$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8407dad9-44ac-32d5-8941-11814f4815f1.roa File: 8407dad9-44ac-32d5-8941-11814f4815f1.roa (raw, json) Hash identifier: tLNWRZBws+/F2b3NS7q8rmCz8x882YniIVbD6p7uGSg= Subject key identifier: 85:A1:E5:F4:00:1E:99:DC:60:AE:31:C8:E0:5D:6A:1C:DB:72:0E:3B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1F4A2C900B332F4E274B5C10 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8407dad9-44ac-32d5-8941-11814f4815f1.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.217.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:2c:90:0b:33:2f:4e:27:4b:5c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=9141ae2f-6043-4d20-9b0c-ae9cd88ad6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:35:9a:16:51:d2:22:44:c8:63:21:ba:94:dd: 97:ec:a7:8c:9b:8e:8b:9a:ac:4b:4a:42:c3:7b:70: 3d:00:66:6d:73:5c:c0:fc:8a:d1:88:1d:90:9d:08: 4f:d9:5c:4e:46:f4:69:f3:a5:8d:69:6b:a1:48:58: 39:71:8c:c2:8f:4e:01:ae:d1:81:fe:0f:e8:72:bf: 8c:8c:15:61:7d:3b:a3:1b:e9:ff:c4:ab:71:f3:70: bd:db:79:cb:07:84:4b:c9:78:11:ac:06:1e:49:30: e5:3b:09:3d:9b:6e:11:e3:0a:3b:94:05:a7:9f:41: 6a:87:32:2c:ec:2a:2a:15:58:a7:42:38:6c:3a:15: 73:88:55:92:5c:88:c5:a6:fd:64:a9:7b:81:21:3b: a3:18:50:92:02:f9:ba:b1:17:7c:56:d4:32:84:a5: d5:f1:59:82:1f:45:0f:11:fe:91:6e:64:a7:48:8e: 9f:a0:fa:9a:da:e3:f3:29:08:6f:15:f7:57:a3:0e: b5:e0:f2:76:6c:1e:ec:c8:0b:74:14:e2:8b:11:d9: 7b:be:6d:fb:f8:c4:19:6f:28:c4:7a:ef:46:6c:0d: 32:29:0f:6d:8e:71:8f:fe:43:a5:4b:96:47:45:d8: 56:96:97:87:39:1d:10:93:d2:a4:e2:b0:27:d8:88: 32:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A1:E5:F4:00:1E:99:DC:60:AE:31:C8:E0:5D:6A:1C:DB:72:0E:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8407dad9-44ac-32d5-8941-11814f4815f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:56:27:d4:0f:54:9e:af:06:79:30:37:30:bd:45:3b:52:4e: e7:82:f3:61:5d:56:90:e0:db:47:af:b7:d0:f1:de:82:92:3d: 5d:fd:74:aa:a1:02:45:d0:95:2a:29:49:67:4d:33:73:73:77: b0:80:5a:58:55:49:8a:1e:45:b4:4f:c5:df:f3:da:61:83:c8: 27:10:57:cf:4b:1b:de:1d:b7:f7:c9:57:95:ab:6f:a7:95:0a: 30:fb:5c:67:7e:22:f4:8b:0d:1b:44:b8:0a:39:06:1d:7f:cb: 10:4c:70:d4:b2:10:6b:dd:16:08:55:af:f7:81:49:4b:5a:94: 8f:a5:f0:f7:d8:ab:2f:67:be:11:5a:49:82:38:35:24:be:72: 7c:f4:83:a6:57:a0:11:05:ce:1d:14:2b:9a:b3:2d:64:7c:d1: ac:9c:34:14:ba:db:14:e2:6b:3f:62:d5:34:f6:83:39:ed:9b: 1a:49:ca:45:97:6f:fd:96:73:33:15:9a:69:5d:11:b2:0d:2d: 82:0a:84:95:3e:f4:98:11:bc:1a:b7:91:ba:6c:d2:a2:2c:89: 23:c4:cb:2b:74:8d:7b:20:ab:90:3d:ea:fe:3e:72:cd:18:0a: bb:06:18:00:7f:06:8e:bc:ae:6a:49:fb:08:55:61:03:72:11: 30:30:27:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSiyQCzMvTidLXBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk OTE0MWFlMmYtNjA0My00ZDIwLTliMGMtYWU5Y2Q4OGFkNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTWaFlHSIkTIYyG6lN2X7KeMm46LmqxLSkLD e3A9AGZtc1zA/IrRiB2QnQhP2VxORvRp86WNaWuhSFg5cYzCj04BrtGB/g/ocr+M jBVhfTujG+n/xKtx83C923nLB4RLyXgRrAYeSTDlOwk9m24R4wo7lAWnn0FqhzIs 7CoqFVinQjhsOhVziFWSXIjFpv1kqXuBITujGFCSAvm6sRd8VtQyhKXV8VmCH0UP Ef6RbmSnSI6foPqa2uPzKQhvFfdXow614PJ2bB7syAt0FOKLEdl7vm37+MQZbyjE eu9GbA0yKQ9tjnGP/kOlS5ZHRdhWlpeHOR0Qk9Kk4rAn2IgyywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWh5fQAHpncYK4xyOBdahzbcg47MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODQwN2RhZDktNDRhYy0z MmQ1LTg5NDEtMTE4MTRmNDgxNWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9nUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJWJ9QPVJ6vBnkwNzC9RTtSTueC82FdVpDg20evt9Dx3oKSPV39dKqh AkXQlSopSWdNM3Nzd7CAWlhVSYoeRbRPxd/z2mGDyCcQV89LG94dt/fJV5Wrb6eV CjD7XGd+IvSLDRtEuAo5Bh1/yxBMcNSyEGvdFghVr/eBSUtalI+l8PfYqy9nvhFa SYI4NSS+cnz0g6ZXoBEFzh0UK5qzLWR80aycNBS62xTiaz9i1TT2gzntmxpJykWX b/2WczMVmmldEbINLYIKhJU+9JgRvBq3kbps0qIsiSPEyyt0jXsgq5A96v4+cs0Y CrsGGAB/Bo68rmpJ+whVYQNyETAwJ0Y= -----END CERTIFICATE-----Generated at Thu Mar 26 03:59:07 2026 by rpki-client