$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e645be5f-a86a-340e-9ec1-3fa81ef39bb5.roa File: e645be5f-a86a-340e-9ec1-3fa81ef39bb5.roa (raw, json) Hash identifier: W4Xs1lWtwt9TB3E9ZiQV0Ev9aFwwMhveYc96o+cIXh8= Subject key identifier: 45:F3:A2:CB:E2:F2:C4:5A:A6:85:44:73:34:D8:4E:7F:63:B1:F0:29 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D7F9A9B498B4043A008FF3200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e645be5f-a86a-340e-9ec1-3fa81ef39bb5.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 23.212.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:9b:49:8b:40:43:a0:08:ff:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=6db8e801-267f-4d16-ba87-c7cdfbf68bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b0:b2:eb:e4:ab:cb:9a:17:9f:11:bd:36:93: 19:49:15:5d:5b:bb:e4:fc:3f:92:73:1c:89:52:8f: 8f:5b:e3:9f:27:4e:fb:03:8a:9b:69:4e:19:78:86: e1:5a:9f:65:3b:d7:9c:1d:ad:d0:4f:83:e5:1a:0e: e9:0e:1e:56:9e:17:95:e5:09:18:96:d7:d0:75:14: 06:e3:0a:1e:b7:15:6e:87:25:ff:e7:a3:6a:9d:2a: 2e:96:f0:5e:10:81:b7:72:40:a1:c2:95:8d:fb:54: 94:0f:98:f5:b2:36:a2:02:6a:45:fe:da:02:b5:71: 07:c8:d8:5d:f8:c1:6c:82:74:13:13:4d:63:85:29: a1:4a:5b:eb:a3:20:63:e0:12:e6:42:21:f7:de:18: 83:b7:ea:a4:df:91:e1:d4:32:bf:f5:c1:df:ef:a0: 0a:0f:6c:47:6a:5c:76:bf:33:1e:46:c0:76:5f:ff: 17:8b:a2:51:88:e1:53:40:e2:7a:3b:97:ac:39:84: 4a:65:b7:ef:d3:d5:73:6c:bf:73:fb:c1:c2:5d:56: e9:c7:92:85:55:46:ce:1a:eb:1c:ab:d2:68:1e:61: 3d:b7:1e:e2:45:ac:b7:6c:e1:79:ef:c1:18:ac:be: 8a:20:7d:f0:f8:8e:d3:2f:d8:88:3d:c8:d3:3b:15: 41:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F3:A2:CB:E2:F2:C4:5A:A6:85:44:73:34:D8:4E:7F:63:B1:F0:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e645be5f-a86a-340e-9ec1-3fa81ef39bb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:37:e4:48:8e:ad:f5:ed:d2:f6:28:3a:3d:1d:c1:c4:2a:b6: 28:7a:37:43:de:51:e8:fb:68:d1:4a:53:b6:3a:53:9b:8b:2d: 8c:c9:f1:aa:e7:22:53:9d:d8:80:fd:a7:70:51:02:6a:6c:27: 25:b3:40:19:6b:cd:22:09:59:09:1d:30:cc:3c:7c:ac:b3:65: 01:6f:23:c3:59:af:62:e0:0f:cf:92:aa:75:04:77:1d:82:09: aa:e3:09:9c:c7:4f:77:8e:da:85:e2:67:b7:30:45:4f:86:c8: 04:33:dd:a5:a2:55:ca:b0:05:2a:e6:c0:13:8f:ca:d7:27:2b: cd:9f:fc:9d:bf:59:7e:17:00:2f:64:62:51:3e:47:db:1c:2b: 02:95:c7:79:bd:af:ee:58:0b:9a:42:8e:b3:64:85:ce:21:d5: 41:99:69:f9:f0:11:92:b2:ee:66:42:70:c6:b8:aa:18:53:12: 31:86:7a:80:ff:e0:a5:fc:4a:59:ab:9f:14:67:4c:80:b9:d0: 79:b6:e5:cd:9a:73:91:32:3a:a2:98:2f:50:9d:07:f2:92:5e: 3d:a4:ef:94:f8:20:ab:b9:66:2c:fd:a2:1a:10:dd:aa:2a:c2: 5f:4b:48:33:7d:b2:7b:0a:fa:88:fe:b6:0b:ff:8e:48:db:7d: c4:60:c4:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mptJi0BDoAj/MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk NmRiOGU4MDEtMjY3Zi00ZDE2LWJhODctYzdjZGZiZjY4YmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LCy6+Sry5oXnxG9NpMZSRVdW7vk/D+ScxyJ Uo+PW+OfJ077A4qbaU4ZeIbhWp9lO9ecHa3QT4PlGg7pDh5WnheV5QkYltfQdRQG 4woetxVuhyX/56NqnSoulvBeEIG3ckChwpWN+1SUD5j1sjaiAmpF/toCtXEHyNhd +MFsgnQTE01jhSmhSlvroyBj4BLmQiH33hiDt+qk35Hh1DK/9cHf76AKD2xHalx2 vzMeRsB2X/8Xi6JRiOFTQOJ6O5esOYRKZbfv09VzbL9z+8HCXVbpx5KFVUbOGusc q9JoHmE9tx7iRay3bOF578EYrL6KIH3w+I7TL9iIPcjTOxVBdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXzosvi8sRapoVEczTYTn9jsfApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTY0NWJlNWYtYTg2YS0z NDBlLTllYzEtM2ZhODFlZjM5YmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9SlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG835EiOrfXt0vYoOj0dwcQqtih6N0PeUej7aNFKU7Y6U5uLLYzJ8arn IlOd2ID9p3BRAmpsJyWzQBlrzSIJWQkdMMw8fKyzZQFvI8NZr2LgD8+SqnUEdx2C CarjCZzHT3eO2oXiZ7cwRU+GyAQz3aWiVcqwBSrmwBOPytcnK82f/J2/WX4XAC9k YlE+R9scKwKVx3m9r+5YC5pCjrNkhc4h1UGZafnwEZKy7mZCcMa4qhhTEjGGeoD/ 4KX8SlmrnxRnTIC50Hm25c2ac5EyOqKYL1CdB/KSXj2k75T4IKu5Ziz9ohoQ3aoq wl9LSDN9snsK+oj+tgv/jkjbfcRgxGA= -----END CERTIFICATE-----Generated at Fri Apr 17 18:08:42 2026 by rpki-client