$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/00434a5e-e975-3440-8f29-099d765c504f.roa File: 00434a5e-e975-3440-8f29-099d765c504f.roa (raw, json) Hash identifier: mNXJNDBXLCKmcZgZvKwDQGlq7bz+nToakOSbuYWGrJc= Subject key identifier: 11:EF:11:79:94:03:1E:CB:79:A3:C3:86:F3:4C:02:90:4B:83:54:DE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DE84B483BB06F3BF6B093A6C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/00434a5e-e975-3440-8f29-099d765c504f.roa Signing time: Thu 21 May 2026 13:00:32 +0000 ROA not before: Thu 21 May 2026 13:00:32 +0000 ROA not after: Wed 19 Aug 2026 13:00:32 +0000 asID: 16625 IP address blocks: 23.200.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:4b:48:3b:b0:6f:3b:f6:b0:93:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 21 13:00:32 2026 GMT Not After : Aug 19 13:00:32 2026 GMT Subject: CN=567034be-766d-4007-b743-a86199afdea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0a:5e:01:2a:34:39:f6:ac:55:55:b3:9c:af: 76:2c:ba:75:f7:47:e5:cb:68:c0:01:76:18:d4:47: 95:41:22:77:8d:f9:ef:45:78:21:18:08:82:76:06: 08:0d:a5:0c:3e:d7:d6:db:63:17:fe:28:85:e3:a6: 9d:f5:b0:12:38:44:33:c6:dd:80:b2:ae:0f:ae:d7: 8e:39:be:ca:ea:6d:d4:bc:d6:ef:7a:b7:5a:2a:dc: 34:7b:c0:a0:fc:de:68:28:18:89:03:01:45:a7:f7: c7:b9:1a:43:88:e4:b3:91:85:05:dd:69:f1:74:1b: b6:75:fc:44:02:fe:af:05:e3:17:fb:25:23:98:26: a1:83:85:0a:7e:7e:04:db:1c:db:e5:ca:47:d2:28: 93:0c:52:9b:40:64:3b:57:70:d4:8a:f8:06:06:71: 1b:b3:6f:c0:32:a8:79:75:8d:76:ef:11:0e:9c:86: e7:57:3c:3b:b7:80:a3:b3:30:47:91:d7:d3:bc:4c: 08:d0:46:82:d4:92:c9:b2:18:d9:74:7d:fb:6f:b1: fb:eb:d7:19:7a:c8:7d:04:0f:6b:7f:92:62:50:d9: 58:fd:2b:c5:93:c3:00:86:83:ea:ba:1f:d6:a9:94: f2:79:b1:64:da:76:30:8d:fc:26:31:d7:39:fc:94: 7f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EF:11:79:94:03:1E:CB:79:A3:C3:86:F3:4C:02:90:4B:83:54:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/00434a5e-e975-3440-8f29-099d765c504f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:4a:06:3d:59:e0:0c:3f:d2:6c:70:25:4e:59:34:d6:53:38: e3:df:48:02:5c:7f:a2:67:75:49:fa:d1:6f:50:6e:58:56:86: bd:30:c6:7a:c4:c8:77:25:e0:df:57:ab:41:5a:4f:43:a7:df: d7:47:7a:e8:7f:f2:02:3e:3e:5d:35:02:96:a5:0f:4a:08:3d: 30:07:6c:67:a8:c2:cf:32:73:05:3c:0a:be:fb:52:c0:17:a2: 61:a5:eb:a1:4a:88:3a:45:f2:1a:46:90:7c:dd:2c:02:08:99: 8b:21:38:f0:e0:7a:32:dc:4b:66:7b:76:bb:7f:98:8e:78:80: 88:25:c0:77:ca:62:b7:04:2b:3b:3e:d5:84:1d:0d:3b:e4:9a: 53:f9:0c:1f:39:23:42:22:89:b1:72:d9:f8:cf:1e:68:de:6f: e9:69:cd:21:7d:6a:dc:61:e2:4b:25:fb:56:11:de:48:d7:02: 58:b0:16:06:30:ad:3d:15:1e:0c:cb:c1:58:69:3f:0e:d6:4c: b8:8d:97:4d:89:57:9d:52:fa:5d:b2:6b:5d:fb:5c:ab:65:15: 9e:6c:b0:d7:e3:46:ce:31:6d:e9:7e:c7:e0:28:f2:c6:7f:40: 35:bf:35:23:81:74:87:7a:6f:8e:51:18:64:f4:4a:e7:58:a2: 6d:0c:fb:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3oS0g7sG879rCTpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk NTY3MDM0YmUtNzY2ZC00MDA3LWI3NDMtYTg2MTk5YWZkZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwpeASo0OfasVVWznK92LLp190fly2jAAXYY 1EeVQSJ3jfnvRXghGAiCdgYIDaUMPtfW22MX/iiF46ad9bASOEQzxt2Asq4PrteO Ob7K6m3UvNbverdaKtw0e8Cg/N5oKBiJAwFFp/fHuRpDiOSzkYUF3WnxdBu2dfxE Av6vBeMX+yUjmCahg4UKfn4E2xzb5cpH0iiTDFKbQGQ7V3DUivgGBnEbs2/AMqh5 dY127xEOnIbnVzw7t4CjszBHkdfTvEwI0EaC1JLJshjZdH37b7H769cZesh9BA9r f5JiUNlY/SvFk8MAhoPquh/WqZTyebFk2nYwjfwmMdc5/JR/EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHvEXmUAx7LeaPDhvNMApBLg1TeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDA0MzRhNWUtZTk3NS0z NDQwLThmMjktMDk5ZDc2NWM1MDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8jcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhKBj1Z4Aw/0mxwJU5ZNNZTOOPfSAJcf6JndUn60W9QblhWhr0wxnrE yHcl4N9Xq0FaT0On39dHeuh/8gI+Pl01ApalD0oIPTAHbGeows8ycwU8Cr77UsAX omGl66FKiDpF8hpGkHzdLAIImYshOPDgejLcS2Z7drt/mI54gIglwHfKYrcEKzs+ 1YQdDTvkmlP5DB85I0IiibFy2fjPHmjeb+lpzSF9atxh4ksl+1YR3kjXAliwFgYw rT0VHgzLwVhpPw7WTLiNl02JV51S+l2ya137XKtlFZ5ssNfjRs4xbel+x+Ao8sZ/ QDW/NSOBdId6b45RGGT0SudYom0M++s= -----END CERTIFICATE-----Generated at Sat Jun 6 08:27:53 2026 by rpki-client