$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81fcfc31-ab85-3062-89f3-8a871db270da.roa File: 81fcfc31-ab85-3062-89f3-8a871db270da.roa (raw, json) Hash identifier: DCs0Uq2GRgtnFaCkv2zFiYI4+JQ3t9ewT3BxGB8bC/0= Subject key identifier: F3:82:A0:E1:9C:DC:D8:90:7F:2B:37:9B:B4:A1:24:C4:AE:5E:67:1C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1F4A31AD39E5C0E1BD3828C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81fcfc31-ab85-3062-89f3-8a871db270da.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 16625 IP address blocks: 23.216.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:31:ad:39:e5:c0:e1:bd:38:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=4330913a-3ffc-467e-92f2-6d09c24f72d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:13:0f:73:b6:1d:86:70:41:4a:7a:13:88:9e: 9a:cb:a4:0a:0e:d2:80:50:fe:4c:1b:97:65:11:30: 45:88:f2:aa:6c:64:9f:b3:76:b4:5f:c7:8e:8f:cb: d5:29:e6:07:7e:18:ce:b8:c1:25:09:20:78:55:0a: e0:26:e8:b7:e3:07:37:42:9e:05:0d:38:c0:55:b6: a8:f5:16:27:ac:c0:79:69:f9:71:58:6a:48:61:35: ba:5d:46:2d:29:6f:53:58:86:64:d1:83:e6:05:99: 32:ea:0c:fa:f8:85:53:62:16:2a:be:29:10:78:bf: 83:fc:31:b3:0e:26:ae:ce:b8:bf:8b:06:c8:be:9f: fd:3b:8d:d0:17:69:16:85:80:a9:24:50:23:49:18: 1a:6a:7d:ab:dd:b2:ae:c0:d1:ae:34:cb:aa:57:a6: 77:fb:56:b3:61:8a:54:07:26:30:09:8c:71:d5:ef: 67:95:95:cd:18:83:a6:f7:0f:b2:76:53:c8:59:45: 8b:61:e1:56:bd:34:c5:76:ed:1d:6d:43:d6:c1:b8: 21:37:57:ae:eb:39:87:ca:c1:4e:f2:df:ed:4d:ea: 80:fa:98:2b:6a:6a:88:bf:b4:af:c3:a9:25:06:36: 8d:d1:0d:c2:cb:8a:f2:16:3e:1c:a6:ca:64:3d:0d: 94:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:82:A0:E1:9C:DC:D8:90:7F:2B:37:9B:B4:A1:24:C4:AE:5E:67:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81fcfc31-ab85-3062-89f3-8a871db270da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:9a:bc:1f:f7:c3:d5:df:d5:05:e7:57:95:4a:60:73:6f:7e: e6:d9:3e:16:db:fa:b7:af:3d:29:85:91:7b:e5:42:41:c8:cc: 0f:98:8d:aa:2e:0f:9c:56:10:ca:4d:e4:cb:7b:c0:2d:9f:5d: 3c:ed:9f:0e:20:2a:db:d0:64:6b:b2:62:b5:4b:9d:67:01:2d: 7c:d2:a1:6a:56:28:2d:75:b7:da:4c:e0:f2:d2:97:3d:cf:e5: 00:84:2e:d4:75:78:40:f6:ff:82:94:d8:83:5a:23:bb:b1:29: f9:3f:10:e6:33:e2:6c:93:12:fe:f9:56:30:c1:52:e6:8d:c3: 55:a9:c5:9a:03:84:4a:6d:3e:00:4c:b5:64:6d:ac:86:38:9b: f1:97:17:02:29:86:21:ca:ff:dd:1a:1f:23:b8:df:e1:1b:e0: 95:62:85:10:6e:e2:38:fe:3c:a5:a9:7a:08:7a:bb:42:20:a1: 73:fd:db:09:97:2b:74:4c:19:fa:45:fa:58:ce:ef:8e:7f:4d: b2:c4:c3:90:db:a0:05:f1:d1:c5:d5:c3:dc:3e:06:01:f2:35: 5a:f9:7a:9c:1f:b6:36:06:c0:7e:e1:78:4f:50:66:c3:9c:da: df:16:08:42:19:6e:ab:ad:15:f2:08:90:06:26:78:d6:ce:88: c6:4a:32:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSjGtOeXA4b04KMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NDMzMDkxM2EtM2ZmYy00NjdlLTkyZjItNmQwOWMyNGY3MmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRMPc7YdhnBBSnoTiJ6ay6QKDtKAUP5MG5dl ETBFiPKqbGSfs3a0X8eOj8vVKeYHfhjOuMElCSB4VQrgJui34wc3Qp4FDTjAVbao 9RYnrMB5aflxWGpIYTW6XUYtKW9TWIZk0YPmBZky6gz6+IVTYhYqvikQeL+D/DGz Diauzri/iwbIvp/9O43QF2kWhYCpJFAjSRgaan2r3bKuwNGuNMuqV6Z3+1azYYpU ByYwCYxx1e9nlZXNGIOm9w+ydlPIWUWLYeFWvTTFdu0dbUPWwbghN1eu6zmHysFO 8t/tTeqA+pgramqIv7Svw6klBjaN0Q3Cy4ryFj4cpspkPQ2UDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOCoOGc3NiQfys3m7ShJMSuXmccMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODFmY2ZjMzEtYWI4NS0z MDYyLTg5ZjMtOGE4NzFkYjI3MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9jQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+avB/3w9Xf1QXnV5VKYHNvfubZPhbb+revPSmFkXvlQkHIzA+Yjaou D5xWEMpN5Mt7wC2fXTztnw4gKtvQZGuyYrVLnWcBLXzSoWpWKC11t9pM4PLSlz3P 5QCELtR1eED2/4KU2INaI7uxKfk/EOYz4myTEv75VjDBUuaNw1WpxZoDhEptPgBM tWRtrIY4m/GXFwIphiHK/90aHyO43+Eb4JVihRBu4jj+PKWpegh6u0IgoXP92wmX K3RMGfpF+ljO745/TbLEw5DboAXx0cXVw9w+BgHyNVr5epwftjYGwH7heE9QZsOc 2t8WCEIZbqutFfIIkAYmeNbOiMZKMlQ= -----END CERTIFICATE-----Generated at Thu Mar 26 03:44:29 2026 by rpki-client