$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/422c03f2-7f46-3ee5-ad74-8dee7c42949f.roa File: 422c03f2-7f46-3ee5-ad74-8dee7c42949f.roa (raw, json) Hash identifier: OVQ8csNy2h44q5uqK94dJwfqABS5YLecmiWD83fuA9c= Subject key identifier: B6:A8:E8:03:5E:58:29:96:B6:3A:F3:73:D2:9A:D2:07:B4:7B:D9:E2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DFBD61D5F4208A72985F1A2F0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/422c03f2-7f46-3ee5-ad74-8dee7c42949f.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 16625 IP address blocks: 23.211.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d6:1d:5f:42:08:a7:29:85:f1:a2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=93b5f460-1b12-4e4b-9c85-90879a180436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e0:7f:3a:6f:0b:66:14:3d:b8:de:e1:90:e0: 15:5b:52:ef:e6:bf:01:61:96:b6:9c:37:c9:9a:e0: 44:08:05:68:2b:64:b0:ea:cb:33:d6:c8:f9:eb:fe: 7c:ae:43:8c:3a:ad:e0:36:51:da:56:fc:3c:ac:a8: 95:12:a3:38:bd:be:50:d3:ac:f2:37:7d:32:fd:79: 6a:b1:54:0e:ea:1b:12:5c:f1:5f:f5:e2:51:36:86: 1a:fd:e2:b2:eb:08:a1:1e:e8:a7:e7:5b:5f:bb:20: 93:28:86:07:73:58:5e:65:d9:0f:a6:a5:f8:fc:c2: 57:cc:0d:e3:b1:d5:61:a1:31:77:2e:97:a3:37:90: 94:8c:a5:99:13:bb:a2:c2:c3:64:fe:0f:68:28:65: b7:cc:4f:4b:d6:1d:c6:71:ef:ea:10:77:d3:46:86: 2b:fb:9f:97:cc:45:f5:99:aa:09:ea:e9:1f:5e:14: 40:f7:9a:aa:54:7f:e4:ab:74:e0:5e:bb:d7:4d:f2: 1e:0f:d7:c8:76:32:c3:a6:71:b1:6a:73:d7:4b:9e: 67:70:76:e7:e2:4d:ad:72:f0:ad:89:61:9f:8d:42: 98:f9:a0:41:d2:ba:02:84:03:1b:db:ec:84:9b:2b: 34:c5:98:02:80:7d:dd:bf:ef:fc:35:21:77:79:8d: 51:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A8:E8:03:5E:58:29:96:B6:3A:F3:73:D2:9A:D2:07:B4:7B:D9:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/422c03f2-7f46-3ee5-ad74-8dee7c42949f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c7:81:c1:1a:c0:85:8a:c3:e6:b1:03:0b:13:d8:01:21:e6: c3:36:2c:95:6f:f5:99:a2:f7:12:87:1d:57:6a:2b:06:61:d8: 76:b9:7a:b6:9c:2d:da:a3:70:8a:e0:74:3a:5c:c0:f8:f6:53: fb:96:79:b6:6c:65:d9:3d:27:60:07:53:d4:c2:9c:8b:45:52: 61:4f:7f:0e:21:af:da:b5:50:1f:da:8d:a8:f6:17:db:62:c0: 1d:5f:4f:d2:ba:93:85:b7:b2:ad:a5:bc:ef:76:f7:f5:c1:67: ce:d1:ab:73:d5:57:51:7e:4f:3a:4e:f0:5a:87:2f:b0:d9:5f: b5:5e:99:15:64:d4:24:54:d4:0c:23:11:14:38:f0:da:fc:0f: e7:9c:df:85:e2:fc:22:99:db:45:c1:a7:80:e5:1f:dd:4a:10: 72:5a:06:c7:88:f5:68:ca:e2:9b:fc:d4:e1:b2:14:34:70:68: 4e:a6:92:b6:ae:3a:e4:d7:ca:e8:a9:f7:26:90:fd:90:3d:8e: 46:70:82:35:2e:d1:db:14:f0:3f:f7:58:94:09:5a:2a:ce:3d: f4:3b:c5:75:65:5b:21:4c:d4:4b:4c:fc:41:b0:2e:00:0c:c0: a8:46:2d:cf:75:b3:e3:e6:c4:20:4a:aa:03:bd:6e:6b:35:5a: 89:65:24:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371h1fQginKYXxovAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk OTNiNWY0NjAtMWIxMi00ZTRiLTljODUtOTA4NzlhMTgwNDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeB/Om8LZhQ9uN7hkOAVW1Lv5r8BYZa2nDfJ muBECAVoK2Sw6ssz1sj56/58rkOMOq3gNlHaVvw8rKiVEqM4vb5Q06zyN30y/Xlq sVQO6hsSXPFf9eJRNoYa/eKy6wihHuin51tfuyCTKIYHc1heZdkPpqX4/MJXzA3j sdVhoTF3LpejN5CUjKWZE7uiwsNk/g9oKGW3zE9L1h3Gce/qEHfTRoYr+5+XzEX1 maoJ6ukfXhRA95qqVH/kq3TgXrvXTfIeD9fIdjLDpnGxanPXS55ncHbn4k2tcvCt iWGfjUKY+aBB0roChAMb2+yEmys0xZgCgH3dv+/8NSF3eY1REwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLao6ANeWCmWtjrzc9Ka0ge0e9niMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDIyYzAzZjItN2Y0Ni0z ZWU1LWFkNzQtOGRlZTdjNDI5NDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9OYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrHgcEawIWKw+axAwsT2AEh5sM2LJVv9Zmi9xKHHVdqKwZh2Ha5erac LdqjcIrgdDpcwPj2U/uWebZsZdk9J2AHU9TCnItFUmFPfw4hr9q1UB/ajaj2F9ti wB1fT9K6k4W3sq2lvO929/XBZ87Rq3PVV1F+TzpO8FqHL7DZX7VemRVk1CRU1Awj ERQ48Nr8D+ec34Xi/CKZ20XBp4DlH91KEHJaBseI9WjK4pv81OGyFDRwaE6mkrau OuTXyuip9yaQ/ZA9jkZwgjUu0dsU8D/3WJQJWirOPfQ7xXVlWyFM1EtM/EGwLgAM wKhGLc91s+PmxCBKqgO9bms1WollJOI= -----END CERTIFICATE-----Generated at Sat Jun 6 10:55:20 2026 by rpki-client