$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7da2d404-3d2a-3f91-945a-890dfa73775b.roa File: 7da2d404-3d2a-3f91-945a-890dfa73775b.roa (raw, json) Hash identifier: s9jVigdGzywmva0w2iVIP5t0w7mFdOLVc+oBuXFGZfc= Subject key identifier: EC:BD:69:40:37:D8:FF:33:8C:B9:D4:E6:E6:C8:08:71:AC:96:ED:72 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1F4A33057B121B9316B3D200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7da2d404-3d2a-3f91-945a-890dfa73775b.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.217.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:33:05:7b:12:1b:93:16:b3:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=5bc1e5c2-3372-458e-9d17-8b8836a1b423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:74:75:b1:b3:fe:8e:41:df:c3:05:a7:e9:81: 55:fa:61:b2:d5:5c:98:f2:7f:f0:25:76:0a:4a:50: 90:39:34:1b:b7:29:9b:e5:25:08:68:c6:6c:cd:ca: 56:a8:89:0b:0a:34:b8:a3:a0:56:4e:0f:b8:c6:fe: 31:ab:22:25:7b:b6:1a:9a:54:af:aa:bd:27:d7:89: 34:32:f0:e8:c8:21:77:5e:3b:40:87:51:4d:6a:ad: a3:80:31:92:3b:64:3e:5d:8c:91:bf:f2:04:83:71: 2a:01:b3:cc:e5:e0:5c:9f:9b:a4:65:eb:1b:fc:8a: 35:ec:f4:cb:1a:79:dc:e3:c0:1e:73:d9:0a:c8:cf: f1:42:b0:39:83:96:70:3d:1f:a0:ed:10:44:b5:6b: 22:b1:0b:36:82:e6:25:a9:3f:b9:08:d8:95:81:d5: c6:58:7f:9d:31:cb:2f:52:01:ab:55:1d:18:dc:ee: 02:7f:13:b7:62:a4:be:18:84:90:b4:08:00:ed:c5: 8f:4b:02:cf:70:69:ce:eb:67:3d:c3:12:15:f2:5a: 0d:a7:c8:df:50:01:7c:ed:bb:7f:70:75:bd:7e:08: d6:73:c3:c0:e5:2c:3e:ee:ef:ca:e0:33:a0:15:ae: 4a:39:97:1c:aa:10:40:1f:0d:d0:89:72:0b:0c:fb: 07:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BD:69:40:37:D8:FF:33:8C:B9:D4:E6:E6:C8:08:71:AC:96:ED:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7da2d404-3d2a-3f91-945a-890dfa73775b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:4e:fa:d9:cc:b0:d1:96:a0:3f:28:19:b6:b2:d5:b0:9c:69: 76:e7:d0:cd:92:68:1b:78:07:aa:3a:0d:f2:8c:15:a4:9b:bd: 18:99:93:16:15:82:86:2a:38:48:5a:b2:0e:87:0e:7f:9d:cb: a2:61:16:25:74:58:23:d7:5c:4b:a6:87:fa:81:f7:cb:05:2f: ec:1b:d9:d0:a7:3d:eb:41:ee:68:f8:5a:e9:9b:01:4f:96:d3: be:3a:58:be:db:99:5e:5e:05:86:13:d3:06:b9:4a:70:87:f6: 44:4d:ef:9e:63:24:61:93:e9:bc:ca:74:50:a5:f0:4e:90:0f: f0:bc:63:19:f1:2d:13:84:74:c7:bb:5d:5f:d6:78:5d:86:a3: b6:ff:be:9b:17:ba:2b:6b:76:e5:73:7f:62:62:39:b0:60:9b: 24:39:b1:64:60:63:d1:86:65:97:99:fb:08:a4:b9:a0:6e:78: 27:13:6b:0f:30:7f:d8:f2:31:4a:a5:18:43:66:ad:0e:7a:d6: 3c:ad:5a:69:77:6d:f9:1c:54:d4:f5:b3:96:dc:7c:fc:af:e0: eb:17:ea:b7:43:65:2f:82:ea:75:11:e4:8a:e4:4f:31:21:d4: 16:5c:70:b5:7a:4c:ee:a0:a9:0f:dd:3c:20:75:3a:cc:82:3b: c0:1b:4e:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSjMFexIbkxaz0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NWJjMWU1YzItMzM3Mi00NThlLTlkMTctOGI4ODM2YTFiNDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXR1sbP+jkHfwwWn6YFV+mGy1VyY8n/wJXYK SlCQOTQbtymb5SUIaMZszcpWqIkLCjS4o6BWTg+4xv4xqyIle7YamlSvqr0n14k0 MvDoyCF3XjtAh1FNaq2jgDGSO2Q+XYyRv/IEg3EqAbPM5eBcn5ukZesb/Io17PTL Gnnc48Aec9kKyM/xQrA5g5ZwPR+g7RBEtWsisQs2guYlqT+5CNiVgdXGWH+dMcsv UgGrVR0Y3O4CfxO3YqS+GISQtAgA7cWPSwLPcGnO62c9wxIV8loNp8jfUAF87bt/ cHW9fgjWc8PA5Sw+7u/K4DOgFa5KOZccqhBAHw3QiXILDPsHuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOy9aUA32P8zjLnU5ubICHGslu1yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2RhMmQ0MDQtM2QyYS0z ZjkxLTk0NWEtODkwZGZhNzM3NzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9nQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhO+tnMsNGWoD8oGbay1bCcaXbn0M2SaBt4B6o6DfKMFaSbvRiZkxYV goYqOEhasg6HDn+dy6JhFiV0WCPXXEumh/qB98sFL+wb2dCnPetB7mj4WumbAU+W 0746WL7bmV5eBYYT0wa5SnCH9kRN755jJGGT6bzKdFCl8E6QD/C8YxnxLROEdMe7 XV/WeF2Go7b/vpsXuitrduVzf2JiObBgmyQ5sWRgY9GGZZeZ+wikuaBueCcTaw8w f9jyMUqlGENmrQ561jytWml3bfkcVNT1s5bcfPyv4OsX6rdDZS+C6nUR5IrkTzEh 1BZccLV6TO6gqQ/dPCB1OsyCO8AbTo8= -----END CERTIFICATE-----Generated at Thu Mar 26 03:42:10 2026 by rpki-client