$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df65a4eb-c510-35fc-a5a7-3cae9953ff62.roa File: df65a4eb-c510-35fc-a5a7-3cae9953ff62.roa (raw, json) Hash identifier: vcZ/Yl12w5JqnlW7a88cLFo6km6AvNv+SkVHeJQ2Hvw= Subject key identifier: BA:C3:78:C4:40:C8:F5:10:B6:48:A9:05:D6:99:F7:9F:0E:88:7A:5D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1F4A289A590E5D033F735880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df65a4eb-c510-35fc-a5a7-3cae9953ff62.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.215.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:28:9a:59:0e:5d:03:3f:73:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=af40e50d-dd5e-44bd-91ca-d3a373cbf0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:25:a7:c3:5a:ff:ad:ce:02:b0:fe:5a:a2:85: a6:70:2c:2a:d0:4d:ed:1d:ba:63:4f:3f:3e:4c:fe: 4b:ed:44:19:eb:3b:a9:7c:ef:d4:a3:5a:fd:18:34: b4:ea:1b:41:f0:9c:73:b5:3c:bb:fc:4c:22:2e:a8: 31:06:c7:17:2b:27:f9:b4:05:4e:c1:14:f1:0f:91: e9:22:ca:79:44:19:99:83:15:fa:ac:d9:5e:a7:4e: 1d:33:25:66:ad:dc:db:7b:86:57:e7:23:2a:86:2e: b7:9c:c7:be:39:70:6f:fe:70:5b:b6:d0:3a:0b:11: 98:38:1a:10:4a:d0:da:3d:f6:07:c6:c1:1d:4c:10: 2b:a7:bb:f3:a4:2f:1e:c2:79:4d:62:b7:d8:16:41: b1:cf:ae:71:eb:f0:30:98:ff:29:83:92:3c:3f:c3: e2:92:b6:d7:47:0b:bd:ee:e9:46:72:af:0e:92:68: 6a:77:1c:51:44:bb:c0:24:ad:c6:75:77:29:66:22: 9a:86:b4:df:b7:a3:b7:57:85:df:2e:05:26:f8:eb: 2c:8d:8b:1c:d1:bc:9b:08:1f:c0:91:47:78:34:ce: a4:02:11:80:d5:d4:76:68:20:9f:f0:49:48:fd:d9: e9:1e:82:7a:06:12:93:df:d1:a4:07:1a:39:80:63: a4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C3:78:C4:40:C8:F5:10:B6:48:A9:05:D6:99:F7:9F:0E:88:7A:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df65a4eb-c510-35fc-a5a7-3cae9953ff62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:4a:2d:ba:52:85:70:f8:ff:1a:f9:e5:1f:0d:e1:60:54:47: 45:de:72:11:27:f2:c8:e8:27:f9:06:ea:d2:2f:11:72:2e:1a: 40:01:4c:c1:d3:10:5d:f5:ea:88:c6:7a:4b:45:1a:ae:b4:15: e8:5f:f1:39:46:4f:76:85:39:2b:7e:bc:d2:53:de:0a:1d:e2: 40:cb:93:72:d4:ae:44:4f:0b:33:2a:3c:78:7d:d8:3f:98:e8: 64:cb:bd:8c:57:5f:e8:ac:d4:dc:26:1a:76:cd:f5:81:cb:a3: 15:02:fc:ba:63:df:a0:8d:f8:ef:3a:3e:2a:92:98:7b:d7:d6: ab:70:8a:96:49:f8:53:5f:da:9a:d2:98:0c:0c:af:57:99:9c: c3:4d:d2:c0:ab:96:ad:6a:b0:c0:52:12:23:20:02:a5:7d:7a: 55:b7:73:85:a5:2a:f0:0a:23:66:82:d9:13:20:c4:c9:72:fd: 86:9f:b2:f4:1e:bb:4f:99:71:ee:31:65:7a:29:34:8d:4e:fb: 5c:a8:f2:5e:01:4b:1a:0c:55:95:ca:be:a2:2d:b5:d1:4a:83: b7:d6:41:3e:6b:19:37:6d:84:1e:63:e6:66:0c:66:82:4f:ae: e9:0e:0d:ca:d2:17:68:57:9d:f5:f9:c1:66:5b:4c:7c:23:48: ca:3a:4a:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSiiaWQ5dAz9zWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YWY0MGU1MGQtZGQ1ZS00NGJkLTkxY2EtZDNhMzczY2JmMGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryWnw1r/rc4CsP5aooWmcCwq0E3tHbpjTz8+ TP5L7UQZ6zupfO/Uo1r9GDS06htB8JxztTy7/EwiLqgxBscXKyf5tAVOwRTxD5Hp Isp5RBmZgxX6rNlep04dMyVmrdzbe4ZX5yMqhi63nMe+OXBv/nBbttA6CxGYOBoQ StDaPfYHxsEdTBArp7vzpC8ewnlNYrfYFkGxz65x6/AwmP8pg5I8P8PikrbXRwu9 7ulGcq8OkmhqdxxRRLvAJK3GdXcpZiKahrTft6O3V4XfLgUm+OssjYsc0bybCB/A kUd4NM6kAhGA1dR2aCCf8ElI/dnpHoJ6BhKT39GkBxo5gGOk8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrDeMRAyPUQtkipBdaZ958OiHpdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGY2NWE0ZWItYzUxMC0z NWZjLWE1YTctM2NhZTk5NTNmZjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9dkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJKLbpShXD4/xr55R8N4WBUR0XechEn8sjoJ/kG6tIvEXIuGkABTMHT EF316ojGektFGq60Fehf8TlGT3aFOSt+vNJT3god4kDLk3LUrkRPCzMqPHh92D+Y 6GTLvYxXX+is1NwmGnbN9YHLoxUC/Lpj36CN+O86PiqSmHvX1qtwipZJ+FNf2prS mAwMr1eZnMNN0sCrlq1qsMBSEiMgAqV9elW3c4WlKvAKI2aC2RMgxMly/YafsvQe u0+Zce4xZXopNI1O+1yo8l4BSxoMVZXKvqIttdFKg7fWQT5rGTdthB5j5mYMZoJP rukODcrSF2hXnfX5wWZbTHwjSMo6SlA= -----END CERTIFICATE-----Generated at Thu Mar 26 12:19:13 2026 by rpki-client