$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf9afdfb-2b90-365e-b7d5-6b28316f1450.roa File: bf9afdfb-2b90-365e-b7d5-6b28316f1450.roa (raw, json) Hash identifier: z/FVG/d6ZItn9LkU/+taBJgY5CXABpszZPPXq8HPBno= Subject key identifier: D9:1F:AB:93:7D:E0:39:97:3A:21:02:B8:7E:1A:6E:96:6B:EB:F5:E5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D19B4C18AA1CBA236A6C76280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf9afdfb-2b90-365e-b7d5-6b28316f1450.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 16625 IP address blocks: 23.206.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:c1:8a:a1:cb:a2:36:a6:c7:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=260d7340-6283-4683-bce2-027889987801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:dc:c5:d4:0b:8c:c1:23:fe:81:ff:26:09:09: 5b:4a:34:f5:c9:f6:06:e0:fd:02:e3:39:86:df:0a: 5f:69:5a:8e:98:fa:83:20:5b:66:4c:50:00:92:98: b9:8f:29:6c:67:5e:2b:c9:19:e2:d7:cf:56:1b:36: d1:aa:d1:47:68:cb:b6:9d:2c:65:eb:88:5e:a2:52: d4:c7:c9:b4:aa:5b:60:5e:27:bb:de:0a:ad:e7:bc: f6:d1:99:50:b7:a3:16:95:5e:06:2f:63:b6:2c:61: 00:6c:67:2d:52:f6:42:5f:63:3c:7d:c9:de:48:18: 14:d4:61:7b:5e:d6:54:a7:d8:fd:b4:a7:c2:bb:f6: f3:ad:f1:7b:70:13:02:76:a1:2e:c4:d7:6b:5e:ca: f8:f8:09:14:0f:28:61:3d:b6:95:31:ae:30:cd:da: f3:4e:6a:4f:c0:a4:04:61:66:0b:f2:8b:0b:d8:5f: 8c:c3:b5:14:45:24:8c:75:19:59:c3:9c:56:cb:70: 60:d5:9d:35:c1:0c:20:23:39:c2:6d:76:85:f6:2b: 36:78:7f:5e:c6:49:22:07:6e:6f:0e:6b:bd:63:65: 7e:06:18:80:e4:86:75:7b:d0:55:4b:fe:b5:d9:0c: c7:7d:e9:85:83:73:73:27:85:68:a9:03:59:71:19: c8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1F:AB:93:7D:E0:39:97:3A:21:02:B8:7E:1A:6E:96:6B:EB:F5:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf9afdfb-2b90-365e-b7d5-6b28316f1450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:dc:cf:3d:be:04:89:9b:91:44:b1:d9:63:20:f6:bd:9f:84: 70:01:82:44:2c:62:4f:d2:e3:08:2c:64:f2:9a:78:d4:7f:d1: 4e:23:5d:80:67:ed:63:b6:aa:f5:e7:80:65:fa:c3:94:db:4a: 6f:63:96:4d:e6:6d:05:98:c8:14:b1:c0:8e:98:4b:35:f4:40: 87:a2:e9:2e:58:9f:96:92:b8:c9:64:8e:90:bb:a0:2f:43:74: 6b:01:fc:b8:ce:55:6a:34:d5:c8:0d:38:95:72:2e:64:45:6f: 95:0d:2a:df:25:3b:90:55:e0:73:57:82:02:5f:42:27:ff:6a: cb:33:60:c5:5c:86:35:de:ca:6f:58:c7:be:f2:ba:08:94:2a: 94:fa:f7:4f:f3:40:44:2b:79:80:e9:d6:d2:89:e3:5e:77:b1: ad:64:93:ee:16:55:6c:b0:3a:5f:75:cf:ae:09:48:aa:e8:4f: b6:be:48:56:94:70:7d:27:44:28:bb:d9:8d:34:fb:f9:8a:a1: 66:f2:22:3e:4a:e3:bb:08:14:09:b3:9d:96:76:2d:10:bc:f0: 5c:6f:b6:97:83:22:12:f5:3f:8f:e7:38:ac:88:6c:58:0e:06: f5:fb:fe:05:9a:53:c9:97:e5:91:0c:b2:7d:91:54:1e:53:59: 30:3a:39:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtMGKocuiNqbHYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk MjYwZDczNDAtNjI4My00NjgzLWJjZTItMDI3ODg5OTg3ODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdzF1AuMwSP+gf8mCQlbSjT1yfYG4P0C4zmG 3wpfaVqOmPqDIFtmTFAAkpi5jylsZ14ryRni189WGzbRqtFHaMu2nSxl64heolLU x8m0qltgXie73gqt57z20ZlQt6MWlV4GL2O2LGEAbGctUvZCX2M8fcneSBgU1GF7 XtZUp9j9tKfCu/bzrfF7cBMCdqEuxNdrXsr4+AkUDyhhPbaVMa4wzdrzTmpPwKQE YWYL8osL2F+Mw7UURSSMdRlZw5xWy3Bg1Z01wQwgIznCbXaF9is2eH9exkkiB25v Dmu9Y2V+BhiA5IZ1e9BVS/612QzHfemFg3NzJ4VoqQNZcRnIfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkfq5N94DmXOiECuH4abpZr6/XlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmY5YWZkZmItMmI5MC0z NjVlLWI3ZDUtNmIyODMxNmYxNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF84MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLczz2+BImbkUSx2WMg9r2fhHABgkQsYk/S4wgsZPKaeNR/0U4jXYBn 7WO2qvXngGX6w5TbSm9jlk3mbQWYyBSxwI6YSzX0QIei6S5Yn5aSuMlkjpC7oC9D dGsB/LjOVWo01cgNOJVyLmRFb5UNKt8lO5BV4HNXggJfQif/asszYMVchjXeym9Y x77yugiUKpT690/zQEQreYDp1tKJ4153sa1kk+4WVWywOl91z64JSKroT7a+SFaU cH0nRCi72Y00+/mKoWbyIj5K47sIFAmznZZ2LRC88FxvtpeDIhL1P4/nOKyIbFgO BvX7/gWaU8mX5ZEMsn2RVB5TWTA6Ocg= -----END CERTIFICATE-----Generated at Thu Mar 26 03:47:05 2026 by rpki-client