$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ed67593-fa65-3739-a150-c4e7d7014968.roa File: 5ed67593-fa65-3739-a150-c4e7d7014968.roa (raw, json) Hash identifier: e6QmuKjwhbhoXGD2FOGu/wPOcXt4/OkueJRRBs/oXwM= Subject key identifier: EA:B0:03:7E:27:D3:D7:23:B1:E1:37:85:01:37:C5:9F:A8:49:5A:CC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DE41B47FC38AF7B4EB3120D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ed67593-fa65-3739-a150-c4e7d7014968.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 20940 IP address blocks: 23.196.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:47:fc:38:af:7b:4e:b3:12:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=a273888f-a0ce-4ae8-beb3-a7820dec5d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0a:24:db:c8:77:34:39:49:6d:91:6b:90:e2: 71:c8:72:17:86:40:58:53:9a:ba:36:13:cd:49:f8: 4f:ca:ca:98:99:e2:b7:78:b2:6b:47:00:a4:50:ca: c3:d5:82:b4:4a:b3:dc:05:61:f3:50:83:42:1f:ed: 7b:11:a4:76:33:26:ea:3a:76:f6:54:24:47:43:f5: 0c:89:88:eb:55:b3:86:76:76:b4:da:9e:3d:0c:7a: c0:fb:3d:50:f6:6e:e1:69:63:2b:01:6e:c4:bc:e9: a0:20:99:a9:0c:f8:90:9a:44:4e:f0:2e:61:51:5b: f6:63:16:1c:97:03:46:0e:c0:ca:78:d2:ce:3e:75: d8:a2:50:bf:8a:f6:5f:6e:9b:15:86:24:ba:b8:a2: 1b:84:e5:93:be:50:55:8b:26:fc:ea:ce:08:ec:9b: b4:f8:7b:27:b7:61:8a:5d:a3:e9:c8:f9:ba:2a:00: c6:85:81:05:5f:de:09:2b:9d:8e:29:a3:c6:43:3a: fe:30:4c:f4:ba:fd:4b:dc:df:53:e1:fd:86:7f:98: 44:6f:3f:00:22:52:69:5f:35:b2:85:84:30:46:83: 09:c8:81:3e:19:3f:5d:1f:0b:5c:5d:4c:e4:31:d7: e1:9e:46:9e:3e:92:3b:b7:51:53:4f:d8:34:3b:6b: 92:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B0:03:7E:27:D3:D7:23:B1:E1:37:85:01:37:C5:9F:A8:49:5A:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ed67593-fa65-3739-a150-c4e7d7014968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:44:df:00:df:60:89:30:63:68:00:d0:15:06:fa:ec:72:cd: aa:ec:d2:2b:d3:30:57:56:09:ef:07:f5:fe:d7:48:f8:02:6b: 2d:57:1e:cb:cd:4e:3a:c4:99:36:00:dd:bc:fc:0f:6b:2a:b3: d6:51:f0:5b:14:ba:67:71:44:c0:54:16:14:f9:df:29:91:19: 16:b0:32:32:b7:39:f4:26:f3:a6:4b:2d:4d:57:80:d8:19:5a: 81:b1:31:65:a6:15:ab:64:b5:ee:4b:9a:21:ff:e7:38:32:19: 76:36:68:f1:86:0d:e5:1a:84:ed:72:38:ed:5f:eb:4b:ed:50: e6:e6:2a:0e:da:1b:6a:23:45:ed:92:32:73:71:d8:a2:a2:0b: 45:41:d2:bc:91:c6:86:c6:1a:2a:0f:14:b9:fa:7f:84:0e:7e: 32:2e:65:6e:b4:82:d8:be:fa:1e:db:05:12:83:16:63:16:90: 18:b6:33:3b:88:aa:d1:0c:b7:61:16:9f:d0:5c:5a:93:1a:24: 7e:74:c9:b5:bd:8b:5f:ec:db:01:b3:ea:76:88:72:24:db:9e: 94:33:ee:03:7d:ca:a3:a4:97:5c:3f:5a:6d:cd:24:d9:f9:c2: 9b:d3:d6:77:96:60:38:74:fa:4c:4c:1f:31:a8:ed:eb:44:a8: 5f:56:21:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG0f8OK97TrMSDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk YTI3Mzg4OGYtYTBjZS00YWU4LWJlYjMtYTc4MjBkZWM1ZDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgok28h3NDlJbZFrkOJxyHIXhkBYU5q6NhPN SfhPysqYmeK3eLJrRwCkUMrD1YK0SrPcBWHzUINCH+17EaR2MybqOnb2VCRHQ/UM iYjrVbOGdna02p49DHrA+z1Q9m7haWMrAW7EvOmgIJmpDPiQmkRO8C5hUVv2YxYc lwNGDsDKeNLOPnXYolC/ivZfbpsVhiS6uKIbhOWTvlBViyb86s4I7Ju0+Hsnt2GK XaPpyPm6KgDGhYEFX94JK52OKaPGQzr+MEz0uv1L3N9T4f2Gf5hEbz8AIlJpXzWy hYQwRoMJyIE+GT9dHwtcXUzkMdfhnkaePpI7t1FTT9g0O2uSXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqwA34n09cjseE3hQE3xZ+oSVrMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWVkNjc1OTMtZmE2NS0z NzM5LWExNTAtYzRlN2Q3MDE0OTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8TtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFE3wDfYIkwY2gA0BUG+uxyzars0ivTMFdWCe8H9f7XSPgCay1XHsvN TjrEmTYA3bz8D2sqs9ZR8FsUumdxRMBUFhT53ymRGRawMjK3OfQm86ZLLU1XgNgZ WoGxMWWmFatkte5LmiH/5zgyGXY2aPGGDeUahO1yOO1f60vtUObmKg7aG2ojRe2S MnNx2KKiC0VB0ryRxobGGioPFLn6f4QOfjIuZW60gti++h7bBRKDFmMWkBi2MzuI qtEMt2EWn9BcWpMaJH50ybW9i1/s2wGz6naIciTbnpQz7gN9yqOkl1w/Wm3NJNn5 wpvT1neWYDh0+kxMHzGo7etEqF9WIWQ= -----END CERTIFICATE-----Generated at Sat Jun 6 09:43:35 2026 by rpki-client