$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fd35457-963d-3d55-a564-2abd5e0ff1a4.roa File: 3fd35457-963d-3d55-a564-2abd5e0ff1a4.roa (raw, json) Hash identifier: 2HINK51jRchVQSwJ8dFxnIyFI/5SjZLgVMPPbtN6WWo= Subject key identifier: 7E:CF:E5:6A:3F:10:F4:A8:1A:2F:58:C2:C2:F6:2F:08:A2:5B:40:3C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DFA70883A6D4E8E811A861B40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fd35457-963d-3d55-a564-2abd5e0ff1a4.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 20940 IP address blocks: 23.204.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:88:3a:6d:4e:8e:81:1a:86:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=4dc39cc2-ee03-4ae7-bb2e-7ef58672e8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:22:c1:79:89:66:85:3f:1a:f3:0d:ea:46:c4: 05:a8:18:82:02:5b:24:f8:7e:60:6f:dd:0f:f8:ba: e1:74:6d:8e:10:dc:15:f7:c8:16:83:18:54:47:bb: f9:fa:22:cb:2a:d6:ec:85:1b:b0:f9:ec:fd:4c:50: 04:f2:1c:e2:2a:b8:bf:24:12:46:e5:a1:ae:2a:73: fd:b4:2b:09:4e:c3:a8:49:21:b4:50:4d:59:cc:3b: 42:6a:aa:e6:01:f2:c9:c7:ed:70:aa:dc:12:a7:be: 9f:64:2d:1b:21:67:20:b5:57:15:dd:b2:35:3a:34: 69:a5:ba:1c:1b:80:a5:aa:eb:0d:aa:66:7c:9c:0c: 92:fb:ed:62:f8:44:15:a1:f7:73:26:4a:c2:52:46: fb:fa:22:cb:67:0a:0f:dd:80:d5:9a:e0:89:20:68: 53:c9:9c:22:f1:48:3d:80:8f:c4:9e:ca:54:60:c5: bc:2d:06:a7:7b:4d:b2:f4:d0:76:e9:2c:d0:a1:cb: 0c:7c:23:f5:1f:58:ae:9a:91:28:90:c1:3c:b1:2d: cc:b6:1e:f4:04:62:af:33:65:15:5d:63:c5:48:e1: 81:8f:f1:bc:74:a1:27:d9:dd:a4:be:4b:a0:a8:90: 5a:aa:19:56:60:40:f1:ea:ac:08:4f:5c:83:6d:df: a2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CF:E5:6A:3F:10:F4:A8:1A:2F:58:C2:C2:F6:2F:08:A2:5B:40:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fd35457-963d-3d55-a564-2abd5e0ff1a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:d2:2d:75:9d:f7:00:ba:48:0c:0f:ed:27:56:da:00:2a:9e: ac:14:e9:1a:d6:f2:2e:74:41:88:3e:7f:69:a8:f0:28:8f:64: 8c:0b:ba:57:89:06:58:b5:c2:98:93:56:6d:88:96:3c:98:93: ac:a5:20:f4:44:35:ee:d3:87:49:6d:06:4a:75:84:a5:99:72: 59:56:35:6e:26:07:c8:d7:c9:4e:d6:77:1e:8b:d9:da:ff:c1: c8:db:6e:bc:49:b9:45:aa:fb:0d:43:5c:51:da:7b:2a:84:8c: 9b:ea:a7:eb:89:53:07:4d:9e:aa:05:d4:20:83:7d:01:32:43: cd:c0:a2:12:0d:09:7b:9a:4d:91:f8:21:3a:af:40:84:0c:f4: 83:9f:aa:4c:62:9a:2f:40:1f:9c:96:2e:e0:d1:6a:72:ff:45: f4:0f:16:51:c0:4e:eb:39:f4:9e:2f:ce:f2:1a:f9:48:f5:23: 2c:14:52:41:64:d4:2a:be:ca:14:b8:52:75:69:fe:c2:38:4c: dd:59:90:35:43:23:7c:f0:c6:1a:3f:49:57:f3:84:6f:5f:a4: d3:96:fa:1e:f5:43:88:88:51:74:82:01:7b:44:7e:08:55:22: b8:b1:1e:02:34:cc:e6:de:2b:dd:8f:f9:2c:78:83:3d:41:49: df:a2:35:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cIg6bU6OgRqGG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk NGRjMzljYzItZWUwMy00YWU3LWJiMmUtN2VmNTg2NzJlOGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyLBeYlmhT8a8w3qRsQFqBiCAlsk+H5gb90P +LrhdG2OENwV98gWgxhUR7v5+iLLKtbshRuw+ez9TFAE8hziKri/JBJG5aGuKnP9 tCsJTsOoSSG0UE1ZzDtCaqrmAfLJx+1wqtwSp76fZC0bIWcgtVcV3bI1OjRppboc G4ClqusNqmZ8nAyS++1i+EQVofdzJkrCUkb7+iLLZwoP3YDVmuCJIGhTyZwi8Ug9 gI/EnspUYMW8LQane02y9NB26SzQocsMfCP1H1iumpEokME8sS3Mth70BGKvM2UV XWPFSOGBj/G8dKEn2d2kvkugqJBaqhlWYEDx6qwIT1yDbd+iOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7P5Wo/EPSoGi9YwsL2LwiiW0A8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2ZkMzU0NTctOTYzZC0z ZDU1LWE1NjQtMmFiZDVlMGZmMWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8xgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbSLXWd9wC6SAwP7SdW2gAqnqwU6RrW8i50QYg+f2mo8CiPZIwLuleJ Bli1wpiTVm2IljyYk6ylIPRENe7Th0ltBkp1hKWZcllWNW4mB8jXyU7Wdx6L2dr/ wcjbbrxJuUWq+w1DXFHaeyqEjJvqp+uJUwdNnqoF1CCDfQEyQ83AohINCXuaTZH4 ITqvQIQM9IOfqkximi9AH5yWLuDRanL/RfQPFlHATus59J4vzvIa+Uj1IywUUkFk 1Cq+yhS4UnVp/sI4TN1ZkDVDI3zwxho/SVfzhG9fpNOW+h71Q4iIUXSCAXtEfghV IrixHgI0zObeK92P+Sx4gz1BSd+iNZY= -----END CERTIFICATE-----Generated at Sat Jun 6 08:25:32 2026 by rpki-client