$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9504ebaf-269d-30a4-8cad-5d32b935f34e.roa File: 9504ebaf-269d-30a4-8cad-5d32b935f34e.roa (raw, json) Hash identifier: KHYiLNAdSOV/EZKWLrtZikPQ3S2uuusejvHvrcb3p9s= Subject key identifier: 87:85:86:01:FA:FA:25:32:9F:17:58:1D:97:43:53:C2:33:5B:A8:C7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2A74CAD9FCD52DDF553C4600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9504ebaf-269d-30a4-8cad-5d32b935f34e.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 20940 IP address blocks: 23.218.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:ca:d9:fc:d5:2d:df:55:3c:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=18149a10-a0ba-4c84-98f1-1c56de3c7970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:69:eb:51:64:0c:9e:37:03:a4:8b:d9:95:90: 05:a4:8c:4e:a0:90:93:f7:75:ba:c0:7b:10:f4:ba: db:74:34:a7:34:40:db:19:a1:4a:25:c8:26:7d:9b: 86:83:7e:86:3f:be:88:79:65:98:1f:78:73:02:ea: 5c:2a:c3:48:ff:2b:9c:56:32:53:4c:2a:c2:5b:23: 07:b2:34:49:59:3e:86:a4:47:e6:92:f5:92:fd:71: cf:d9:14:d9:17:b7:da:f9:96:c2:5b:e3:9f:31:5a: 5b:83:a0:29:9c:10:84:d8:b4:e9:bd:ff:f5:89:56: bb:0c:5e:de:4b:a0:5d:38:3d:94:80:17:c7:a9:57: 05:85:b6:1e:47:f7:79:e6:67:11:c3:7b:a9:ab:96: 43:37:b1:15:fb:62:00:a2:5a:70:52:05:81:a9:32: 91:7a:77:dd:d7:eb:b9:b0:f0:93:ae:31:86:56:c8: a8:18:1c:b3:16:c1:88:82:a1:c8:ca:91:64:7e:9a: 8e:7f:b1:72:41:da:71:d9:b9:ec:3d:90:9f:21:87: bc:4f:ba:f9:48:89:e1:04:10:cb:b3:c0:89:8a:e0: 47:8e:0f:3e:ab:21:e9:94:b1:b9:bc:3d:e2:08:50: 37:60:c4:6a:31:5f:48:87:91:ea:07:f8:f4:37:c7: 69:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:85:86:01:FA:FA:25:32:9F:17:58:1D:97:43:53:C2:33:5B:A8:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9504ebaf-269d-30a4-8cad-5d32b935f34e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:87:e9:9e:63:79:54:76:a8:16:59:85:7d:df:bf:e6:7a:fb: 26:59:dc:43:c3:ae:a3:f6:2a:20:e8:05:2c:b4:c3:40:f8:f8: fc:bf:81:f9:6d:6c:a3:2b:53:e3:4f:a1:9b:37:d3:25:42:de: ae:b3:41:38:d6:ad:a8:73:4f:38:e7:9d:73:89:80:77:3a:2a: 85:1f:9e:8a:b9:37:43:0d:ca:89:69:bb:56:4d:30:d8:5e:b7: f7:5e:3f:fe:e9:c2:10:93:e7:7b:fd:02:62:94:ff:a3:43:8e: bc:04:46:4b:71:1f:52:e1:19:d6:b9:ad:2c:8c:22:f1:96:c0: f9:42:f3:62:ce:a7:9c:5c:1a:91:07:7c:18:53:d8:35:7e:00: 40:1a:b7:7e:fc:f2:de:be:01:99:9f:87:33:cc:fc:f0:d5:96: 21:f3:42:2a:19:76:a8:3f:23:2a:ec:b1:c9:46:3b:11:d9:c1: c7:ff:94:0a:2a:ab:d5:83:ce:56:0f:f8:86:d3:8b:d6:40:d6: 46:a3:73:0a:00:64:9c:24:cc:83:fe:75:b5:f7:dc:a5:ed:aa: 5f:ea:91:28:3a:ad:81:2a:1a:01:d2:0c:59:4a:3c:88:63:7c: 02:52:4f:3a:d6:2c:65:fd:ab:fa:03:7a:31:ec:10:54:97:48: 75:51:a9:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdMrZ/NUt31U8RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk MTgxNDlhMTAtYTBiYS00Yzg0LTk4ZjEtMWM1NmRlM2M3OTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimnrUWQMnjcDpIvZlZAFpIxOoJCT93W6wHsQ 9LrbdDSnNEDbGaFKJcgmfZuGg36GP76IeWWYH3hzAupcKsNI/yucVjJTTCrCWyMH sjRJWT6GpEfmkvWS/XHP2RTZF7fa+ZbCW+OfMVpbg6ApnBCE2LTpvf/1iVa7DF7e S6BdOD2UgBfHqVcFhbYeR/d55mcRw3upq5ZDN7EV+2IAolpwUgWBqTKRenfd1+u5 sPCTrjGGVsioGByzFsGIgqHIypFkfpqOf7FyQdpx2bnsPZCfIYe8T7r5SInhBBDL s8CJiuBHjg8+qyHplLG5vD3iCFA3YMRqMV9Ih5HqB/j0N8dp1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeFhgH6+iUynxdYHZdDU8IzW6jHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTUwNGViYWYtMjY5ZC0z MGE0LThjYWQtNWQzMmI5MzVmMzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9rfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqH6Z5jeVR2qBZZhX3fv+Z6+yZZ3EPDrqP2KiDoBSy0w0D4+Py/gflt bKMrU+NPoZs30yVC3q6zQTjWrahzTzjnnXOJgHc6KoUfnoq5N0MNyolpu1ZNMNhe t/deP/7pwhCT53v9AmKU/6NDjrwERktxH1LhGda5rSyMIvGWwPlC82LOp5xcGpEH fBhT2DV+AEAat3788t6+AZmfhzPM/PDVliHzQioZdqg/IyrssclGOxHZwcf/lAoq q9WDzlYP+IbTi9ZA1kajcwoAZJwkzIP+dbX33KXtql/qkSg6rYEqGgHSDFlKPIhj fAJSTzrWLGX9q/oDejHsEFSXSHVRqdU= -----END CERTIFICATE-----Generated at Thu Mar 26 12:46:29 2026 by rpki-client