$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ae37cbf-0ca8-3541-80ad-f8d80ee9076d.roa File: 7ae37cbf-0ca8-3541-80ad-f8d80ee9076d.roa (raw, json) Hash identifier: BnYRHUJaEvRYNRwz2lkRM7IfT0mMFRZHtlsje8sLMRM= Subject key identifier: 70:98:83:89:97:97:4B:41:94:85:2C:9B:83:55:51:BD:31:1D:B9:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1F4A2A7D5F2DB5BC0A78CB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ae37cbf-0ca8-3541-80ad-f8d80ee9076d.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.216.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:2a:7d:5f:2d:b5:bc:0a:78:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=d5517caa-f7f5-46d5-a635-f7c8b7e939c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ce:85:e7:1a:94:55:02:8e:7d:bc:54:84:aa: de:2e:12:df:15:9e:e6:f4:f7:2a:d5:88:70:f0:c3: 01:4f:8e:51:71:96:de:00:cf:63:5c:0b:10:9b:d9: da:13:62:22:7f:c9:4d:b6:af:04:8d:5a:a2:c8:34: 85:b1:5a:96:55:10:65:21:38:1a:00:d3:50:9b:b0: a3:a9:d2:63:18:8a:6c:30:a8:a6:c1:ab:8f:9b:41: 07:14:08:bc:0b:f9:53:3a:b1:9e:16:bb:15:1d:f0: 68:6b:db:fa:94:90:08:bf:16:a4:60:e0:33:11:45: 21:40:2c:bc:18:d3:54:09:1c:6f:27:a0:d4:a9:13: 66:e4:a8:f5:0f:e6:ce:4f:2b:b7:f1:8c:d3:da:27: ca:6b:df:7a:d0:02:84:e0:e1:4a:d3:e2:5e:ab:1e: 6d:99:01:cf:0e:b9:4a:32:fa:5d:12:5e:01:1d:7c: b2:81:df:8e:c8:52:aa:15:32:38:5a:24:d0:10:93: 0e:b3:33:d9:54:1e:5f:7d:da:56:22:eb:c5:37:b1: be:70:78:9c:ad:47:fa:e7:c3:42:c4:46:ad:bc:6f: a3:2a:83:cd:e0:4e:24:d4:b7:78:98:f1:73:31:78: f1:aa:1e:1f:15:fb:a2:14:15:f4:db:27:4e:ab:aa: 9b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:98:83:89:97:97:4B:41:94:85:2C:9B:83:55:51:BD:31:1D:B9:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ae37cbf-0ca8-3541-80ad-f8d80ee9076d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:82:6d:d4:a1:53:ea:1d:3b:70:c5:16:a5:cd:92:c8:ce:bb: 93:7a:4d:77:d8:02:7d:b5:1b:c5:71:5c:a7:b0:8a:ce:2c:7e: b9:60:b3:fa:33:16:f8:1b:4d:c1:ce:42:be:b9:f0:e4:c9:04: 70:6e:87:ae:81:e4:f2:54:b5:c3:4a:52:26:fd:0c:ad:c8:07: 65:53:de:1a:ff:24:15:a4:2e:d6:0e:6d:64:9c:1e:cb:51:fb: c8:da:00:18:69:9b:54:97:68:7c:92:f4:60:a5:b6:99:cd:b1: 18:42:53:a7:45:06:12:89:80:9c:80:65:0c:16:f8:cf:e8:5e: 49:cc:a0:70:c0:64:a7:8c:f3:53:f2:f7:a5:88:b2:42:78:e6: e0:25:b9:f8:1d:55:91:b7:bf:fd:3a:52:b6:f5:58:57:eb:6a: 5b:33:39:0f:f8:94:55:4b:87:0f:59:cf:1b:cd:be:d7:43:64: 8b:42:96:90:2c:dc:4d:23:14:ea:a6:49:71:f7:7a:2d:d1:76: 91:5e:6e:85:c0:7e:03:64:3d:ef:73:3e:cf:a2:bf:19:f6:1e: b8:e2:f7:ce:8e:78:a0:75:ba:f4:d6:d9:0a:d9:70:88:83:0b: ce:19:43:84:9b:fb:50:68:cb:83:5d:4c:4c:36:31:34:02:69: c7:86:e3:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSip9Xy21vAp4y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZDU1MTdjYWEtZjdmNS00NmQ1LWE2MzUtZjdjOGI3ZTkzOWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM6F5xqUVQKOfbxUhKreLhLfFZ7m9Pcq1Yhw 8MMBT45RcZbeAM9jXAsQm9naE2Iif8lNtq8EjVqiyDSFsVqWVRBlITgaANNQm7Cj qdJjGIpsMKimwauPm0EHFAi8C/lTOrGeFrsVHfBoa9v6lJAIvxakYOAzEUUhQCy8 GNNUCRxvJ6DUqRNm5Kj1D+bOTyu38YzT2ifKa9960AKE4OFK0+Jeqx5tmQHPDrlK MvpdEl4BHXyygd+OyFKqFTI4WiTQEJMOszPZVB5ffdpWIuvFN7G+cHicrUf658NC xEatvG+jKoPN4E4k1Ld4mPFzMXjxqh4fFfuiFBX02ydOq6qbEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCYg4mXl0tBlIUsm4NVUb0xHbkzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2FlMzdjYmYtMGNhOC0z NTQxLTgwYWQtZjhkODBlZTkwNzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9iSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOCbdShU+odO3DFFqXNksjOu5N6TXfYAn21G8VxXKewis4sfrlgs/oz FvgbTcHOQr658OTJBHBuh66B5PJUtcNKUib9DK3IB2VT3hr/JBWkLtYObWScHstR +8jaABhpm1SXaHyS9GCltpnNsRhCU6dFBhKJgJyAZQwW+M/oXknMoHDAZKeM81Py 96WIskJ45uAlufgdVZG3v/06Urb1WFfralszOQ/4lFVLhw9ZzxvNvtdDZItClpAs 3E0jFOqmSXH3ei3RdpFeboXAfgNkPe9zPs+ivxn2Hrji986OeKB1uvTW2QrZcIiD C84ZQ4Sb+1Boy4NdTEw2MTQCaceG41c= -----END CERTIFICATE-----Generated at Thu Mar 26 08:08:45 2026 by rpki-client