$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fddd6370-06a9-300b-9845-ecf245c31364.roa File: fddd6370-06a9-300b-9845-ecf245c31364.roa (raw, json) Hash identifier: XOehFkg8gYUettWIzeCGZz6IIZXzboyeGMVbwnTKrmA= Subject key identifier: C1:7E:7C:3B:48:C7:8A:59:25:7E:47:E5:BF:76:70:D2:24:9C:AE:DF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D356569AD75FE979D95201540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fddd6370-06a9-300b-9845-ecf245c31364.roa Signing time: Wed 18 Mar 2026 11:03:45 +0000 ROA not before: Wed 18 Mar 2026 11:03:45 +0000 ROA not after: Tue 16 Jun 2026 11:03:45 +0000 asID: 20940 IP address blocks: 23.221.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:65:69:ad:75:fe:97:9d:95:20:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 18 11:03:45 2026 GMT Not After : Jun 16 11:03:45 2026 GMT Subject: CN=afca1cb8-d30f-4e7c-9902-3401b1e7f09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d9:a5:7d:19:57:a2:1b:70:bd:9f:5c:8d:a8: 05:c5:28:0f:8a:6d:f5:79:ee:33:7d:60:93:5a:80: 6b:c5:af:dd:6b:3d:82:74:6b:41:1c:71:5d:1b:8e: 54:7f:e3:cf:ad:07:3d:d2:0e:5a:0e:4d:ab:4c:0e: c9:c1:a3:d9:1b:12:cb:9f:d6:7f:ad:64:02:f7:f8: 63:b6:51:58:31:96:b1:21:cc:4f:fc:7f:47:ca:55: 8c:39:19:b8:db:c9:59:5a:7e:c4:f4:e1:6e:96:1e: ed:c5:e8:bd:40:45:62:55:1f:b4:3a:29:66:db:59: ea:eb:af:68:b5:85:26:59:e5:6c:80:d5:36:40:f1: cd:d4:af:e9:15:ed:7e:31:59:bd:c3:5b:46:da:d1: 14:0c:06:64:30:7e:28:fa:25:f7:76:89:91:70:89: 99:5e:3f:49:54:60:2d:9b:3e:06:86:cc:4c:ad:a1: fc:b6:4e:fd:03:41:e9:ef:8b:8f:43:28:84:98:dd: 67:49:a3:a2:1e:10:96:41:5a:24:b3:d1:c7:73:3e: c1:a6:ae:1f:b6:4b:50:e4:b3:35:63:1c:78:f8:a1: 56:22:63:89:e4:2d:48:d7:d8:9e:3e:f6:09:89:ba: 9b:4e:37:45:49:ca:cf:2f:39:ce:9b:56:39:1d:c9: ea:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7E:7C:3B:48:C7:8A:59:25:7E:47:E5:BF:76:70:D2:24:9C:AE:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fddd6370-06a9-300b-9845-ecf245c31364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:38:7b:6e:cf:43:78:b1:e2:41:52:98:b6:a7:11:6b:d8:57: 7c:e8:5d:ca:10:df:18:f9:e7:92:c7:dc:84:8f:4e:99:24:44: a0:0a:bf:c9:0b:33:7d:62:e7:5c:f3:cd:c8:e6:23:de:ed:31: bb:9a:d0:6c:c3:d3:2b:ff:5f:8c:7a:8a:cc:50:46:7a:75:56: 8e:6e:61:e7:d9:41:55:02:67:c1:e7:86:2e:cd:1d:27:27:ee: 30:8f:ac:72:e8:31:89:23:e0:37:1d:5d:10:9a:cc:a8:b5:1d: b6:86:91:ff:15:e3:bf:39:ca:67:e4:19:02:7a:78:87:c8:c6: 02:cd:8e:2d:47:b7:cd:0f:aa:a2:db:82:e9:1b:f3:7d:2e:1c: 5a:4d:0e:1b:43:58:bd:f9:83:ce:5f:b1:4b:e1:21:91:6e:0a: e1:4c:76:af:c2:d1:31:04:e3:38:68:5f:5f:88:5e:52:10:bc: e5:01:c0:2c:5b:89:9c:b2:36:6c:c5:6d:8f:7d:ca:25:92:a3: ea:ae:80:3e:8c:3f:37:92:4e:44:23:3d:3c:0e:a4:38:12:e5: d8:3f:fb:c3:46:b9:08:a0:6d:24:43:5b:2f:2c:05:b7:d3:55: 4a:ed:aa:b7:b2:01:c4:1a:4a:fa:28:cd:2c:7a:33:61:67:f7: 8e:ab:d1:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01ZWmtdf6XnZUgFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxODExMDM0NVoXDTI2MDYxNjExMDM0NVowLzEtMCsGA1UEAxMk YWZjYTFjYjgtZDMwZi00ZTdjLTk5MDItMzQwMWIxZTdmMDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtmlfRlXohtwvZ9cjagFxSgPim31ee4zfWCT WoBrxa/daz2CdGtBHHFdG45Uf+PPrQc90g5aDk2rTA7JwaPZGxLLn9Z/rWQC9/hj tlFYMZaxIcxP/H9HylWMORm428lZWn7E9OFulh7txei9QEViVR+0Oilm21nq669o tYUmWeVsgNU2QPHN1K/pFe1+MVm9w1tG2tEUDAZkMH4o+iX3domRcImZXj9JVGAt mz4GhsxMraH8tk79A0Hp74uPQyiEmN1nSaOiHhCWQVoks9HHcz7Bpq4ftktQ5LM1 Yxx4+KFWImOJ5C1I19iePvYJibqbTjdFScrPLznOm1Y5Hcnq8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMF+fDtIx4pZJX5H5b92cNIknK7fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmRkZDYzNzAtMDZhOS0z MDBiLTk4NDUtZWNmMjQ1YzMxMzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF91CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB84e27PQ3ix4kFSmLanEWvYV3zoXcoQ3xj555LH3ISPTpkkRKAKv8kL M31i51zzzcjmI97tMbua0GzD0yv/X4x6isxQRnp1Vo5uYefZQVUCZ8Hnhi7NHScn 7jCPrHLoMYkj4DcdXRCazKi1HbaGkf8V4785ymfkGQJ6eIfIxgLNji1Ht80PqqLb gukb830uHFpNDhtDWL35g85fsUvhIZFuCuFMdq/C0TEE4zhoX1+IXlIQvOUBwCxb iZyyNmzFbY99yiWSo+qugD6MPzeSTkQjPTwOpDgS5dg/+8NGuQigbSRDWy8sBbfT VUrtqreyAcQaSvoozSx6M2Fn946r0Z0= -----END CERTIFICATE-----Generated at Thu Mar 26 03:40:16 2026 by rpki-client