf:54:95:09:ca:b7:9d:c6:c2:a7: 46:4e:7f:0f:b2:e6:11:de:1b:cd:b5:ca:da:ab:17: e9:3f:c5:2b:03:8c:0f:f4:5d:c6:ba:5c:bc:21:26: 4c:8a:81:e9:9c:59:57:be:b9:01:2f:be:da:e1:10: 92:80:c0:a7:a7:f3:4a:1a:21:be:33:7a:8f:bf:d4: e9:04:c2:7c:a6:83:d2:f3:49:41:76:33:3f:9d:ca: 58:e0:f6:50:10:e1:84:10:4b:9c:7d:e8:62:e9:cf: a6:92:e1:bd:38:05:01:c8:29:82:c3:8d:80:8d:fa: 05:7a:5b:b5:d3:ab:c5:24:13:46:25:d4:ea:8e:fb: 01:70:83:e6:01:4c:99:b1:f8:2b:e6:ce:05:29:97: 10:fe:e9:ea:ec:8a:ca:93:c1:29:7a:65:1c:5c:28: 1e:e2:ce:24:d9:a1:60:37:35:67:9d:58:73:c8:42: 69:1d:cb:e3:be:e2:36:e2:57:01:58:b2:4a:1f:74: a6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:35:9F:63:F6:9E:09:60:A2:98:FD:4A:C5:25:0A:D8:19:6E:EF:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4311bd16-b1c9-322d-9c2c-438bb2482f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ae:e5:e7:28:83:8c:e9:27:26:ee:76:30:3c:91:0c:13:df: 32:80:f8:04:09:47:89:b5:e4:0e:9b:39:fd:31:fc:46:40:1f: cc:f0:c1:de:01:5d:b3:76:ad:84:2a:28:ca:40:96:01:85:ab: c8:2d:e8:ee:38:24:c9:24:14:3a:23:33:1b:e7:2f:fc:3d:78: d6:26:58:56:43:7f:1f:61:93:e4:be:ef:b6:fe:a0:04:a2:b5: f0:9c:14:04:ed:2d:7a:ad:e1:3f:34:32:14:0c:11:b4:4b:ad: b7:00:4c:ea:7d:f1:e4:17:5a:ab:39:09:f4:4e:75:9e:49:2f: b7:17:27:90:98:4c:97:b2:8d:2c:76:cd:9d:7b:26:a8:a4:92: e4:9f:bb:7a:ae:f2:32:ba:75:81:8e:60:e9:22:58:8e:a9:48: 7a:1d:a2:f3:02:81:17:a7:bb:4f:f3:a4:fc:73:8b:f5:f6:86: ee:69:0f:b9:3e:6d:03:50:18:e2:ed:f0:46:46:f5:19:1f:27: 56:0b:18:86:c4:13:96:72:06:6d:c8:1f:25:55:0f:1b:29:aa: 11:27:d4:90:80:64:73:73:77:de:dc:2b:1b:d2:d0:09:d0:0a: 01:82:72:aa:ef:3d:77:25:1b:ea:08:8f:6d:ee:e8:74:1f:d7: b0:35:8d:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdMw5QuVMRhe7b4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NDBjZjMxZmYtNGRiZC00ZGI4LTljZGMtMzgwNWRlMmVkNmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgj2VFa3avuER1at38opCxVxndbCnA1medETt d1NqcXXEgYnb8bsI94JIiykEL3ce6rr9Hb9Gq9WabyBJ5l2v679UlQnKt53GwqdG Tn8PsuYR3hvNtcraqxfpP8UrA4wP9F3Guly8ISZMioHpnFlXvrkBL77a4RCSgMCn p/NKGiG+M3qPv9TpBMJ8poPS80lBdjM/ncpY4PZQEOGEEEucfehi6c+mkuG9OAUB yCmCw42AjfoFelu106vFJBNGJdTqjvsBcIPmAUyZsfgr5s4FKZcQ/unq7IrKk8Ep emUcXCge4s4k2aFgNzVnnVhzyEJpHcvjvuI24lcBWLJKH3SmLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBk1n2P2nglgopj9SsUlCtgZbu9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDMxMWJkMTYtYjFjOS0z MjJkLTljMmMtNDM4YmIyNDgyZjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9smMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqu5ecog4zpJybudjA8kQwT3zKA+AQJR4m15A6bOf0x/EZAH8zwwd4B XbN2rYQqKMpAlgGFq8gt6O44JMkkFDojMxvnL/w9eNYmWFZDfx9hk+S+77b+oASi tfCcFATtLXqt4T80MhQMEbRLrbcATOp98eQXWqs5CfROdZ5JL7cXJ5CYTJeyjSx2 zZ17JqikkuSfu3qu8jK6dYGOYOkiWI6pSHodovMCgRenu0/zpPxzi/X2hu5pD7k+ bQNQGOLt8EZG9RkfJ1YLGIbEE5ZyBm3IHyVVDxspqhEn1JCAZHNzd97cKxvS0AnQ CgGCcqrvPXclG+oIj23u6HQf17A1jZw= -----END CERTIFICATE-----Generated at Thu Mar 26 05:23:12 2026 by rpki-client