$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f04b8ea-ae6f-383d-a371-1130bb9cc5b4.roa File: 0f04b8ea-ae6f-383d-a371-1130bb9cc5b4.roa (raw, json) Hash identifier: L7hv4+/SzgfJOOwpgwefna0e8urGhkBBcbaQATD65+s= Subject key identifier: 25:04:B9:2E:8E:1D:C2:2B:1D:C0:EC:9E:46:20:CD:07:7D:AA:53:1F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DD35B145245F191732CF14200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f04b8ea-ae6f-383d-a371-1130bb9cc5b4.roa Signing time: Thu 14 May 2026 01:00:25 +0000 ROA not before: Thu 14 May 2026 01:00:25 +0000 ROA not after: Wed 12 Aug 2026 01:00:25 +0000 asID: 20940 IP address blocks: 23.202.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:5b:14:52:45:f1:91:73:2c:f1:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 14 01:00:25 2026 GMT Not After : Aug 12 01:00:25 2026 GMT Subject: CN=5d95640e-56d1-482d-92e5-242769c3681b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0e:d1:6f:41:fc:1c:ba:60:e0:31:3b:83:a8: 2e:8d:91:3b:fb:44:53:ce:10:5e:0f:c5:b1:ac:ce: f0:60:cd:7b:62:d7:c0:ee:d3:61:3f:32:d4:a6:fb: 2d:7a:50:da:c6:e8:c4:7c:e6:10:2c:66:1a:39:4e: 1c:d9:26:e7:70:ea:62:ef:79:13:cb:a0:de:d2:2d: a6:b6:1d:39:a3:95:60:6d:1a:21:d8:f0:43:87:af: 2b:07:74:78:b5:4d:1f:0f:d0:d7:46:78:2c:2e:33: 3b:a4:06:91:02:3d:c9:73:b7:48:38:9d:75:22:91: cc:c0:04:fc:b0:f2:55:19:60:9b:7b:c0:0e:1d:75: b1:d6:3e:ab:ac:bc:01:b4:8c:20:24:a8:83:3f:9b: d4:d8:47:4c:4b:50:9f:61:47:a8:6f:28:4f:b1:5b: 4b:32:aa:32:9f:09:40:53:9d:2b:c7:ac:77:99:57: 60:97:0f:d9:b3:89:26:45:52:7d:3a:c8:d2:3e:5d: 9e:78:08:41:51:bf:32:78:87:e7:5e:f0:8d:61:d4: ac:8a:70:ef:5e:0c:be:df:74:fe:c1:74:07:89:16: 56:7b:39:1f:8b:4e:e0:69:39:1c:72:9c:cc:de:5b: a2:2f:e5:87:fc:72:30:be:b6:6b:1c:e1:44:ba:1e: 88:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:04:B9:2E:8E:1D:C2:2B:1D:C0:EC:9E:46:20:CD:07:7D:AA:53:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f04b8ea-ae6f-383d-a371-1130bb9cc5b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:de:4b:5a:41:8b:a1:21:b8:ec:32:f1:36:9c:b7:d6:5c:22: aa:86:47:a7:bb:65:de:b2:2f:aa:81:3c:e3:44:7c:db:66:42: ff:72:ec:a5:8e:0f:21:64:95:54:73:92:73:4f:28:99:ba:50: 87:3f:f7:9b:c2:94:f0:3a:cf:b9:7f:ab:8c:36:14:dc:a1:1b: 67:5e:45:70:e2:70:b0:24:83:21:1c:42:f1:7c:55:46:77:15: 6b:b3:4e:c4:f1:b7:1c:25:2a:56:30:01:27:18:95:32:e0:d4: b3:64:d0:3a:67:e3:32:49:1e:e4:02:27:6b:6b:fc:cb:ac:99: 68:ea:fe:90:2e:43:df:a4:cf:75:5c:f0:25:96:fb:6b:14:37: fb:ca:ab:86:d9:9f:c2:50:69:ff:f8:8c:92:39:81:66:fa:d9: e6:83:5b:51:51:2e:2c:0f:49:dd:ec:ac:0e:a8:ee:af:c4:84: 29:42:5a:52:41:bf:d2:21:94:e1:58:d6:44:1a:af:4b:a7:a9: 68:50:ea:07:3a:41:f6:db:89:96:ec:32:0e:91:d7:79:1d:2f: fd:f1:74:23:82:cc:94:37:2e:73:19:41:1f:29:4e:1a:06:ed: c5:58:c4:10:29:33:ef:bd:fd:96:89:ba:d9:c4:c5:ec:df:35: 12:b6:d4:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3TWxRSRfGRcyzxQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk NWQ5NTY0MGUtNTZkMS00ODJkLTkyZTUtMjQyNzY5YzM2ODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ7Rb0H8HLpg4DE7g6gujZE7+0RTzhBeD8Wx rM7wYM17YtfA7tNhPzLUpvstelDaxujEfOYQLGYaOU4c2SbncOpi73kTy6De0i2m th05o5VgbRoh2PBDh68rB3R4tU0fD9DXRngsLjM7pAaRAj3Jc7dIOJ11IpHMwAT8 sPJVGWCbe8AOHXWx1j6rrLwBtIwgJKiDP5vU2EdMS1CfYUeobyhPsVtLMqoynwlA U50rx6x3mVdglw/Zs4kmRVJ9OsjSPl2eeAhBUb8yeIfnXvCNYdSsinDvXgy+33T+ wXQHiRZWezkfi07gaTkccpzM3luiL+WH/HIwvrZrHOFEuh6IawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUEuS6OHcIrHcDsnkYgzQd9qlMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGYwNGI4ZWEtYWU2Zi0z ODNkLWEzNzEtMTEzMGJiOWNjNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8oiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDeS1pBi6EhuOwy8Tact9ZcIqqGR6e7Zd6yL6qBPONEfNtmQv9y7KWO DyFklVRzknNPKJm6UIc/95vClPA6z7l/q4w2FNyhG2deRXDicLAkgyEcQvF8VUZ3 FWuzTsTxtxwlKlYwAScYlTLg1LNk0Dpn4zJJHuQCJ2tr/MusmWjq/pAuQ9+kz3Vc 8CWW+2sUN/vKq4bZn8JQaf/4jJI5gWb62eaDW1FRLiwPSd3srA6o7q/EhClCWlJB v9IhlOFY1kQar0unqWhQ6gc6QfbbiZbsMg6R13kdL/3xdCOCzJQ3LnMZQR8pThoG 7cVYxBApM++9/ZaJutnExezfNRK21LM= -----END CERTIFICATE-----Generated at Sat Jun 6 08:26:27 2026 by rpki-client