$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1225ace6-0756-3c67-b5a9-9c8331eae9e4.roa File: 1225ace6-0756-3c67-b5a9-9c8331eae9e4.roa (raw, json) Hash identifier: G8W0J1iGRUD0yL05Ws1a1FOn3XovBZ0PsOmlNEf50U8= Subject key identifier: 15:DE:70:CD:9F:2F:A7:AA:D1:72:1F:49:40:03:BD:F2:E8:1C:A6:27 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E0C1EE789DB35E6A1EED759E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1225ace6-0756-3c67-b5a9-9c8331eae9e4.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 20940 IP address blocks: 23.221.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:e7:89:db:35:e6:a1:ee:d7:59:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=a868f14e-de37-4b0c-8215-5af854da9bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bf:89:fb:d4:64:fb:b9:82:b6:92:6a:3b:22: c2:59:ac:7e:82:5f:a1:60:4b:08:ef:0f:54:4c:6d: 2e:19:de:c8:46:50:66:91:65:69:18:6e:ac:ec:43: 23:62:0a:e2:bc:9b:3a:8a:fb:3d:14:5e:85:80:ac: ba:5f:69:26:5d:70:50:5b:5c:2b:c8:46:88:46:c1: 69:3c:32:3d:3b:b9:07:18:18:80:8b:61:3a:d5:df: b3:69:de:93:1b:be:9b:ae:0f:b5:57:6b:df:f7:42: 93:8c:ab:f5:51:84:61:99:3b:5e:65:5b:a4:14:26: bc:fb:77:94:0c:21:92:b1:50:04:ed:7b:7b:38:14: 24:69:f2:b5:ce:ed:38:52:97:25:02:6e:db:7e:54: 9c:2d:d2:78:fe:2b:c5:44:8b:fe:a5:2c:4a:38:a1: 03:11:6d:18:7f:d5:df:c3:a0:96:8a:50:ca:de:60: 5d:97:eb:1b:45:94:1e:f8:17:8e:38:2b:aa:b7:64: 80:86:fd:3b:be:d0:dc:7b:13:c4:af:4a:11:12:53: 63:da:94:97:9c:aa:6a:d8:ad:42:7e:7b:11:2d:2f: 5b:ea:4c:14:e2:c9:9c:51:14:a5:80:60:2b:c0:ca: cc:c7:8a:4e:af:0e:3d:af:48:15:05:47:b6:42:59: 15:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DE:70:CD:9F:2F:A7:AA:D1:72:1F:49:40:03:BD:F2:E8:1C:A6:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1225ace6-0756-3c67-b5a9-9c8331eae9e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:d9:3f:19:51:61:8d:69:c8:d9:74:d1:4d:f3:ba:4c:b5:dc: 76:fa:c9:18:b7:f6:41:33:0c:b9:39:ba:06:6a:b9:18:60:72: 21:89:fc:62:39:7b:4e:63:46:3e:60:65:85:5c:ce:fe:0a:d4: 77:b1:fe:5b:6a:84:09:2b:25:3c:62:0f:16:ab:d9:06:53:e2: 36:06:fa:6a:0e:c4:7e:11:0e:13:cf:1c:29:70:3a:81:2b:09: 64:d0:d7:9f:9d:2f:47:c4:f2:c1:93:75:21:ba:1e:83:5e:06: fe:f1:86:29:41:fa:ed:04:4b:18:88:0d:54:b3:a5:2c:d4:f2: 3c:db:c1:c9:ee:a6:0a:ae:40:a6:a9:a0:ae:49:aa:47:99:b9: 7d:5b:8c:7b:d3:00:93:d8:b0:33:57:5c:d9:67:5f:c9:cd:7f: 49:cb:c3:8f:ec:7f:85:2b:24:27:34:27:a6:df:f6:28:c3:df: 68:d5:4e:f9:c6:7c:ab:2e:9a:f8:c0:41:22:34:bc:ea:fb:21: 68:94:06:bc:27:2b:55:12:a7:00:86:2d:46:c8:26:0b:17:fb: e1:d9:dd:98:59:ab:bc:2a:5a:8e:1f:c2:a1:e6:e1:fd:c5:ee: 1d:ca:05:1f:d7:a3:c4:5e:ea:c5:d8:e7:fa:82:12:f4:c8:9f: ad:4b:0d:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHueJ2zXmoe7XWeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk YTg2OGYxNGUtZGUzNy00YjBjLTgyMTUtNWFmODU0ZGE5YmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r+J+9Rk+7mCtpJqOyLCWax+gl+hYEsI7w9U TG0uGd7IRlBmkWVpGG6s7EMjYgrivJs6ivs9FF6FgKy6X2kmXXBQW1wryEaIRsFp PDI9O7kHGBiAi2E61d+zad6TG76brg+1V2vf90KTjKv1UYRhmTteZVukFCa8+3eU DCGSsVAE7Xt7OBQkafK1zu04UpclAm7bflScLdJ4/ivFRIv+pSxKOKEDEW0Yf9Xf w6CWilDK3mBdl+sbRZQe+BeOOCuqt2SAhv07vtDcexPEr0oRElNj2pSXnKpq2K1C fnsRLS9b6kwU4smcURSlgGArwMrMx4pOrw49r0gVBUe2QlkVoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXecM2fL6eq0XIfSUADvfLoHKYnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTIyNWFjZTYtMDc1Ni0z YzY3LWI1YTktOWM4MzMxZWFlOWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF93YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfZPxlRYY1pyNl00U3zuky13Hb6yRi39kEzDLk5ugZquRhgciGJ/GI5 e05jRj5gZYVczv4K1Hex/ltqhAkrJTxiDxar2QZT4jYG+moOxH4RDhPPHClwOoEr CWTQ15+dL0fE8sGTdSG6HoNeBv7xhilB+u0ESxiIDVSzpSzU8jzbwcnupgquQKap oK5JqkeZuX1bjHvTAJPYsDNXXNlnX8nNf0nLw4/sf4UrJCc0J6bf9ijD32jVTvnG fKsumvjAQSI0vOr7IWiUBrwnK1USpwCGLUbIJgsX++HZ3ZhZq7wqWo4fwqHm4f3F 7h3KBR/Xo8Re6sXY5/qCEvTIn61LDZ4= -----END CERTIFICATE-----Generated at Sat Jun 6 10:55:15 2026 by rpki-client