$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8c49ef6-0c22-35fb-bd04-c61098ff797c.roa File: f8c49ef6-0c22-35fb-bd04-c61098ff797c.roa (raw, json) Hash identifier: EneVknzgEW2ocXW5yWSSQxEPvCszjz7XZ0j/7cEKdyE= Subject key identifier: D3:94:93:6A:0B:16:DA:9C:1B:50:E3:88:68:C0:48:1C:63:C6:F8:22 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D2A74C9C7251B635596BDA580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8c49ef6-0c22-35fb-bd04-c61098ff797c.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 16625 IP address blocks: 23.218.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:c9:c7:25:1b:63:55:96:bd:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=83ce59dd-a982-4886-b337-59be14669bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:39:8b:5c:90:0a:9b:46:89:cd:9d:f8:70:46: c2:e8:22:93:f3:e4:bb:31:d7:50:b1:dc:81:22:b0: d7:15:da:69:b2:1a:cb:47:75:28:4a:24:18:63:d4: b5:e7:4e:cd:67:96:45:c7:f0:ad:11:27:6d:4d:7d: 3b:ff:26:c4:ab:10:99:05:f6:6b:30:c9:fc:0b:57: 98:d6:2b:98:a5:d9:d3:b0:cd:7f:e7:39:00:1f:5b: 8a:a6:5f:ba:e4:b1:6f:59:4a:df:cc:e3:88:5b:4a: 29:88:be:38:b4:4c:06:be:0c:1b:a7:62:ea:63:39: 59:cc:37:80:df:8e:46:98:28:39:ef:13:c1:9f:30: 13:86:9d:e1:da:5c:78:5e:86:d0:88:77:e9:0b:ee: 43:b0:4a:16:bf:04:f3:34:10:27:c7:9e:a3:ba:ac: 9f:ed:40:a3:87:5c:ab:ba:72:d2:86:89:d6:43:3d: e5:ff:17:2d:50:92:65:3b:13:de:98:e4:bc:bb:c4: 88:e9:3c:0a:5c:90:3c:5b:22:69:d9:a0:b9:7c:09: 33:f0:f6:f1:09:c7:51:07:ff:4f:3c:8a:7c:77:5f: 3f:1c:01:db:00:de:04:50:f9:f9:6c:c1:3f:62:42: 2f:b7:51:5f:73:8c:01:22:aa:92:ff:55:7f:01:58: 0e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:94:93:6A:0B:16:DA:9C:1B:50:E3:88:68:C0:48:1C:63:C6:F8:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8c49ef6-0c22-35fb-bd04-c61098ff797c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:63:74:4e:f5:04:36:5a:9d:1b:fe:35:9a:a6:be:d1:2c:ff: 2a:ce:54:c0:64:3d:7d:12:03:8b:11:6b:0d:97:89:1c:95:96: d1:25:b3:41:15:af:f2:da:7e:89:d5:ca:66:21:64:1a:58:32: 9c:bb:a2:b7:2c:ed:ef:d6:54:cc:86:38:b6:8a:4f:ac:86:7a: 60:38:b7:56:8e:95:2c:cf:a2:51:5c:1a:60:f1:24:84:fd:47: e8:71:a5:5d:f3:10:38:57:45:6f:88:7c:75:4d:91:39:51:08: 76:e1:36:05:c2:01:f9:33:c4:f4:49:2f:10:2c:67:76:12:bb: 92:bc:52:f6:86:35:bd:c3:52:8e:69:c5:fe:b6:52:de:10:54: 57:63:49:58:71:39:ac:ca:48:9d:4f:a5:3f:c8:ae:78:d0:62: 54:0c:c3:60:8a:32:1e:64:0b:b5:e3:f8:cb:c2:be:0a:f2:39: 8d:48:67:54:5a:2a:0e:ee:a8:f7:2e:56:b1:2a:70:14:d1:64: c4:09:4c:59:06:b2:4a:13:bf:1a:82:fa:59:5c:a2:f0:b5:4b: 29:5a:60:1c:30:40:c1:e1:54:3c:b0:d0:b0:fb:34:b4:f4:9c: f3:27:b0:49:3d:6c:cf:1d:85:fb:23:f8:81:02:c7:ef:0c:1e: 09:0b:00:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdMnHJRtjVZa9pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ODNjZTU5ZGQtYTk4Mi00ODg2LWIzMzctNTliZTE0NjY5YmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTmLXJAKm0aJzZ34cEbC6CKT8+S7MddQsdyB IrDXFdppshrLR3UoSiQYY9S1507NZ5ZFx/CtESdtTX07/ybEqxCZBfZrMMn8C1eY 1iuYpdnTsM1/5zkAH1uKpl+65LFvWUrfzOOIW0opiL44tEwGvgwbp2LqYzlZzDeA 345GmCg57xPBnzAThp3h2lx4XobQiHfpC+5DsEoWvwTzNBAnx56juqyf7UCjh1yr unLShonWQz3l/xctUJJlOxPemOS8u8SI6TwKXJA8WyJp2aC5fAkz8PbxCcdRB/9P PIp8d18/HAHbAN4EUPn5bME/YkIvt1Ffc4wBIqqS/1V/AVgOxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOUk2oLFtqcG1DjiGjASBxjxvgiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjhjNDllZjYtMGMyMi0z NWZiLWJkMDQtYzYxMDk4ZmY3OTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9q8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNjdE71BDZanRv+NZqmvtEs/yrOVMBkPX0SA4sRaw2XiRyVltEls0EV r/LafonVymYhZBpYMpy7orcs7e/WVMyGOLaKT6yGemA4t1aOlSzPolFcGmDxJIT9 R+hxpV3zEDhXRW+IfHVNkTlRCHbhNgXCAfkzxPRJLxAsZ3YSu5K8UvaGNb3DUo5p xf62Ut4QVFdjSVhxOazKSJ1PpT/IrnjQYlQMw2CKMh5kC7Xj+MvCvgryOY1IZ1Ra Kg7uqPcuVrEqcBTRZMQJTFkGskoTvxqC+llcovC1SylaYBwwQMHhVDyw0LD7NLT0 nPMnsEk9bM8dhfsj+IECx+8MHgkLACw= -----END CERTIFICATE-----Generated at Thu Mar 26 03:50:19 2026 by rpki-client