$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afd72be9-4c55-3681-a88f-8b9a80d50fcb.roa File: afd72be9-4c55-3681-a88f-8b9a80d50fcb.roa (raw, json) Hash identifier: jTIRTr4QjsDuy37cJwHBzpcMr54piy14jyFR8XMN6nQ= Subject key identifier: 90:05:AC:73:05:0D:30:CF:55:E5:AC:44:63:B6:BA:C8:AF:B5:AA:04 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D237A3CDED915A5800DEFEE40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afd72be9-4c55-3681-a88f-8b9a80d50fcb.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.217.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3c:de:d9:15:a5:80:0d:ef:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=9012acf9-4e78-45e1-82d6-37da92ff9241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d8:69:c6:6e:7d:59:31:64:55:69:c0:a9:cf: 79:cf:0e:07:c0:75:2e:d0:7e:96:f2:c3:7c:63:fe: c2:cc:ad:90:ae:8a:0f:f7:c7:60:da:14:5d:9d:fb: 3e:4f:5b:71:15:f4:14:c2:7b:0a:93:35:0a:14:d7: dd:c2:e9:75:63:ea:13:c4:86:87:12:ba:f8:55:23: cb:54:77:f4:7f:b2:c5:86:fe:45:66:cf:2a:31:37: 91:30:00:21:9a:65:15:63:82:18:50:1e:2d:b2:3a: 15:aa:0c:60:53:51:d6:03:cb:55:03:29:a0:25:f5: 6b:03:8a:ae:32:cb:25:19:a7:cc:e9:35:49:e5:9f: 61:ca:a8:74:24:6a:1d:e8:fd:ae:e5:8c:72:d9:44: 7e:b3:e4:ca:cb:d8:5a:09:cc:02:01:2b:db:8c:06: b6:26:b6:3c:f8:b4:5f:3f:99:69:17:ee:bf:88:dd: d8:4c:2d:ab:8b:c9:61:37:df:cc:c1:b2:74:d7:08: 18:94:e2:02:93:c3:d3:79:6c:98:d4:90:6a:f8:e0: 0d:7c:23:60:d2:c8:83:0e:09:d8:73:b0:2c:6c:7d: 4d:6e:c1:f0:d2:34:2b:93:e0:26:9d:5c:29:34:5b: 1d:54:65:e5:38:3e:e4:9c:0c:fe:69:3c:0c:9b:c1: f0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:05:AC:73:05:0D:30:CF:55:E5:AC:44:63:B6:BA:C8:AF:B5:AA:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afd72be9-4c55-3681-a88f-8b9a80d50fcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:55:14:18:64:cc:05:12:55:ff:bb:17:86:e8:e8:d6:01:43: e1:cd:c4:cb:16:9f:54:47:af:67:31:36:03:8c:85:fe:4d:38: 36:7e:7e:0f:c3:96:cb:4d:dd:d7:f4:ab:71:cb:ce:ed:42:c6: 8f:45:a5:b9:a9:c2:eb:8c:6e:cc:78:89:42:8f:a8:32:1d:df: ed:a5:85:5b:ce:a5:10:a9:36:33:68:15:60:cc:43:f4:a3:14: 7e:d0:10:83:8e:fd:e0:64:f9:0e:17:f9:d5:14:1a:7f:02:07: 32:37:05:07:fb:2d:2a:68:49:9f:94:ca:24:d8:20:14:f7:b0: 15:53:4a:fb:f6:89:c9:05:0d:bc:1e:5e:3c:d7:13:f5:c8:89: f5:b9:2b:76:a3:51:79:a5:0a:9e:ea:a7:f8:7e:33:75:1f:37: c8:2f:97:43:ef:b8:61:55:c2:f1:33:0d:05:48:4e:e9:22:00: 7c:7d:b4:cd:6f:65:3c:ba:38:7c:f3:87:46:be:34:a1:b8:2c: e8:4b:cd:76:7c:bb:64:69:ff:de:88:15:18:67:13:c5:a2:b6: 79:27:49:02:4d:8c:d0:8d:9b:d6:13:d2:8b:f8:28:d3:c9:00: b7:e6:96:28:5e:25:1d:53:e6:5e:72:b0:f1:c6:bf:50:fc:16: 95:29:5c:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jejze2RWlgA3v7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OTAxMmFjZjktNGU3OC00NWUxLTgyZDYtMzdkYTkyZmY5MjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNhpxm59WTFkVWnAqc95zw4HwHUu0H6W8sN8 Y/7CzK2QrooP98dg2hRdnfs+T1txFfQUwnsKkzUKFNfdwul1Y+oTxIaHErr4VSPL VHf0f7LFhv5FZs8qMTeRMAAhmmUVY4IYUB4tsjoVqgxgU1HWA8tVAymgJfVrA4qu MsslGafM6TVJ5Z9hyqh0JGod6P2u5Yxy2UR+s+TKy9haCcwCASvbjAa2JrY8+LRf P5lpF+6/iN3YTC2ri8lhN9/MwbJ01wgYlOICk8PTeWyY1JBq+OANfCNg0siDDgnY c7AsbH1NbsHw0jQrk+AmnVwpNFsdVGXlOD7knAz+aTwMm8HwIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAFrHMFDTDPVeWsRGO2usivtaoEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWZkNzJiZTktNGM1NS0z NjgxLWE4OGYtOGI5YTgwZDUwZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9nIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpVFBhkzAUSVf+7F4bo6NYBQ+HNxMsWn1RHr2cxNgOMhf5NODZ+fg/D lstN3df0q3HLzu1Cxo9FpbmpwuuMbsx4iUKPqDId3+2lhVvOpRCpNjNoFWDMQ/Sj FH7QEIOO/eBk+Q4X+dUUGn8CBzI3BQf7LSpoSZ+UyiTYIBT3sBVTSvv2ickFDbwe XjzXE/XIifW5K3ajUXmlCp7qp/h+M3UfN8gvl0PvuGFVwvEzDQVITukiAHx9tM1v ZTy6OHzzh0a+NKG4LOhLzXZ8u2Rp/96IFRhnE8WitnknSQJNjNCNm9YT0ov4KNPJ ALfmliheJR1T5l5ysPHGv1D8FpUpXFo= -----END CERTIFICATE-----Generated at Thu Mar 26 13:56:16 2026 by rpki-client