$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f70d0f0-5b6a-3172-bde5-d4700cc9f233.roa File: 0f70d0f0-5b6a-3172-bde5-d4700cc9f233.roa (raw, json) Hash identifier: 2vZk2O/xgRBllWlbSVbq0EbPKx12cB8f9P7jPHsHVRU= Subject key identifier: 7C:4E:40:A5:64:F0:07:DD:FE:5B:64:F1:D4:8E:B5:0A:27:4A:A0:21 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E104F05B207547F023D7F9380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f70d0f0-5b6a-3172-bde5-d4700cc9f233.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 20940 IP address blocks: 23.32.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:05:b2:07:54:7f:02:3d:7f:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=75b19689-e454-413f-822a-f147d4260b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e1:96:50:87:72:34:25:5d:ed:ee:97:0b:78: 9f:ac:03:d2:6c:ab:5b:3a:d0:a6:af:d4:9e:d0:41: 89:35:c9:a8:2c:03:4f:e5:2c:7e:28:51:67:23:8a: 2b:9c:0e:a4:53:1b:78:ac:01:20:ca:aa:69:96:3d: cc:64:91:8e:8d:82:5a:fe:79:c4:ea:60:62:9b:38: cc:92:12:57:25:f0:d2:93:0c:62:54:75:aa:07:8d: fd:fb:6a:f2:f0:98:cc:89:87:91:f5:ee:e7:6b:1b: f7:b5:50:03:4a:b1:e4:62:b0:d2:14:85:ff:c1:1c: 83:97:77:b1:01:2d:99:4f:a6:f0:ca:e9:f4:c1:a2: 1b:c4:6f:59:75:2d:df:17:76:e2:22:f9:6c:10:22: 7d:ac:57:1e:3b:42:e7:e6:c8:3a:bb:4b:84:cf:98: ff:fd:4e:d1:69:02:42:14:04:2e:91:9a:94:37:50: 19:67:da:a8:fe:fc:3d:8f:2a:3c:c2:e5:be:9b:93: 9d:3a:b2:e6:d9:40:bc:3f:4f:34:87:9e:d4:8e:23: 92:43:75:35:30:36:07:1f:f6:e8:5c:5d:1a:26:36: d8:36:53:c9:b7:44:7c:94:49:f1:de:02:7e:78:66: 59:bd:cf:b9:ab:8c:f2:a2:9b:67:10:e6:3c:ea:d5: 19:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4E:40:A5:64:F0:07:DD:FE:5B:64:F1:D4:8E:B5:0A:27:4A:A0:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f70d0f0-5b6a-3172-bde5-d4700cc9f233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:8d:a6:da:3d:85:f2:0f:7d:2a:3b:57:ea:67:e8:3a:61:d3: 65:d4:ae:1d:e1:6e:3b:49:1b:18:0d:71:58:77:f0:85:67:1b: b9:7c:ae:05:24:f5:f2:92:7c:8b:e6:93:92:5a:8d:f9:5d:a3: de:28:96:e5:61:06:b6:b6:47:54:91:1f:50:29:88:d2:c8:13: fc:1c:62:24:c0:de:4a:17:e3:d1:2a:35:f2:a8:24:a3:a0:df: 7d:12:26:ff:2a:12:c8:a2:c8:86:b3:7b:8d:d3:07:ad:c1:45: b6:3b:8a:bf:ef:15:95:7c:58:94:df:41:bb:6c:e4:ae:fb:38: fb:42:01:83:48:6f:10:3b:f4:c4:87:4c:13:fa:98:d9:cb:77: fa:0c:61:8e:87:2a:9a:cf:35:f4:4a:ec:9b:17:c6:a3:f9:b7: ed:6a:a7:39:45:a6:2b:5e:66:da:b7:13:7a:6f:96:51:e5:f6: 14:51:08:a0:f4:a2:15:c0:07:af:7f:ba:c3:7a:14:a2:38:7b: 8a:f3:9f:f5:da:ba:60:08:61:f8:68:34:d4:5b:ab:a6:4d:e6: 73:00:f4:19:ac:96:49:99:ec:07:2d:a7:3e:18:e6:a9:0b:91: 49:0c:55:d6:a2:49:ec:01:31:e3:aa:2c:94:f2:14:c0:fc:74: 48:8b:1b:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTwWyB1R/Aj1/k4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NzViMTk2ODktZTQ1NC00MTNmLTgyMmEtZjE0N2Q0MjYwYjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuGWUIdyNCVd7e6XC3ifrAPSbKtbOtCmr9Se 0EGJNcmoLANP5Sx+KFFnI4ornA6kUxt4rAEgyqpplj3MZJGOjYJa/nnE6mBimzjM khJXJfDSkwxiVHWqB439+2ry8JjMiYeR9e7naxv3tVADSrHkYrDSFIX/wRyDl3ex AS2ZT6bwyun0waIbxG9ZdS3fF3biIvlsECJ9rFceO0Ln5sg6u0uEz5j//U7RaQJC FAQukZqUN1AZZ9qo/vw9jyo8wuW+m5OdOrLm2UC8P080h57UjiOSQ3U1MDYHH/bo XF0aJjbYNlPJt0R8lEnx3gJ+eGZZvc+5q4zyoptnEOY86tUZnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxOQKVk8Afd/ltk8dSOtQonSqAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGY3MGQwZjAtNWI2YS0z MTcyLWJkZTUtZDQ3MDBjYzlmMjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6Npto9hfIPfSo7V+pn6Dph02XUrh3hbjtJGxgNcVh38IVnG7l8rgUk 9fKSfIvmk5Jajfldo94oluVhBra2R1SRH1ApiNLIE/wcYiTA3koX49EqNfKoJKOg 330SJv8qEsiiyIaze43TB63BRbY7ir/vFZV8WJTfQbts5K77OPtCAYNIbxA79MSH TBP6mNnLd/oMYY6HKprPNfRK7JsXxqP5t+1qpzlFpiteZtq3E3pvllHl9hRRCKD0 ohXAB69/usN6FKI4e4rzn/XaumAIYfhoNNRbq6ZN5nMA9BmslkmZ7Actpz4Y5qkL kUkMVdaiSewBMeOqLJTyFMD8dEiLGzM= -----END CERTIFICATE-----Generated at Sat Jun 6 09:42:07 2026 by rpki-client