$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2912cc37-3050-3a7b-be0a-b1c94d0af731.roa File: 2912cc37-3050-3a7b-be0a-b1c94d0af731.roa (raw, json) Hash identifier: mcyx4dmHqB/QUAYH8Dz157STllPgORs7prLtxCJP/1w= Subject key identifier: 28:96:3A:76:E0:75:3B:5B:21:BA:21:D6:EA:14:B6:3D:C3:05:64:D9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DFBD61B16DFC4F3EA5E3B92A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2912cc37-3050-3a7b-be0a-b1c94d0af731.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 20940 IP address blocks: 23.209.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d6:1b:16:df:c4:f3:ea:5e:3b:92:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=25f6822e-ed45-4f3d-acc5-87cbf2d93c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bf:b6:c5:f9:91:4e:ce:bb:6b:63:35:ec:57: 24:33:13:a3:b4:ec:c5:04:b5:1d:ad:b6:40:63:6d: b2:08:60:87:b9:3d:11:17:8a:ad:7b:08:a8:cf:28: 08:47:8b:87:3e:d4:84:7e:8b:03:33:13:76:2d:d2: 79:1e:40:b4:7d:d3:e3:f5:6a:c6:ef:d4:f2:5d:12: bb:74:3d:c7:cf:a6:72:cf:6c:8b:88:1b:be:c4:8d: de:b2:4d:c2:70:65:8b:61:fd:b8:fc:ed:ae:b1:8e: 09:39:4c:eb:09:d6:32:0e:ac:24:47:e5:4a:da:50: 22:0e:9d:3c:04:29:9f:ed:15:95:fe:e9:e7:8f:f7: bd:a0:00:19:a1:5d:e0:6f:08:87:bc:7f:a3:2a:58: ab:ec:71:b7:03:9d:aa:45:b2:de:dd:3f:27:ea:af: ea:0e:d2:8b:5b:99:5c:50:6a:da:0e:54:c5:95:20: 9c:8d:f9:aa:a6:9d:7a:0c:9e:05:0c:f9:cb:09:96: 6e:1d:5d:7a:bb:c0:d5:35:41:a1:6d:a7:0a:67:ab: 60:08:7c:b9:0a:93:bb:1e:09:84:8c:b6:c6:fe:7a: 7e:db:f6:9e:54:d6:67:67:02:54:a6:a6:f8:8b:74: de:dc:d4:9e:9e:2a:88:7b:3f:a0:66:d3:ae:91:c3: 7b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:96:3A:76:E0:75:3B:5B:21:BA:21:D6:EA:14:B6:3D:C3:05:64:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2912cc37-3050-3a7b-be0a-b1c94d0af731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:46:7e:90:d4:4e:5e:4f:27:0a:06:6b:1b:f2:e9:1a:a2:3c: 69:ff:9c:de:2f:ff:af:86:af:64:b8:c5:23:e6:4a:3b:91:ae: 88:6d:9b:f0:df:a7:6b:9a:cc:25:94:83:00:db:4f:00:cc:45: 96:21:b1:dd:b8:61:90:18:eb:dc:15:95:3b:2d:9e:e7:0b:04: 95:f4:56:d3:d6:3b:33:4b:eb:b0:f8:9a:6e:19:b4:f6:0f:5d: d6:fe:4e:98:5f:63:38:33:11:7d:bf:39:ce:1b:68:6a:cc:ff: 16:58:0a:bf:44:0e:30:7d:4f:65:e9:1c:db:77:ef:50:c1:02: 31:f9:2f:23:4c:7b:06:16:90:eb:fb:1b:0e:ea:96:93:6b:b1: f5:1d:97:1b:63:6b:3c:db:0c:25:aa:da:ca:f1:5b:59:10:be: ca:6a:2e:7c:7e:8b:7a:3d:2d:5a:30:10:e2:94:ce:d4:85:e9: 90:e5:ed:a9:a7:b8:a7:9a:29:cf:43:2e:10:02:4e:f9:4a:38: 6b:87:51:8d:5c:81:cb:9b:e9:9b:ad:be:d2:b2:7c:35:ca:fe: 71:91:ff:f7:23:dc:af:37:4a:b5:72:18:ad:da:e0:78:e0:27: 02:c2:83:f7:4c:39:3d:62:04:bf:fa:8b:eb:40:1a:39:f1:57: 89:39:08:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371hsW38Tz6l47kqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk MjVmNjgyMmUtZWQ0NS00ZjNkLWFjYzUtODdjYmYyZDkzYzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr+2xfmRTs67a2M17FckMxOjtOzFBLUdrbZA Y22yCGCHuT0RF4qtewiozygIR4uHPtSEfosDMxN2LdJ5HkC0fdPj9WrG79TyXRK7 dD3Hz6Zyz2yLiBu+xI3esk3CcGWLYf24/O2usY4JOUzrCdYyDqwkR+VK2lAiDp08 BCmf7RWV/unnj/e9oAAZoV3gbwiHvH+jKlir7HG3A52qRbLe3T8n6q/qDtKLW5lc UGraDlTFlSCcjfmqpp16DJ4FDPnLCZZuHV16u8DVNUGhbacKZ6tgCHy5CpO7HgmE jLbG/np+2/aeVNZnZwJUpqb4i3Te3NSeniqIez+gZtOukcN7ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiWOnbgdTtbIboh1uoUtj3DBWTZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjkxMmNjMzctMzA1MC0z YTdiLWJlMGEtYjFjOTRkMGFmNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtGfpDUTl5PJwoGaxvy6RqiPGn/nN4v/6+Gr2S4xSPmSjuRrohtm/Df p2uazCWUgwDbTwDMRZYhsd24YZAY69wVlTstnucLBJX0VtPWOzNL67D4mm4ZtPYP Xdb+TphfYzgzEX2/Oc4baGrM/xZYCr9EDjB9T2XpHNt371DBAjH5LyNMewYWkOv7 Gw7qlpNrsfUdlxtjazzbDCWq2srxW1kQvspqLnx+i3o9LVowEOKUztSF6ZDl7amn uKeaKc9DLhACTvlKOGuHUY1cgcub6ZutvtKyfDXK/nGR//cj3K83SrVyGK3a4Hjg JwLCg/dMOT1iBL/6i+tAGjnxV4k5CLQ= -----END CERTIFICATE-----Generated at Sat Jun 6 09:44:31 2026 by rpki-client