$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7159d3d3-8719-34f7-acbd-3048dc0c8b58.roa File: 7159d3d3-8719-34f7-acbd-3048dc0c8b58.roa (raw, json) Hash identifier: 3xj2YaCwF2Am1lb1lUAmf+sBz9YH9Ww3OS2GmxZZvW8= Subject key identifier: A9:8C:0D:E4:BC:65:7C:9D:45:26:F1:92:16:8B:2D:B5:A1:D5:AD:B7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D316F717F7D3E2507ACF22940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7159d3d3-8719-34f7-acbd-3048dc0c8b58.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 16625 IP address blocks: 23.209.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:71:7f:7d:3e:25:07:ac:f2:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=2e4b58a4-9984-476f-8252-de5de51b82c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e2:87:33:0f:eb:4f:7c:84:42:75:e8:cd:ca: ad:39:64:e9:c0:be:bb:1d:26:86:28:7d:e9:a5:f1: b7:a8:84:fa:d1:f3:4b:e2:03:88:26:b7:cb:83:c3: 34:39:6f:5b:4e:27:95:bd:2c:27:6b:db:21:a4:e1: a8:99:02:54:95:43:dd:61:fd:91:16:3b:74:91:62: 03:4c:2a:c8:24:c7:15:da:91:33:c8:21:3c:da:b0: a3:fd:b4:2f:ff:fb:0b:aa:59:37:09:6e:ed:76:6a: a6:74:44:69:59:d0:76:80:5b:9c:cd:b7:36:1b:a7: b7:7b:a0:d3:60:67:bd:31:0b:5f:cd:63:c3:9f:ce: 26:54:6d:73:08:25:c5:d5:b0:8e:ac:b0:0f:4f:1e: 62:50:b1:b5:83:e6:43:cc:4a:1f:eb:09:67:90:b2: 40:7f:83:c2:de:70:31:0a:7c:7a:42:f4:be:0e:8a: b4:10:ca:83:05:71:31:91:a4:e2:91:95:ed:ce:7c: 26:4a:9c:22:70:8f:4a:5b:ee:9a:94:c2:2a:e2:1b: 30:89:12:67:b8:b4:fd:fd:ec:74:ed:c9:94:9b:c3: 1f:97:26:75:07:0c:69:c9:46:26:9e:49:bf:52:a5: c0:6c:27:7e:f1:cf:b6:83:29:54:8f:a0:d1:4f:df: 40:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8C:0D:E4:BC:65:7C:9D:45:26:F1:92:16:8B:2D:B5:A1:D5:AD:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7159d3d3-8719-34f7-acbd-3048dc0c8b58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e2:4e:54:19:20:40:cf:57:5b:04:69:f4:83:0a:27:a4:14: 8d:56:2d:d5:e0:57:b7:6d:a2:5a:a0:0f:55:76:b1:55:10:24: 90:17:df:82:6c:46:8c:aa:21:cd:4c:fb:89:c5:99:29:2e:aa: f3:96:4d:c9:11:6f:cc:c3:d9:29:7e:a6:ab:cc:80:31:cc:8b: 42:61:ee:9b:8a:b9:6e:ce:75:d1:75:0b:46:c9:90:31:97:db: 9d:9c:f7:0b:ef:ac:68:24:e4:4d:d1:b5:bd:28:83:c9:ed:0f: b8:34:05:f4:f5:66:56:b1:ea:3f:b3:7b:bf:4a:11:c6:c7:55: bd:18:a2:e2:0f:0a:e8:31:a7:df:f4:0d:c6:41:6a:b3:11:db: 53:94:85:fe:0b:0e:1d:25:0a:02:7b:62:89:d3:31:f6:b3:ab: 4e:40:2c:23:1b:1c:02:c4:1c:6c:0e:56:32:5e:1d:3c:91:ab: 61:e0:98:2b:4a:1b:f4:ad:4e:1e:3d:f3:e6:49:c5:25:c1:8c: 5e:f1:4b:d3:dc:60:b4:aa:88:bc:a6:5a:5e:fe:f8:18:df:ee: 0e:bf:11:f4:db:f9:13:b1:93:44:94:33:7b:3e:6d:ae:10:1f: 43:5a:e7:6d:b6:ba:f1:bf:da:39:69:b9:16:30:f7:12:24:26: 78:4b:e3:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb3F/fT4lB6zyKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk MmU0YjU4YTQtOTk4NC00NzZmLTgyNTItZGU1ZGU1MWI4MmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOKHMw/rT3yEQnXozcqtOWTpwL67HSaGKH3p pfG3qIT60fNL4gOIJrfLg8M0OW9bTieVvSwna9shpOGomQJUlUPdYf2RFjt0kWID TCrIJMcV2pEzyCE82rCj/bQv//sLqlk3CW7tdmqmdERpWdB2gFuczbc2G6e3e6DT YGe9MQtfzWPDn84mVG1zCCXF1bCOrLAPTx5iULG1g+ZDzEof6wlnkLJAf4PC3nAx Cnx6QvS+Doq0EMqDBXExkaTikZXtznwmSpwicI9KW+6alMIq4hswiRJnuLT9/ex0 7cmUm8MflyZ1BwxpyUYmnkm/UqXAbCd+8c+2gylUj6DRT99A0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmMDeS8ZXydRSbxkhaLLbWh1a23MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzE1OWQzZDMtODcxOS0z NGY3LWFjYmQtMzA0OGRjMGM4YjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9HcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATiTlQZIEDPV1sEafSDCiekFI1WLdXgV7dtolqgD1V2sVUQJJAX34Js RoyqIc1M+4nFmSkuqvOWTckRb8zD2Sl+pqvMgDHMi0Jh7puKuW7OddF1C0bJkDGX 252c9wvvrGgk5E3Rtb0og8ntD7g0BfT1Zlax6j+ze79KEcbHVb0YouIPCugxp9/0 DcZBarMR21OUhf4LDh0lCgJ7YonTMfazq05ALCMbHALEHGwOVjJeHTyRq2HgmCtK G/StTh498+ZJxSXBjF7xS9PcYLSqiLymWl7++Bjf7g6/EfTb+ROxk0SUM3s+ba4Q H0Na5222uvG/2jlpuRYw9xIkJnhL40A= -----END CERTIFICATE-----Generated at Thu Mar 26 13:55:13 2026 by rpki-client