$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45f7f1d1-183b-37ea-9a61-9316ba3dae30.roa File: 45f7f1d1-183b-37ea-9a61-9316ba3dae30.roa (raw, json) Hash identifier: OtK8BBLWP+Ttce4I6RjbN3UZ1lIaCN8cm1juJfreQ/A= Subject key identifier: 9A:21:1A:6A:3B:63:69:1D:42:A2:E6:24:57:27:01:66:33:09:E4:2C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E0A7005434369D5775B5C6000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45f7f1d1-183b-37ea-9a61-9316ba3dae30.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 16625 IP address blocks: 23.218.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:70:05:43:43:69:d5:77:5b:5c:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=2dc978d9-1858-4507-8644-cf1857089d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8b:84:01:22:a8:24:34:89:d2:4b:44:39:14: dc:b3:06:86:ae:b6:9d:dd:a5:1d:c6:d8:15:ef:e0: 8d:ed:8e:06:f2:2c:a2:1c:21:eb:a0:a6:8f:54:55: 71:09:12:16:2d:12:eb:c0:10:33:40:09:1c:04:74: e0:8f:a4:bd:50:6f:02:ae:6d:de:46:6a:ea:4e:1d: 7f:ad:1d:d4:73:84:f4:56:e3:e1:ba:73:c5:28:b8: 11:5a:c4:28:de:16:1d:f9:42:b8:c6:ca:7d:fe:f6: 44:99:b2:6b:5d:f7:e9:68:ee:97:86:1c:7c:0a:b2: 9e:29:36:70:09:4e:aa:0c:83:14:b4:02:fd:12:81: a0:70:65:57:0f:70:d5:bc:b2:04:78:bd:a5:09:d8: 01:ed:6d:9c:85:7e:56:57:6a:4c:ea:13:e0:a1:fd: 07:48:ec:f5:98:1d:1f:cd:0b:b9:d5:92:d1:04:37: 64:ef:3b:17:d2:94:72:6e:49:ae:4f:9b:55:1f:2c: bf:60:b8:f9:ed:a7:bb:10:53:20:3b:9a:ae:e4:80: 8f:78:34:80:1e:d9:50:0d:78:81:cb:bd:4b:e0:ff: 24:5b:2e:a5:f7:a0:02:01:54:29:39:13:f0:b9:1c: 10:24:f2:a2:5c:50:b6:ba:08:b5:8f:c6:93:c8:1c: 03:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:21:1A:6A:3B:63:69:1D:42:A2:E6:24:57:27:01:66:33:09:E4:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45f7f1d1-183b-37ea-9a61-9316ba3dae30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:5c:2c:7a:28:bb:ee:78:4b:41:dc:bc:e9:0a:61:a7:46:f8: e0:1a:49:05:57:fe:de:a2:25:2b:58:52:79:dd:9a:b6:3d:cc: 81:de:3e:21:a1:b3:26:4b:5d:63:d3:2c:b4:b3:57:f4:f9:21: ba:96:f2:20:31:a2:0d:19:89:ac:ae:77:26:29:10:03:5c:93: a7:23:62:0f:dd:41:8a:eb:f8:98:01:e1:f4:06:07:d3:91:a8: 15:2b:83:19:ee:ee:3e:f8:ed:d0:61:c1:79:db:be:8f:64:b8: 1c:fb:1e:3f:8d:89:e9:c5:ce:12:ab:ad:93:6a:f9:75:0a:88: f1:15:98:e4:65:53:4b:88:2a:36:64:82:0f:01:eb:b3:e7:8f: 84:e1:77:e4:f4:2a:2a:60:09:48:10:2f:3d:db:55:05:af:fb: 38:a5:59:a1:70:f2:ac:7e:94:d0:2d:0f:81:b8:20:be:0c:05: 74:76:06:d1:b3:15:cd:d6:dc:f4:8f:6c:ff:60:86:80:81:4b: ff:8d:b8:57:c0:a7:ed:5c:4b:78:84:fb:50:98:e4:a9:e3:48: e4:0f:26:79:f4:ce:db:6b:0c:eb:77:a8:11:cf:a2:23:54:15: fa:b2:73:d6:13:9d:dd:36:5b:0b:eb:bc:7c:96:7b:fc:5f:f4: de:eb:d7:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4KcAVDQ2nVd1tcYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk MmRjOTc4ZDktMTg1OC00NTA3LTg2NDQtY2YxODU3MDg5ZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4uEASKoJDSJ0ktEORTcswaGrrad3aUdxtgV 7+CN7Y4G8iyiHCHroKaPVFVxCRIWLRLrwBAzQAkcBHTgj6S9UG8Crm3eRmrqTh1/ rR3Uc4T0VuPhunPFKLgRWsQo3hYd+UK4xsp9/vZEmbJrXffpaO6Xhhx8CrKeKTZw CU6qDIMUtAL9EoGgcGVXD3DVvLIEeL2lCdgB7W2chX5WV2pM6hPgof0HSOz1mB0f zQu51ZLRBDdk7zsX0pRybkmuT5tVHyy/YLj57ae7EFMgO5qu5ICPeDSAHtlQDXiB y71L4P8kWy6l96ACAVQpORPwuRwQJPKiXFC2ugi1j8aTyBwD1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJohGmo7Y2kdQqLmJFcnAWYzCeQsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDVmN2YxZDEtMTgzYi0z N2VhLTlhNjEtOTMxNmJhM2RhZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9osMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNcLHoou+54S0HcvOkKYadG+OAaSQVX/t6iJStYUnndmrY9zIHePiGh syZLXWPTLLSzV/T5IbqW8iAxog0ZiayudyYpEANck6cjYg/dQYrr+JgB4fQGB9OR qBUrgxnu7j747dBhwXnbvo9kuBz7Hj+NienFzhKrrZNq+XUKiPEVmORlU0uIKjZk gg8B67Pnj4Thd+T0KipgCUgQLz3bVQWv+zilWaFw8qx+lNAtD4G4IL4MBXR2BtGz Fc3W3PSPbP9ghoCBS/+NuFfAp+1cS3iE+1CY5KnjSOQPJnn0zttrDOt3qBHPoiNU Ffqyc9YTnd02WwvrvHyWe/xf9N7r1zA= -----END CERTIFICATE-----Generated at Sat Jun 6 10:54:21 2026 by rpki-client