$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5523cd5-104d-3011-b66d-ba564b4e42aa.roa File: b5523cd5-104d-3011-b66d-ba564b4e42aa.roa (raw, json) Hash identifier: VdU2RBKWAL30NuRDMHTGHwaUayR6weQMzHEfbCGdX8A= Subject key identifier: 24:4C:1C:BB:B4:52:A7:86:0C:73:AB:65:A6:2E:6D:79:50:5B:EA:7A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1F4A3228DBE1C58AED184A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5523cd5-104d-3011-b66d-ba564b4e42aa.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.217.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:32:28:db:e1:c5:8a:ed:18:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=fcb9793a-75f5-4ec1-b975-c2203b21d6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b3:16:77:32:76:ff:65:60:7d:61:93:46:f1: 2f:1f:46:36:39:0e:a0:1d:63:fe:36:ba:c5:93:66: 2f:06:80:89:d8:7b:ea:b2:c4:a2:4c:17:69:56:ea: fa:03:c2:6b:6b:ee:7c:be:e2:f2:a3:db:43:11:6d: ae:aa:36:08:50:ac:59:55:c9:83:01:24:24:da:d4: d5:10:6b:8f:13:b6:7c:05:2f:f2:f4:87:5a:86:8f: 04:99:bb:d5:db:97:1f:09:ad:7a:90:5c:01:8e:d6: 54:74:4f:f4:2d:7e:c6:b5:03:a1:fd:6c:c8:02:46: 40:63:90:2c:8d:7a:2f:26:d5:64:16:6a:15:13:c9: af:95:b0:e5:c4:79:45:27:9a:2b:52:48:23:6e:93: de:5e:50:a4:bb:bc:da:45:c4:fe:c5:aa:2c:d9:ab: e9:ae:d5:6d:56:7f:92:f4:e2:80:16:74:e4:3a:df: 9a:4b:41:cd:85:b4:22:d8:eb:3c:d8:d0:89:df:a6: 9a:db:e4:fc:f3:86:55:90:e1:47:fa:41:26:e5:0d: d3:d2:3c:37:2c:94:bc:ec:ca:cf:a7:3e:9a:02:c1: c9:90:1e:39:97:06:51:61:e1:2c:eb:6e:92:bd:46: de:aa:fb:1b:78:27:53:f7:ee:e2:f0:30:bf:74:34: 28:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4C:1C:BB:B4:52:A7:86:0C:73:AB:65:A6:2E:6D:79:50:5B:EA:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5523cd5-104d-3011-b66d-ba564b4e42aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a7:0e:49:18:cb:de:04:b8:d1:9f:a0:81:11:ed:51:be:66: 98:4b:a7:d5:e9:c4:ae:08:90:13:d7:11:8c:8d:53:c9:f9:bb: c1:e6:97:16:6d:49:6f:67:bd:4c:cc:d7:cc:2d:33:49:d9:9b: cf:47:02:85:96:d1:b8:48:be:0c:3b:7c:81:8f:60:7a:57:9c: 5c:f9:00:8f:06:33:4f:29:6a:13:1e:f0:5b:a8:13:fa:24:2d: 63:fc:fb:01:b3:5c:58:05:9b:6f:42:c2:a4:ad:85:5d:ca:15: 3a:fa:0d:74:3f:6d:7f:1e:c6:ad:0c:94:98:53:38:88:c4:2e: 9d:6a:8a:a3:cd:7d:a5:4e:8e:80:63:f7:81:a7:5a:20:65:38: 37:72:3a:d8:16:0f:80:bd:45:57:c5:9c:eb:ea:6c:8e:ba:e2: f7:c8:ab:7b:5a:5b:54:e5:14:8d:53:ca:36:22:2c:43:c4:e3: 77:76:d0:f5:9c:ac:df:05:5d:53:8d:7f:1b:8a:f7:7e:85:59: 8e:b7:66:58:34:b2:e8:14:f2:78:c3:4a:c2:01:79:4b:16:21: e8:88:f3:e2:d3:4b:62:98:ef:59:1d:92:eb:f0:5a:03:93:8f: cb:4f:37:15:31:97:7e:b9:8e:84:63:4e:ac:4c:c8:72:be:5d: 21:ac:9c:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSjIo2+HFiu0YSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZmNiOTc5M2EtNzVmNS00ZWMxLWI5NzUtYzIyMDNiMjFkNmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbMWdzJ2/2VgfWGTRvEvH0Y2OQ6gHWP+NrrF k2YvBoCJ2HvqssSiTBdpVur6A8Jra+58vuLyo9tDEW2uqjYIUKxZVcmDASQk2tTV EGuPE7Z8BS/y9Idaho8EmbvV25cfCa16kFwBjtZUdE/0LX7GtQOh/WzIAkZAY5As jXovJtVkFmoVE8mvlbDlxHlFJ5orUkgjbpPeXlCku7zaRcT+xaos2avprtVtVn+S 9OKAFnTkOt+aS0HNhbQi2Os82NCJ36aa2+T884ZVkOFH+kEm5Q3T0jw3LJS87MrP pz6aAsHJkB45lwZRYeEs626SvUbeqvsbeCdT9+7i8DC/dDQozQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRMHLu0UqeGDHOrZaYubXlQW+p6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjU1MjNjZDUtMTA0ZC0z MDExLWI2NmQtYmE1NjRiNGU0MmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9llMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADenDkkYy94EuNGfoIER7VG+ZphLp9XpxK4IkBPXEYyNU8n5u8HmlxZt SW9nvUzM18wtM0nZm89HAoWW0bhIvgw7fIGPYHpXnFz5AI8GM08pahMe8FuoE/ok LWP8+wGzXFgFm29CwqSthV3KFTr6DXQ/bX8exq0MlJhTOIjELp1qiqPNfaVOjoBj 94GnWiBlODdyOtgWD4C9RVfFnOvqbI664vfIq3taW1TlFI1TyjYiLEPE43d20PWc rN8FXVONfxuK936FWY63Zlg0sugU8njDSsIBeUsWIeiI8+LTS2KY71kdkuvwWgOT j8tPNxUxl365joRjTqxMyHK+XSGsnBA= -----END CERTIFICATE-----Generated at Thu Mar 26 09:23:41 2026 by rpki-client