$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c85bad1-cb05-31c0-9e44-4272a7b78bb7.roa File: 8c85bad1-cb05-31c0-9e44-4272a7b78bb7.roa (raw, json) Hash identifier: oD9MrRb3TUajHO9AS2B6JRBI/aBshAu3Qg/6DNRiujw= Subject key identifier: 41:D5:9E:97:AD:D1:DD:35:02:C6:8D:91:29:7F:A4:89:40:71:75:AE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2A74CF93F40FDAB5AA7D64C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c85bad1-cb05-31c0-9e44-4272a7b78bb7.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 16625 IP address blocks: 23.218.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:cf:93:f4:0f:da:b5:aa:7d:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=f4828cf9-ea41-4b9c-822e-8f0534842d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:26:6c:26:0c:13:d4:43:9d:5c:3a:0f:56:24: 1c:dd:da:c8:64:67:01:4f:7a:1d:b0:3a:ce:59:32: ac:3b:31:61:0d:e5:13:97:6d:6f:91:29:80:23:3c: 7f:21:4a:53:d7:a3:fe:1e:aa:7e:f4:28:8d:72:fb: 10:42:96:d2:ee:08:4c:b5:66:96:9c:ee:cd:45:36: 20:23:74:6a:b6:07:e8:33:8d:ff:b1:f7:e9:01:33: 0f:74:a7:36:33:50:18:a9:07:5d:5e:9c:d2:48:20: 0a:da:f9:70:27:3c:25:b7:dc:49:96:65:68:30:73: b4:6c:32:13:ed:f5:bc:15:13:7a:a0:02:58:b9:aa: 62:d5:18:a4:3a:64:d7:6e:0c:f4:63:7d:5f:30:58: 5d:a4:a6:f8:a9:9d:32:a9:3e:42:d6:d1:a8:4b:0c: 6e:4f:07:be:6d:89:d8:93:5d:df:ad:a9:2b:3f:98: d0:24:3e:93:f6:d3:8b:b8:aa:62:c0:02:6f:9e:a1: 20:7e:15:df:91:29:95:b2:10:e4:a8:bd:f9:a3:17: 83:4d:56:9a:dd:63:88:72:34:43:95:5f:d6:c0:24: 17:5b:ff:67:00:b1:76:56:71:55:b4:6a:3f:0d:55: ef:d8:a3:7b:4a:8b:c0:e3:56:43:24:23:19:de:1f: 09:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D5:9E:97:AD:D1:DD:35:02:C6:8D:91:29:7F:A4:89:40:71:75:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c85bad1-cb05-31c0-9e44-4272a7b78bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ea:e3:bf:06:88:d4:2e:1e:61:89:6d:2c:d0:34:f7:04:b6: a9:ee:24:bb:a4:6e:46:39:53:53:94:3d:6c:44:61:23:34:f8: 25:55:80:d4:1d:c1:c7:70:16:79:81:1d:48:99:32:4c:9f:ac: b9:46:4b:13:02:75:c6:e2:57:6a:8e:6e:b8:30:60:2e:81:2e: 3b:e4:bd:86:e8:fc:24:ef:5b:06:78:bb:cc:81:3f:c4:d1:af: 8f:f9:58:4a:60:b5:f0:79:a8:72:45:46:74:e3:4c:f2:dd:2b: 6f:f8:9f:83:cb:a2:64:9a:d6:ef:1e:47:26:a9:0a:51:0d:13: 55:d0:20:c5:be:3b:80:b7:c3:ec:5c:c7:ad:7c:1f:13:c8:d1: d4:76:ed:52:5a:33:58:49:a2:20:cf:19:22:b4:c4:7d:e7:8c: 49:ad:23:5f:7d:85:60:e1:e8:ed:5c:5f:21:11:50:4d:0d:f8: 76:34:bb:30:2e:75:95:b3:1d:28:b4:98:ed:b2:0f:90:3b:50: 25:aa:8e:3f:66:d8:14:5b:9b:e7:7d:6a:9a:6e:44:4f:c5:c1: 31:cd:7d:e1:2f:24:5a:84:94:f6:f6:f6:94:bc:60:40:f7:8c: d0:f2:c7:f6:fc:dc:0b:97:83:dc:6d:ff:02:63:97:a4:b3:f9: bd:94:1c:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdM+T9A/atap9ZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZjQ4MjhjZjktZWE0MS00YjljLTgyMmUtOGYwNTM0ODQyZDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCZsJgwT1EOdXDoPViQc3drIZGcBT3odsDrO WTKsOzFhDeUTl21vkSmAIzx/IUpT16P+Hqp+9CiNcvsQQpbS7ghMtWaWnO7NRTYg I3RqtgfoM43/sffpATMPdKc2M1AYqQddXpzSSCAK2vlwJzwlt9xJlmVoMHO0bDIT 7fW8FRN6oAJYuapi1RikOmTXbgz0Y31fMFhdpKb4qZ0yqT5C1tGoSwxuTwe+bYnY k13frakrP5jQJD6T9tOLuKpiwAJvnqEgfhXfkSmVshDkqL35oxeDTVaa3WOIcjRD lV/WwCQXW/9nALF2VnFVtGo/DVXv2KN7SovA41ZDJCMZ3h8JOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHVnpet0d01AsaNkSl/pIlAcXWuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGM4NWJhZDEtY2IwNS0z MWMwLTllNDQtNDI3MmE3Yjc4YmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9qAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/q478GiNQuHmGJbSzQNPcEtqnuJLukbkY5U1OUPWxEYSM0+CVVgNQd wcdwFnmBHUiZMkyfrLlGSxMCdcbiV2qObrgwYC6BLjvkvYbo/CTvWwZ4u8yBP8TR r4/5WEpgtfB5qHJFRnTjTPLdK2/4n4PLomSa1u8eRyapClENE1XQIMW+O4C3w+xc x618HxPI0dR27VJaM1hJoiDPGSK0xH3njEmtI199hWDh6O1cXyERUE0N+HY0uzAu dZWzHSi0mO2yD5A7UCWqjj9m2BRbm+d9appuRE/FwTHNfeEvJFqElPb29pS8YED3 jNDyx/b83AuXg9xt/wJjl6Sz+b2UHC8= -----END CERTIFICATE-----Generated at Thu Mar 26 08:07:29 2026 by rpki-client