$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b4d5bf1-5302-3e4a-9d34-43a57dbe1e0d.roa File: 5b4d5bf1-5302-3e4a-9d34-43a57dbe1e0d.roa (raw, json) Hash identifier: zPQpwHraW5oDuCM4n5Q0gUFP0BYTcex7ACXueiw29Ww= Subject key identifier: 2A:49:1E:91:30:7C:8D:A6:22:FD:79:B5:AC:0D:B8:54:72:1B:F8:EE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D59EA5565558678AE9327FA98 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b4d5bf1-5302-3e4a-9d34-43a57dbe1e0d.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 35994 IP address blocks: 23.217.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:55:65:55:86:78:ae:93:27:fa:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=87ce8f1a-15fd-4dd3-bf9f-d20fc1dd37b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ad:76:14:90:ac:4d:24:44:31:b1:b7:4a:ac: d6:c9:6e:d1:fd:f2:f2:08:b3:57:f0:c1:32:40:f3: e2:37:32:bf:63:98:0a:fe:b6:36:a1:14:2d:dc:c5: 17:ad:f2:7e:54:8f:91:7b:78:bf:a0:32:f7:63:13: 2f:a6:fd:aa:38:1e:08:45:fb:1f:50:1e:95:40:4a: 4b:77:98:88:fe:46:f4:10:ee:16:2c:ec:28:10:20: 5b:d1:c4:f0:3b:51:fa:9c:09:93:ca:02:56:8d:46: 5e:09:57:09:f5:9d:a1:f2:bd:13:1d:71:6b:8d:e8: a4:6e:e2:11:73:80:a8:28:ad:ce:db:05:2f:f0:9c: 37:76:48:4b:e6:9f:b3:f9:a3:3f:ae:fa:06:45:a5: f8:72:eb:48:a1:8d:15:fb:85:a9:88:bf:89:f4:ea: b0:a5:8a:65:f9:a1:b3:43:48:83:23:63:06:6b:23: 4a:ca:65:e0:ef:2e:e4:36:1c:14:53:89:ab:9e:f7: ab:12:68:63:e2:b1:61:e3:8b:9d:1a:85:08:8d:95: cb:2c:70:6a:2e:97:4d:2a:bf:31:69:54:4f:f0:a4: 43:ac:37:b5:b4:f1:d5:a4:03:12:78:8a:1d:62:be: 46:98:4d:86:35:59:1d:92:b7:ee:fc:6b:fe:17:57: 2e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:49:1E:91:30:7C:8D:A6:22:FD:79:B5:AC:0D:B8:54:72:1B:F8:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b4d5bf1-5302-3e4a-9d34-43a57dbe1e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:c7:6e:99:25:5e:40:dd:99:6e:5e:9a:50:ec:ae:98:1b:f1: 0c:67:7e:8d:07:cf:06:79:3e:65:2c:80:a0:44:e5:53:1c:e9: 2b:15:dd:c5:b7:e1:a0:17:90:8a:5f:8b:87:9a:8c:b9:11:0c: 54:79:a4:04:db:52:3d:b0:da:6f:53:c9:d9:dc:6a:e9:fd:ff: f3:f0:5d:ee:09:d0:88:58:bd:b1:42:3a:97:43:83:a3:e1:22: 01:8c:11:a0:27:08:e4:8a:13:22:12:21:14:9a:be:f1:ea:72: cb:91:d8:2b:7e:77:35:46:b0:49:86:2f:b6:9d:11:7f:e5:0a: 49:cd:bb:f5:84:7b:00:12:6c:7a:95:8f:a6:9b:d7:32:10:cc: bb:4e:8d:43:e6:79:20:16:4f:a0:95:4c:98:b1:0f:fb:6b:db: 58:30:31:51:06:15:2d:f1:ef:c9:07:ac:09:53:36:51:2f:b5: 6d:06:0c:d9:a1:9e:10:03:c6:be:49:41:2e:b8:4d:ca:b5:ae: 12:24:5e:8b:88:ed:8e:cd:7b:3e:74:ac:90:d3:63:2d:40:51: 1c:87:ad:55:39:f1:c1:87:6e:bc:c5:e6:a7:1c:d1:3b:8a:f5: af:3c:61:01:b2:95:a1:a0:ba:5e:af:42:88:bf:a9:ed:9a:ea: 6b:fc:62:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6lVlVYZ4rpMn+pgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ODdjZThmMWEtMTVmZC00ZGQzLWJmOWYtZDIwZmMxZGQzN2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK12FJCsTSREMbG3SqzWyW7R/fLyCLNX8MEy QPPiNzK/Y5gK/rY2oRQt3MUXrfJ+VI+Re3i/oDL3YxMvpv2qOB4IRfsfUB6VQEpL d5iI/kb0EO4WLOwoECBb0cTwO1H6nAmTygJWjUZeCVcJ9Z2h8r0THXFrjeikbuIR c4CoKK3O2wUv8Jw3dkhL5p+z+aM/rvoGRaX4cutIoY0V+4WpiL+J9OqwpYpl+aGz Q0iDI2MGayNKymXg7y7kNhwUU4mrnverEmhj4rFh44udGoUIjZXLLHBqLpdNKr8x aVRP8KRDrDe1tPHVpAMSeIodYr5GmE2GNVkdkrfu/Gv+F1cuQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpJHpEwfI2mIv15tawNuFRyG/juMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWI0ZDViZjEtNTMwMi0z ZTRhLTlkMzQtNDNhNTdkYmUxZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9nLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzHbpklXkDdmW5emlDsrpgb8Qxnfo0HzwZ5PmUsgKBE5VMc6SsV3cW3 4aAXkIpfi4eajLkRDFR5pATbUj2w2m9Tydncaun9//PwXe4J0IhYvbFCOpdDg6Ph IgGMEaAnCOSKEyISIRSavvHqcsuR2Ct+dzVGsEmGL7adEX/lCknNu/WEewASbHqV j6ab1zIQzLtOjUPmeSAWT6CVTJixD/tr21gwMVEGFS3x78kHrAlTNlEvtW0GDNmh nhADxr5JQS64Tcq1rhIkXouI7Y7Nez50rJDTYy1AURyHrVU58cGHbrzF5qcc0TuK 9a88YQGylaGgul6vQoi/qe2a6mv8YsA= -----END CERTIFICATE-----Generated at Fri Apr 17 14:09:15 2026 by rpki-client