$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64a8b3fb-fc83-3d1f-95b3-e4cd22f59d29.roa File: 64a8b3fb-fc83-3d1f-95b3-e4cd22f59d29.roa (raw, json) Hash identifier: lk5++HGA+anhi0qFghQNQPT/VAA7IFpC+TFAyh8D03s= Subject key identifier: E3:50:8D:CE:22:85:70:E4:0B:AB:83:28:C8:43:50:D9:4A:0F:8A:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2BDA32A1EFEF87BC6CD794C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64a8b3fb-fc83-3d1f-95b3-e4cd22f59d29.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.221.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:32:a1:ef:ef:87:bc:6c:d7:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=4c7840f2-97c4-4a72-b4bf-95cc4262a207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b3:e4:41:af:de:51:45:99:b3:f2:85:65:78: 42:78:d4:1f:b7:64:7e:77:3a:b8:20:9b:c2:c7:a8: fc:98:f4:10:41:8e:70:0a:80:cc:5d:15:fd:68:01: 70:13:0a:ef:63:3b:91:6f:33:ed:15:40:2f:48:96: 16:b4:b3:0c:c0:3c:c9:76:20:cc:ff:ca:7e:98:a1: 7e:6a:be:9b:5d:c3:2a:e2:1f:be:e9:6f:a3:f8:b1: 31:aa:12:e1:5d:f7:e7:43:00:42:d6:4f:26:06:3a: a2:00:60:21:ad:f1:d5:5e:27:40:6d:17:d0:c5:d7: 1b:9c:47:02:b0:06:1c:72:da:53:b0:a2:46:1d:d6: 37:ca:6d:57:3d:54:23:43:2d:3a:7d:2e:80:a6:4f: fc:6f:cd:f6:49:d1:b8:96:9f:98:ef:54:69:7f:f8: 7b:de:ce:15:cc:ed:75:14:5f:fd:d4:24:ec:bc:17: 3b:94:f2:e3:17:08:78:34:e8:76:c0:5b:30:bd:f2: 9d:7b:07:25:3b:0d:17:e4:7c:f0:b5:f6:69:69:b3: 20:00:1f:b9:a2:e0:51:44:24:68:17:eb:2f:df:9c: 45:60:5b:4e:ca:ba:ce:8c:7b:d5:62:38:b7:ce:7c: da:29:2a:33:3e:8d:de:3b:1c:63:1b:7c:0d:72:7c: 5d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:50:8D:CE:22:85:70:E4:0B:AB:83:28:C8:43:50:D9:4A:0F:8A:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64a8b3fb-fc83-3d1f-95b3-e4cd22f59d29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:de:d1:d3:f5:f3:b3:45:78:91:72:09:72:09:69:be:f4:1b: 2a:74:94:c4:79:46:46:82:d4:03:e2:03:3d:a2:7d:b2:30:8a: 28:e1:6e:3a:93:30:bf:88:ef:f5:7e:a4:43:0e:ec:4b:7b:8d: 0f:d9:e6:a2:2e:92:63:43:ae:23:a6:9d:3b:fa:dd:c6:00:03: a0:cb:8d:51:af:2f:94:06:3f:2b:a1:ed:00:e3:b7:e0:90:53: b4:af:41:4d:e1:eb:7e:33:05:3e:8c:cf:11:88:31:80:1c:0f: 8a:6d:15:92:73:61:54:ad:75:e9:59:93:f9:48:90:96:4e:8d: e6:0d:ad:56:06:2a:06:27:3a:95:12:70:bd:6c:48:50:1c:7b: 20:38:55:2c:17:2c:16:79:65:02:8d:b8:77:c6:dd:64:83:eb: ac:c4:61:db:58:5d:db:a7:16:3b:cb:a5:6b:a6:e9:4c:20:00: 94:92:f7:a0:76:40:4b:7d:c0:37:cd:6e:9d:50:2b:55:7e:df: 4e:97:01:b1:cd:9c:91:57:ba:38:83:de:ff:14:0c:5d:11:18: 60:a8:6c:12:ea:f9:aa:97:3a:54:49:78:2c:aa:81:aa:b6:ab: cc:51:46:49:2a:64:0c:6e:af:a3:bf:14:52:fa:92:88:09:6a: 85:07:56:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jKh7++HvGzXlMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NGM3ODQwZjItOTdjNC00YTcyLWI0YmYtOTVjYzQyNjJhMjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7PkQa/eUUWZs/KFZXhCeNQft2R+dzq4IJvC x6j8mPQQQY5wCoDMXRX9aAFwEwrvYzuRbzPtFUAvSJYWtLMMwDzJdiDM/8p+mKF+ ar6bXcMq4h++6W+j+LExqhLhXffnQwBC1k8mBjqiAGAhrfHVXidAbRfQxdcbnEcC sAYcctpTsKJGHdY3ym1XPVQjQy06fS6Apk/8b832SdG4lp+Y71Rpf/h73s4VzO11 FF/91CTsvBc7lPLjFwh4NOh2wFswvfKdewclOw0X5HzwtfZpabMgAB+5ouBRRCRo F+sv35xFYFtOyrrOjHvVYji3znzaKSozPo3eOxxjG3wNcnxdwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONQjc4ihXDkC6uDKMhDUNlKD4oNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjRhOGIzZmItZmM4My0z ZDFmLTk1YjMtZTRjZDIyZjU5ZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF93qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/e0dP187NFeJFyCXIJab70Gyp0lMR5RkaC1APiAz2ifbIwiijhbjqT ML+I7/V+pEMO7Et7jQ/Z5qIukmNDriOmnTv63cYAA6DLjVGvL5QGPyuh7QDjt+CQ U7SvQU3h634zBT6MzxGIMYAcD4ptFZJzYVStdelZk/lIkJZOjeYNrVYGKgYnOpUS cL1sSFAceyA4VSwXLBZ5ZQKNuHfG3WSD66zEYdtYXdunFjvLpWum6UwgAJSS96B2 QEt9wDfNbp1QK1V+306XAbHNnJFXujiD3v8UDF0RGGCobBLq+aqXOlRJeCyqgaq2 q8xRRkkqZAxur6O/FFL6kogJaoUHVn4= -----END CERTIFICATE-----Generated at Thu Mar 26 03:44:52 2026 by rpki-client