$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8eaab3ff-75ff-315e-a8a3-dda82a0d93e3.roa File: 8eaab3ff-75ff-315e-a8a3-dda82a0d93e3.roa (raw, json) Hash identifier: rBXkI8KMBMYwUg9ZD7c8Z8NV/yMQzoz1+gyxzK2IxOE= Subject key identifier: B9:77:53:A0:AA:89:CD:EA:05:EF:7E:93:3C:46:31:C0:98:FA:BA:A2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D19B4C3A2C5E342FCADCD3800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8eaab3ff-75ff-315e-a8a3-dda82a0d93e3.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 20940 IP address blocks: 23.206.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:c3:a2:c5:e3:42:fc:ad:cd:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=67a92f1a-ae74-44b2-8712-01fffaedde4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bd:f9:15:55:7b:c9:5b:87:fd:ce:3a:a1:a1: d7:46:5e:17:95:04:c0:25:77:cc:5b:58:5e:07:da: 0f:83:1d:36:8b:49:54:86:44:89:9b:c4:9a:df:8d: 63:2e:b5:69:1f:6e:fa:8c:0a:17:09:6f:63:cd:d0: d6:80:7b:57:95:d9:35:49:15:74:52:07:db:55:ac: 99:43:d9:ba:1a:fc:25:27:39:95:81:3e:0d:71:15: be:2f:65:6e:c8:b0:80:39:0f:3d:88:22:c7:44:b4: bb:c3:b7:b9:d2:bd:d0:4c:3e:4b:b3:58:6a:b3:10: 37:0b:c4:fe:bf:ae:c7:d4:60:f4:c7:06:b4:53:8d: f5:31:6f:18:93:a6:d6:39:5c:fd:f9:28:9a:b6:f8: ae:5e:bf:02:42:d0:fe:ab:47:7c:7a:eb:e5:77:e2: a5:4c:e8:95:27:84:de:99:f3:23:51:65:0d:d6:df: d0:ae:54:42:e5:34:a1:ce:d6:47:7d:78:e2:47:e3: c7:8f:7a:ac:18:d9:94:69:7b:6e:81:80:72:43:e8: 75:3a:83:08:e9:7e:86:c4:f7:eb:60:d3:59:29:ac: e9:b5:16:b7:be:56:ed:d1:c1:5d:5e:8b:6b:42:fb: 01:2e:42:1a:45:71:25:15:e1:48:14:07:c5:4b:ba: 47:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:77:53:A0:AA:89:CD:EA:05:EF:7E:93:3C:46:31:C0:98:FA:BA:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8eaab3ff-75ff-315e-a8a3-dda82a0d93e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:4d:66:03:1a:4f:b3:0e:98:09:fb:46:fc:ce:a6:1a:17:08: 17:6e:16:7c:ae:33:0f:e2:97:0f:3c:f6:93:93:e3:d8:38:82: 33:e7:e7:88:22:14:bd:5e:b5:c2:74:ce:60:6d:5e:2d:34:59: 42:3a:79:a4:3e:1c:b0:ec:ce:fe:02:63:1b:f5:30:4d:6c:e5: 35:ff:17:4a:c1:4e:8c:6a:82:b9:b3:8b:29:77:06:21:da:99: 72:35:8c:84:64:0d:13:df:74:af:0f:6b:00:25:33:27:d8:e2: 10:34:56:25:14:1c:72:d6:1c:0d:18:51:8a:03:1b:33:76:26: d8:e9:c7:b9:8b:61:95:e2:f8:3d:2e:a4:08:94:db:d8:e6:b2: 19:a8:5c:0c:ff:e2:2b:6d:3e:af:b4:fd:2a:fa:2b:ca:49:dd: a2:c1:91:2f:c5:26:e8:67:74:ef:c2:36:6a:1d:d2:f6:ed:c0: 42:df:4b:19:b9:42:ea:c1:ef:2e:d5:10:55:58:64:48:29:e1: b1:90:d9:c0:e0:67:6b:99:e4:86:4a:fe:38:a8:30:9c:2a:c2: 87:e6:9d:67:92:43:83:40:53:23:a2:45:84:e8:99:d3:84:97: 8e:96:fc:50:90:b4:46:85:68:dd:6c:ec:ae:0b:2d:cc:b1:59: d3:7b:11:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtMOixeNC/K3NOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NjdhOTJmMWEtYWU3NC00NGIyLTg3MTItMDFmZmZhZWRkZTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj735FVV7yVuH/c46oaHXRl4XlQTAJXfMW1he B9oPgx02i0lUhkSJm8Sa341jLrVpH276jAoXCW9jzdDWgHtXldk1SRV0UgfbVayZ Q9m6GvwlJzmVgT4NcRW+L2VuyLCAOQ89iCLHRLS7w7e50r3QTD5Ls1hqsxA3C8T+ v67H1GD0xwa0U431MW8Yk6bWOVz9+SiatviuXr8CQtD+q0d8euvld+KlTOiVJ4Te mfMjUWUN1t/QrlRC5TShztZHfXjiR+PHj3qsGNmUaXtugYByQ+h1OoMI6X6GxPfr YNNZKazptRa3vlbt0cFdXotrQvsBLkIaRXElFeFIFAfFS7pHCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLl3U6Cqic3qBe9+kzxGMcCY+rqiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGVhYWIzZmYtNzVmZi0z MTVlLWE4YTMtZGRhODJhMGQ5M2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF876MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5NZgMaT7MOmAn7RvzOphoXCBduFnyuMw/ilw889pOT49g4gjPn54gi FL1etcJ0zmBtXi00WUI6eaQ+HLDszv4CYxv1ME1s5TX/F0rBToxqgrmziyl3BiHa mXI1jIRkDRPfdK8PawAlMyfY4hA0ViUUHHLWHA0YUYoDGzN2Jtjpx7mLYZXi+D0u pAiU29jmshmoXAz/4ittPq+0/Sr6K8pJ3aLBkS/FJuhndO/CNmod0vbtwELfSxm5 QurB7y7VEFVYZEgp4bGQ2cDgZ2uZ5IZK/jioMJwqwofmnWeSQ4NAUyOiRYTomdOE l46W/FCQtEaFaN1s7K4LLcyxWdN7EQY= -----END CERTIFICATE-----Generated at Thu Mar 26 10:08:16 2026 by rpki-client