$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/008f3ce0-a582-3c80-a2fe-49c9ce05eabb.roa File: 008f3ce0-a582-3c80-a2fe-49c9ce05eabb.roa (raw, json) Hash identifier: R3Esrjg4IbHc2qDsvbBlUJUjhX7LVrHgbigg9JM4PIc= Subject key identifier: 4F:35:D5:85:48:21:B1:D0:E7:7D:37:91:9D:FE:B5:19:C3:DE:B3:87 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DE41B37F738E26511C4640A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/008f3ce0-a582-3c80-a2fe-49c9ce05eabb.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16625 IP address blocks: 23.196.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:37:f7:38:e2:65:11:c4:64:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=1af033ad-2a0d-4818-a813-b069170c0678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a2:f8:47:2c:63:39:a0:42:c4:f5:8a:1c:3b: 4f:23:f8:91:1e:b6:f3:09:bb:70:da:81:90:6c:a6: 15:f1:d5:a5:d8:ba:01:b3:f4:71:85:36:b9:33:4a: 09:3a:42:b8:8d:1b:8f:ad:a7:76:f5:3c:c0:dd:7a: 70:17:26:85:23:cd:1d:ce:b8:a3:b0:d0:2a:2c:3e: 74:71:1d:61:4a:f4:d7:b8:2b:b1:47:ff:9f:2e:c5: 51:89:f2:66:4a:91:dd:45:f5:07:d1:ba:68:93:99: ce:f9:9b:45:12:26:db:9c:17:b8:66:7b:c5:52:c8: f9:39:3f:88:79:0f:aa:4d:44:54:ba:4c:bd:a1:70: be:7b:92:fb:9a:36:08:a1:c4:9c:5c:f5:26:87:69: 6b:15:04:04:6c:f5:fe:f6:72:ba:6b:8e:50:9d:72: 28:95:a8:64:33:f2:d0:48:cb:6e:a1:40:c4:97:6b: 8f:f2:45:5d:18:6e:74:f0:74:52:d1:b8:f4:e8:89: 38:52:5f:e1:ef:30:27:77:79:87:72:8b:a4:9e:b1: ce:74:91:c0:a5:0c:84:9d:67:6c:ca:1a:9b:74:39: d4:e4:90:21:d6:74:ec:e4:aa:16:f7:94:ec:2b:b6: d7:db:79:e1:0b:98:0d:a9:b2:06:12:8c:12:07:e0: 15:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:35:D5:85:48:21:B1:D0:E7:7D:37:91:9D:FE:B5:19:C3:DE:B3:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/008f3ce0-a582-3c80-a2fe-49c9ce05eabb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c0:02:b8:3a:af:51:e1:43:be:f8:59:a9:3a:57:0d:2c:47: f1:22:47:fe:1e:e1:00:12:0b:4b:2e:3f:c4:e0:78:7f:e6:99: c2:c6:9e:a9:3f:0b:47:78:ed:f4:d2:aa:dc:cb:fe:bc:36:2c: c8:6f:bc:00:27:67:7a:3a:43:2d:42:29:fe:88:8b:12:82:1f: 5b:ef:78:dc:dd:3b:6f:ce:67:37:89:c1:ab:2a:73:dc:cf:fb: 37:63:6d:df:2e:90:9e:a1:ec:59:e0:e9:ca:01:90:f6:9c:84: 48:8e:46:91:75:28:46:db:57:4f:d0:f1:bc:d4:e4:2e:19:99: 55:f9:27:48:37:37:7f:87:1a:e7:49:d0:17:be:b7:56:2c:a4: 3d:65:34:e0:ed:cf:48:b3:81:d3:05:ab:0a:1c:84:aa:e0:9b: 0c:26:6c:76:a5:94:89:85:17:2e:ea:f5:df:a0:11:d5:d6:bd: 24:f3:bf:fb:99:de:e2:b2:6c:b7:09:f8:24:5a:0f:ca:7e:ac: b2:aa:52:c1:91:2f:e2:25:2d:ca:d9:5a:66:23:f3:34:29:0a: c4:67:30:5b:4a:3d:67:3c:a6:0a:95:93:da:4f:9d:5f:ad:a2: f5:8d:cd:3a:c5:bb:4e:5e:2d:13:27:12:02:a4:e7:db:a0:ff: 90:ba:91:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGzf3OOJlEcRkCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk MWFmMDMzYWQtMmEwZC00ODE4LWE4MTMtYjA2OTE3MGMwNjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaL4RyxjOaBCxPWKHDtPI/iRHrbzCbtw2oGQ bKYV8dWl2LoBs/RxhTa5M0oJOkK4jRuPrad29TzA3XpwFyaFI80dzrijsNAqLD50 cR1hSvTXuCuxR/+fLsVRifJmSpHdRfUH0bpok5nO+ZtFEibbnBe4ZnvFUsj5OT+I eQ+qTURUuky9oXC+e5L7mjYIocScXPUmh2lrFQQEbPX+9nK6a45QnXIolahkM/LQ SMtuoUDEl2uP8kVdGG508HRS0bj06Ik4Ul/h7zAnd3mHcouknrHOdJHApQyEnWds yhqbdDnU5JAh1nTs5KoW95TsK7bX23nhC5gNqbIGEowSB+AVPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE811YVIIbHQ5303kZ3+tRnD3rOHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDA4ZjNjZTAtYTU4Mi0z YzgwLWEyZmUtNDljOWNlMDVlYWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8TAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHAArg6r1HhQ774Wak6Vw0sR/EiR/4e4QASC0suP8TgeH/mmcLGnqk/ C0d47fTSqtzL/rw2LMhvvAAnZ3o6Qy1CKf6IixKCH1vveNzdO2/OZzeJwasqc9zP +zdjbd8ukJ6h7Fng6coBkPachEiORpF1KEbbV0/Q8bzU5C4ZmVX5J0g3N3+HGudJ 0Be+t1YspD1lNODtz0izgdMFqwochKrgmwwmbHallImFFy7q9d+gEdXWvSTzv/uZ 3uKybLcJ+CRaD8p+rLKqUsGRL+IlLcrZWmYj8zQpCsRnMFtKPWc8pgqVk9pPnV+t ovWNzTrFu05eLRMnEgKk59ug/5C6kV4= -----END CERTIFICATE-----Generated at Sat Jun 6 08:24:58 2026 by rpki-client