$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45c2e24b-a463-36f5-b41a-20be30a1d31f.roa File: 45c2e24b-a463-36f5-b41a-20be30a1d31f.roa (raw, json) Hash identifier: HXANniEYooueaOK4Tp2pWL2eTM1dzqa3X0DjvqTEDZc= Subject key identifier: 56:A3:47:DB:C9:20:CD:94:6A:C4:A8:1A:F9:C7:76:6E:96:43:76:A1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E000602FDDE8921A0E71B1B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45c2e24b-a463-36f5-b41a-20be30a1d31f.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 35994 IP address blocks: 23.217.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:02:fd:de:89:21:a0:e7:1b:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=5e11bbd4-c49e-4190-94d2-8fd682dc571c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f9:f9:80:5b:c7:bd:61:57:4a:92:63:45:c1: 81:6a:3e:c9:47:6c:50:be:c6:45:41:5d:18:98:16: 81:dc:61:02:bc:ba:f7:81:79:27:ba:7b:f3:40:ff: 56:13:6a:25:b8:5e:de:27:a6:20:b1:1b:10:fc:d1: 49:e3:fa:eb:35:05:ef:af:ab:2c:ac:d5:22:b1:d1: 0c:34:4a:05:a7:0d:1e:52:eb:36:e6:ad:e9:4b:58: 8b:58:53:47:95:03:33:61:9c:95:35:b0:e5:e8:fc: d8:2b:83:ec:d3:cd:c4:bd:da:aa:19:53:00:c2:0b: ed:be:83:b8:76:4e:fc:69:3c:2b:4b:c0:a3:8e:7b: 60:09:a3:d9:2a:7a:34:23:c9:78:65:14:2a:4a:9b: c1:de:94:38:50:d0:fb:a9:79:4c:97:77:c5:0a:4e: 31:91:e5:7d:15:25:74:be:88:2f:bd:c8:ea:a4:09: ff:eb:25:87:4f:53:60:d3:ab:b7:1e:0b:04:21:02: db:4d:e3:b4:f9:ba:9d:34:c1:41:66:d7:07:b4:33: e4:bb:fa:ab:7e:15:75:8f:fd:35:0b:81:e5:b9:7a: 3c:bc:da:3d:19:69:ff:f9:39:e5:7d:2f:0f:15:28: 8b:1f:6a:bb:73:d3:85:c7:07:a7:1c:ea:ba:6c:16: 86:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A3:47:DB:C9:20:CD:94:6A:C4:A8:1A:F9:C7:76:6E:96:43:76:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45c2e24b-a463-36f5-b41a-20be30a1d31f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:6b:dc:58:c7:49:f6:dd:c1:ac:60:3c:f3:47:d6:c7:07:37: 03:00:0b:2f:4f:a2:b1:9b:1f:09:0c:2d:56:09:54:b2:27:71: ff:d4:76:cd:6c:21:06:e8:d0:62:82:da:bf:0e:32:c0:e1:79: 4a:48:0b:2d:00:70:99:05:20:23:1f:a0:43:de:2f:c1:b5:ed: 70:79:7a:bb:34:e9:7a:e1:a2:7d:4f:38:95:01:66:d9:d5:75: 62:85:14:2d:3d:a9:7e:eb:8c:59:17:b9:3f:35:91:c8:2c:cf: ab:07:04:ab:72:81:5a:60:01:b8:f0:85:30:04:c3:b8:d9:a1: 23:90:28:b4:32:1c:9f:99:af:58:d4:8c:2c:f1:03:c4:13:00: d3:c3:38:e4:60:43:2e:a2:9a:b3:c7:15:20:f7:ce:7a:2a:0f: 79:9c:63:47:57:5f:ba:ff:85:d5:48:ee:c4:45:f8:95:19:6e: b2:f2:a0:ea:65:39:29:00:40:b5:5d:a5:15:80:80:72:35:9c: 55:b2:88:16:e8:64:37:fd:1f:27:55:61:c2:c4:24:dd:17:34: 5c:34:8b:72:47:b1:6e:22:c6:20:26:4c:68:1f:06:c0:9b:b5: 1b:41:ae:69:9e:1c:36:f1:98:79:da:b0:92:07:a1:82:c8:84: 2d:d2:a5:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABgL93okhoOcbG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk NWUxMWJiZDQtYzQ5ZS00MTkwLTk0ZDItOGZkNjgyZGM1NzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/n5gFvHvWFXSpJjRcGBaj7JR2xQvsZFQV0Y mBaB3GECvLr3gXknunvzQP9WE2oluF7eJ6YgsRsQ/NFJ4/rrNQXvr6ssrNUisdEM NEoFpw0eUus25q3pS1iLWFNHlQMzYZyVNbDl6PzYK4Ps083EvdqqGVMAwgvtvoO4 dk78aTwrS8CjjntgCaPZKno0I8l4ZRQqSpvB3pQ4UND7qXlMl3fFCk4xkeV9FSV0 vogvvcjqpAn/6yWHT1Ng06u3HgsEIQLbTeO0+bqdNMFBZtcHtDPku/qrfhV1j/01 C4HluXo8vNo9GWn/+TnlfS8PFSiLH2q7c9OFxwenHOq6bBaGBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFajR9vJIM2UasSoGvnHdm6WQ3ahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDVjMmUyNGItYTQ2My0z NmY1LWI0MWEtMjBiZTMwYTFkMzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9mNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNr3FjHSfbdwaxgPPNH1scHNwMACy9PorGbHwkMLVYJVLIncf/Uds1s IQbo0GKC2r8OMsDheUpICy0AcJkFICMfoEPeL8G17XB5ers06Xrhon1POJUBZtnV dWKFFC09qX7rjFkXuT81kcgsz6sHBKtygVpgAbjwhTAEw7jZoSOQKLQyHJ+Zr1jU jCzxA8QTANPDOORgQy6imrPHFSD3znoqD3mcY0dXX7r/hdVI7sRF+JUZbrLyoOpl OSkAQLVdpRWAgHI1nFWyiBboZDf9HydVYcLEJN0XNFw0i3JHsW4ixiAmTGgfBsCb tRtBrmmeHDbxmHnasJIHoYLIhC3SpWQ= -----END CERTIFICATE-----Generated at Sat Jun 6 12:11:59 2026 by rpki-client