$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33064933-a525-316e-9cb5-6e7360524190.roa File: 33064933-a525-316e-9cb5-6e7360524190.roa (raw, json) Hash identifier: zLCFhoHDRBRwiZJqBREndaGmUeB12X/2Nz7Zqar4GwE= Subject key identifier: 56:AB:39:38:29:CD:73:7E:71:76:F0:5E:50:74:CD:30:25:E6:64:C5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DE41B386DE9C8757EA5D256A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33064933-a525-316e-9cb5-6e7360524190.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16625 IP address blocks: 23.197.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:38:6d:e9:c8:75:7e:a5:d2:56:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=8655e050-d038-44d3-be2f-fe59b751d481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:51:82:9e:56:5e:04:ca:75:03:9e:df:7f:8b: 87:76:70:e5:da:6b:66:42:96:53:9e:4e:8f:e7:38: 55:e8:75:bb:a4:42:84:b1:20:19:8a:59:67:7e:8b: 61:fa:81:28:57:bc:73:82:41:3b:24:88:32:29:df: 3b:88:fd:bb:d6:39:4a:81:cb:f8:da:ac:90:81:ef: 95:c3:20:cd:e4:93:27:e4:8b:44:8d:a3:01:81:c7: 30:5a:1a:b2:2f:27:7f:02:a3:b7:be:5c:e0:0a:f8: e8:b6:13:10:8d:44:0b:e8:60:2a:55:4f:0c:68:6a: 42:a6:0a:2a:03:44:19:9c:b0:61:6e:d3:95:91:1c: 9b:61:c1:ae:e7:78:8d:e8:1e:7e:43:41:1c:37:fb: 55:31:34:f8:62:91:55:86:69:8c:36:69:c2:5f:3d: 93:01:8a:6b:8e:4b:ff:d8:31:9c:65:28:2a:d0:79: 0e:9f:8f:91:0c:a3:68:7c:1d:ac:28:96:57:76:bf: aa:53:a9:65:49:2f:50:e3:60:85:46:88:64:63:41: a5:ba:12:07:35:64:1d:f1:c2:32:7e:a0:66:3b:38: 2c:27:7b:77:04:9c:34:98:f8:cf:2d:2f:26:49:c0: 74:7a:ef:64:e3:03:97:6c:0d:15:88:67:33:6a:9f: af:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AB:39:38:29:CD:73:7E:71:76:F0:5E:50:74:CD:30:25:E6:64:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33064933-a525-316e-9cb5-6e7360524190.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:1c:5f:08:09:fb:9f:d9:d9:a9:45:0a:c7:64:b5:52:f5:4a: ef:cf:53:24:0a:3f:a0:ba:92:b3:08:6c:93:52:e3:4d:e4:e1: 37:da:43:b8:fa:a7:dd:72:48:63:11:0a:2c:51:0d:88:a2:df: 13:d5:e1:92:b9:0a:88:76:98:cb:c2:e9:e7:bb:f8:29:e4:d5: f0:08:47:c9:f3:33:3b:8e:b0:4b:f9:83:2e:06:4e:42:af:23: 2b:44:30:e8:93:27:8f:8b:e6:4b:f8:af:62:d8:55:d4:11:7c: c4:28:c8:01:4b:71:05:18:a2:a7:cc:06:a6:c8:b9:10:f2:c2: a4:c3:af:8a:a4:29:f0:e1:fb:06:64:96:7f:df:d4:ca:da:97: 69:63:88:60:ed:93:ca:e1:80:2e:a4:09:7a:09:48:00:d2:36: 0b:45:23:e4:4e:ac:27:2e:7f:a7:27:17:76:94:64:8a:e8:0f: 3b:ee:57:e7:17:91:37:26:81:ae:f6:3b:a8:18:6d:6f:65:ca: b7:70:0a:4c:12:60:62:e2:52:03:98:23:2c:5b:18:7c:ab:85: 74:75:ad:aa:74:8c:6f:70:a2:b0:ff:a9:37:bc:36:d8:ab:57: 20:07:60:7a:42:c4:aa:20:bb:dd:86:c8:49:1f:5f:a5:6f:85: c1:0a:55:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGzht6ch1fqXSVqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk ODY1NWUwNTAtZDAzOC00NGQzLWJlMmYtZmU1OWI3NTFkNDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFGCnlZeBMp1A57ff4uHdnDl2mtmQpZTnk6P 5zhV6HW7pEKEsSAZillnfoth+oEoV7xzgkE7JIgyKd87iP271jlKgcv42qyQge+V wyDN5JMn5ItEjaMBgccwWhqyLyd/AqO3vlzgCvjothMQjUQL6GAqVU8MaGpCpgoq A0QZnLBhbtOVkRybYcGu53iN6B5+Q0EcN/tVMTT4YpFVhmmMNmnCXz2TAYprjkv/ 2DGcZSgq0HkOn4+RDKNofB2sKJZXdr+qU6llSS9Q42CFRohkY0GluhIHNWQd8cIy fqBmOzgsJ3t3BJw0mPjPLS8mScB0eu9k4wOXbA0ViGczap+v7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFarOTgpzXN+cXbwXlB0zTAl5mTFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzMwNjQ5MzMtYTUyNS0z MTZlLTljYjUtNmU3MzYwNTI0MTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8UQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIcXwgJ+5/Z2alFCsdktVL1Su/PUyQKP6C6krMIbJNS403k4TfaQ7j6 p91ySGMRCixRDYii3xPV4ZK5Coh2mMvC6ee7+Cnk1fAIR8nzMzuOsEv5gy4GTkKv IytEMOiTJ4+L5kv4r2LYVdQRfMQoyAFLcQUYoqfMBqbIuRDywqTDr4qkKfDh+wZk ln/f1Mral2ljiGDtk8rhgC6kCXoJSADSNgtFI+ROrCcuf6cnF3aUZIroDzvuV+cX kTcmga72O6gYbW9lyrdwCkwSYGLiUgOYIyxbGHyrhXR1rap0jG9worD/qTe8Ntir VyAHYHpCxKogu92GyEkfX6VvhcEKVe0= -----END CERTIFICATE-----Generated at Sat Jun 6 11:16:28 2026 by rpki-client