$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b33789a-6279-306b-966e-441ded2d9a2e.roa File: 3b33789a-6279-306b-966e-441ded2d9a2e.roa (raw, json) Hash identifier: Fz1OPP2shhNNJTdG/+iG+cDk88Q9jVuQ4q6kvYk5b3E= Subject key identifier: 34:41:A5:49:6E:36:60:A1:10:C2:01:1E:E2:0C:84:A6:23:AC:59:EC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E00061ED8176D4CF423DCD8C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b33789a-6279-306b-966e-441ded2d9a2e.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 20940 IP address blocks: 23.214.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:1e:d8:17:6d:4c:f4:23:dc:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=22ed6970-e55e-4fa0-b308-9f4a0af053e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b4:67:8c:39:6e:f6:bd:1a:72:c1:1b:8a:cd: 3d:cb:6b:36:89:c4:49:bf:a9:3e:52:da:77:1c:f2: ea:41:69:cb:70:fe:d7:92:da:f8:59:28:77:90:86: 67:5b:60:04:68:51:66:eb:96:41:8e:13:45:f0:9b: 47:5d:0b:c5:15:32:6b:a6:db:87:4b:27:7d:07:fd: 09:3d:14:8f:3d:3e:b4:b2:e3:49:07:30:25:95:7e: a8:9c:89:53:ca:9f:c8:c5:7f:73:b3:0a:e8:3e:9e: 1f:5d:cc:71:dd:02:cf:71:4c:3c:7f:c4:87:a0:d9: 59:72:7d:25:37:fe:11:9f:61:60:40:51:73:76:d4: fd:a9:79:ff:62:92:1a:3a:91:44:57:d8:82:bc:bb: d3:ab:1b:4e:e7:61:02:89:24:90:90:8e:19:e5:f7: 29:19:7c:13:c5:fc:5e:79:53:90:d7:06:6c:ae:d8: a4:08:1c:6f:03:0d:88:a2:3c:91:36:30:fd:55:0f: 1a:b0:cc:ef:86:1a:04:90:36:47:f3:62:a8:eb:8e: fb:aa:e1:fd:b2:f0:c3:4a:1a:31:e0:4e:3e:6c:d1: 63:3b:70:29:6a:83:7f:e9:80:04:60:76:95:ab:db: 61:4e:dc:e9:dd:ea:41:4c:f0:23:f6:14:99:f4:cd: b4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:41:A5:49:6E:36:60:A1:10:C2:01:1E:E2:0C:84:A6:23:AC:59:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b33789a-6279-306b-966e-441ded2d9a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a2:4d:03:a9:f5:06:67:aa:3e:d5:30:fa:d1:2c:77:f1:8f: f9:6a:57:dc:eb:73:7c:ac:6b:82:eb:87:9f:f3:ad:64:87:7f: b8:d6:48:16:8a:db:0a:c1:38:fe:56:6e:48:cc:e7:c0:73:31: da:30:70:2e:48:ce:6a:46:f3:9e:c7:63:38:4c:ed:70:05:16: cd:78:66:09:96:2e:1c:23:50:2b:28:99:fb:51:04:14:70:f2: e1:39:2d:35:05:d9:f0:4a:75:69:3d:06:f0:72:cb:ef:e8:a8: 40:df:67:fc:16:dc:1d:28:bf:17:e6:9c:aa:57:10:fd:cf:a6: 2a:c3:90:70:5a:b5:62:b7:c3:d3:c0:77:d3:32:c0:eb:a2:00: f0:51:ea:5d:d5:cf:e9:2e:7c:a4:e8:6f:77:af:c8:11:fe:70: f1:ea:04:36:9e:04:d1:12:a4:b1:1d:dd:f7:65:fe:46:e9:01: 42:37:ee:e8:6a:f5:22:8c:af:da:08:71:9b:b8:8b:df:db:5c: 7c:e2:3e:01:ce:0b:00:ac:fc:9b:3d:3a:fe:f9:1c:fa:6e:6e: 27:46:75:77:86:f6:3f:17:ac:c7:c3:4d:1e:48:ca:3d:db:dd: ec:72:09:04:23:78:a2:e3:5d:07:0c:20:86:39:6f:0b:50:7e: f6:7a:10:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABh7YF21M9CPc2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk MjJlZDY5NzAtZTU1ZS00ZmEwLWIzMDgtOWY0YTBhZjA1M2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLRnjDlu9r0acsEbis09y2s2icRJv6k+Utp3 HPLqQWnLcP7Xktr4WSh3kIZnW2AEaFFm65ZBjhNF8JtHXQvFFTJrptuHSyd9B/0J PRSPPT60suNJBzAllX6onIlTyp/IxX9zswroPp4fXcxx3QLPcUw8f8SHoNlZcn0l N/4Rn2FgQFFzdtT9qXn/YpIaOpFEV9iCvLvTqxtO52ECiSSQkI4Z5fcpGXwTxfxe eVOQ1wZsrtikCBxvAw2IojyRNjD9VQ8asMzvhhoEkDZH82Ko6477quH9svDDShox 4E4+bNFjO3ApaoN/6YAEYHaVq9thTtzp3epBTPAj9hSZ9M20PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRBpUluNmChEMIBHuIMhKYjrFnsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2IzMzc4OWEtNjI3OS0z MDZiLTk2NmUtNDQxZGVkMmQ5YTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ZfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOiTQOp9QZnqj7VMPrRLHfxj/lqV9zrc3ysa4Lrh5/zrWSHf7jWSBaK 2wrBOP5WbkjM58BzMdowcC5IzmpG857HYzhM7XAFFs14ZgmWLhwjUCsomftRBBRw 8uE5LTUF2fBKdWk9BvByy+/oqEDfZ/wW3B0ovxfmnKpXEP3PpirDkHBatWK3w9PA d9MywOuiAPBR6l3Vz+kufKTob3evyBH+cPHqBDaeBNESpLEd3fdl/kbpAUI37uhq 9SKMr9oIcZu4i9/bXHziPgHOCwCs/Js9Ov75HPpubidGdXeG9j8XrMfDTR5Iyj3b 3exyCQQjeKLjXQcMIIY5bwtQfvZ6EAc= -----END CERTIFICATE-----Generated at Sat Jun 6 11:02:55 2026 by rpki-client