$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eac855e7-a308-366d-b7da-288233a4f01f.roa File: eac855e7-a308-366d-b7da-288233a4f01f.roa (raw, json) Hash identifier: yaCWjEKnzqNdtFRu+z5eHtCcmEFJtH/lMBnPk229CqE= Subject key identifier: B6:DA:80:4F:70:85:D1:7E:16:EC:93:06:73:C9:7A:9F:00:AB:87:F7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2A74CD743F7C45F6668B6080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eac855e7-a308-366d-b7da-288233a4f01f.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 20940 IP address blocks: 23.219.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:cd:74:3f:7c:45:f6:66:8b:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=d78e959c-1f6e-4157-86cf-6507ed17b03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0f:e4:4a:41:17:f4:e7:8f:f4:30:6e:c3:91: 6a:4c:af:28:8e:9d:fd:f1:66:89:e2:98:77:44:a0: 63:5b:d7:e1:cf:a5:dd:e5:e6:65:3b:82:52:6e:0e: e9:2c:36:8d:28:24:91:b7:68:c4:45:a5:e4:64:da: 4b:74:c7:d6:cd:6c:d9:4c:6a:c2:35:ee:fd:d4:b5: f0:51:d2:fa:77:67:75:1d:ca:c8:10:47:20:71:31: c3:b8:14:dd:87:a3:8b:db:35:e6:75:dd:6f:9f:90: aa:65:23:25:9c:98:d7:53:49:a8:60:d7:bb:a2:e3: 49:61:3b:4d:0c:0c:ac:3f:b7:6d:0d:c8:18:8e:37: 9c:f3:58:43:99:5b:e9:a8:e0:b5:79:a0:f1:c1:c2: 65:74:e7:23:36:91:31:6c:18:17:0a:be:e8:45:61: 6f:24:88:e3:8f:cd:95:be:8c:ed:2d:55:c9:e4:16: 8b:0a:e4:26:9b:7c:26:af:ce:ae:80:89:7b:1c:5e: 70:b2:bf:65:56:37:01:f0:24:c0:c4:97:84:7c:f3: 08:11:d5:71:a2:18:cf:01:af:48:c1:4a:08:41:bf: 6a:62:cd:a6:b5:82:de:70:9f:a2:2f:24:c1:68:bb: f0:eb:0f:8c:26:90:25:09:37:d9:8d:72:97:a8:01: 5c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DA:80:4F:70:85:D1:7E:16:EC:93:06:73:C9:7A:9F:00:AB:87:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eac855e7-a308-366d-b7da-288233a4f01f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:8f:56:a9:28:cf:59:39:45:6c:32:62:bf:17:71:71:63:98: 4b:7b:88:a4:32:81:75:14:95:3a:7c:2d:4d:bd:6e:64:e5:79: e3:f9:3f:f8:96:25:33:c1:f8:e4:f2:4c:e3:52:73:ea:3c:c3: e3:1a:8e:fe:31:3d:1b:ef:00:15:34:1b:59:ea:06:9f:4f:e5: 62:df:00:67:13:f1:7e:de:54:4f:96:da:96:85:59:5a:39:ef: 37:d6:39:2c:38:74:9a:f0:18:f8:7d:ae:a4:9c:62:ca:ea:53: 7a:bb:22:f8:9f:20:51:1d:10:e4:75:e7:0b:fc:d4:ef:c3:3d: db:2f:8f:bb:54:c3:d7:e1:18:3e:f0:26:b4:7c:4f:67:1c:1a: a0:1d:36:71:6f:cf:4c:80:16:53:f2:ac:a9:10:0d:8e:0a:9f: 25:19:39:98:54:9a:7e:02:19:b8:e3:59:7c:1c:d9:eb:59:04: b5:ef:7c:dc:19:5b:90:b9:65:71:36:38:57:4e:6b:bf:41:f7: bd:68:d0:f0:10:52:70:3a:c3:1e:a6:d3:22:bc:a9:18:e9:a3: 51:0b:20:66:80:1d:19:27:a2:a5:08:ef:23:21:12:d6:14:ac: c6:c3:4b:8d:4f:b5:98:7c:fd:8b:ee:34:0d:05:61:c0:22:5c: be:26:c0:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdM10P3xF9maLYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZDc4ZTk1OWMtMWY2ZS00MTU3LTg2Y2YtNjUwN2VkMTdiMDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q/kSkEX9OeP9DBuw5FqTK8ojp398WaJ4ph3 RKBjW9fhz6Xd5eZlO4JSbg7pLDaNKCSRt2jERaXkZNpLdMfWzWzZTGrCNe791LXw UdL6d2d1HcrIEEcgcTHDuBTdh6OL2zXmdd1vn5CqZSMlnJjXU0moYNe7ouNJYTtN DAysP7dtDcgYjjec81hDmVvpqOC1eaDxwcJldOcjNpExbBgXCr7oRWFvJIjjj82V voztLVXJ5BaLCuQmm3wmr86ugIl7HF5wsr9lVjcB8CTAxJeEfPMIEdVxohjPAa9I wUoIQb9qYs2mtYLecJ+iLyTBaLvw6w+MJpAlCTfZjXKXqAFc/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbagE9whdF+FuyTBnPJep8Aq4f3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWFjODU1ZTctYTMwOC0z NjZkLWI3ZGEtMjg4MjMzYTRmMDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9udMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6PVqkoz1k5RWwyYr8XcXFjmEt7iKQygXUUlTp8LU29bmTleeP5P/iW JTPB+OTyTONSc+o8w+Majv4xPRvvABU0G1nqBp9P5WLfAGcT8X7eVE+W2paFWVo5 7zfWOSw4dJrwGPh9rqScYsrqU3q7IvifIFEdEOR15wv81O/DPdsvj7tUw9fhGD7w JrR8T2ccGqAdNnFvz0yAFlPyrKkQDY4KnyUZOZhUmn4CGbjjWXwc2etZBLXvfNwZ W5C5ZXE2OFdOa79B971o0PAQUnA6wx6m0yK8qRjpo1ELIGaAHRknoqUI7yMhEtYU rMbDS41PtZh8/YvuNA0FYcAiXL4mwHU= -----END CERTIFICATE-----Generated at Thu Mar 26 09:08:43 2026 by rpki-client