$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bebba86e-a1c2-3eb5-b277-eabe13095c64.roa File: bebba86e-a1c2-3eb5-b277-eabe13095c64.roa (raw, json) Hash identifier: KdNB7lEtDYkR0bOgX12fsXHYmN3l+xBeI3/304nN/ns= Subject key identifier: FF:B4:DF:2D:22:1C:52:6B:E0:C8:2B:CC:5B:61:73:0E:2D:6E:59:2F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1F4A2B5859645C51FBCE0E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bebba86e-a1c2-3eb5-b277-eabe13095c64.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.217.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:2b:58:59:64:5c:51:fb:ce:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=a9f4a146-2073-4941-992e-6df77ec3f33d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:56:72:e2:0b:a3:59:68:e3:b3:3e:f5:10:7f: ad:ef:6c:de:05:86:32:55:87:32:3f:39:3a:d6:26: 46:d0:af:e4:b6:d5:f3:6f:0e:d1:bf:c2:ce:c8:09: 39:b3:df:03:ca:26:ff:30:de:be:51:62:7b:81:94: 6e:0d:7c:48:14:92:55:f4:7b:31:03:49:0d:37:74: cf:54:e7:dc:b1:ef:85:22:9c:2f:92:09:b4:7f:f2: c8:24:12:aa:f4:88:65:23:07:e7:30:dc:e2:28:b6: e5:f1:c5:6f:c9:1c:33:6d:ad:61:d9:1a:4b:09:40: 52:6f:81:7e:51:08:20:86:c0:05:74:6d:68:f5:57: 20:bf:5a:0c:22:e0:4c:5f:51:d1:75:8c:09:47:8b: 72:32:e4:1c:ed:ff:5b:4c:a5:9d:ad:b2:58:9a:7e: 6f:1a:a0:95:b7:e7:97:4c:a7:1b:17:1e:20:fd:c7: ce:80:a7:02:3b:1f:70:31:04:e6:97:5a:56:67:06: b3:98:49:ab:a0:af:26:ad:75:d3:4a:2c:6e:b2:ff: bc:36:bd:2f:10:1b:72:2e:19:54:8b:03:b9:6b:c0: a1:17:76:45:13:0e:9d:42:12:b6:8e:54:8e:49:34: 1d:a5:ad:e5:9b:cc:cd:77:f8:c6:38:fa:8b:a6:65: be:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B4:DF:2D:22:1C:52:6B:E0:C8:2B:CC:5B:61:73:0E:2D:6E:59:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bebba86e-a1c2-3eb5-b277-eabe13095c64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d7:98:ea:55:3e:7a:52:c2:ee:65:38:c4:a8:15:e7:f4:dd: df:9a:25:72:af:a4:6c:d3:54:79:f3:65:7d:25:b5:c8:b5:5d: d9:69:82:3f:90:1e:42:54:f6:9d:6e:b1:78:d8:4d:59:2f:10: e1:38:57:5c:02:bc:a8:d6:b0:f2:ba:71:7e:40:f9:f6:09:cb: 90:a6:b0:31:63:27:74:c3:a4:6e:75:5d:ca:0d:2d:b8:3d:02: 85:33:90:ac:cc:28:9a:59:c3:6e:41:e6:d4:9d:70:ec:f2:e6: d2:3e:ea:44:b8:d0:9f:2a:d0:36:75:83:d7:fe:c5:e6:28:17: 19:d3:69:f2:e3:37:c1:86:6f:c0:37:c3:70:2e:4f:9d:25:b4: bb:65:88:c4:c6:9b:87:e4:0d:7b:8b:7c:aa:23:8e:91:18:81: 86:5b:8d:52:0e:a9:8b:f2:4a:cb:8e:fd:ff:0d:c8:d1:be:25: 86:fe:5f:2b:65:0e:10:74:f5:7d:f0:3d:9a:e6:ea:3b:4e:1c: 22:fa:00:24:c0:55:31:83:09:5a:99:e6:d2:ed:97:a3:41:35: 45:27:d6:86:08:f6:f9:4c:57:10:88:63:05:06:85:04:37:f0: b2:3f:df:41:77:1e:63:00:ce:ec:52:1b:bc:78:f4:4a:a4:02: f8:b3:ed:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSitYWWRcUfvODgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YTlmNGExNDYtMjA3My00OTQxLTk5MmUtNmRmNzdlYzNmMzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFZy4gujWWjjsz71EH+t72zeBYYyVYcyPzk6 1iZG0K/kttXzbw7Rv8LOyAk5s98Dyib/MN6+UWJ7gZRuDXxIFJJV9HsxA0kNN3TP VOfcse+FIpwvkgm0f/LIJBKq9IhlIwfnMNziKLbl8cVvyRwzba1h2RpLCUBSb4F+ UQgghsAFdG1o9Vcgv1oMIuBMX1HRdYwJR4tyMuQc7f9bTKWdrbJYmn5vGqCVt+eX TKcbFx4g/cfOgKcCOx9wMQTml1pWZwazmEmroK8mrXXTSixusv+8Nr0vEBtyLhlU iwO5a8ChF3ZFEw6dQhK2jlSOSTQdpa3lm8zNd/jGOPqLpmW+HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+03y0iHFJr4MgrzFthcw4tblkvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmViYmE4NmUtYTFjMi0z ZWI1LWIyNzctZWFiZTEzMDk1YzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9k1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvXmOpVPnpSwu5lOMSoFef03d+aJXKvpGzTVHnzZX0ltci1Xdlpgj+Q HkJU9p1usXjYTVkvEOE4V1wCvKjWsPK6cX5A+fYJy5CmsDFjJ3TDpG51XcoNLbg9 AoUzkKzMKJpZw25B5tSdcOzy5tI+6kS40J8q0DZ1g9f+xeYoFxnTafLjN8GGb8A3 w3AuT50ltLtliMTGm4fkDXuLfKojjpEYgYZbjVIOqYvySsuO/f8NyNG+JYb+Xytl DhB09X3wPZrm6jtOHCL6ACTAVTGDCVqZ5tLtl6NBNUUn1oYI9vlMVxCIYwUGhQQ3 8LI/30F3HmMAzuxSG7x49EqkAviz7UU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:08:09 2026 by rpki-client