$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a16783d6-231d-32cf-9493-8f84c2aa436d.roa File: a16783d6-231d-32cf-9493-8f84c2aa436d.roa (raw, json) Hash identifier: b7T+57+mFqgUcpQTK9sFPna7DP53OVWZLxp7wHNpB58= Subject key identifier: 84:50:8A:ED:DD:EA:62:6E:C4:1B:8E:33:E9:33:0D:7C:78:60:D0:7C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1B1A5699C92C1A930B279800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a16783d6-231d-32cf-9493-8f84c2aa436d.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 16625 IP address blocks: 23.209.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:56:99:c9:2c:1a:93:0b:27:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=e32a84c9-eb04-4e6f-8c1d-5f5a308f4c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4b:b8:e8:92:1e:cd:fd:de:06:a2:48:83:8d: 80:33:95:ef:1c:27:3d:c5:d4:b7:b0:07:1c:23:17: 0e:c6:55:65:37:8c:44:2f:c3:54:a6:ca:c4:b9:cc: 93:b6:74:67:19:83:1f:01:34:23:f2:da:64:a3:98: f1:e5:bc:60:51:5d:f1:aa:0e:44:20:4f:ff:aa:5c: ea:d5:85:c5:5a:14:6b:2a:a2:b2:36:9a:74:38:5d: 82:e2:0a:e7:a5:f0:f8:0d:6c:c9:21:27:03:ea:cd: fc:35:d4:dc:fc:a0:0a:7b:f0:58:1e:24:24:a8:42: 3f:ee:32:66:a1:e0:e4:58:12:9a:3b:20:ed:f4:32: 7e:48:64:14:99:02:d9:d5:69:a0:ea:7d:e6:b9:03: 27:50:b5:17:b2:05:89:03:27:6f:0e:17:53:16:a1: 1c:54:68:75:b2:79:91:4f:c1:be:a1:76:ac:7c:12: 17:e3:22:f4:31:32:fb:bd:3c:35:cd:dd:d9:d6:98: 57:fc:db:07:1d:57:6f:8e:e0:58:d5:5d:8c:40:a7: d9:1e:d4:f9:67:95:7d:05:31:d7:9a:82:ee:20:cc: 62:80:ec:e2:7b:45:3c:4c:c2:32:41:eb:e7:95:77: ce:17:b3:06:1b:19:90:45:82:fd:ce:12:71:65:42: 85:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:50:8A:ED:DD:EA:62:6E:C4:1B:8E:33:E9:33:0D:7C:78:60:D0:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a16783d6-231d-32cf-9493-8f84c2aa436d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:fd:0a:f1:7d:55:bb:f3:7f:b8:ed:84:c3:c0:03:8d:52:60: f8:bb:87:2a:bb:b6:23:05:b3:a8:c5:43:62:7d:a3:a6:c3:8c: ee:62:f5:83:7a:98:df:e3:fd:40:27:1a:cd:82:02:21:5e:53: 0f:3e:79:3d:18:ee:15:7f:e1:ba:68:29:7a:ed:75:9f:88:e2: d1:9f:df:45:18:7d:ac:61:78:ed:e3:18:85:64:44:a4:76:1a: a0:84:bf:d4:ca:f3:fb:f3:05:8e:bd:92:8c:30:d5:48:e2:1a: 31:01:40:86:da:a8:74:5a:de:c0:49:d1:d0:5c:3b:9d:d9:63: 5d:5b:39:3c:2e:fa:97:87:9a:f5:14:f3:ff:49:e9:25:80:ad: 76:c3:79:d1:c5:1b:01:bf:6b:0b:88:e0:a3:3d:07:d7:a4:40: 68:50:e2:5c:f8:f7:64:45:55:69:dc:60:04:a6:cc:65:c0:c9: 32:ec:f4:c1:98:75:d0:50:06:38:d6:bb:b2:09:23:78:4f:64: f7:77:90:73:49:b2:0d:18:d3:4d:b9:fe:a2:39:2b:4e:0e:1b: 51:60:08:51:5d:9a:b5:f0:ce:39:01:3f:57:00:09:80:fa:dc: 48:be:53:b0:a3:31:27:59:fe:79:3f:5f:fb:09:12:c7:77:4f: d4:2a:33:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGlaZySwakwsnmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk ZTMyYTg0YzktZWIwNC00ZTZmLThjMWQtNWY1YTMwOGY0YzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjku46JIezf3eBqJIg42AM5XvHCc9xdS3sAcc IxcOxlVlN4xEL8NUpsrEucyTtnRnGYMfATQj8tpko5jx5bxgUV3xqg5EIE//qlzq 1YXFWhRrKqKyNpp0OF2C4grnpfD4DWzJIScD6s38NdTc/KAKe/BYHiQkqEI/7jJm oeDkWBKaOyDt9DJ+SGQUmQLZ1Wmg6n3muQMnULUXsgWJAydvDhdTFqEcVGh1snmR T8G+oXasfBIX4yL0MTL7vTw1zd3Z1phX/NsHHVdvjuBY1V2MQKfZHtT5Z5V9BTHX moLuIMxigOzie0U8TMIyQevnlXfOF7MGGxmQRYL9zhJxZUKF7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRQiu3d6mJuxBuOM+kzDXx4YNB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTE2NzgzZDYtMjMxZC0z MmNmLTk0OTMtOGY4NGMyYWE0MzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF9GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH79CvF9Vbvzf7jthMPAA41SYPi7hyq7tiMFs6jFQ2J9o6bDjO5i9YN6 mN/j/UAnGs2CAiFeUw8+eT0Y7hV/4bpoKXrtdZ+I4tGf30UYfaxheO3jGIVkRKR2 GqCEv9TK8/vzBY69koww1UjiGjEBQIbaqHRa3sBJ0dBcO53ZY11bOTwu+peHmvUU 8/9J6SWArXbDedHFGwG/awuI4KM9B9ekQGhQ4lz492RFVWncYASmzGXAyTLs9MGY ddBQBjjWu7IJI3hPZPd3kHNJsg0Y0025/qI5K04OG1FgCFFdmrXwzjkBP1cACYD6 3Ei+U7CjMSdZ/nk/X/sJEsd3T9QqM2A= -----END CERTIFICATE-----Generated at Thu Mar 26 03:44:00 2026 by rpki-client