$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d69fae0e-e57e-339d-b215-5ebe3b1560a5.roa File: d69fae0e-e57e-339d-b215-5ebe3b1560a5.roa (raw, json) Hash identifier: qoudtll+44Sy62o9PT2Gx5J29qIMuH6j4P/z8wZIx3E= Subject key identifier: 5F:86:F0:EE:6A:2D:63:DC:9C:E7:62:58:E8:4C:6A:48:75:8C:F9:EE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1B1A1DC11035D799A347FEC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d69fae0e-e57e-339d-b215-5ebe3b1560a5.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 16625 IP address blocks: 23.209.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:1d:c1:10:35:d7:99:a3:47:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=cfbcdb0d-c941-4ff7-be11-61299e775456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d1:cf:91:df:02:ca:65:32:b6:ee:b3:fc:99: c6:85:77:ae:a4:5f:d9:93:b1:0c:79:5a:7e:f8:65: 22:f7:99:ec:07:82:32:1a:74:7b:7a:a3:11:d1:f8: 68:00:67:a1:a8:1b:71:ad:de:fc:d8:32:64:68:8b: 25:12:66:71:93:95:3a:49:72:11:67:f3:d3:6d:01: 4a:91:9a:9c:9b:6f:da:a8:a1:fa:27:fb:a4:64:c0: 2d:14:cf:4f:23:e0:4b:7c:69:6e:36:43:17:96:82: 18:0d:70:9c:e4:28:8b:2a:0b:6f:dd:72:c4:fd:80: 84:ac:f6:ae:ef:38:58:c2:08:b6:9e:25:d6:11:13: 3d:2c:47:4b:8f:f7:ec:05:2b:a1:d0:79:bd:28:b5: d5:01:4a:0b:0c:78:a4:3b:21:d1:cd:8e:e0:26:b2: a2:8f:e3:8b:92:3f:91:f4:cc:1b:61:54:71:f6:84: ac:6c:da:96:fa:d6:60:b5:c0:22:d7:de:23:ff:15: ac:81:5d:e9:c7:a5:97:26:b5:dd:76:4d:0d:73:78: 7d:d6:d5:ca:c1:a2:2b:a1:a2:fd:10:ff:b0:b6:f8: cb:e9:03:86:61:63:fe:fb:41:99:12:17:7b:18:1c: aa:84:f0:5c:72:ea:92:36:f8:34:72:36:c0:bd:c1: c3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:86:F0:EE:6A:2D:63:DC:9C:E7:62:58:E8:4C:6A:48:75:8C:F9:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d69fae0e-e57e-339d-b215-5ebe3b1560a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f0:dd:1d:b3:f3:ad:ef:5d:9a:c1:e3:68:bd:bf:6a:80:7a: 73:52:16:a1:1e:43:44:94:67:1c:f0:8c:eb:d3:4b:0e:c2:a1: 0e:1f:5e:da:3a:7c:85:fb:cd:1a:29:73:5a:5a:14:49:5c:f2: 08:d1:6e:d8:12:d2:64:6d:e3:f9:3d:21:6e:15:42:dc:bb:18: e3:1a:1b:3a:96:c3:a7:5b:a3:cf:a8:d8:57:a5:6e:45:53:d1: da:30:39:ed:74:5a:79:6a:d3:b2:06:4d:38:3f:14:80:b4:ff: aa:5a:50:3a:86:27:39:f1:d9:65:6e:f8:8c:ad:43:08:7b:99: 47:11:3b:a8:29:42:0b:11:f4:e5:7a:0f:a7:9a:78:51:da:47: 95:40:1b:04:a1:f1:73:e6:a4:23:f6:8d:6a:39:0d:ad:d3:a6: 0d:82:71:65:5e:a0:03:76:91:6b:af:f8:5f:e3:58:18:a4:1a: 5a:4d:30:0c:b6:6e:2f:2c:42:00:08:db:ba:07:af:f7:c6:fb: 7e:10:aa:30:a3:f6:22:c1:68:8f:0b:48:67:05:91:b5:f1:c9: 76:b8:38:07:83:f2:cc:8e:f3:6c:d5:e5:df:c7:66:c9:81:64: 06:ec:fe:77:db:09:d6:14:8d:37:a9:55:b9:ed:7a:66:b1:a6: 4e:90:3f:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGh3BEDXXmaNH/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk Y2ZiY2RiMGQtYzk0MS00ZmY3LWJlMTEtNjEyOTllNzc1NDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9HPkd8CymUytu6z/JnGhXeupF/Zk7EMeVp+ +GUi95nsB4IyGnR7eqMR0fhoAGehqBtxrd782DJkaIslEmZxk5U6SXIRZ/PTbQFK kZqcm2/aqKH6J/ukZMAtFM9PI+BLfGluNkMXloIYDXCc5CiLKgtv3XLE/YCErPau 7zhYwgi2niXWERM9LEdLj/fsBSuh0Hm9KLXVAUoLDHikOyHRzY7gJrKij+OLkj+R 9MwbYVRx9oSsbNqW+tZgtcAi194j/xWsgV3px6WXJrXddk0Nc3h91tXKwaIroaL9 EP+wtvjL6QOGYWP++0GZEhd7GByqhPBccuqSNvg0cjbAvcHD/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+G8O5qLWPcnOdiWOhMakh1jPnuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDY5ZmFlMGUtZTU3ZS0z MzlkLWIyMTUtNWViZTNiMTU2MGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9HoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrw3R2z863vXZrB42i9v2qAenNSFqEeQ0SUZxzwjOvTSw7CoQ4fXto6 fIX7zRopc1paFElc8gjRbtgS0mRt4/k9IW4VQty7GOMaGzqWw6dbo8+o2FelbkVT 0dowOe10Wnlq07IGTTg/FIC0/6paUDqGJznx2WVu+IytQwh7mUcRO6gpQgsR9OV6 D6eaeFHaR5VAGwSh8XPmpCP2jWo5Da3Tpg2CcWVeoAN2kWuv+F/jWBikGlpNMAy2 bi8sQgAI27oHr/fG+34QqjCj9iLBaI8LSGcFkbXxyXa4OAeD8syO82zV5d/HZsmB ZAbs/nfbCdYUjTepVbntemaxpk6QP98= -----END CERTIFICATE-----Generated at Thu Mar 26 07:01:44 2026 by rpki-client