$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f0d8f64-286a-36bf-be35-54c1967f9da4.roa File: 5f0d8f64-286a-36bf-be35-54c1967f9da4.roa (raw, json) Hash identifier: gq4FvHJ7PTGJ7JinyotzyIpmrPU85pan2CdgHJh8P88= Subject key identifier: 49:87:65:3B:55:B9:45:EF:37:62:15:9A:49:FB:65:49:99:68:0F:F1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1F4A27548EE470E20F019200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f0d8f64-286a-36bf-be35-54c1967f9da4.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 16625 IP address blocks: 23.214.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:27:54:8e:e4:70:e2:0f:01:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=7be1f4ef-6120-4191-958c-69dcb13bdd30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2a:28:61:4e:a3:72:35:19:0b:1f:b8:09:52: 7b:17:e5:91:fd:94:31:28:d7:ea:f3:bc:42:57:21: fa:b3:b9:a8:2b:f5:1d:a4:64:c6:4f:46:ff:84:46: cf:54:c6:c5:aa:f3:c8:cf:07:08:55:d3:e3:c3:b9: 7e:18:e9:ed:6c:e1:14:2a:fe:f5:43:42:02:7a:19: e1:09:f5:f7:16:33:df:d4:60:87:bd:f4:3a:b0:d8: 74:0f:94:7d:36:bb:60:42:0d:97:f8:10:d1:c0:4f: 8b:25:06:0a:28:4f:1b:c5:ee:03:a2:09:c3:65:2f: 77:7d:92:9a:6f:f2:62:02:2f:33:58:b9:a2:ec:a4: 2c:eb:68:3b:61:74:55:10:e3:e5:2c:92:da:65:c4: 21:cc:85:85:c5:92:3d:ea:54:f9:be:94:e0:e6:a7: 24:7c:59:99:d3:c8:fc:70:bd:64:00:b7:ff:28:91: 75:0f:22:cd:03:88:d7:03:9a:91:6e:4c:89:c0:28: 44:50:e3:7b:03:26:73:77:36:f3:13:08:42:5d:62: a3:f8:34:de:44:3a:63:9d:28:d4:71:bc:6c:11:8b: 09:4d:30:9c:31:14:16:d1:6b:dd:bc:35:65:a4:7b: da:92:be:22:0c:a8:61:37:72:99:ba:3a:d8:26:cd: a5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:87:65:3B:55:B9:45:EF:37:62:15:9A:49:FB:65:49:99:68:0F:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f0d8f64-286a-36bf-be35-54c1967f9da4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:90:e9:93:f5:6c:04:35:6a:01:95:b1:3c:34:56:43:b0:8b: 41:33:f4:c8:5b:62:9f:b0:67:45:65:db:f1:5c:11:78:19:29: 8d:08:90:85:99:f3:ba:98:95:3e:2b:f8:54:1f:94:0a:91:ac: 80:89:44:81:e8:46:c0:1d:21:0e:d1:fd:0b:a0:75:59:59:c8: 28:aa:1c:00:de:1d:37:5c:4d:7b:33:67:94:b0:2b:61:38:3b: 2b:6d:4d:e0:09:c9:c4:94:54:fc:92:ce:4c:ef:02:4f:c1:c9: ba:a1:11:8f:92:35:d5:20:2c:8b:b3:a0:01:4f:ee:12:27:e5: 4b:4c:1d:e2:a4:49:ea:25:de:3c:ad:e9:28:87:69:f8:b5:00: f5:0a:7b:7e:14:2c:ff:30:3c:50:cc:21:79:94:b6:66:b1:c4: 26:91:e0:a0:39:c5:06:b8:9d:d7:da:31:16:9b:ee:03:95:f9: 39:76:f9:de:1a:6e:ca:f2:15:aa:3a:8d:69:02:ce:5a:a3:f3: c7:91:34:c6:5e:fb:47:9d:f3:ef:40:7a:39:0f:8f:45:60:9b: 72:68:b0:2a:77:73:84:8f:f4:8a:28:6a:84:16:26:14:d5:d1: 48:15:ce:7a:33:66:e9:86:f4:3f:3a:7b:5c:16:03:9a:b4:8e: 0b:21:25:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSidUjuRw4g8BkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk N2JlMWY0ZWYtNjEyMC00MTkxLTk1OGMtNjlkY2IxM2JkZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiooYU6jcjUZCx+4CVJ7F+WR/ZQxKNfq87xC VyH6s7moK/UdpGTGT0b/hEbPVMbFqvPIzwcIVdPjw7l+GOntbOEUKv71Q0ICehnh CfX3FjPf1GCHvfQ6sNh0D5R9NrtgQg2X+BDRwE+LJQYKKE8bxe4DognDZS93fZKa b/JiAi8zWLmi7KQs62g7YXRVEOPlLJLaZcQhzIWFxZI96lT5vpTg5qckfFmZ08j8 cL1kALf/KJF1DyLNA4jXA5qRbkyJwChEUON7AyZzdzbzEwhCXWKj+DTeRDpjnSjU cbxsEYsJTTCcMRQW0WvdvDVlpHvakr4iDKhhN3KZujrYJs2lWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmHZTtVuUXvN2IVmkn7ZUmZaA/xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWYwZDhmNjQtMjg2YS0z NmJmLWJlMzUtNTRjMTk2N2Y5ZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9asMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyQ6ZP1bAQ1agGVsTw0VkOwi0Ez9MhbYp+wZ0Vl2/FcEXgZKY0IkIWZ 87qYlT4r+FQflAqRrICJRIHoRsAdIQ7R/QugdVlZyCiqHADeHTdcTXszZ5SwK2E4 OyttTeAJycSUVPySzkzvAk/BybqhEY+SNdUgLIuzoAFP7hIn5UtMHeKkSeol3jyt 6SiHafi1APUKe34ULP8wPFDMIXmUtmaxxCaR4KA5xQa4ndfaMRab7gOV+Tl2+d4a bsryFao6jWkCzlqj88eRNMZe+0ed8+9AejkPj0Vgm3JosCp3c4SP9IooaoQWJhTV 0UgVznozZumG9D86e1wWA5q0jgshJYU= -----END CERTIFICATE-----Generated at Thu Mar 26 05:21:06 2026 by rpki-client