$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd8a47c-7f66-31ca-ae8b-78a2595b8ec1.roa File: 1dd8a47c-7f66-31ca-ae8b-78a2595b8ec1.roa (raw, json) Hash identifier: vuCGkubpqvHWMvAeEEOuLgGGHR21Hz88ElmRN5Pl1qo= Subject key identifier: BF:84:79:9A:28:8D:12:2E:F0:3D:2C:E0:D6:D7:4C:D3:A3:42:00:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DFA708912312B450CF4E74C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd8a47c-7f66-31ca-ae8b-78a2595b8ec1.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 16625 IP address blocks: 23.204.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:89:12:31:2b:45:0c:f4:e7:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=72a6c3f8-9836-4374-ae45-6524fa2d1e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ae:16:85:32:1d:37:72:7d:6d:17:a0:12:a6: d1:69:eb:50:49:93:67:7d:d4:0c:f6:9e:08:f5:6a: cf:74:0a:50:2b:8e:fe:be:2a:e1:ea:b0:f5:66:e1: 65:75:0a:21:b4:29:18:02:14:89:4c:68:d4:fc:0a: c9:ef:d0:82:08:10:74:d8:44:f4:9c:8e:71:ea:7e: 10:a8:3e:54:92:ab:8e:db:e9:bd:09:b3:0b:fe:d2: c5:f5:4b:59:5b:00:7c:a2:79:cf:cd:7c:11:88:bf: 95:b8:68:ba:f7:02:a9:e9:1e:cb:b8:62:e1:81:ad: 6b:49:1b:bd:99:69:22:9a:4b:be:39:af:eb:11:8c: 01:a1:e8:e7:1d:cf:8f:f4:70:39:e7:45:53:f3:40: 10:1f:b0:08:b3:9c:b5:9c:61:d8:a8:86:31:c2:66: 7f:4e:f3:64:7d:e2:bd:21:c9:0e:56:08:a5:9f:1f: af:98:f6:1d:bc:9a:a7:3b:3e:6a:be:af:49:06:e4: 66:18:06:9d:89:a3:95:ba:99:78:76:32:0f:bf:4f: 6f:e2:91:4b:86:ab:60:b5:13:d3:82:76:0c:d5:26: 62:6e:da:f2:e9:d4:b9:bc:56:3a:20:43:b2:66:e1: e7:dd:4a:e1:1b:0c:b2:83:24:81:67:d4:13:54:fa: 46:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:84:79:9A:28:8D:12:2E:F0:3D:2C:E0:D6:D7:4C:D3:A3:42:00:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd8a47c-7f66-31ca-ae8b-78a2595b8ec1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:01:1f:a6:2c:9a:28:52:a1:5b:e4:fe:a6:91:b4:bf:55:2f: 45:89:65:92:57:6c:06:e1:cc:bf:34:d6:81:e3:2c:53:99:b0: 36:af:09:4b:dd:5a:59:a2:ce:00:92:86:da:f6:40:96:fb:42: e3:f1:24:65:be:d7:73:78:88:d5:bd:64:b4:c0:f5:aa:d2:a1: 1f:2b:41:1d:0f:80:1d:11:cb:bc:9f:ae:cf:10:5b:f1:db:21: 77:e9:53:4d:d7:2e:45:0b:63:13:be:20:88:80:98:38:3a:50: 5a:68:bc:3b:59:fd:f9:ea:29:ba:22:52:da:db:6b:e0:42:a5: 4f:86:9e:ea:67:85:55:ee:e2:2c:3d:ab:c2:50:2f:51:33:8b: 1d:fc:df:f5:68:fb:d3:2c:a5:c2:f0:38:09:a9:68:21:40:15: 6a:0a:b1:0a:9d:5a:b2:3c:22:8f:c7:28:81:b8:63:65:2a:13: 5c:c4:d1:17:5f:28:fc:a7:91:71:9a:9b:c3:61:7e:6f:8c:09: cb:b4:ca:78:78:00:66:ca:57:9f:0c:46:6a:7d:dd:35:58:d9: 0f:0b:24:ca:33:bf:fc:1f:5f:69:2f:14:fb:74:97:f0:f4:25: 1a:0f:dc:60:64:30:1f:49:89:b6:b2:5c:2d:35:2c:97:03:fa: 8b:11:2b:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cIkSMStFDPTnTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk NzJhNmMzZjgtOTgzNi00Mzc0LWFlNDUtNjUyNGZhMmQxZTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha4WhTIdN3J9bRegEqbRaetQSZNnfdQM9p4I 9WrPdApQK47+virh6rD1ZuFldQohtCkYAhSJTGjU/ArJ79CCCBB02ET0nI5x6n4Q qD5UkquO2+m9CbML/tLF9UtZWwB8onnPzXwRiL+VuGi69wKp6R7LuGLhga1rSRu9 mWkimku+Oa/rEYwBoejnHc+P9HA550VT80AQH7AIs5y1nGHYqIYxwmZ/TvNkfeK9 IckOVgilnx+vmPYdvJqnOz5qvq9JBuRmGAadiaOVupl4djIPv09v4pFLhqtgtRPT gnYM1SZibtry6dS5vFY6IEOyZuHn3UrhGwyygySBZ9QTVPpGTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+EeZoojRIu8D0s4NbXTNOjQgB3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWRkOGE0N2MtN2Y2Ni0z MWNhLWFlOGItNzhhMjU5NWI4ZWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8ycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsBH6YsmihSoVvk/qaRtL9VL0WJZZJXbAbhzL801oHjLFOZsDavCUvd WlmizgCShtr2QJb7QuPxJGW+13N4iNW9ZLTA9arSoR8rQR0PgB0Ry7yfrs8QW/Hb IXfpU03XLkULYxO+IIiAmDg6UFpovDtZ/fnqKboiUtrba+BCpU+GnupnhVXu4iw9 q8JQL1Ezix383/Vo+9MspcLwOAmpaCFAFWoKsQqdWrI8Io/HKIG4Y2UqE1zE0Rdf KPynkXGam8Nhfm+MCcu0ynh4AGbKV58MRmp93TVY2Q8LJMozv/wfX2kvFPt0l/D0 JRoP3GBkMB9JibayXC01LJcD+osRK28= -----END CERTIFICATE-----Generated at Sat Jun 6 08:27:40 2026 by rpki-client