$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49cc318d-36d2-3c5d-80ac-f8de2fa05ad2.roa File: 49cc318d-36d2-3c5d-80ac-f8de2fa05ad2.roa (raw, json) Hash identifier: q+FPCP8gHfT4zDZV38MltNLRI4LTrLRYTgnPKnpYm5k= Subject key identifier: 09:2B:84:0D:BD:12:56:CE:E8:06:4F:21:B4:C4:DC:E0:34:05:93:EC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D7F9A9B1943AD96E7B446F7F0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49cc318d-36d2-3c5d-80ac-f8de2fa05ad2.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 16625 IP address blocks: 23.209.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:9b:19:43:ad:96:e7:b4:46:f7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=fbf1d7b2-3c31-4ee3-a2cb-2adbd463f4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:49:1f:86:5a:d1:f9:8d:ff:af:6c:f3:f3:44: 52:86:63:9b:ae:19:70:95:41:75:da:bd:32:17:30: ff:3c:b1:18:32:74:ef:87:25:01:6c:46:8f:b0:c8: 1e:2a:8b:ad:8a:b5:80:8f:f4:75:6b:54:d6:4b:12: ac:e0:d2:b9:a8:c8:4b:e7:e4:b1:40:1e:72:2b:31: f6:d2:44:57:c7:c3:a7:ac:d2:e7:e8:32:22:ad:67: 6d:43:a2:dc:9f:16:b1:88:a3:9d:6f:98:f3:6e:8f: 0b:80:ac:c0:56:28:d4:64:72:e8:51:14:a7:f9:82: 15:9e:27:b2:1e:07:9b:b9:21:3d:0d:bb:8a:8b:f9: b6:be:d2:31:8a:af:29:ed:0d:35:ea:16:c1:ba:89: fa:d4:a2:23:6e:e9:39:27:39:66:c5:4a:92:aa:36: d1:3c:8e:7a:6e:3f:81:09:aa:1e:24:b8:ee:37:5a: fc:be:5e:17:94:2d:b5:45:98:2e:d5:9c:fb:c3:d3: de:c0:ce:41:d3:7b:74:b8:81:c2:92:5e:e0:e1:1a: 36:a1:fe:7d:c0:b6:e2:44:f0:93:52:dc:89:a2:37: 5f:98:88:fc:ba:d2:fb:56:6b:a8:19:58:c3:a5:98: aa:e0:61:4d:cc:b3:43:f2:cd:20:fa:4b:25:cb:84: 53:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2B:84:0D:BD:12:56:CE:E8:06:4F:21:B4:C4:DC:E0:34:05:93:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49cc318d-36d2-3c5d-80ac-f8de2fa05ad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:21:9a:38:c1:f1:1b:24:2f:fb:84:5f:26:d1:6c:74:a7:5a: 64:93:c6:5c:57:6b:35:0c:4f:bf:e0:5c:7e:f9:11:86:41:07: 83:66:43:00:a8:f5:60:ef:9b:30:ca:7c:92:e6:c5:a6:f5:88: 6d:a9:e8:57:a1:26:89:af:09:ae:a6:dd:77:9f:17:bb:cd:80: 81:75:fc:84:eb:44:d0:7d:64:98:98:ac:91:64:8b:eb:2f:34: 44:ef:a0:39:43:d6:5f:19:92:81:7a:c9:5c:e4:cc:f2:f9:23: 1c:16:63:f6:54:49:5f:71:50:7e:69:98:18:35:81:f1:97:87: 49:36:9b:18:09:07:55:24:6f:10:7e:20:83:b9:5c:d0:66:3b: 99:53:5e:c2:9f:7b:a6:fa:63:a7:6f:f8:1e:c0:f8:db:25:75: d5:04:c3:fe:3d:86:a3:ce:99:ea:bd:40:93:22:a1:56:f9:04: 39:1e:64:7c:d9:e7:fd:86:8b:e7:5f:66:39:0c:ec:ca:27:31: 70:d5:7f:ef:6a:15:58:e5:d1:b8:db:93:15:88:64:20:4b:4a: 79:ed:37:c5:16:6c:20:55:e2:07:7c:24:b5:f1:cc:93:b3:91: f3:5a:5f:07:a9:bb:c2:64:8f:7f:7f:fe:62:62:14:56:e8:23: bf:65:af:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpsZQ62W57RG9/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZmJmMWQ3YjItM2MzMS00ZWUzLWEyY2ItMmFkYmQ0NjNmNGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0kfhlrR+Y3/r2zz80RShmObrhlwlUF12r0y FzD/PLEYMnTvhyUBbEaPsMgeKoutirWAj/R1a1TWSxKs4NK5qMhL5+SxQB5yKzH2 0kRXx8OnrNLn6DIirWdtQ6LcnxaxiKOdb5jzbo8LgKzAVijUZHLoURSn+YIVniey HgebuSE9DbuKi/m2vtIxiq8p7Q016hbBuon61KIjbuk5JzlmxUqSqjbRPI56bj+B CaoeJLjuN1r8vl4XlC21RZgu1Zz7w9PewM5B03t0uIHCkl7g4Ro2of59wLbiRPCT UtyJojdfmIj8utL7VmuoGVjDpZiq4GFNzLND8s0g+ksly4RTeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkrhA29ElbO6AZPIbTE3OA0BZPsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDljYzMxOGQtMzZkMi0z YzVkLTgwYWMtZjhkZTJmYTA1YWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9E8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEhmjjB8RskL/uEXybRbHSnWmSTxlxXazUMT7/gXH75EYZBB4NmQwCo 9WDvmzDKfJLmxab1iG2p6FehJomvCa6m3XefF7vNgIF1/ITrRNB9ZJiYrJFki+sv NETvoDlD1l8ZkoF6yVzkzPL5IxwWY/ZUSV9xUH5pmBg1gfGXh0k2mxgJB1UkbxB+ IIO5XNBmO5lTXsKfe6b6Y6dv+B7A+NslddUEw/49hqPOmeq9QJMioVb5BDkeZHzZ 5/2Gi+dfZjkM7MonMXDVf+9qFVjl0bjbkxWIZCBLSnntN8UWbCBV4gd8JLXxzJOz kfNaXwepu8Jkj39//mJiFFboI79lrxU= -----END CERTIFICATE-----Generated at Fri Apr 17 12:24:41 2026 by rpki-client