$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/708b07c0-a1c2-3122-9434-627d6439404f.roa File: 708b07c0-a1c2-3122-9434-627d6439404f.roa (raw, json) Hash identifier: MIVC0mcMjfulaTBiZ+7O3BCvbXI+y7pE2MYsRcljo+g= Subject key identifier: C0:C2:46:75:E8:61:05:2D:BB:BA:5D:5A:64:D0:23:BF:B0:43:7F:4A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1F4A2C5E3718C91AB33F8900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/708b07c0-a1c2-3122-9434-627d6439404f.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 16625 IP address blocks: 23.217.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:2c:5e:37:18:c9:1a:b3:3f:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=6e00b5a9-e525-4b64-b547-aa387f6a6bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:da:01:96:77:5e:5f:f5:ea:bd:7f:9f:02:0e: 55:2d:63:0d:15:0c:7c:7b:04:26:59:f9:b4:1c:2f: 41:4a:9b:5e:fa:6f:fa:64:09:74:f5:18:18:48:4f: b4:1f:6b:5b:2b:37:59:1c:0c:98:a7:ad:bd:42:40: 74:5c:5e:34:9e:bd:94:a7:6d:df:1d:52:da:93:7f: 14:eb:d6:0c:3f:fb:d1:e8:ef:0b:8e:51:fd:ff:67: 5c:b6:b3:f9:40:c6:9e:b6:19:43:93:39:3a:95:72: 08:8b:5f:d9:30:9f:47:1a:a6:ca:e7:90:80:f7:e6: ba:df:b2:c5:ba:f5:23:cc:1a:b2:e1:fc:81:dc:c9: 31:8b:f4:5d:eb:f3:5c:1c:7a:0c:30:75:ae:44:16: 13:88:34:b3:fa:b7:77:93:dc:d1:84:a9:6b:5f:94: cc:94:a0:f0:9b:3b:da:ea:5f:9f:1a:1a:9c:bc:f8: 06:b7:92:2d:9c:7f:90:53:10:bb:9a:8f:14:38:83: 5b:fa:28:cf:cb:4a:05:59:d5:19:a2:a4:8d:2c:b4: 27:a9:28:6c:de:02:20:09:69:69:6d:dc:df:4b:3c: d1:4d:d9:0d:c4:aa:51:13:be:40:bf:a8:61:70:a2: b3:91:2d:0f:64:3d:47:c6:6c:8e:0d:d3:3d:43:2b: 6b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C2:46:75:E8:61:05:2D:BB:BA:5D:5A:64:D0:23:BF:B0:43:7F:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/708b07c0-a1c2-3122-9434-627d6439404f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:56:d4:e4:5a:e4:cc:6d:2b:a3:a4:4d:8e:e1:40:9a:b5:b9: 6a:a1:e6:c8:1d:ca:34:d7:51:12:f3:f1:02:3f:72:aa:f4:79: 5c:e3:69:11:5d:15:47:45:1f:41:3a:00:3b:0f:7f:60:60:42: 8d:c1:f4:e9:b9:1c:8c:be:bc:7a:f1:78:83:85:7d:72:60:81: e6:c0:af:57:4a:d9:73:78:20:75:2c:7f:be:ed:e0:d3:70:8f: e5:4e:90:aa:41:d5:51:41:c6:48:a5:a0:28:0c:5b:3d:fe:af: dc:da:84:c9:5d:09:ab:e9:1c:66:34:1e:f8:24:81:87:96:59: 6d:ce:32:6d:00:54:fc:94:90:9b:ab:8c:95:0b:c8:f1:5c:c5: fd:14:69:8e:e1:39:c6:62:e6:c7:b7:05:02:68:1f:df:23:67: f2:63:86:46:35:f8:34:e2:b6:bc:b1:a3:e9:ab:f5:18:95:4a: 63:72:d0:eb:79:9e:c3:a0:2a:f4:77:ad:df:40:c4:b2:2d:a2: d6:a0:f3:98:77:86:e2:ff:b4:4a:15:84:ce:0b:cf:41:30:06: d8:7b:3f:03:c0:63:5c:fc:bd:55:a3:e3:c5:fe:2b:02:7a:53: 98:1e:cf:6d:16:24:6e:55:d5:a4:4c:31:80:26:8b:cb:61:3e: 3f:fc:e6:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSixeNxjJGrM/iQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NmUwMGI1YTktZTUyNS00YjY0LWI1NDctYWEzODdmNmE2YmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNoBlndeX/XqvX+fAg5VLWMNFQx8ewQmWfm0 HC9BSpte+m/6ZAl09RgYSE+0H2tbKzdZHAyYp629QkB0XF40nr2Up23fHVLak38U 69YMP/vR6O8LjlH9/2dctrP5QMaethlDkzk6lXIIi1/ZMJ9HGqbK55CA9+a637LF uvUjzBqy4fyB3Mkxi/Rd6/NcHHoMMHWuRBYTiDSz+rd3k9zRhKlrX5TMlKDwmzva 6l+fGhqcvPgGt5ItnH+QUxC7mo8UOINb+ijPy0oFWdUZoqSNLLQnqShs3gIgCWlp bdzfSzzRTdkNxKpRE75Av6hhcKKzkS0PZD1HxmyODdM9QytrgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDCRnXoYQUtu7pdWmTQI7+wQ39KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzA4YjA3YzAtYTFjMi0z MTIyLTk0MzQtNjI3ZDY0Mzk0MDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9mwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpW1ORa5MxtK6OkTY7hQJq1uWqh5sgdyjTXURLz8QI/cqr0eVzjaRFd FUdFH0E6ADsPf2BgQo3B9Om5HIy+vHrxeIOFfXJggebAr1dK2XN4IHUsf77t4NNw j+VOkKpB1VFBxkiloCgMWz3+r9zahMldCavpHGY0HvgkgYeWWW3OMm0AVPyUkJur jJULyPFcxf0UaY7hOcZi5se3BQJoH98jZ/JjhkY1+DTitryxo+mr9RiVSmNy0Ot5 nsOgKvR3rd9AxLItotag85h3huL/tEoVhM4Lz0EwBth7PwPAY1z8vVWj48X+KwJ6 U5gez20WJG5V1aRMMYAmi8thPj/85rE= -----END CERTIFICATE-----Generated at Thu Mar 26 03:53:38 2026 by rpki-client