$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ebaf966f-d274-34ea-abea-b67e5193dce5.roa File: ebaf966f-d274-34ea-abea-b67e5193dce5.roa (raw, json) Hash identifier: YVYE2st5hEmK5o2Rxh9TQdXayir93SluCAt4YE39RrE= Subject key identifier: 72:67:96:89:75:88:90:1B:ED:83:E3:35:D7:0B:CA:FA:33:FD:9F:A1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D571FA89B4547A84FC2C9EBC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ebaf966f-d274-34ea-abea-b67e5193dce5.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 20940 IP address blocks: 23.212.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:a8:9b:45:47:a8:4f:c2:c9:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=2d5b73fd-ce23-4358-a2f0-b82246e1ce6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cd:65:82:cf:ce:30:c3:e0:df:57:04:9f:74: 3a:86:5c:1b:cc:64:5c:a4:0a:e6:64:5d:75:89:69: fe:4b:a8:1a:37:df:1d:a4:f4:a8:64:a5:aa:98:a6: c2:aa:36:6c:eb:9b:bc:08:a8:79:dc:ea:e0:ef:85: 71:dc:1a:30:58:17:10:a0:af:02:cf:c2:b9:6a:62: 9e:48:63:79:c4:94:ac:b4:fa:36:d3:6a:76:d8:8c: 2f:53:87:3c:4d:8e:f6:2f:a2:b9:26:db:3f:d9:bd: ea:96:b3:65:3d:91:45:65:74:96:aa:4f:d4:35:cd: e4:d6:e3:87:86:34:80:0e:af:1d:f8:1d:59:b9:72: a1:24:65:7b:ba:da:c5:1e:06:58:b8:3c:37:3a:63: 21:ae:54:57:48:e4:8b:0e:35:74:d3:6d:d4:9e:47: 5a:78:70:d8:26:cd:4f:99:81:3c:29:03:a0:a1:6f: b0:54:37:c3:21:a0:89:d5:04:05:d0:ba:e4:10:92: 5b:5d:63:ff:80:97:a2:05:23:59:cf:a3:3b:da:e0: c2:37:ce:ea:20:71:3a:f7:81:e5:83:bf:61:80:e1: a5:84:82:0d:fa:2a:3f:15:c3:1a:73:2c:09:0b:a2: ca:2a:f3:bb:d6:93:78:77:d9:e1:ea:be:7d:6e:f1: 16:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:67:96:89:75:88:90:1B:ED:83:E3:35:D7:0B:CA:FA:33:FD:9F:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ebaf966f-d274-34ea-abea-b67e5193dce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:1c:f2:f1:0e:29:3c:58:ee:6f:84:bb:c7:64:c2:aa:06:63: 69:c9:af:16:a2:88:4d:1f:65:26:08:7c:32:48:6c:ba:9e:93: 35:02:42:0e:95:4a:21:99:07:ae:7d:1b:65:e9:04:79:cd:6c: af:ba:48:2e:dd:a3:3a:ec:c2:fe:49:5f:c5:ad:11:ca:ce:3c: 41:ad:96:8e:10:4f:24:07:d5:30:f1:ae:65:59:7c:b2:61:81: d4:f6:79:72:40:f2:c6:4c:ad:7d:64:5a:07:92:25:68:dd:bc: f2:ad:de:6c:b5:02:26:14:10:99:7a:39:09:e4:79:78:a9:82: 4c:3d:5f:c5:7f:56:49:69:1f:39:06:71:c5:be:18:a4:e2:f3: 6f:4f:8a:0b:96:77:1b:e2:c7:84:ad:31:b4:7d:88:46:39:21: f9:74:ae:91:e3:98:01:f2:55:c4:0a:e7:df:b2:1b:7e:c7:49: 89:91:f0:7d:f6:36:09:73:f9:10:8b:90:46:8a:71:30:67:8a: bf:5f:88:18:b5:fa:b1:9e:af:f3:1e:0b:ce:14:c0:7a:aa:b3: 85:93:d5:82:a6:b2:6d:78:7d:99:fa:6c:16:b5:ee:9a:23:57: 54:b6:37:ba:37:0a:f6:6a:db:0f:8e:e6:5f:2d:bc:d2:6b:10: bd:db:3d:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH6ibRUeoT8LJ68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk MmQ1YjczZmQtY2UyMy00MzU4LWEyZjAtYjgyMjQ2ZTFjZTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls1lgs/OMMPg31cEn3Q6hlwbzGRcpArmZF11 iWn+S6gaN98dpPSoZKWqmKbCqjZs65u8CKh53Org74Vx3BowWBcQoK8Cz8K5amKe SGN5xJSstPo202p22IwvU4c8TY72L6K5Jts/2b3qlrNlPZFFZXSWqk/UNc3k1uOH hjSADq8d+B1ZuXKhJGV7utrFHgZYuDw3OmMhrlRXSOSLDjV0023UnkdaeHDYJs1P mYE8KQOgoW+wVDfDIaCJ1QQF0LrkEJJbXWP/gJeiBSNZz6M72uDCN87qIHE694Hl g79hgOGlhIIN+io/FcMacywJC6LKKvO71pN4d9nh6r59bvEWhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJnlol1iJAb7YPjNdcLyvoz/Z+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWJhZjk2NmYtZDI3NC0z NGVhLWFiZWEtYjY3ZTUxOTNkY2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9TvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAc8vEOKTxY7m+Eu8dkwqoGY2nJrxaiiE0fZSYIfDJIbLqekzUCQg6V SiGZB659G2XpBHnNbK+6SC7dozrswv5JX8WtEcrOPEGtlo4QTyQH1TDxrmVZfLJh gdT2eXJA8sZMrX1kWgeSJWjdvPKt3my1AiYUEJl6OQnkeXipgkw9X8V/VklpHzkG ccW+GKTi829PiguWdxvix4StMbR9iEY5Ifl0rpHjmAHyVcQK59+yG37HSYmR8H32 Nglz+RCLkEaKcTBnir9fiBi1+rGer/MeC84UwHqqs4WT1YKmsm14fZn6bBa17poj V1S2N7o3CvZq2w+O5l8tvNJrEL3bPWw= -----END CERTIFICATE-----Generated at Fri Apr 17 13:16:27 2026 by rpki-client