$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20d769c1-ae82-31e0-9eee-fee7551f8342.roa File: 20d769c1-ae82-31e0-9eee-fee7551f8342.roa (raw, json) Hash identifier: Tl7L6tDqYtlDz3SH/Tkwv3D7WbW5M3zY2aN6W/cUNBA= Subject key identifier: AA:50:1A:58:A7:B9:4C:23:8C:A2:46:10:F1:55:64:6B:84:34:B2:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DFBD5F28ABEDA98AD56B12400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20d769c1-ae82-31e0-9eee-fee7551f8342.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 16625 IP address blocks: 23.210.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:f2:8a:be:da:98:ad:56:b1:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=110c0ef3-7fae-405e-b6c2-5f1c65538cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a2:75:6a:b4:9c:d3:79:ec:b4:15:33:36:04: 7b:af:b4:d8:55:37:f0:92:fa:0d:d7:80:28:1d:e1: b8:d1:40:b5:fd:5a:e9:6d:2b:a4:d1:44:b1:93:9a: 9f:3f:f4:9b:fc:c8:57:0b:20:69:43:7a:ed:08:0a: 32:61:31:1f:44:e9:bc:13:23:f8:3b:74:bb:b7:06: 42:14:15:70:d3:d1:c1:f1:99:fe:0d:8b:6e:75:1c: 17:f2:51:65:b9:ec:b7:f7:6e:38:43:36:ee:4a:d6: ce:48:36:0d:d8:d4:93:80:4e:f5:a9:72:d8:51:70: 02:16:5c:a4:6e:72:dc:7d:71:6a:50:cb:73:7f:04: d8:2b:eb:0f:c0:58:f1:e1:65:65:21:39:94:16:4d: 12:8d:98:7a:27:d9:0b:b8:c0:5f:18:1e:c4:cd:ff: ca:f0:78:d3:9a:a7:20:cc:a2:11:6e:02:5d:3b:ce: ec:81:46:a3:85:ed:fe:ba:20:93:8a:41:fa:b9:30: 52:cb:fc:76:b1:95:85:d5:8d:68:12:62:54:79:ed: b4:dd:79:dc:71:cc:fd:f3:5d:b4:71:a0:a6:c0:25: 91:46:4a:27:28:ac:46:4f:86:33:d7:69:39:3b:2e: 1d:4c:ea:bc:3d:6d:19:22:00:f9:f8:c1:4f:b9:20: 15:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:50:1A:58:A7:B9:4C:23:8C:A2:46:10:F1:55:64:6B:84:34:B2:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20d769c1-ae82-31e0-9eee-fee7551f8342.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:e8:3a:d2:3d:39:cb:ca:e8:81:a5:b4:42:83:62:19:40:77: d9:67:65:7f:a9:96:bb:af:39:83:88:2e:76:ea:cc:44:a6:23: 1a:b5:6a:13:88:5e:0e:88:ab:66:21:4f:ae:eb:2c:4b:da:ba: c5:9e:a6:1e:5f:ef:e5:8b:5d:1d:cd:7f:63:f5:3a:5e:32:54: 81:39:e6:cd:30:22:fc:b3:d0:03:67:2e:64:44:7a:c4:19:7a: f9:bc:da:aa:ee:fa:ed:d0:cf:f4:8b:7b:a8:22:0f:28:fc:49: de:34:68:88:e8:9f:c0:6d:53:c6:18:18:77:c7:50:da:0a:d9: 76:12:d2:67:50:38:a7:3a:34:f4:c1:a1:67:fe:1e:d9:61:03: d3:57:90:3d:20:70:0c:86:df:41:9f:28:f3:f2:04:a8:74:e0: d3:62:47:c3:1c:43:5f:48:12:12:21:dd:d3:a4:db:32:16:d5: 1f:32:66:c0:f5:8b:e4:a8:03:15:27:7f:98:a0:bb:ed:37:b3: 1e:1f:02:02:1e:c4:3d:80:3c:b4:ae:b7:c9:54:fe:82:3a:e4: 03:6e:aa:93:8b:de:70:55:99:20:6b:07:f8:e8:dc:a7:66:84: 64:76:67:f6:a5:ee:47:0a:d4:ac:ff:80:bd:0b:b3:df:09:ec: cc:36:6b:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371fKKvtqYrVaxJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk MTEwYzBlZjMtN2ZhZS00MDVlLWI2YzItNWYxYzY1NTM4Y2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKJ1arSc03nstBUzNgR7r7TYVTfwkvoN14Ao HeG40UC1/VrpbSuk0USxk5qfP/Sb/MhXCyBpQ3rtCAoyYTEfROm8EyP4O3S7twZC FBVw09HB8Zn+DYtudRwX8lFluey39244QzbuStbOSDYN2NSTgE71qXLYUXACFlyk bnLcfXFqUMtzfwTYK+sPwFjx4WVlITmUFk0SjZh6J9kLuMBfGB7Ezf/K8HjTmqcg zKIRbgJdO87sgUajhe3+uiCTikH6uTBSy/x2sZWF1Y1oEmJUee203Xncccz98120 caCmwCWRRkonKKxGT4Yz12k5Oy4dTOq8PW0ZIgD5+MFPuSAVMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpQGlinuUwjjKJGEPFVZGuENLJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjBkNzY5YzEtYWU4Mi0z MWUwLTllZWUtZmVlNzU1MWY4MzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9JgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjoOtI9OcvK6IGltEKDYhlAd9lnZX+plruvOYOILnbqzESmIxq1ahOI Xg6Iq2YhT67rLEvausWeph5f7+WLXR3Nf2P1Ol4yVIE55s0wIvyz0ANnLmREesQZ evm82qru+u3Qz/SLe6giDyj8Sd40aIjon8BtU8YYGHfHUNoK2XYS0mdQOKc6NPTB oWf+HtlhA9NXkD0gcAyG30GfKPPyBKh04NNiR8McQ19IEhIh3dOk2zIW1R8yZsD1 i+SoAxUnf5igu+03sx4fAgIexD2APLSut8lU/oI65ANuqpOL3nBVmSBrB/jo3Kdm hGR2Z/al7kcK1Kz/gL0Ls98J7Mw2aw8= -----END CERTIFICATE-----Generated at Sat Jun 6 08:29:10 2026 by rpki-client