$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be34ffb5-ae89-3fd4-bfd0-c28b031315be.roa File: be34ffb5-ae89-3fd4-bfd0-c28b031315be.roa (raw, json) Hash identifier: 9UibHwfnlPfF85zaiq35vwhvCp8g030WRB7o/wxcse4= Subject key identifier: B9:ED:39:1D:59:C5:CA:E3:F1:41:BD:2F:B6:2E:16:1D:B3:C5:7A:6B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2A74D041FC9AEB42182C2F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be34ffb5-ae89-3fd4-bfd0-c28b031315be.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 20940 IP address blocks: 23.218.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:d0:41:fc:9a:eb:42:18:2c:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=c0dba066-5402-4a1a-9f03-eb6559f27ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ab:43:97:e9:3c:90:99:20:24:94:5d:07:64: 04:c4:01:07:f7:37:2d:02:e5:37:a9:63:3d:59:35: c5:7f:93:74:cf:a2:6a:14:23:ca:f4:7b:3b:c9:82: c5:99:5a:5f:43:5e:4e:a3:1b:87:8b:65:c6:cd:ce: b3:27:0b:b0:4b:17:13:6a:88:df:5e:37:e7:c6:96: dc:66:91:bf:8d:e9:02:8c:09:8c:35:1a:63:01:39: ca:c4:6c:b0:cf:eb:4e:3c:e1:86:22:78:79:cd:21: da:09:63:13:3e:db:8d:08:8e:5e:50:3d:26:c1:99: 22:b3:b2:b6:9b:57:28:d5:61:23:a1:a5:98:e5:96: 37:47:a7:74:8a:67:71:93:da:ec:17:fa:35:16:b8: 6a:c7:68:31:4f:81:d8:04:f2:48:39:75:7f:e8:a7: dd:a3:dd:f5:55:3e:10:22:4d:25:e2:e6:8c:32:70: ab:c6:d1:fe:da:1c:f3:f0:ea:06:c8:5d:1b:4e:ce: 6e:05:b6:68:77:06:71:94:ae:1b:c5:5e:c3:81:32: 9d:be:f4:8f:28:9e:de:dd:e7:47:c2:76:06:bc:5b: cc:b4:a5:e6:65:66:3a:97:0f:11:cd:70:c3:96:38: 78:12:cd:80:81:49:7f:e5:44:07:b4:b7:b7:7d:19: f8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:ED:39:1D:59:C5:CA:E3:F1:41:BD:2F:B6:2E:16:1D:B3:C5:7A:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be34ffb5-ae89-3fd4-bfd0-c28b031315be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:6d:ba:0b:c0:e4:96:c1:f5:ab:b1:97:14:11:5d:40:c8:aa: 4f:0a:94:62:d7:4f:70:74:54:b0:97:fe:3d:7a:9f:69:44:40: 48:21:68:81:c2:e4:5d:95:68:7f:97:7c:1f:80:4f:3d:2a:0c: e5:2a:bf:47:04:26:e0:be:d2:4d:5e:4f:28:86:cb:c1:55:8f: f1:6c:18:2d:7c:17:22:12:b1:dd:1d:78:58:cb:56:2a:5f:38: 08:bb:f4:2c:75:1a:43:02:88:5a:c7:dd:6d:e2:a0:6c:0a:2b: 03:2a:27:55:3f:09:b3:27:e3:f8:1d:27:a2:f0:42:af:b7:74: 89:6e:1a:c4:0f:2f:b9:f2:76:74:94:32:ed:d6:6f:a0:09:aa: 16:3b:3f:87:62:46:db:6e:f7:e0:5a:91:a6:4b:15:3c:d4:c7: e0:ce:63:45:3e:4d:ca:f6:e3:79:e7:ab:fd:59:c6:49:72:60: 1a:dd:05:0c:18:e2:08:00:14:6b:51:8f:e4:ab:90:f0:ef:28: 97:65:99:99:28:5f:25:84:5a:cd:6c:96:2b:da:f3:bd:d3:0b: 2b:43:62:f0:fc:9d:0c:bd:65:c3:d0:f6:5b:da:ff:4d:d4:21: f3:ba:8a:df:87:b5:04:10:bb:3d:9e:eb:26:a7:7a:42:8b:b0: af:7c:7e:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdNBB/JrrQhgsL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk YzBkYmEwNjYtNTQwMi00YTFhLTlmMDMtZWI2NTU5ZjI3ZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxatDl+k8kJkgJJRdB2QExAEH9zctAuU3qWM9 WTXFf5N0z6JqFCPK9Hs7yYLFmVpfQ15OoxuHi2XGzc6zJwuwSxcTaojfXjfnxpbc ZpG/jekCjAmMNRpjATnKxGywz+tOPOGGInh5zSHaCWMTPtuNCI5eUD0mwZkis7K2 m1co1WEjoaWY5ZY3R6d0imdxk9rsF/o1Frhqx2gxT4HYBPJIOXV/6Kfdo931VT4Q Ik0l4uaMMnCrxtH+2hzz8OoGyF0bTs5uBbZodwZxlK4bxV7DgTKdvvSPKJ7e3edH wnYGvFvMtKXmZWY6lw8RzXDDljh4Es2AgUl/5UQHtLe3fRn4lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLntOR1Zxcrj8UG9L7YuFh2zxXprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmUzNGZmYjUtYWU4OS0z ZmQ0LWJmZDAtYzI4YjAzMTMxNWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9rVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5tugvA5JbB9auxlxQRXUDIqk8KlGLXT3B0VLCX/j16n2lEQEghaIHC 5F2VaH+XfB+ATz0qDOUqv0cEJuC+0k1eTyiGy8FVj/FsGC18FyISsd0deFjLVipf OAi79Cx1GkMCiFrH3W3ioGwKKwMqJ1U/CbMn4/gdJ6LwQq+3dIluGsQPL7nydnSU Mu3Wb6AJqhY7P4diRttu9+BakaZLFTzUx+DOY0U+Tcr243nnq/1ZxklyYBrdBQwY 4ggAFGtRj+SrkPDvKJdlmZkoXyWEWs1sliva873TCytDYvD8nQy9ZcPQ9lva/03U IfO6it+HtQQQuz2e6yanekKLsK98fuU= -----END CERTIFICATE-----Generated at Thu Mar 26 05:22:06 2026 by rpki-client