$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a02b2597-7ba1-3b9c-b78e-c4848f474572.roa File: a02b2597-7ba1-3b9c-b78e-c4848f474572.roa (raw, json) Hash identifier: aOZk9TkKCeDXJuu32YJ+MMrmNOdb9GSwRVjkWHDiYS4= Subject key identifier: 1F:4C:BE:3E:92:56:3B:9F:6F:9D:A3:FD:F9:E1:18:79:33:AF:5A:2F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2A74D03350BE4D4831D07120 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a02b2597-7ba1-3b9c-b78e-c4848f474572.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 16625 IP address blocks: 23.218.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:d0:33:50:be:4d:48:31:d0:71:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=e27ce3c9-20cd-4f9a-a8fe-d89c65af516e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7e:60:2b:34:0e:23:15:8a:c8:90:60:f8:40: d3:20:9c:a7:9c:83:66:8b:54:06:a7:7a:76:2e:ef: 51:af:2e:68:10:2e:70:53:30:ce:0a:b9:5d:f9:9a: 42:2c:24:db:4e:c9:f8:65:40:5a:36:c0:9f:c8:0a: ac:b4:b7:0b:13:2a:e8:d6:e2:70:b5:8a:99:17:ae: c5:1a:44:e4:9a:c3:09:4c:1c:ba:2a:85:b9:73:17: af:f9:a3:af:c7:20:63:1c:cf:bd:17:4a:66:9a:cf: c5:10:71:ad:77:f8:a5:00:d0:63:fb:a6:19:23:95: f8:4e:32:d7:e3:92:39:b2:b6:b2:3d:2c:2f:57:43: bf:30:e6:cb:34:a4:b7:06:f4:81:cc:37:45:20:ff: f3:54:eb:5d:03:7a:28:3c:3a:c7:fa:b1:f9:b4:d7: 25:38:43:70:53:2b:14:00:ea:2e:dd:e6:59:72:c9: 74:b9:32:7e:f9:55:dd:7f:a4:fe:d7:ea:fb:e3:f8: de:9e:72:c6:a6:ad:67:8c:b0:24:90:d3:80:73:35: c0:34:a9:b6:5d:42:38:08:f9:bd:26:38:42:42:47: 1e:b3:31:c6:79:b0:f8:6d:3c:1c:fa:1a:14:40:12: 1c:82:51:bd:c5:78:7c:81:ae:70:72:1d:9e:61:59: 57:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4C:BE:3E:92:56:3B:9F:6F:9D:A3:FD:F9:E1:18:79:33:AF:5A:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a02b2597-7ba1-3b9c-b78e-c4848f474572.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:1c:89:ec:fc:d5:71:77:5d:87:de:4d:d7:91:61:03:87:c5: b6:4a:d7:cd:c9:e0:c2:18:2e:1a:02:26:d2:05:f7:25:94:df: ce:d8:90:67:5e:49:2f:7a:71:6e:e1:2e:57:1a:1a:43:ac:ff: b5:da:33:5d:07:e4:bb:18:a3:23:22:9d:0c:4e:13:44:a0:e9: c2:84:4b:08:c3:95:f3:d7:04:9e:b1:b6:3f:44:2d:8f:51:76: 99:96:d0:0d:14:bb:15:17:51:c8:dd:52:bc:79:5d:c7:23:30: 04:da:c3:72:6a:68:ce:25:39:01:7e:41:13:59:2c:a9:2c:18: 5e:ec:a8:e9:00:0d:2e:19:1e:f0:04:ce:27:82:53:59:7d:b6: e9:65:87:55:ef:fd:ff:22:b2:59:6a:e6:8e:50:b9:47:45:5f: 3b:60:24:e8:97:30:42:b6:e7:e2:f1:6d:3f:ce:d2:b6:ed:91: f3:06:e5:49:8e:a7:94:e1:8f:71:69:60:ed:2f:de:a5:a2:50: 5f:96:8d:22:06:d6:72:a1:fc:e8:d7:3d:06:5c:b6:eb:f4:2d: c6:ee:44:6d:63:a6:36:be:02:45:7a:c5:21:a2:1b:03:dd:34: aa:af:e6:ec:d3:fe:cc:8d:6a:89:b0:8e:6d:91:44:14:41:81: 11:2d:12:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdNAzUL5NSDHQcSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZTI3Y2UzYzktMjBjZC00ZjlhLWE4ZmUtZDg5YzY1YWY1MTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu35gKzQOIxWKyJBg+EDTIJynnINmi1QGp3p2 Lu9Rry5oEC5wUzDOCrld+ZpCLCTbTsn4ZUBaNsCfyAqstLcLEyro1uJwtYqZF67F GkTkmsMJTBy6KoW5cxev+aOvxyBjHM+9F0pmms/FEHGtd/ilANBj+6YZI5X4TjLX 45I5srayPSwvV0O/MObLNKS3BvSBzDdFIP/zVOtdA3ooPDrH+rH5tNclOENwUysU AOou3eZZcsl0uTJ++VXdf6T+1+r74/jennLGpq1njLAkkNOAczXANKm2XUI4CPm9 JjhCQkceszHGebD4bTwc+hoUQBIcglG9xXh8ga5wch2eYVlXTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9Mvj6SVjufb52j/fnhGHkzr1ovMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTAyYjI1OTctN2JhMS0z YjljLWI3OGUtYzQ4NDhmNDc0NTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9rQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkciez81XF3XYfeTdeRYQOHxbZK183J4MIYLhoCJtIF9yWU387YkGde SS96cW7hLlcaGkOs/7XaM10H5LsYoyMinQxOE0Sg6cKESwjDlfPXBJ6xtj9ELY9R dpmW0A0UuxUXUcjdUrx5XccjMATaw3JqaM4lOQF+QRNZLKksGF7sqOkADS4ZHvAE zieCU1l9tullh1Xv/f8isllq5o5QuUdFXztgJOiXMEK25+LxbT/O0rbtkfMG5UmO p5Thj3FpYO0v3qWiUF+WjSIG1nKh/OjXPQZctuv0LcbuRG1jpja+AkV6xSGiGwPd NKqv5uzT/syNaomwjm2RRBRBgREtEuk= -----END CERTIFICATE-----Generated at Thu Mar 26 03:53:52 2026 by rpki-client