$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a6e88ae-fce1-33a4-8cf2-b493368b6f67.roa File: 2a6e88ae-fce1-33a4-8cf2-b493368b6f67.roa (raw, json) Hash identifier: Kyx5vpsKhsPK3/3r/ohwAlznRLwk/00CP+T6DENCLII= Subject key identifier: 2A:EB:D7:6D:A2:E0:9B:EC:24:CE:15:14:66:53:31:11:96:CE:08:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E0C1EDF91F205F45F0D0E2200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a6e88ae-fce1-33a4-8cf2-b493368b6f67.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 20940 IP address blocks: 23.220.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:df:91:f2:05:f4:5f:0d:0e:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=d218d37c-662f-44ee-804c-6c66d50c0e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e8:2f:a5:7c:03:fb:7f:07:21:37:a8:15:4c: de:ba:cc:78:be:02:d9:df:87:08:14:50:15:eb:79: d7:d2:a0:23:99:24:7b:71:5b:8b:cb:c0:66:a7:6b: ed:7d:d0:0f:57:ca:8d:34:bc:e6:fb:e8:40:17:d8: 37:ce:a2:06:dc:a8:1e:71:52:13:bd:d9:78:39:d4: 34:c9:d7:38:19:70:28:5e:a7:2e:48:66:dd:73:7f: 2b:c7:ae:64:58:cd:db:1b:26:00:91:52:86:4f:37: c2:5f:d7:16:b9:35:99:f6:28:c0:86:40:12:7a:0d: f7:ab:3c:bc:a4:c3:0f:cd:6b:19:da:54:85:9e:c7: d9:55:3d:e2:7c:4a:dd:db:45:7d:dc:d1:af:7f:24: 1e:82:de:53:c5:44:1e:7e:c5:4a:a6:ed:e2:68:87: 19:9f:69:2b:44:63:9d:de:53:04:e7:2c:05:dc:da: c1:2e:fc:dc:36:04:09:aa:97:56:ea:a6:fa:f3:9c: 51:3e:6e:82:d3:d0:c9:44:e8:0e:d2:29:08:f4:bd: b8:de:68:1a:a2:07:31:86:83:ab:6b:00:b9:f1:6a: 38:87:61:d5:79:4f:b2:1e:ba:46:3c:24:ec:1e:4e: 87:3b:a0:66:f9:be:b0:f7:fc:b1:38:92:ec:6b:ab: 0a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EB:D7:6D:A2:E0:9B:EC:24:CE:15:14:66:53:31:11:96:CE:08:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a6e88ae-fce1-33a4-8cf2-b493368b6f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c4:03:d5:69:0e:3c:3d:99:3e:b5:ac:08:99:42:81:5e:a2: 03:f5:ba:51:6c:81:d8:8a:31:d3:f8:28:75:fd:ac:d6:2f:61: 99:2e:ec:12:5f:83:50:eb:be:98:56:2f:68:ab:21:52:40:24: 95:a1:00:65:8f:0c:82:20:34:9a:f6:cc:e4:0b:1b:3a:f7:59: 2c:72:cc:d2:37:99:c2:b1:84:6a:a8:3d:84:64:18:94:41:4c: 9a:30:4b:fe:8e:2c:f6:47:37:99:99:13:7f:64:e6:ba:ab:89: 54:07:29:fb:5b:38:1f:29:a2:38:bf:fd:f0:9a:3c:5f:51:b7: af:c7:d6:4f:79:02:ef:fe:91:4b:44:10:9e:0f:3c:5c:91:38: 9e:f7:6d:28:13:3a:9d:7a:3b:7c:ef:71:04:85:90:2c:df:da: 96:ab:b4:f5:2e:9f:0e:7c:07:5d:7e:22:e0:5e:73:08:cc:05: 02:6a:30:e3:4f:cd:7b:65:ad:79:d1:38:72:01:38:7f:78:32: 30:41:4c:d1:31:4c:1c:a6:2f:28:b6:0c:2d:a2:4f:fb:a0:b4: dd:8a:26:77:ca:81:f2:2f:29:a2:19:3d:ee:a7:4a:7e:1c:8c: 2b:a2:03:1a:d8:93:0c:cf:a4:89:a9:1a:9f:78:f4:d8:55:80: 8c:c6:7c:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHt+R8gX0Xw0OIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk ZDIxOGQzN2MtNjYyZi00NGVlLTgwNGMtNmM2NmQ1MGMwZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+gvpXwD+38HITeoFUzeusx4vgLZ34cIFFAV 63nX0qAjmSR7cVuLy8Bmp2vtfdAPV8qNNLzm++hAF9g3zqIG3KgecVITvdl4OdQ0 ydc4GXAoXqcuSGbdc38rx65kWM3bGyYAkVKGTzfCX9cWuTWZ9ijAhkASeg33qzy8 pMMPzWsZ2lSFnsfZVT3ifErd20V93NGvfyQegt5TxUQefsVKpu3iaIcZn2krRGOd 3lME5ywF3NrBLvzcNgQJqpdW6qb685xRPm6C09DJROgO0ikI9L243mgaogcxhoOr awC58Wo4h2HVeU+yHrpGPCTsHk6HO6Bm+b6w9/yxOJLsa6sKiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrr122i4JvsJM4VFGZTMRGWzgjcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmE2ZTg4YWUtZmNlMS0z M2E0LThjZjItYjQ5MzM2OGI2ZjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9xWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLEA9VpDjw9mT61rAiZQoFeogP1ulFsgdiKMdP4KHX9rNYvYZku7BJf g1DrvphWL2irIVJAJJWhAGWPDIIgNJr2zOQLGzr3WSxyzNI3mcKxhGqoPYRkGJRB TJowS/6OLPZHN5mZE39k5rqriVQHKftbOB8poji//fCaPF9Rt6/H1k95Au/+kUtE EJ4PPFyROJ73bSgTOp16O3zvcQSFkCzf2partPUunw58B11+IuBecwjMBQJqMONP zXtlrXnROHIBOH94MjBBTNExTBymLyi2DC2iT/ugtN2KJnfKgfIvKaIZPe6nSn4c jCuiAxrYkwzPpImpGp949NhVgIzGfFQ= -----END CERTIFICATE-----Generated at Sat Jun 6 09:45:45 2026 by rpki-client