$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ef6277c-a8f5-30ec-9f74-baf8d282f6da.roa File: 3ef6277c-a8f5-30ec-9f74-baf8d282f6da.roa (raw, json) Hash identifier: /gJCoub970MRbA1IF71G78fr5l/Ghz4DCbtBBxvMN+M= Subject key identifier: 29:9F:74:C8:28:86:A3:AE:E8:30:27:AF:9C:80:9F:01:96:26:5E:48 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DD35B0A85F001F47C6E2A62DE Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ef6277c-a8f5-30ec-9f74-baf8d282f6da.roa Signing time: Thu 14 May 2026 01:00:25 +0000 ROA not before: Thu 14 May 2026 01:00:25 +0000 ROA not after: Wed 12 Aug 2026 01:00:25 +0000 asID: 32787 IP address blocks: 23.32.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:5b:0a:85:f0:01:f4:7c:6e:2a:62:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 14 01:00:25 2026 GMT Not After : Aug 12 01:00:25 2026 GMT Subject: CN=f6a10d60-d30a-4e9d-8f0e-a0e2c5598193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:fd:4a:0f:5f:23:4f:ea:a1:91:93:49:63: 7a:60:a5:d2:f9:94:c2:3c:f5:25:f9:fc:0b:b9:8a: 57:8e:31:f1:8e:99:7b:ae:42:31:e9:a1:2b:df:11: 77:15:20:b2:36:6e:90:00:75:cb:f7:b8:3c:19:e8: c5:2e:da:09:4a:a4:e4:19:1e:e2:8c:54:3f:7e:e6: d6:aa:ba:38:66:4d:9e:c7:d8:aa:c0:5e:49:ab:24: d7:71:76:77:58:12:bb:5c:a8:fb:57:9a:1f:04:ab: d1:71:d6:fa:1c:ca:15:3c:c5:d8:5b:cd:4a:b7:05: 2e:48:3c:e3:e2:53:74:aa:a4:9b:67:b8:b2:97:7b: 57:06:48:45:a5:e3:11:34:33:12:51:b4:5d:a2:58: 4c:8d:92:ce:c0:ec:6d:ff:97:d7:55:a0:e2:fc:b0: 32:a9:2a:bc:79:e3:95:ff:ec:d3:85:bd:c5:fb:9f: 04:2e:fa:c9:36:bb:b0:7a:c0:dd:a1:5c:46:7b:0f: ba:40:f5:03:81:85:50:4a:07:c0:20:a8:02:ca:24: 91:18:fe:93:49:4d:e6:41:ea:46:e2:ea:1d:93:24: 7c:cf:24:c1:ac:e2:09:75:27:ff:dc:37:4d:fc:f3: a9:e5:92:07:e8:26:31:50:8d:4e:4b:da:95:e8:c0: 1e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9F:74:C8:28:86:A3:AE:E8:30:27:AF:9C:80:9F:01:96:26:5E:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ef6277c-a8f5-30ec-9f74-baf8d282f6da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:3c:bf:4e:40:fb:a1:b5:f6:8e:b8:99:9b:76:47:d6:38:4d: 54:36:b8:0c:c1:35:f4:d2:3f:e0:ec:52:a3:bd:c6:75:70:70: cb:6e:6f:80:96:77:b5:17:27:42:8b:48:6e:fd:11:7b:b4:0f: 26:e5:f2:65:12:47:eb:37:a9:f3:d9:ef:a4:ec:aa:d7:89:e7: f3:5d:e7:90:31:aa:a9:3e:57:5c:dc:57:e8:1b:1b:86:c2:a1: eb:f1:d2:ae:c0:93:87:bb:31:bf:5a:7f:fc:fb:51:87:87:74: cd:29:03:b1:cc:d1:b3:3b:58:cf:9f:a8:58:b8:d9:e0:c5:b2: ae:40:0f:da:91:65:72:28:93:22:48:22:02:c7:92:67:ce:3e: 20:90:c5:20:55:bb:18:c2:4c:99:44:93:cc:4c:30:9b:27:12: 71:d6:4b:24:df:d7:de:62:9a:40:84:72:b4:de:60:c6:8d:72: b5:70:fe:de:74:20:14:12:2d:c3:19:70:97:5e:1a:27:9c:fa: fb:f5:d0:30:3a:54:78:3d:f2:92:4c:91:b6:01:11:34:36:46: 45:47:3c:53:eb:a7:6b:02:11:24:5e:86:63:fb:6a:73:a6:0b: 25:70:69:48:10:84:76:0b:d3:86:1d:6e:3b:e0:42:e0:9e:29: 32:ea:c5:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3TWwqF8AH0fG4qYt4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk ZjZhMTBkNjAtZDMwYS00ZTlkLThmMGUtYTBlMmM1NTk4MTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSb9Sg9fI0/qoZGTSWN6YKXS+ZTCPPUl+fwL uYpXjjHxjpl7rkIx6aEr3xF3FSCyNm6QAHXL97g8GejFLtoJSqTkGR7ijFQ/fubW qro4Zk2ex9iqwF5JqyTXcXZ3WBK7XKj7V5ofBKvRcdb6HMoVPMXYW81KtwUuSDzj 4lN0qqSbZ7iyl3tXBkhFpeMRNDMSUbRdolhMjZLOwOxt/5fXVaDi/LAyqSq8eeOV /+zThb3F+58ELvrJNruwesDdoVxGew+6QPUDgYVQSgfAIKgCyiSRGP6TSU3mQepG 4uodkyR8zyTBrOIJdSf/3DdN/POp5ZIH6CYxUI1OS9qV6MAebQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmfdMgohqOu6DAnr5yAnwGWJl5IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2VmNjI3N2MtYThmNS0z MGVjLTlmNzQtYmFmOGQyODJmNmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyBHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQ8v05A+6G19o64mZt2R9Y4TVQ2uAzBNfTSP+DsUqO9xnVwcMtub4CW d7UXJ0KLSG79EXu0Dybl8mUSR+s3qfPZ76TsqteJ5/Nd55Axqqk+V1zcV+gbG4bC oevx0q7Ak4e7Mb9af/z7UYeHdM0pA7HM0bM7WM+fqFi42eDFsq5AD9qRZXIokyJI IgLHkmfOPiCQxSBVuxjCTJlEk8xMMJsnEnHWSyTf195imkCEcrTeYMaNcrVw/t50 IBQSLcMZcJdeGiec+vv10DA6VHg98pJMkbYBETQ2RkVHPFPrp2sCESRehmP7anOm CyVwaUgQhHYL04YdbjvgQuCeKTLqxc0= -----END CERTIFICATE-----Generated at Sat Jun 6 08:25:43 2026 by rpki-client