$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf4e1e04-a32d-3905-be5e-188d7a9afc3b.roa File: bf4e1e04-a32d-3905-be5e-188d7a9afc3b.roa (raw, json) Hash identifier: XT9zZt7zV+82yKKjX6WwXd+bL0m5q11Zka3Lz9lPwqk= Subject key identifier: 97:03:94:9B:D6:E8:F1:8B:B0:26:10:32:50:1E:3C:03:66:6E:D4:AD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2BDA2D2FAF7E18B309D9A100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf4e1e04-a32d-3905-be5e-188d7a9afc3b.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 16625 IP address blocks: 23.223.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:2d:2f:af:7e:18:b3:09:d9:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=eb0ae707-9ae4-48e9-9eda-09d153d7afbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:41:51:c1:10:6f:30:61:e4:a7:40:44:06:d9: 05:da:13:57:7e:67:e9:10:9a:65:f7:ee:8a:3d:72: 1f:f5:ec:bc:4b:26:b5:c6:aa:5a:97:45:f9:15:d5: 91:0d:b5:1f:9c:85:bb:46:3f:5e:2e:70:15:69:cf: 51:51:3a:0a:6c:5f:9d:b0:50:65:cc:3b:29:cd:9f: 74:b2:d9:61:3b:b8:a3:50:af:8a:3d:6f:c4:b4:74: 8f:80:d5:b4:c8:f5:cf:09:52:2e:c7:2c:94:84:bb: 2b:ab:9e:00:48:5f:34:ca:b3:c7:91:a8:ac:be:7b: 8b:eb:a0:60:06:33:b5:5f:46:b9:8c:29:78:34:b6: 66:bd:7e:7a:8a:f8:1c:5a:6e:a9:24:ce:d9:a0:74: 87:28:3b:b6:9f:53:c9:6e:01:31:47:e9:2c:80:ab: d8:73:8a:5d:fe:6d:12:82:93:d1:ec:8e:6f:53:b4: 00:e3:40:f4:30:86:45:63:05:ae:95:e4:e7:55:44: ed:02:c9:b1:bc:1f:48:8f:35:f1:93:7b:40:eb:94: 19:7e:36:86:81:ae:b3:1f:d0:2b:ce:bc:1d:8b:0b: 67:d9:3f:4e:d3:e3:c9:a4:47:40:b2:2e:d4:60:18: b8:10:95:35:25:fd:51:3d:e0:7d:de:a3:36:b9:7f: fc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:03:94:9B:D6:E8:F1:8B:B0:26:10:32:50:1E:3C:03:66:6E:D4:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf4e1e04-a32d-3905-be5e-188d7a9afc3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:f2:66:a2:d1:15:71:2c:20:f1:68:dd:b1:08:e0:bd:aa:c1: 42:52:29:12:5b:d2:42:49:63:2f:b9:a3:b8:0a:3b:81:85:b8: 49:d4:56:9f:3d:b9:17:04:df:9b:a8:7b:9e:e1:ef:9b:56:f8: c3:4d:bb:61:2e:76:d5:9c:e4:79:be:8f:15:b0:6f:76:25:1d: 02:2e:08:50:1a:52:f3:10:13:ad:6f:d6:f4:48:06:5c:b2:35: 42:4a:7e:1d:9f:68:8e:78:c4:17:64:90:ca:94:ae:8b:e1:5b: f8:0b:9c:7f:a1:ea:48:5b:7d:70:64:6f:fa:a9:68:6e:93:fa: ce:d4:b5:df:d9:11:b8:37:91:26:1c:4c:92:16:48:55:12:bb: 81:7b:99:41:c7:ca:89:ae:4d:29:95:a9:4f:d9:42:ba:a2:73: ae:21:0c:a0:76:e3:f7:80:2d:d9:6f:8d:02:0b:73:7d:2c:79: b5:1e:69:91:b7:ec:66:33:c8:85:5e:f4:74:1c:51:2a:5b:95: 91:1f:e8:02:36:ff:d3:ca:c7:21:a9:6a:eb:89:42:5f:1e:2a: c9:7a:38:22:af:61:aa:be:d7:83:b1:07:07:96:48:56:cc:a1: 2d:6e:96:50:0b:82:a6:4c:dc:f1:8d:46:71:99:f2:50:3e:ad: 93:1f:c8:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2i0vr34YswnZoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZWIwYWU3MDctOWFlNC00OGU5LTllZGEtMDlkMTUzZDdhZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0FRwRBvMGHkp0BEBtkF2hNXfmfpEJpl9+6K PXIf9ey8Sya1xqpal0X5FdWRDbUfnIW7Rj9eLnAVac9RUToKbF+dsFBlzDspzZ90 stlhO7ijUK+KPW/EtHSPgNW0yPXPCVIuxyyUhLsrq54ASF80yrPHkaisvnuL66Bg BjO1X0a5jCl4NLZmvX56ivgcWm6pJM7ZoHSHKDu2n1PJbgExR+ksgKvYc4pd/m0S gpPR7I5vU7QA40D0MIZFYwWuleTnVUTtAsmxvB9IjzXxk3tA65QZfjaGga6zH9Ar zrwdiwtn2T9O0+PJpEdAsi7UYBi4EJU1Jf1RPeB93qM2uX/8swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcDlJvW6PGLsCYQMlAePANmbtStMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmY0ZTFlMDQtYTMyZC0z OTA1LWJlNWUtMTg4ZDdhOWFmYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7yZqLRFXEsIPFo3bEI4L2qwUJSKRJb0kJJYy+5o7gKO4GFuEnUVp89 uRcE35uoe57h75tW+MNNu2EudtWc5Hm+jxWwb3YlHQIuCFAaUvMQE61v1vRIBlyy NUJKfh2faI54xBdkkMqUrovhW/gLnH+h6khbfXBkb/qpaG6T+s7Utd/ZEbg3kSYc TJIWSFUSu4F7mUHHyomuTSmVqU/ZQrqic64hDKB24/eALdlvjQILc30sebUeaZG3 7GYzyIVe9HQcUSpblZEf6AI2/9PKxyGpauuJQl8eKsl6OCKvYaq+14OxBweWSFbM oS1ullALgqZM3PGNRnGZ8lA+rZMfyJA= -----END CERTIFICATE-----Generated at Thu Mar 26 07:01:47 2026 by rpki-client