$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d728645b-ab80-3ba2-827a-d2ab88082ab0.roa File: d728645b-ab80-3ba2-827a-d2ab88082ab0.roa (raw, json) Hash identifier: dBdxyM09R5tNSp3YxQPHe5xXQF1qzouSAQDqEKAm+Yc= Subject key identifier: ED:61:E4:01:D6:34:07:CC:EE:1B:F5:99:62:24:21:CF:12:D9:0D:5E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D7F9A9B56899B3CC6B01CA600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d728645b-ab80-3ba2-827a-d2ab88082ab0.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 23.217.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:9b:56:89:9b:3c:c6:b0:1c:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=21606c7c-9992-4f05-97c8-7c0f656be9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:73:1f:19:e6:0c:c1:1a:7f:39:38:4e:52:1b: a0:d4:22:84:ff:57:a3:6c:b3:36:b7:57:aa:86:fd: 18:c6:13:74:ec:84:bf:55:33:41:f7:5a:8c:10:d8: 23:48:08:4d:a6:2b:76:65:70:15:5c:62:1b:1b:2d: 36:51:38:33:87:3c:39:0b:5f:69:24:04:5c:ef:6a: 60:5c:ec:3f:e7:e5:fb:31:a1:6c:1d:06:d0:39:fa: c6:b5:37:82:da:a7:c5:f6:13:47:fd:00:42:68:33: a0:ce:c7:1e:d0:df:1d:f0:9e:22:63:8f:62:a0:18: 0d:ff:70:6a:f2:34:82:8d:97:92:11:41:d1:a3:8c: 41:f9:60:ab:49:f7:de:c0:9d:3c:cc:ec:45:06:8a: 56:84:ce:51:6a:18:72:65:9c:3b:55:31:f4:37:6d: 35:d7:cd:9f:6c:fd:80:09:bf:36:8c:97:ac:ab:ac: 52:e8:b1:71:a1:9f:e2:18:7a:3a:ec:25:5b:d8:9c: 9a:d1:f0:84:ed:f0:2c:b1:94:e8:21:35:16:c8:a2: 49:af:cf:ea:22:f3:b3:07:a0:47:bb:77:9e:89:36: 02:8d:b6:1c:1b:c4:d9:11:ab:9d:bc:7d:10:21:cc: ae:48:55:9b:6f:f3:cc:9e:fd:78:2f:aa:ff:cd:0b: a0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:61:E4:01:D6:34:07:CC:EE:1B:F5:99:62:24:21:CF:12:D9:0D:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d728645b-ab80-3ba2-827a-d2ab88082ab0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:36:2f:31:25:1d:f9:61:f8:28:ea:52:af:a5:02:e1:f0:c1: fa:6d:61:de:02:77:4e:f6:b4:7d:5a:15:0b:93:95:66:c8:60: 63:ed:21:57:94:03:4e:f4:2e:9c:5e:9e:2d:a6:16:b3:e2:96: 12:8c:8a:e2:21:18:8a:b8:13:43:c1:7e:0b:f3:9a:bf:f9:12: e5:3e:4c:8a:9f:12:4f:ee:18:1c:0d:34:a2:43:b7:77:93:71: c0:cf:d2:26:de:56:c5:d7:26:17:93:43:29:5c:9a:a9:4a:cd: 2b:8f:ca:ee:47:b1:1f:59:5e:58:16:0d:c0:01:ae:c4:9f:ba: 61:74:06:ff:52:c2:71:89:4b:e4:d8:11:7a:93:fe:8b:2a:4f: ba:e0:c4:ec:c7:27:7a:7a:84:23:9f:51:c7:91:4a:5e:0b:80: dc:26:cc:b9:a5:d3:b4:ff:e5:28:fe:72:2e:3f:2d:3b:35:c2: 62:7f:7b:a4:ee:08:da:47:c3:20:52:86:13:e2:1a:dc:90:9d: 9e:64:ce:c8:a5:82:83:bd:f0:18:9e:4a:80:1d:35:72:1d:e8: eb:df:77:27:ba:0d:b6:7c:ee:6c:ea:fb:b1:53:ef:4d:dc:d4: 05:3a:b4:c5:96:75:77:a1:0b:d5:1c:ef:1e:60:07:aa:03:7c: 93:ea:a3:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mptWiZs8xrAcpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MjE2MDZjN2MtOTk5Mi00ZjA1LTk3YzgtN2MwZjY1NmJlOWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXMfGeYMwRp/OThOUhug1CKE/1ejbLM2t1eq hv0YxhN07IS/VTNB91qMENgjSAhNpit2ZXAVXGIbGy02UTgzhzw5C19pJARc72pg XOw/5+X7MaFsHQbQOfrGtTeC2qfF9hNH/QBCaDOgzsce0N8d8J4iY49ioBgN/3Bq 8jSCjZeSEUHRo4xB+WCrSffewJ08zOxFBopWhM5RahhyZZw7VTH0N201182fbP2A Cb82jJesq6xS6LFxoZ/iGHo67CVb2Jya0fCE7fAssZToITUWyKJJr8/qIvOzB6BH u3eeiTYCjbYcG8TZEaudvH0QIcyuSFWbb/PMnv14L6r/zQugvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1h5AHWNAfM7hv1mWIkIc8S2Q1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDcyODY0NWItYWI4MC0z YmEyLTgyN2EtZDJhYjg4MDgyYWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9loMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHg2LzElHflh+CjqUq+lAuHwwfptYd4Cd072tH1aFQuTlWbIYGPtIVeU A070Lpxeni2mFrPilhKMiuIhGIq4E0PBfgvzmr/5EuU+TIqfEk/uGBwNNKJDt3eT ccDP0ibeVsXXJheTQylcmqlKzSuPyu5HsR9ZXlgWDcABrsSfumF0Bv9SwnGJS+TY EXqT/osqT7rgxOzHJ3p6hCOfUceRSl4LgNwmzLml07T/5Sj+ci4/LTs1wmJ/e6Tu CNpHwyBShhPiGtyQnZ5kzsilgoO98BieSoAdNXId6Ovfdye6DbZ87mzq+7FT703c 1AU6tMWWdXehC9Uc7x5gB6oDfJPqo8M= -----END CERTIFICATE-----Generated at Fri Apr 17 18:20:09 2026 by rpki-client