$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbaa2de8-7a9f-3e48-a8bd-336184151f97.roa File: dbaa2de8-7a9f-3e48-a8bd-336184151f97.roa (raw, json) Hash identifier: jHUOdBEbQfOw1K4kRumu0OjKXWl+1S91CIdJwADERBs= Subject key identifier: 28:A3:B4:0B:A2:21:19:F0:BA:9B:4D:CE:2A:5D:A4:0F:E5:95:F1:B7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D237A48EF36F06C7339616000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbaa2de8-7a9f-3e48-a8bd-336184151f97.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.217.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:48:ef:36:f0:6c:73:39:61:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=3601d0b6-e917-4f94-9b95-feac6b1c9458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:dc:88:56:82:a6:c4:4c:7c:b3:93:cf:69:96: 31:4a:5b:24:06:60:95:f6:f6:a4:da:54:2c:18:64: 24:fe:ad:fb:68:49:50:cd:4c:24:9c:79:e6:da:cb: fa:dc:e8:8f:55:ab:58:42:ba:83:6a:d3:9d:17:63: 8a:e2:fc:09:a4:ec:8a:8d:b4:10:ae:75:39:fa:9c: 3e:ee:48:19:e7:7d:56:cc:b9:5b:92:44:30:34:33: 1b:87:9f:7a:c0:5c:cf:1f:bd:fd:06:db:20:25:f0: e7:6b:66:8e:5b:bd:09:23:7f:ca:f9:18:b6:a7:b6: c6:53:6b:ca:fc:b6:ce:53:8e:f3:ab:ba:11:a3:27: a3:41:ce:3f:9a:53:07:01:ad:8a:78:a0:75:a7:42: 12:ee:8e:d8:f9:1f:dd:c9:60:20:0e:0d:4d:64:6f: 13:55:32:50:b3:11:41:01:50:02:c8:e6:ad:3d:17: da:7c:0a:65:a0:3d:dd:1c:e3:17:5c:87:bd:72:5e: d9:30:c4:3e:4f:2c:df:52:c3:b3:53:78:71:72:7c: 44:e1:8a:c4:1c:f6:6c:13:02:ca:c6:9e:25:c6:e9: ba:8b:02:bf:02:1b:4a:d7:79:bc:d4:77:0a:ed:f9: b0:60:51:b1:63:c0:7e:89:c0:e9:48:da:56:e4:5b: 49:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A3:B4:0B:A2:21:19:F0:BA:9B:4D:CE:2A:5D:A4:0F:E5:95:F1:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbaa2de8-7a9f-3e48-a8bd-336184151f97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ed:c1:7a:28:a3:d8:8e:c1:42:24:5e:39:e6:23:14:e4:77: 37:75:9f:94:ea:56:99:e3:fd:5f:4d:09:21:ae:70:1f:ae:14: 53:1e:cf:20:57:13:8e:56:78:18:37:00:29:67:36:f6:7f:90: c0:92:63:44:15:c5:ed:fc:2a:fd:9b:99:c8:c0:89:f5:15:cb: 4f:c3:b7:77:29:08:14:40:ca:76:91:30:88:e4:67:ed:c0:27: ac:b3:e3:fc:5d:7a:14:5c:93:0d:97:f1:d6:d2:58:3f:b4:73: dc:72:75:d9:79:23:03:9e:77:d8:e8:59:75:79:91:9f:a7:d8: 5d:e4:6c:4d:4c:23:ab:a4:c9:e9:fe:e5:27:df:3c:a8:bb:ef: 6c:d7:66:db:48:39:2a:74:20:56:4c:20:88:68:44:80:84:b1: 4a:5e:a0:25:4f:16:8c:62:16:52:a8:fa:14:f0:ac:b4:67:84: 78:3a:c4:f1:b4:52:48:3d:c1:d1:2f:a8:5c:92:b2:09:93:6a: 89:74:9f:54:cf:7b:72:73:1a:9e:e5:2b:93:54:94:58:c9:90: fd:49:1f:dd:c7:e9:9b:dc:e0:29:52:b3:4f:36:9e:a7:19:82: bf:c8:d8:87:7b:57:81:0a:52:ed:e6:9a:9e:2b:07:9d:7e:05: 62:ea:9c:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekjvNvBsczlhYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MzYwMWQwYjYtZTkxNy00Zjk0LTliOTUtZmVhYzZiMWM5NDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9yIVoKmxEx8s5PPaZYxSlskBmCV9vak2lQs GGQk/q37aElQzUwknHnm2sv63OiPVatYQrqDatOdF2OK4vwJpOyKjbQQrnU5+pw+ 7kgZ531WzLlbkkQwNDMbh596wFzPH739BtsgJfDna2aOW70JI3/K+Ri2p7bGU2vK /LbOU47zq7oRoyejQc4/mlMHAa2KeKB1p0IS7o7Y+R/dyWAgDg1NZG8TVTJQsxFB AVACyOatPRfafAploD3dHOMXXIe9cl7ZMMQ+TyzfUsOzU3hxcnxE4YrEHPZsEwLK xp4lxum6iwK/AhtK13m81HcK7fmwYFGxY8B+icDpSNpW5FtJ+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCijtAuiIRnwuptNzipdpA/llfG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGJhYTJkZTgtN2E5Zi0z ZTQ4LWE4YmQtMzM2MTg0MTUxZjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9kKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADftwXooo9iOwUIkXjnmIxTkdzd1n5TqVpnj/V9NCSGucB+uFFMezyBX E45WeBg3AClnNvZ/kMCSY0QVxe38Kv2bmcjAifUVy0/Dt3cpCBRAynaRMIjkZ+3A J6yz4/xdehRckw2X8dbSWD+0c9xyddl5IwOed9joWXV5kZ+n2F3kbE1MI6ukyen+ 5SffPKi772zXZttIOSp0IFZMIIhoRICEsUpeoCVPFoxiFlKo+hTwrLRnhHg6xPG0 Ukg9wdEvqFySsgmTaol0n1TPe3JzGp7lK5NUlFjJkP1JH93H6Zvc4ClSs082nqcZ gr/I2Id7V4EKUu3mmp4rB51+BWLqnME= -----END CERTIFICATE-----Generated at Thu Mar 26 10:40:48 2026 by rpki-client