$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a38a083-f11f-376c-813a-9bbcca53288c.roa File: 5a38a083-f11f-376c-813a-9bbcca53288c.roa (raw, json) Hash identifier: zEwgUY50DIYi6tKk3RgcvX21LSSZzIE3kSeSYG1qmrQ= Subject key identifier: 29:DC:24:AF:61:A2:CA:40:B0:23:C3:10:A4:2B:21:58:C5:B7:FE:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1F4A32BD5F5BC3D774531680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a38a083-f11f-376c-813a-9bbcca53288c.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.217.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:32:bd:5f:5b:c3:d7:74:53:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=87f80366-2f26-46b3-afff-6fa3063aa70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:20:32:10:0d:56:c6:af:eb:4c:e5:3e:eb:68: 9a:81:f2:cf:9b:40:52:04:a1:3f:1d:91:44:08:97: 33:eb:ce:3e:13:06:bc:4c:eb:47:3a:ad:df:ce:b1: 3e:d6:77:a8:e1:6e:fc:27:1e:94:f4:d6:3a:c9:46: 68:a8:77:c0:53:11:ee:aa:c8:50:a2:60:7f:d2:ec: 11:38:83:6d:1e:5f:74:4e:1a:35:43:5c:41:2f:cd: ce:75:90:8b:2c:2a:1f:67:7d:fc:c4:13:7e:fb:48: 29:7f:29:90:06:33:83:15:c3:59:b7:4f:fa:67:81: bf:cd:bf:15:99:71:56:00:32:35:3b:3b:ad:68:cf: a0:eb:4a:43:96:2f:a8:a8:cc:60:4a:86:d1:db:b8: 1b:e9:ad:71:57:93:40:01:d8:70:e1:60:c8:38:85: d5:2a:ca:da:5b:c4:ca:34:cc:c2:e5:bb:0a:bc:bb: d0:bb:f9:04:b6:54:3d:69:7f:7d:32:9e:fb:f4:03: ca:f9:f3:2e:41:4a:10:6d:f3:6d:97:00:e8:1f:4d: 2f:1b:51:7c:87:ac:0d:3e:09:8a:08:9e:b9:21:8d: b9:6e:ca:cd:99:7d:fa:f0:65:14:0b:bd:c7:6b:d5: 41:47:72:0e:39:2f:54:17:85:9d:26:dd:a9:67:1b: 5c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DC:24:AF:61:A2:CA:40:B0:23:C3:10:A4:2B:21:58:C5:B7:FE:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a38a083-f11f-376c-813a-9bbcca53288c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:93:71:d9:fe:de:5b:33:58:3c:22:8e:6a:be:b3:ff:ee:89: 44:08:81:ff:44:4f:af:7e:b7:e6:1d:07:4a:16:2a:7a:f3:fe: c0:78:f0:55:f5:73:29:3e:06:cd:c6:14:11:b2:34:76:2e:85: 46:a1:58:36:2f:08:8a:d9:4d:a9:8e:f2:71:c8:07:3a:7d:60: b6:93:3e:79:f9:fc:ed:3d:57:1f:97:71:6a:e3:49:76:04:b0: 92:47:9b:c6:65:62:18:2d:d9:6b:e5:0c:8a:6d:c1:c8:90:5e: 36:4a:80:33:86:ae:73:95:36:99:67:8d:9c:2b:f6:5e:2a:8c: d3:44:9b:5e:d4:e6:3d:ad:a8:24:7c:cc:15:82:4a:86:1b:fc: fa:3a:52:95:c8:fd:23:ee:88:04:54:2f:ae:94:02:ce:6f:7f: 85:5e:b1:b5:3b:ec:ec:9f:7a:dd:68:52:63:54:cd:9f:63:46: 39:3d:e9:3c:3d:70:98:2e:e8:d6:42:47:f9:0b:76:99:89:3e: c2:c7:62:81:99:f9:fb:09:1e:4a:1e:d4:17:34:aa:9e:89:07: 2c:bf:07:bb:a7:b7:55:c7:f6:05:b3:9c:40:79:67:07:a8:45: 2a:3e:27:a9:3f:c3:79:f7:dd:9e:4e:46:32:67:ca:45:8d:6e: 2a:99:4c:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSjK9X1vD13RTFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ODdmODAzNjYtMmYyNi00NmIzLWFmZmYtNmZhMzA2M2FhNzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyAyEA1Wxq/rTOU+62iagfLPm0BSBKE/HZFE CJcz684+Ewa8TOtHOq3fzrE+1neo4W78Jx6U9NY6yUZoqHfAUxHuqshQomB/0uwR OINtHl90Tho1Q1xBL83OdZCLLCofZ338xBN++0gpfymQBjODFcNZt0/6Z4G/zb8V mXFWADI1OzutaM+g60pDli+oqMxgSobR27gb6a1xV5NAAdhw4WDIOIXVKsraW8TK NMzC5bsKvLvQu/kEtlQ9aX99Mp779APK+fMuQUoQbfNtlwDoH00vG1F8h6wNPgmK CJ65IY25bsrNmX368GUUC73Ha9VBR3IOOS9UF4WdJt2pZxtcQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCncJK9hospAsCPDEKQrIVjFt/6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWEzOGEwODMtZjExZi0z NzZjLTgxM2EtOWJiY2NhNTMyODhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9mKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSTcdn+3lszWDwijmq+s//uiUQIgf9ET69+t+YdB0oWKnrz/sB48FX1 cyk+Bs3GFBGyNHYuhUahWDYvCIrZTamO8nHIBzp9YLaTPnn5/O09Vx+XcWrjSXYE sJJHm8ZlYhgt2WvlDIptwciQXjZKgDOGrnOVNplnjZwr9l4qjNNEm17U5j2tqCR8 zBWCSoYb/Po6UpXI/SPuiARUL66UAs5vf4VesbU77Oyfet1oUmNUzZ9jRjk96Tw9 cJgu6NZCR/kLdpmJPsLHYoGZ+fsJHkoe1Bc0qp6JByy/B7unt1XH9gWznEB5Zweo RSo+J6k/w3n33Z5ORjJnykWNbiqZTJ0= -----END CERTIFICATE-----Generated at Thu Mar 26 18:25:14 2026 by rpki-client