$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c8fdb4e-39d5-3695-901e-1bc94cba2723.roa File: 4c8fdb4e-39d5-3695-901e-1bc94cba2723.roa (raw, json) Hash identifier: yZYda+eYCzDPquJQO4YP6/BXVxO0ZHN5c5h1dRabZgM= Subject key identifier: 2A:35:87:0A:F7:0C:0E:7F:F1:FF:9C:6D:73:7D:22:69:C5:12:1D:BD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D300A7E8BCCE743278E9398C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c8fdb4e-39d5-3695-901e-1bc94cba2723.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 20940 IP address blocks: 23.213.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:7e:8b:cc:e7:43:27:8e:93:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=84274d22-4fb9-40c5-a187-515197638eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e7:0b:5f:3c:d3:6a:94:05:e9:37:cd:17:4d: 2b:9a:7d:8f:ed:19:f1:1c:80:e0:77:12:0e:c5:32: 18:c9:6f:26:c3:f1:4d:ae:bf:9f:e4:1d:96:0a:b8: f2:0e:ad:14:b2:d0:80:e8:0b:a5:ab:85:ce:31:69: f2:49:ae:43:f8:93:c9:08:cc:b7:62:b6:2a:5b:ab: a1:c4:28:ca:bf:ea:37:2b:18:82:f2:81:90:86:83: ee:27:e9:51:bd:e5:71:95:9f:b1:b3:13:f4:74:38: 12:97:59:1e:48:c5:8d:6c:40:53:72:52:29:bb:73: d3:c3:b5:7a:9f:78:d2:90:0f:71:12:cb:c0:13:c9: 55:80:f2:c5:fd:3d:4d:5d:f2:c0:36:e7:02:80:be: a7:62:5f:52:f5:8d:e4:08:8b:48:88:0a:e6:63:cf: ca:f4:be:43:aa:05:25:0e:ff:9a:7c:f2:d0:b2:d9: c6:12:2c:cf:09:f1:44:e8:43:2e:06:8f:d7:34:46: fa:f0:18:9b:89:5a:f7:c6:b2:95:cc:2f:8f:b4:67: 01:4f:a9:bf:4e:98:42:7c:76:20:cb:b5:90:5c:9f: c6:4b:6e:97:a5:8b:8a:ba:08:e8:29:18:57:07:f2: dd:07:1f:90:fc:53:eb:f1:98:da:4a:62:7b:90:18: 8e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:35:87:0A:F7:0C:0E:7F:F1:FF:9C:6D:73:7D:22:69:C5:12:1D:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c8fdb4e-39d5-3695-901e-1bc94cba2723.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:25:20:63:95:32:3c:57:f3:6a:65:78:43:7a:93:cd:8c:69: 6b:65:d4:79:33:f8:a8:9f:97:41:a2:01:c4:5d:6f:18:4a:62: 0d:53:08:10:d8:ba:f0:33:e7:24:86:00:76:56:9f:8a:fd:3a: 7b:76:4e:1c:a0:9b:94:8f:a8:2b:72:79:c6:39:80:c1:78:92: ad:fd:bd:df:7a:23:a1:cc:18:33:a8:f9:7c:11:bd:49:35:44: 2f:af:48:ab:07:0d:e2:c4:0f:52:47:b2:58:99:87:70:77:a0: d3:7b:0d:e2:d7:0e:56:42:f5:98:26:0c:78:f7:4a:b5:98:63: e6:37:5f:a4:17:b9:a8:73:73:f4:37:f7:46:2d:b6:a7:ca:56: 96:cd:40:57:42:01:90:a1:da:4c:96:8c:77:ac:7b:8d:f4:f1: ad:7e:98:d7:67:87:4f:99:33:c6:56:d5:50:b9:1e:0b:37:b7: 07:88:fb:05:99:9f:c2:1c:25:cc:be:2d:c9:85:71:61:7b:2a: 5a:c5:17:a4:04:ae:d7:b4:7c:d7:c9:db:7a:18:23:1f:d0:92: 82:5f:05:e5:c2:5e:6e:9f:d3:a4:a9:46:b7:58:c8:53:10:38: a3:fa:f5:b7:9a:0a:b6:02:b4:eb:01:f5:9f:cd:dc:6c:49:65: bd:38:97:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCn6LzOdDJ46TmMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ODQyNzRkMjItNGZiOS00MGM1LWExODctNTE1MTk3NjM4ZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+cLXzzTapQF6TfNF00rmn2P7RnxHIDgdxIO xTIYyW8mw/FNrr+f5B2WCrjyDq0UstCA6Aulq4XOMWnySa5D+JPJCMy3YrYqW6uh xCjKv+o3KxiC8oGQhoPuJ+lRveVxlZ+xsxP0dDgSl1keSMWNbEBTclIpu3PTw7V6 n3jSkA9xEsvAE8lVgPLF/T1NXfLANucCgL6nYl9S9Y3kCItIiArmY8/K9L5DqgUl Dv+afPLQstnGEizPCfFE6EMuBo/XNEb68BibiVr3xrKVzC+PtGcBT6m/TphCfHYg y7WQXJ/GS26XpYuKugjoKRhXB/LdBx+Q/FPr8ZjaSmJ7kBiOAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo1hwr3DA5/8f+cbXN9ImnFEh29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGM4ZmRiNGUtMzlkNS0z Njk1LTkwMWUtMWJjOTRjYmEyNzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9XyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUlIGOVMjxX82pleEN6k82MaWtl1Hkz+Kifl0GiAcRdbxhKYg1TCBDY uvAz5ySGAHZWn4r9Ont2Thygm5SPqCtyecY5gMF4kq39vd96I6HMGDOo+XwRvUk1 RC+vSKsHDeLED1JHsliZh3B3oNN7DeLXDlZC9ZgmDHj3SrWYY+Y3X6QXuahzc/Q3 90YttqfKVpbNQFdCAZCh2kyWjHese4308a1+mNdnh0+ZM8ZW1VC5Hgs3tweI+wWZ n8IcJcy+LcmFcWF7KlrFF6QErte0fNfJ23oYIx/QkoJfBeXCXm6f06SpRrdYyFMQ OKP69beaCrYCtOsB9Z/N3GxJZb04l9o= -----END CERTIFICATE-----Generated at Thu Mar 26 03:41:47 2026 by rpki-client