$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8386c20-44b6-35c1-8995-75d3f78ffde7.roa File: a8386c20-44b6-35c1-8995-75d3f78ffde7.roa (raw, json) Hash identifier: MHtfckhFlZwm40lE4bxY9GzcPdBTwFp8gXbrnlpe0kA= Subject key identifier: 49:AC:B5:04:CB:0D:29:FE:C7:54:75:0A:E2:C2:F8:29:26:63:37:20 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1F4A28A7E7FAE14B6484FA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8386c20-44b6-35c1-8995-75d3f78ffde7.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.215.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:28:a7:e7:fa:e1:4b:64:84:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=8f1fa6aa-9ed7-4ba0-84b9-b4ab719be2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:85:7b:97:81:1e:37:b4:9c:af:ed:50:1a:c6: f8:58:f2:14:8c:2b:a5:d8:89:71:58:01:3c:73:b9: d0:60:fb:3e:51:72:7e:76:74:03:18:28:f5:62:7f: e5:06:43:e6:bc:d9:14:8a:0a:c5:03:b5:04:cf:84: 96:e0:d6:70:23:1e:0b:08:0d:cf:04:12:b4:3d:15: 72:b8:09:83:49:ce:09:61:eb:cc:87:19:4b:da:8d: be:ce:89:4f:ff:f2:50:f7:0a:3e:b8:62:76:f7:95: 5a:21:c7:dc:c0:15:40:51:7b:e1:36:c6:b0:dd:17: 0a:a1:d3:c4:78:c6:98:5f:df:bd:aa:b4:07:84:a0: e1:c1:a7:b1:1b:44:b6:44:15:c8:ca:73:c7:51:c4: 28:84:d0:c9:e0:f0:93:2f:81:b9:6f:b5:cf:65:33: 10:7c:45:83:2a:00:ea:00:e8:20:ca:7a:93:3f:36: 3c:6f:28:61:fe:2c:3a:93:6a:aa:44:d1:07:97:4b: 44:ec:26:17:61:46:8e:65:56:2e:e3:66:e2:d4:87: c5:6a:fd:4f:76:c9:19:1a:39:8d:13:ea:75:04:d8: f1:56:9e:cd:26:4f:89:20:e1:86:a3:ba:23:5e:fc: d9:a6:e3:d7:72:c8:e4:4c:ba:c1:57:3d:12:9e:ff: 66:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AC:B5:04:CB:0D:29:FE:C7:54:75:0A:E2:C2:F8:29:26:63:37:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8386c20-44b6-35c1-8995-75d3f78ffde7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:bf:cb:6e:01:22:63:44:0a:b4:a8:55:59:14:ef:28:c7:cc: ca:98:b9:19:1c:17:23:2f:63:50:4e:77:24:a1:ea:94:0e:8c: 8b:13:f6:75:53:c0:27:db:e7:21:04:75:d9:73:13:4c:06:20: e3:72:1a:42:9c:4a:40:91:d3:ef:5a:c9:e6:e2:3d:33:c1:34: e1:9b:5f:a5:4a:e3:c6:e4:9a:c1:8d:3b:a5:9e:67:69:bf:2c: cd:ee:1a:31:fe:e3:65:6e:3d:9d:57:c0:f4:68:ba:6a:bc:47: 44:91:0d:4c:23:ec:9f:3a:bb:36:a3:35:04:97:f6:09:bf:11: 7e:65:82:0a:54:4a:81:df:94:69:41:9a:b7:6b:ef:01:ec:78: 7b:d2:c7:25:82:78:ea:b3:10:3f:40:f1:d4:00:31:be:a4:72: 68:55:39:52:e6:a7:18:8f:94:11:38:f5:31:f3:f5:17:10:6c: 09:32:02:53:23:b4:35:af:be:eb:c8:f9:92:f2:3c:74:ca:c9: 10:80:ab:2a:6f:17:74:97:88:46:50:b0:ac:bb:15:68:1c:ad: 51:9d:1f:80:6b:ba:36:56:56:fd:a4:8d:97:fe:db:9b:2b:04: ce:d6:7d:c4:a5:33:43:66:42:88:6a:ae:5f:74:c4:bc:e9:bf: 26:6c:7c:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSiin5/rhS2SE+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk OGYxZmE2YWEtOWVkNy00YmEwLTg0YjktYjRhYjcxOWJlMmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYV7l4EeN7Scr+1QGsb4WPIUjCul2IlxWAE8 c7nQYPs+UXJ+dnQDGCj1Yn/lBkPmvNkUigrFA7UEz4SW4NZwIx4LCA3PBBK0PRVy uAmDSc4JYevMhxlL2o2+zolP//JQ9wo+uGJ295VaIcfcwBVAUXvhNsaw3RcKodPE eMaYX9+9qrQHhKDhwaexG0S2RBXIynPHUcQohNDJ4PCTL4G5b7XPZTMQfEWDKgDq AOggynqTPzY8byhh/iw6k2qqRNEHl0tE7CYXYUaOZVYu42bi1IfFav1PdskZGjmN E+p1BNjxVp7NJk+JIOGGo7ojXvzZpuPXcsjkTLrBVz0Snv9mEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmstQTLDSn+x1R1CuLC+CkmYzcgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTgzODZjMjAtNDRiNi0z NWMxLTg5OTUtNzVkM2Y3OGZmZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9dmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2/y24BImNECrSoVVkU7yjHzMqYuRkcFyMvY1BOdySh6pQOjIsT9nVT wCfb5yEEddlzE0wGIONyGkKcSkCR0+9ayebiPTPBNOGbX6VK48bkmsGNO6WeZ2m/ LM3uGjH+42VuPZ1XwPRoumq8R0SRDUwj7J86uzajNQSX9gm/EX5lggpUSoHflGlB mrdr7wHseHvSxyWCeOqzED9A8dQAMb6kcmhVOVLmpxiPlBE49THz9RcQbAkyAlMj tDWvvuvI+ZLyPHTKyRCAqypvF3SXiEZQsKy7FWgcrVGdH4BrujZWVv2kjZf+25sr BM7WfcSlM0NmQohqrl90xLzpvyZsfCw= -----END CERTIFICATE-----Generated at Thu Mar 26 16:08:04 2026 by rpki-client