$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcf6a4b7-ff32-3787-8a39-62d9f556438e.roa File: bcf6a4b7-ff32-3787-8a39-62d9f556438e.roa (raw, json) Hash identifier: 80q4kiSMpJUzDs/UvG4FgXnBf1xL8MbLEzEbc4luGSI= Subject key identifier: 17:F0:7E:B9:66:ED:F7:FB:BB:26:F7:43:2E:C9:2B:C5:86:45:FB:F9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2BDA3A7C9336C04047258B46 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcf6a4b7-ff32-3787-8a39-62d9f556438e.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 16625 IP address blocks: 23.217.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:3a:7c:93:36:c0:40:47:25:8b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=c2611418-c61d-41f8-8fb5-259ccf40e3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:01:f8:4c:b3:74:7f:8c:f4:fb:6a:fc:4d:fb: b0:15:f9:e9:4f:b7:72:e0:47:a3:5d:83:14:6c:14: 98:21:b0:d9:86:92:5a:22:19:8e:2d:ae:24:9a:c5: ed:7f:b7:48:16:47:a4:e7:57:42:4d:9f:6d:76:60: 1c:51:22:71:8a:73:96:e3:5d:2d:8d:d7:12:4b:48: ea:f6:a9:fd:d3:16:d4:cf:a9:83:5e:9f:78:01:8b: d2:ca:8e:62:ab:47:68:d5:c2:6f:0f:53:2a:9a:e7: 52:2d:e9:05:e3:1d:5f:b5:43:2c:a7:a2:ac:f2:b8: ec:be:81:09:4a:d4:b4:23:9c:a8:42:e1:f7:86:a0: d2:bf:48:2e:eb:a1:a2:0c:6f:e0:50:77:66:3c:93: 34:7d:f8:3e:b5:43:03:8a:42:cb:48:bd:0b:12:12: ca:20:06:c5:62:d8:b4:a2:4e:0a:35:6b:78:23:db: d4:3c:8f:a3:bb:34:63:45:b3:3e:ae:c3:89:59:22: c2:b8:99:7a:ae:cc:8e:c1:81:1c:4f:84:56:57:b6: 61:0d:14:08:7e:19:4a:4a:52:6f:56:43:e1:69:9d: 56:fa:65:3f:44:69:d4:e8:cd:06:36:71:c6:4b:08: 6f:7a:5c:5f:a4:a3:87:34:d7:6e:ee:48:91:2e:9f: 60:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F0:7E:B9:66:ED:F7:FB:BB:26:F7:43:2E:C9:2B:C5:86:45:FB:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcf6a4b7-ff32-3787-8a39-62d9f556438e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b6:50:fd:85:2d:44:88:97:96:ec:dc:9a:be:e0:93:69:a5: 0e:18:8c:d1:a0:e3:a1:57:20:87:39:03:25:a1:da:d1:8e:a7: aa:e0:10:13:98:0e:62:2f:09:2b:fb:b5:b5:7c:2e:3a:af:10: c4:70:44:a9:b8:6c:cc:36:08:8f:29:85:be:cf:47:3e:5c:b2: c1:08:4c:4b:3e:98:40:65:ad:ef:ca:bd:c4:67:70:cb:1e:4c: 99:8e:b8:53:af:a2:d8:23:c9:1f:b2:6b:69:4e:86:90:e6:c2: f2:e6:30:18:33:43:d2:02:d0:06:d7:78:e9:32:6a:5e:5c:ce: 16:ef:67:fa:2f:f3:3d:fd:15:7b:07:ab:f6:70:f4:1c:95:fd: 7b:fe:42:7a:06:43:fb:df:18:a4:9f:08:0e:a0:b3:95:1b:c8: 09:e3:9d:48:aa:81:6c:14:b0:a1:eb:a8:59:a9:10:3b:08:79: 51:a7:2e:1d:a6:07:07:58:73:ce:5c:0f:4c:d2:be:ab:77:e0: 76:99:e8:19:ae:39:89:3a:7d:f0:4c:49:68:85:ae:ca:85:52: 2e:43:29:29:7e:ca:0a:b8:32:41:0e:8f:1e:20:5e:4e:af:4b: 5e:98:bb:99:ad:36:70:f5:ec:13:49:58:18:dc:2f:b5:d3:57: 9d:0e:ff:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jp8kzbAQEcli0YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YzI2MTE0MTgtYzYxZC00MWY4LThmYjUtMjU5Y2NmNDBlM2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigH4TLN0f4z0+2r8TfuwFfnpT7dy4EejXYMU bBSYIbDZhpJaIhmOLa4kmsXtf7dIFkek51dCTZ9tdmAcUSJxinOW410tjdcSS0jq 9qn90xbUz6mDXp94AYvSyo5iq0do1cJvD1MqmudSLekF4x1ftUMsp6Ks8rjsvoEJ StS0I5yoQuH3hqDSv0gu66GiDG/gUHdmPJM0ffg+tUMDikLLSL0LEhLKIAbFYti0 ok4KNWt4I9vUPI+juzRjRbM+rsOJWSLCuJl6rsyOwYEcT4RWV7ZhDRQIfhlKSlJv VkPhaZ1W+mU/RGnU6M0GNnHGSwhvelxfpKOHNNdu7kiRLp9gGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfwfrlm7ff7uyb3Qy7JK8WGRfv5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmNmNmE0YjctZmYzMi0z Nzg3LThhMzktNjJkOWY1NTY0MzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC2UP2FLUSIl5bs3Jq+4JNppQ4YjNGg46FXIIc5AyWh2tGOp6rgEBOY DmIvCSv7tbV8LjqvEMRwRKm4bMw2CI8phb7PRz5cssEITEs+mEBlre/KvcRncMse TJmOuFOvotgjyR+ya2lOhpDmwvLmMBgzQ9IC0AbXeOkyal5czhbvZ/ov8z39FXsH q/Zw9ByV/Xv+QnoGQ/vfGKSfCA6gs5UbyAnjnUiqgWwUsKHrqFmpEDsIeVGnLh2m BwdYc85cD0zSvqt34HaZ6BmuOYk6ffBMSWiFrsqFUi5DKSl+ygq4MkEOjx4gXk6v S16Yu5mtNnD17BNJWBjcL7XTV50O/44= -----END CERTIFICATE-----Generated at Thu Mar 26 03:46:16 2026 by rpki-client