$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb98baa-2682-37a7-bfc4-9b7540f961e2.roa File: dfb98baa-2682-37a7-bfc4-9b7540f961e2.roa (raw, json) Hash identifier: b7fHbu/ED5QxspPzaL2y/Otnutif+/WUYEIT3+xsQIs= Subject key identifier: 42:29:ED:99:5A:C7:DF:D3:7E:7F:A3:8E:6D:E0:7E:22:54:6A:56:A9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1B1A56AA05C3EE1EFCB4A6E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb98baa-2682-37a7-bfc4-9b7540f961e2.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 20940 IP address blocks: 23.209.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:56:aa:05:c3:ee:1e:fc:b4:a6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=53c5b20c-f4a6-4a90-aebf-dc3d055611e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f5:58:4e:c3:7c:79:19:b3:3b:d6:8c:60:f0: f2:6d:da:22:84:d3:d4:e6:84:6f:27:3f:29:a4:c5: e1:5f:6e:f0:18:f0:d1:0b:8b:ad:09:80:a8:61:1b: a9:11:d0:8b:6d:4b:36:30:0c:7b:74:3c:90:a8:ab: 26:e5:63:b6:87:a8:b6:75:dd:76:6e:a6:e6:98:8c: a7:42:48:62:e1:b9:d5:33:18:25:87:8d:5a:04:c0: 34:c1:4c:7a:98:f9:0f:fc:30:97:7c:d7:cf:d8:f5: 9f:62:06:92:df:0d:e1:9b:62:33:2d:97:e2:12:93: d7:5c:d7:1c:91:6f:18:90:d5:7d:2f:c9:03:bd:bb: fd:a9:5f:03:92:b8:c1:e2:3b:71:49:a8:3a:8f:78: de:4a:c1:7d:43:22:3e:13:39:f8:2c:06:a8:e2:65: 16:a5:b8:67:73:0f:3d:81:dd:74:40:00:ea:58:61: a0:e9:2e:fb:75:1e:ee:28:9a:5c:4a:34:ad:fc:64: 81:ce:fc:d4:33:15:e0:bd:4b:c6:c1:5b:45:49:de: 9e:35:09:05:75:06:ae:3a:ca:6f:c1:0b:de:b2:0b: 4d:a1:18:59:ca:7a:4d:3a:5c:27:3a:36:15:98:75: 58:50:11:4c:6a:97:3d:15:c9:e7:eb:e5:11:5d:be: 33:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:29:ED:99:5A:C7:DF:D3:7E:7F:A3:8E:6D:E0:7E:22:54:6A:56:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb98baa-2682-37a7-bfc4-9b7540f961e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a7:e2:fb:ba:8b:cd:04:3e:aa:bf:3d:6d:e0:d8:d8:81:11: e7:86:a7:b4:a0:fe:4d:4d:a5:7b:a9:7c:2a:00:ce:27:5d:e5: fe:1b:f2:63:6f:9a:29:39:68:1c:70:6a:08:82:48:59:ad:7b: e9:77:f3:ab:22:64:62:f0:98:a6:d2:91:e2:70:67:b4:c1:d7: cb:8d:6a:99:3a:1a:40:b0:15:53:6e:50:91:c3:6a:20:5a:51: 24:56:9f:75:58:ed:4b:10:db:56:c8:9b:4d:b4:16:53:64:30: 68:a9:82:e9:20:23:5a:72:9c:06:c2:42:98:fd:4c:41:c3:7e: 9c:2f:22:1b:53:85:38:dc:52:72:40:94:0c:8a:9a:03:c7:c2: 31:98:5f:45:a7:10:c5:99:d7:f4:30:ea:8a:cc:5f:76:db:0b: b9:9f:f0:26:5b:3f:b9:20:49:ac:5c:e2:11:a4:ff:1a:cc:82: 0f:04:12:e5:eb:2e:b1:bd:91:86:97:a6:e1:0d:d8:68:84:69: 0c:1c:b3:ac:70:09:e6:e6:61:ab:2e:f6:1c:9d:c2:5e:17:16: 9d:5f:07:4a:d6:c2:17:3d:b3:33:2e:72:ac:69:01:1f:46:f1: 4b:6f:5b:62:3f:76:c8:9b:93:9e:12:e9:27:31:8f:62:1e:e0: 98:25:25:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGlaqBcPuHvy0puAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk NTNjNWIyMGMtZjRhNi00YTkwLWFlYmYtZGMzZDA1NTYxMWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/VYTsN8eRmzO9aMYPDybdoihNPU5oRvJz8p pMXhX27wGPDRC4utCYCoYRupEdCLbUs2MAx7dDyQqKsm5WO2h6i2dd12bqbmmIyn Qkhi4bnVMxglh41aBMA0wUx6mPkP/DCXfNfP2PWfYgaS3w3hm2IzLZfiEpPXXNcc kW8YkNV9L8kDvbv9qV8DkrjB4jtxSag6j3jeSsF9QyI+Ezn4LAao4mUWpbhncw89 gd10QADqWGGg6S77dR7uKJpcSjSt/GSBzvzUMxXgvUvGwVtFSd6eNQkFdQauOspv wQvesgtNoRhZynpNOlwnOjYVmHVYUBFMapc9Fcnn6+URXb4zSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIp7Zlax9/Tfn+jjm3gfiJUalapMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGZiOThiYWEtMjY4Mi0z N2E3LWJmYzQtOWI3NTQwZjk2MWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9G0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSn4vu6i80EPqq/PW3g2NiBEeeGp7Sg/k1NpXupfCoAzidd5f4b8mNv mik5aBxwagiCSFmte+l386siZGLwmKbSkeJwZ7TB18uNapk6GkCwFVNuUJHDaiBa USRWn3VY7UsQ21bIm020FlNkMGipgukgI1pynAbCQpj9TEHDfpwvIhtThTjcUnJA lAyKmgPHwjGYX0WnEMWZ1/Qw6orMX3bbC7mf8CZbP7kgSaxc4hGk/xrMgg8EEuXr LrG9kYaXpuEN2GiEaQwcs6xwCebmYasu9hydwl4XFp1fB0rWwhc9szMucqxpAR9G 8UtvW2I/dsibk54S6Scxj2Ie4JglJQc= -----END CERTIFICATE-----Generated at Thu Mar 26 09:24:25 2026 by rpki-client