$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d35c797-3418-3e36-a422-97cda2977840.roa File: 4d35c797-3418-3e36-a422-97cda2977840.roa (raw, json) Hash identifier: 5QjDyRxxkfZ8X+3P1jmYmU+xvfvVZdYhXSHK5KZG9zo= Subject key identifier: 11:5F:61:4F:51:7D:71:3D:F6:DF:4F:B8:4F:57:74:C5:33:12:B4:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DE84B593A9533355B6BC7C670 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d35c797-3418-3e36-a422-97cda2977840.roa Signing time: Thu 21 May 2026 13:00:32 +0000 ROA not before: Thu 21 May 2026 13:00:32 +0000 ROA not after: Wed 19 Aug 2026 13:00:32 +0000 asID: 16625 IP address blocks: 23.200.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:4b:59:3a:95:33:35:5b:6b:c7:c6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 21 13:00:32 2026 GMT Not After : Aug 19 13:00:32 2026 GMT Subject: CN=518985e5-a87e-4cfd-8605-a86deb8f64cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e5:45:05:c5:8c:e4:2d:67:29:19:90:df:82: e4:da:bd:13:e2:f1:f3:2b:20:bd:d1:3d:c6:36:22: 8f:bb:bd:e7:a8:a4:48:8e:ed:a2:49:f0:84:1d:b1: ab:98:86:26:92:0a:c9:18:a5:c8:3a:65:93:46:47: 68:18:68:00:c4:00:f4:f6:19:7c:4c:33:0c:70:f6: 1c:56:34:30:dd:4b:34:5c:dc:34:5a:d5:d1:0c:f3: 51:25:5b:ff:a8:38:d4:1b:f6:07:26:82:7e:a9:7a: 63:eb:cd:86:e1:40:7b:7f:e7:a7:af:42:70:51:56: c0:15:35:7d:af:30:a7:db:b4:5c:1f:77:18:48:1d: 50:c1:2a:1c:ba:67:f4:bd:88:eb:95:9c:0d:f4:55: fb:85:ca:34:0e:29:9a:fd:1f:d7:38:08:8e:72:fd: b1:d5:14:f0:2d:c4:32:c8:de:bc:84:ea:ed:fa:f5: fa:93:a2:49:97:30:d7:96:09:b9:9c:dd:98:45:79: 5b:57:ad:f8:6f:c8:83:b7:2e:58:de:eb:5b:ab:bf: bd:41:57:bb:d8:04:ee:63:ea:04:63:00:06:f8:96: e7:4e:8a:5b:c9:a8:1a:38:3c:1f:c6:51:f2:f3:6a: 5c:dc:2a:94:22:17:68:54:7e:b8:12:7f:26:98:86: 0c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5F:61:4F:51:7D:71:3D:F6:DF:4F:B8:4F:57:74:C5:33:12:B4:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d35c797-3418-3e36-a422-97cda2977840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:3d:5c:fc:27:35:ac:5f:2e:36:55:d4:47:35:69:7d:f4:88: d5:33:79:aa:15:0b:57:04:4f:0c:98:ee:92:b2:49:aa:b9:bd: ea:93:d9:9b:68:c9:05:d0:fd:e4:2a:48:a2:68:e4:52:ee:16: cf:9c:d4:81:11:b1:cd:11:4b:c2:e1:57:4a:e3:15:7f:5e:07: df:06:db:99:2e:35:b9:49:07:7b:71:e4:39:a2:fd:8f:8a:31: 00:06:7e:8e:59:7a:e8:1a:28:e0:6f:25:0c:5b:40:42:89:12: f0:52:eb:6b:2e:5d:2d:3a:01:83:3a:4e:2e:e7:ac:a3:b2:4c: 42:dc:6e:84:76:5e:c3:c2:11:9b:00:e6:ce:ec:4c:14:14:44: 7e:41:21:50:bc:39:5c:64:7c:2d:1f:83:68:b5:23:f6:92:bc: 1b:6f:89:62:3b:38:61:53:2c:3c:ab:55:09:48:82:6e:df:ef: 5c:70:ee:07:43:9a:64:cf:2d:df:c6:0a:6e:e1:bf:a5:62:53: 16:88:44:f3:23:d5:7d:b4:85:b4:8e:07:f5:d6:2d:86:32:02: 41:76:41:6b:64:a1:2b:41:15:9b:ba:31:5a:d7:ef:e5:78:9f: d0:56:22:d3:29:6c:7c:58:b3:ad:d5:74:e1:d1:02:01:c9:6b: d0:30:98:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3oS1k6lTM1W2vHxnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk NTE4OTg1ZTUtYTg3ZS00Y2ZkLTg2MDUtYTg2ZGViOGY2NGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeVFBcWM5C1nKRmQ34Lk2r0T4vHzKyC90T3G NiKPu73nqKRIju2iSfCEHbGrmIYmkgrJGKXIOmWTRkdoGGgAxAD09hl8TDMMcPYc VjQw3Us0XNw0WtXRDPNRJVv/qDjUG/YHJoJ+qXpj682G4UB7f+enr0JwUVbAFTV9 rzCn27RcH3cYSB1QwSocumf0vYjrlZwN9FX7hco0Dima/R/XOAiOcv2x1RTwLcQy yN68hOrt+vX6k6JJlzDXlgm5nN2YRXlbV634b8iDty5Y3utbq7+9QVe72ATuY+oE YwAG+JbnTopbyagaODwfxlHy82pc3CqUIhdoVH64En8mmIYMNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFfYU9RfXE99t9PuE9XdMUzErRVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGQzNWM3OTctMzQxOC0z ZTM2LWE0MjItOTdjZGEyOTc3ODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF8ioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABo9XPwnNaxfLjZV1Ec1aX30iNUzeaoVC1cETwyY7pKySaq5veqT2Zto yQXQ/eQqSKJo5FLuFs+c1IERsc0RS8LhV0rjFX9eB98G25kuNblJB3tx5Dmi/Y+K MQAGfo5ZeugaKOBvJQxbQEKJEvBS62suXS06AYM6Ti7nrKOyTELcboR2XsPCEZsA 5s7sTBQURH5BIVC8OVxkfC0fg2i1I/aSvBtviWI7OGFTLDyrVQlIgm7f71xw7gdD mmTPLd/GCm7hv6ViUxaIRPMj1X20hbSOB/XWLYYyAkF2QWtkoStBFZu6MVrX7+V4 n9BWItMpbHxYs63VdOHRAgHJa9AwmCc= -----END CERTIFICATE-----Generated at Sat Jun 6 09:45:51 2026 by rpki-client