$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5feff013-0c81-3e88-be74-8c606c36bcfc.roa File: 5feff013-0c81-3e88-be74-8c606c36bcfc.roa (raw, json) Hash identifier: dyXmLSeWu6AyNQjeb31acLyFEIxPC2TYYqS4wcuhosg= Subject key identifier: 80:70:F2:28:72:C0:62:80:DC:8E:AA:E4:22:47:EF:3C:87:44:51:79 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1F4A2B3E50992A201BD37190 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5feff013-0c81-3e88-be74-8c606c36bcfc.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 16625 IP address blocks: 23.217.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:2b:3e:50:99:2a:20:1b:d3:71:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=4a0d472d-6af4-42fd-b928-bb91847551ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:26:1c:ff:61:a2:95:0b:18:85:f5:4c:7f: 1f:4b:ea:31:8a:5c:75:71:5c:c8:ca:c9:44:57:0e: ec:57:1f:aa:0d:56:2b:1d:bf:91:95:c9:35:99:8b: e9:ac:87:34:41:51:19:7a:47:09:bc:81:53:d4:7d: 45:67:a0:0b:07:18:28:ec:14:6c:70:61:1d:9c:42: 33:b0:34:89:23:3b:a1:e4:a6:37:0d:1a:ca:ac:73: 4c:df:4a:d4:7b:9d:4b:24:eb:e6:51:37:68:96:82: 30:0d:cf:9a:33:58:95:d8:52:6a:8d:94:69:21:b4: 42:a1:a0:07:8a:19:83:4a:6e:ed:e4:e2:d8:b3:a1: 3e:5a:3c:3d:ef:f3:67:cd:3a:54:f8:31:b5:26:fa: 9b:04:1c:9c:99:0a:b0:c4:71:07:08:61:ed:fd:05: 44:6e:d9:a7:78:6c:78:f4:54:13:af:b4:2c:a0:2f: 7a:29:59:8c:dc:d3:57:d0:f8:4e:d8:c4:6d:38:1f: 53:04:18:81:0a:72:bc:8c:e0:6a:bc:7b:46:dd:f0: 45:62:64:53:92:d3:11:c4:a8:53:a4:fb:97:a8:4b: fa:77:a7:87:63:a2:24:a2:3f:c4:7a:0e:a7:ab:2d: a6:79:8c:03:cf:40:d1:93:39:07:ba:fc:f9:04:cb: a8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:70:F2:28:72:C0:62:80:DC:8E:AA:E4:22:47:EF:3C:87:44:51:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5feff013-0c81-3e88-be74-8c606c36bcfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:32:63:66:3b:69:d1:13:70:ef:c4:63:07:f5:25:32:56:06: ff:cc:4a:3a:bb:d4:65:9c:29:aa:97:8d:eb:b8:07:66:4b:90: 80:05:f6:3c:30:5c:bc:bc:cb:94:ea:36:ba:1d:df:30:84:10: 30:2e:52:20:3c:10:02:68:22:d0:02:9b:8c:13:4c:69:ca:10: 61:13:b3:57:25:e9:69:18:7d:2a:2e:cd:a6:69:e0:66:27:96: 0a:83:7e:08:54:ac:71:94:65:b2:07:34:e6:87:49:92:3c:9a: ac:d0:5d:15:b5:c2:21:17:12:e2:c7:08:39:9d:95:bf:46:27: 69:54:03:57:69:f2:98:32:2d:5f:e7:1b:b6:df:ff:4e:b0:40: 93:8b:0c:a1:7c:c8:0a:50:fa:96:04:ae:e9:83:35:44:39:67: 46:20:80:78:1a:29:ac:ce:1e:e4:1b:6c:a5:48:72:a2:ba:62: 0b:cc:ed:4a:4a:cc:b8:2f:17:42:15:71:8f:01:45:0c:6e:a2: 6b:31:6c:0d:48:f5:11:b4:f8:d8:4a:36:7d:9d:76:f6:d3:fb: eb:d0:2f:af:be:39:b7:44:a4:49:1a:62:3b:c4:b4:ea:a2:b3: 12:be:42:65:06:32:66:e6:e1:f7:aa:00:d8:59:fc:48:4c:93: 49:8a:d9:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSis+UJkqIBvTcZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NGEwZDQ3MmQtNmFmNC00MmZkLWI5MjgtYmI5MTg0NzU1MWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssAmHP9hopULGIX1TH8fS+oxilx1cVzIyslE Vw7sVx+qDVYrHb+Rlck1mYvprIc0QVEZekcJvIFT1H1FZ6ALBxgo7BRscGEdnEIz sDSJIzuh5KY3DRrKrHNM30rUe51LJOvmUTdoloIwDc+aM1iV2FJqjZRpIbRCoaAH ihmDSm7t5OLYs6E+Wjw97/NnzTpU+DG1JvqbBBycmQqwxHEHCGHt/QVEbtmneGx4 9FQTr7QsoC96KVmM3NNX0PhO2MRtOB9TBBiBCnK8jOBqvHtG3fBFYmRTktMRxKhT pPuXqEv6d6eHY6Ikoj/Eeg6nqy2meYwDz0DRkzkHuvz5BMuoswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBw8ihywGKA3I6q5CJH7zyHRFF5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWZlZmYwMTMtMGM4MS0z ZTg4LWJlNzQtOGM2MDZjMzZiY2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9koMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsyY2Y7adETcO/EYwf1JTJWBv/MSjq71GWcKaqXjeu4B2ZLkIAF9jww XLy8y5TqNrod3zCEEDAuUiA8EAJoItACm4wTTGnKEGETs1cl6WkYfSouzaZp4GYn lgqDfghUrHGUZbIHNOaHSZI8mqzQXRW1wiEXEuLHCDmdlb9GJ2lUA1dp8pgyLV/n G7bf/06wQJOLDKF8yApQ+pYErumDNUQ5Z0YggHgaKazOHuQbbKVIcqK6YgvM7UpK zLgvF0IVcY8BRQxuomsxbA1I9RG0+NhKNn2ddvbT++vQL6++ObdEpEkaYjvEtOqi sxK+QmUGMmbm4feqANhZ/EhMk0mK2Sw= -----END CERTIFICATE-----Generated at Thu Mar 26 03:44:46 2026 by rpki-client