$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d728645b-ab80-3ba2-827a-d2ab88082ab0.roa File: d728645b-ab80-3ba2-827a-d2ab88082ab0.roa (raw, json) Hash identifier: nZ4AkV4LARQPMFhsc8epk78sZruzcF7y06eM0l2wLng= Subject key identifier: 70:46:43:EA:73:E6:2F:48:11:6C:F8:69:42:D6:2B:AA:D3:C1:67:0F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C9EFC82D6F1CB37CDF7324DC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d728645b-ab80-3ba2-827a-d2ab88082ab0.roa Signing time: Fri 23 Jan 2026 14:00:38 +0000 ROA not before: Fri 23 Jan 2026 14:00:38 +0000 ROA not after: Thu 23 Apr 2026 13:00:38 +0000 asID: 20940 IP address blocks: 23.217.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9e:fc:82:d6:f1:cb:37:cd:f7:32:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:38 2026 GMT Not After : Apr 23 13:00:38 2026 GMT Subject: CN=aeca68d0-e361-4b97-8a58-3918c16e99fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:81:65:44:ce:0c:c9:f7:5f:45:0c:7d:df:09: 01:5f:19:24:d3:de:b9:23:98:34:d1:20:e2:60:4c: cf:23:e5:5b:8c:b4:91:1e:ab:b3:71:f4:86:26:f2: eb:d7:ba:4d:f5:1a:7a:d7:4b:dc:6b:d7:50:c9:ce: cc:38:fb:5f:81:ae:1d:ec:79:9f:7f:c8:a5:5b:ce: fa:5e:d8:51:dd:56:12:9c:92:9f:fd:56:e2:aa:85: 97:e5:a8:a0:81:e3:83:94:6f:4a:7a:a8:0b:60:f4: 87:d7:3c:e8:55:53:1c:a1:6a:1b:f3:ab:aa:fc:1a: 1b:a9:27:14:0a:30:c5:bf:3b:6e:42:d4:38:c6:41: 48:c1:a5:2d:cc:a0:99:56:e7:93:d7:b4:02:81:ba: 60:b9:bf:6a:0f:3d:47:a4:a0:16:da:70:ed:53:8c: dc:b3:5a:9e:5c:50:03:b0:f8:fd:f2:30:4b:95:43: 39:90:f0:ac:1e:d7:16:c7:02:b2:0e:a0:5a:da:d0: 5d:12:62:a1:25:e7:5b:2d:ba:3a:98:0c:b5:0f:92: 96:d0:b2:00:f5:83:b5:1c:ec:94:07:ec:d2:37:4e: f1:a3:e8:34:95:bc:20:01:ae:76:59:84:e0:77:72: bb:cf:35:86:80:c1:ea:e4:f5:90:5b:5f:46:f6:c6: 18:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:46:43:EA:73:E6:2F:48:11:6C:F8:69:42:D6:2B:AA:D3:C1:67:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d728645b-ab80-3ba2-827a-d2ab88082ab0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:7a:3f:ec:ce:59:7c:d4:fe:c6:78:52:e0:5f:0c:20:9b:e3: e0:a1:5a:44:6c:ad:98:c6:9c:96:39:78:07:cb:07:39:d2:bc: 2e:bf:70:b2:71:9d:16:12:fa:db:09:77:27:98:69:20:b9:3b: 8b:65:82:04:8a:11:59:af:70:f4:dc:72:48:e5:37:6e:4c:29: 30:1b:8b:5f:ac:ef:f5:1a:2f:03:fa:ac:0e:50:ab:ca:0f:e7: 79:10:a3:61:f9:d1:61:10:93:c7:7a:33:1e:8e:66:58:0f:37: 24:2b:62:4d:e5:a1:c5:5f:c5:b6:2c:e1:0e:b3:f0:f6:9e:20: 32:ad:c8:02:b1:70:29:ff:95:04:35:de:83:7b:6c:14:57:a3: 94:6a:a4:74:18:5c:40:75:fd:ac:8a:26:0a:75:0d:ea:eb:c0: 0b:c6:72:7a:e2:a4:e6:4e:67:1b:e9:cc:92:fb:37:fc:c4:6c: a2:d6:be:0a:ec:4a:d5:6a:a7:fa:0e:f0:32:8e:dc:2b:ba:87: 12:a4:ed:e7:a0:e2:8d:75:02:9c:a0:94:f2:bc:05:41:e1:5c: 26:7d:7d:06:1b:f2:da:22:c8:29:8e:a6:3c:fd:24:04:a6:a8: b2:cc:73:8f:31:65:62:a4:b3:68:65:17:1d:98:50:24:41:7d: 54:28:fe:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEye/ILW8cs3zfcyTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEyMzE0MDAzOFoXDTI2MDQyMzEzMDAzOFowLzEtMCsGA1UEAxMk YWVjYTY4ZDAtZTM2MS00Yjk3LThhNTgtMzkxOGMxNmU5OWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIFlRM4MyfdfRQx93wkBXxkk0965I5g00SDi YEzPI+VbjLSRHquzcfSGJvLr17pN9Rp610vca9dQyc7MOPtfga4d7Hmff8ilW876 XthR3VYSnJKf/VbiqoWX5aiggeODlG9KeqgLYPSH1zzoVVMcoWob86uq/BobqScU CjDFvztuQtQ4xkFIwaUtzKCZVueT17QCgbpgub9qDz1HpKAW2nDtU4zcs1qeXFAD sPj98jBLlUM5kPCsHtcWxwKyDqBa2tBdEmKhJedbLbo6mAy1D5KW0LIA9YO1HOyU B+zSN07xo+g0lbwgAa52WYTgd3K7zzWGgMHq5PWQW19G9sYYpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBGQ+pz5i9IEWz4aULWK6rTwWcPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDcyODY0NWItYWI4MC0z YmEyLTgyN2EtZDJhYjg4MDgyYWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9loMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACN6P+zOWXzU/sZ4UuBfDCCb4+ChWkRsrZjGnJY5eAfLBznSvC6/cLJx nRYS+tsJdyeYaSC5O4tlggSKEVmvcPTcckjlN25MKTAbi1+s7/UaLwP6rA5Qq8oP 53kQo2H50WEQk8d6Mx6OZlgPNyQrYk3locVfxbYs4Q6z8PaeIDKtyAKxcCn/lQQ1 3oN7bBRXo5RqpHQYXEB1/ayKJgp1DerrwAvGcnripOZOZxvpzJL7N/zEbKLWvgrs StVqp/oO8DKO3Cu6hxKk7eeg4o11ApyglPK8BUHhXCZ9fQYb8toiyCmOpjz9JASm qLLMc48xZWKks2hlFx2YUCRBfVQo/vk= -----END CERTIFICATE-----Generated at Mon Mar 2 06:41:28 2026 by rpki-client