$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d9ec3e3-4511-3b7d-b607-291e0255ff7d.roa File: 3d9ec3e3-4511-3b7d-b607-291e0255ff7d.roa (raw, json) Hash identifier: lcLz3XNrcjrUVORKkbTsLO+RYbybVHyoT0oQrEml5LM= Subject key identifier: 4C:6F:80:E4:24:21:54:72:9B:65:A9:33:19:62:06:13:A8:4B:EA:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E0C1EDFD63EDA2E9382D04B40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d9ec3e3-4511-3b7d-b607-291e0255ff7d.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 16625 IP address blocks: 23.220.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:df:d6:3e:da:2e:93:82:d0:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=fe2f31b3-8a0e-4e26-b191-3fa13e01ee60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f8:98:7b:a1:3a:b0:48:e1:82:0b:79:9a:e8: 8d:40:8a:7a:1f:9a:8b:8b:33:ad:0a:14:c4:50:fb: 1a:5f:02:2d:cd:c2:3f:ec:68:ad:57:c0:30:53:78: e5:bd:9f:a6:43:66:a9:4d:8c:03:e1:26:72:55:84: ad:3a:72:01:0b:75:4d:36:17:4a:a9:56:be:9c:cd: 4c:3f:63:df:fa:d4:67:cd:b5:74:7c:92:30:5a:03: 5a:26:e4:53:45:65:aa:ab:1a:a6:86:be:35:8f:49: ee:92:e0:88:4c:70:a5:35:9e:bf:16:56:d8:91:75: ad:fe:b7:f9:da:bc:13:c9:11:b0:dc:0e:c9:cc:d3: 7c:83:11:30:1f:b5:33:a4:90:0a:df:5e:35:6c:c0: a1:75:0c:f7:a2:2a:0b:f8:0c:10:6a:8e:2f:c3:5f: 10:32:05:1c:77:2f:04:5e:48:a0:ab:87:bd:e7:80: 83:18:2e:4c:d7:19:96:e2:2d:12:88:0d:d6:27:3d: be:e7:a2:84:a0:76:dc:40:0c:37:f2:40:5b:25:eb: a4:28:b5:de:7e:f7:a2:ca:5d:63:d4:10:7d:0a:ab: ce:7b:3f:ef:a8:2b:b8:da:43:ca:74:36:74:65:9b: 9f:df:9f:db:b4:47:db:e2:a3:e1:40:1b:1b:8b:d7: 5e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6F:80:E4:24:21:54:72:9B:65:A9:33:19:62:06:13:A8:4B:EA:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d9ec3e3-4511-3b7d-b607-291e0255ff7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:de:a8:0f:bc:fb:fc:d9:e0:80:2a:cf:41:e6:b4:44:bd:c5: 0b:8d:93:e6:d8:2d:c8:af:ce:e4:c6:b7:63:f5:b9:65:c6:42: e8:f9:b8:43:2c:54:70:b9:ea:f9:16:09:eb:30:55:e1:64:a9: fa:b6:cd:b1:97:b6:23:76:f5:d0:9b:d1:21:2a:1b:08:21:d7: 71:47:25:38:88:cc:8d:09:fc:38:3c:66:cb:0e:6d:37:d9:b9: 86:67:c6:c0:d1:d1:f0:ab:26:fd:43:50:cb:01:bd:13:05:84: bd:0f:9c:bd:0b:0c:31:ed:2c:b8:bf:26:2e:52:46:32:01:2d: 5c:45:79:23:89:31:47:74:d5:34:9f:a6:6c:b2:31:30:8a:bc: ae:e1:8d:4e:ea:4f:51:e5:dd:78:5d:1c:98:ea:0b:d7:1f:92: d8:5f:3c:ed:a2:7d:a6:31:58:cb:76:50:cb:db:92:3c:55:5f: 18:c5:12:02:f6:cf:b4:e6:09:6e:55:e3:65:0f:78:b0:58:1b: 7a:b6:02:f8:fc:48:af:a0:53:70:84:d1:5c:cc:da:0f:c2:99: 1d:69:36:1d:9e:cf:09:5f:d9:81:ec:a1:dc:33:f7:72:a0:16: fa:5b:37:b0:4c:47:3b:f9:15:89:23:41:ef:46:c2:95:4a:6c: 2d:33:ac:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHt/WPtouk4LQS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk ZmUyZjMxYjMtOGEwZS00ZTI2LWIxOTEtM2ZhMTNlMDFlZTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPiYe6E6sEjhggt5muiNQIp6H5qLizOtChTE UPsaXwItzcI/7GitV8AwU3jlvZ+mQ2apTYwD4SZyVYStOnIBC3VNNhdKqVa+nM1M P2Pf+tRnzbV0fJIwWgNaJuRTRWWqqxqmhr41j0nukuCITHClNZ6/FlbYkXWt/rf5 2rwTyRGw3A7JzNN8gxEwH7UzpJAK3141bMChdQz3oioL+AwQao4vw18QMgUcdy8E Xkigq4e954CDGC5M1xmW4i0SiA3WJz2+56KEoHbcQAw38kBbJeukKLXefveiyl1j 1BB9CqvOez/vqCu42kPKdDZ0ZZuf35/btEfb4qPhQBsbi9de5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExvgOQkIVRym2WpMxliBhOoS+pYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Q5ZWMzZTMtNDUxMS0z YjdkLWI2MDctMjkxZTAyNTVmZjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7eqA+8+/zZ4IAqz0HmtES9xQuNk+bYLcivzuTGt2P1uWXGQuj5uEMs VHC56vkWCeswVeFkqfq2zbGXtiN29dCb0SEqGwgh13FHJTiIzI0J/Dg8ZssObTfZ uYZnxsDR0fCrJv1DUMsBvRMFhL0PnL0LDDHtLLi/Ji5SRjIBLVxFeSOJMUd01TSf pmyyMTCKvK7hjU7qT1Hl3XhdHJjqC9cfkthfPO2ifaYxWMt2UMvbkjxVXxjFEgL2 z7TmCW5V42UPeLBYG3q2Avj8SK+gU3CE0VzM2g/CmR1pNh2ezwlf2YHsodwz93Kg FvpbN7BMRzv5FYkjQe9GwpVKbC0zrBc= -----END CERTIFICATE-----Generated at Sat Jun 6 09:43:29 2026 by rpki-client