$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4eb50dfa-f6f3-3d8e-a4b6-279a124f68a6.roa File: 4eb50dfa-f6f3-3d8e-a4b6-279a124f68a6.roa (raw, json) Hash identifier: 2h7a8qPtUCNcVXr98nA9fbn299JLwvLj0XTDsQ6YB4s= Subject key identifier: DE:EB:EE:E4:C3:FC:03:C3:8A:B3:24:1D:4D:BD:FD:B6:F0:8B:FF:06 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2BDA328E68527D31338AE208 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4eb50dfa-f6f3-3d8e-a4b6-279a124f68a6.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.221.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:32:8e:68:52:7d:31:33:8a:e2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=06f8cd0c-547e-4619-8a0d-b3c051c7a63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3b:9b:cb:6c:c4:70:c8:50:45:eb:79:26:cf: a9:9b:60:a4:ad:d6:4a:85:ae:f6:5e:0a:df:75:11: 4a:a1:22:f1:b0:99:c1:6b:28:0f:ce:ce:0c:43:ee: 3b:af:62:8d:f9:9e:1f:78:b6:fe:ca:a9:db:82:d0: 99:ca:17:d7:11:e8:f7:d4:be:08:f7:f8:ad:e4:07: 6c:db:16:ba:32:8a:a3:66:59:5e:ae:d4:df:76:86: a3:ed:2e:4f:4c:2f:af:fb:7b:8d:60:58:43:0a:e7: c9:08:0c:b7:b6:b6:31:f1:d0:52:08:d9:2d:5e:eb: 81:4c:63:ed:dd:0c:6b:eb:4f:a2:2c:55:54:e3:de: e1:5c:b8:05:5b:97:78:e7:51:28:1a:33:f2:6e:db: 86:7f:c5:cc:0b:30:97:0d:e1:7c:06:37:23:21:9a: 9b:1f:36:53:33:9c:fa:53:b7:89:66:14:60:a8:7b: 8f:d5:a1:6e:09:84:c5:fc:df:35:7e:ef:2b:09:fb: bf:1e:3a:ea:8e:e4:67:89:d1:78:d1:b3:95:20:d5: 82:83:cb:c9:c9:c6:c1:49:c6:98:67:7f:65:a0:23: c2:95:02:65:b3:74:eb:a8:dd:7d:9f:ce:ce:49:56: 8d:dd:15:6b:8e:ec:20:c4:09:07:53:00:4c:b4:9a: e7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EB:EE:E4:C3:FC:03:C3:8A:B3:24:1D:4D:BD:FD:B6:F0:8B:FF:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4eb50dfa-f6f3-3d8e-a4b6-279a124f68a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:50:d7:d4:0a:4c:c9:cd:25:25:43:fa:2f:19:88:61:d4:66: e9:8e:1b:2f:1b:7a:b2:17:e2:9f:98:74:2b:7f:e7:62:5a:be: f0:72:d7:43:19:61:f9:6f:3d:be:ab:35:3b:b9:8b:09:d8:61: 0d:02:ed:18:0c:09:da:ce:8b:26:7a:5b:23:b4:9d:80:c6:9d: 1a:2d:05:e7:d7:74:26:9f:b2:9a:97:d5:63:29:85:d5:6d:c8: ba:ce:64:66:f5:c5:1a:31:c8:0a:08:96:d7:2b:e8:ae:0d:8c: d1:cc:84:03:60:98:98:47:1c:7f:d6:aa:e9:f3:6d:2b:51:ee: b2:38:58:03:47:a5:ec:da:f9:28:1d:6a:9a:bb:2e:49:48:91: 92:77:e0:07:f2:8b:b9:43:36:fd:fb:e2:76:81:e8:8d:bb:fe: 3e:58:cd:de:a1:f1:77:3f:a4:58:88:1f:c1:38:48:b2:90:2b: 31:12:20:05:61:d2:2b:39:b1:5e:60:59:f1:d5:91:2d:12:68: 07:d2:d7:7e:09:3c:c4:1b:3e:0f:f2:89:c5:46:e8:26:e8:9c: ba:62:c3:7e:b5:5e:eb:8e:5a:1b:e0:d0:54:42:74:21:02:09: 66:72:b5:da:b0:bb:eb:26:bd:d8:90:11:35:a6:0c:8d:18:3f: 64:51:1c:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jKOaFJ9MTOK4ggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MDZmOGNkMGMtNTQ3ZS00NjE5LThhMGQtYjNjMDUxYzdhNjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTuby2zEcMhQRet5Js+pm2CkrdZKha72Xgrf dRFKoSLxsJnBaygPzs4MQ+47r2KN+Z4feLb+yqnbgtCZyhfXEej31L4I9/it5Ads 2xa6MoqjZllertTfdoaj7S5PTC+v+3uNYFhDCufJCAy3trYx8dBSCNktXuuBTGPt 3Qxr60+iLFVU497hXLgFW5d451EoGjPybtuGf8XMCzCXDeF8BjcjIZqbHzZTM5z6 U7eJZhRgqHuP1aFuCYTF/N81fu8rCfu/HjrqjuRnidF40bOVINWCg8vJycbBScaY Z39loCPClQJls3TrqN19n87OSVaN3RVrjuwgxAkHUwBMtJrnWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7r7uTD/APDirMkHU29/bbwi/8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGViNTBkZmEtZjZmMy0z ZDhlLWE0YjYtMjc5YTEyNGY2OGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF93jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFQ19QKTMnNJSVD+i8ZiGHUZumOGy8berIX4p+YdCt/52JavvBy10MZ YflvPb6rNTu5iwnYYQ0C7RgMCdrOiyZ6WyO0nYDGnRotBefXdCafspqX1WMphdVt yLrOZGb1xRoxyAoIltcr6K4NjNHMhANgmJhHHH/WqunzbStR7rI4WANHpeza+Sgd apq7LklIkZJ34Afyi7lDNv374naB6I27/j5Yzd6h8Xc/pFiIH8E4SLKQKzESIAVh 0is5sV5gWfHVkS0SaAfS134JPMQbPg/yicVG6CbonLpiw361XuuOWhvg0FRCdCEC CWZytdqwu+smvdiQETWmDI0YP2RRHBk= -----END CERTIFICATE-----Generated at Thu Mar 26 19:27:38 2026 by rpki-client