$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60cc6a95-a267-3f71-9e63-ff9aa554d322.roa File: 60cc6a95-a267-3f71-9e63-ff9aa554d322.roa (raw, json) Hash identifier: 2oG4Wdyt+THXQe2D6KRUhVO+d6TaK7n+QJfBprJXIfI= Subject key identifier: ED:E1:92:7B:12:B4:E0:AC:A9:4F:92:F0:5E:30:42:FA:06:61:84:3F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DFBD5F0C6A351375DDA719880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60cc6a95-a267-3f71-9e63-ff9aa554d322.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 20940 IP address blocks: 23.209.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:f0:c6:a3:51:37:5d:da:71:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=ceb9767d-ee71-42e3-aee1-755a3c342340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:01:c6:94:ad:75:91:ec:ce:7b:98:5f:80: c4:59:c1:19:c9:bb:67:a1:12:21:49:d6:93:00:0b: bc:2b:ed:fb:2f:2f:fc:3f:43:81:9f:37:42:1f:44: 53:88:cf:f5:09:f2:8c:18:3c:87:44:df:79:88:13: ab:ef:e2:5b:e5:d0:09:ba:8e:16:be:05:8c:7d:da: d0:68:9d:7b:0c:34:5d:32:71:6b:ce:3d:ec:03:19: a8:0b:da:7d:84:19:65:99:5d:10:42:e9:4e:a1:7b: 38:dd:47:57:cc:77:28:e0:fa:08:88:ad:ff:d6:77: 23:4c:04:e8:a4:19:04:71:f4:84:09:41:21:ef:a6: 56:44:c5:a0:db:83:c3:6d:f2:a8:0c:16:e9:61:39: e5:9a:7c:98:f7:48:3d:b7:d9:b9:62:4f:ad:9e:af: 99:b5:d7:ed:66:cb:91:91:1b:30:e7:4d:a7:5c:96: f0:59:28:43:d1:d1:81:e0:8e:87:be:4b:e3:38:60: 71:b8:58:46:fe:bf:79:65:91:9a:8c:92:f7:40:b6: 0c:b5:e3:49:f5:5f:46:a6:55:bd:20:39:63:f8:34: 56:e5:e3:23:c8:46:c0:19:7c:2a:43:5b:b4:75:20: 74:2d:f2:d6:fc:1d:3e:ef:74:98:07:99:0b:43:65: 26:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E1:92:7B:12:B4:E0:AC:A9:4F:92:F0:5E:30:42:FA:06:61:84:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60cc6a95-a267-3f71-9e63-ff9aa554d322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:47:eb:c1:e7:77:09:71:1b:f7:8e:21:b2:28:d8:6d:ac:ac: 1e:d3:a1:14:31:ad:a4:22:c8:4b:b0:d7:9d:45:55:55:ca:6d: 58:b5:42:73:0f:6c:94:f7:41:bf:3a:5f:91:55:b9:f5:7d:87: 3e:61:e8:76:4f:39:68:11:30:49:36:0c:1f:29:92:72:6c:bc: 6f:57:8e:83:17:cb:78:70:ce:6e:a2:f8:30:af:01:37:2b:4d: 91:a4:4a:81:53:51:7f:d0:65:73:9e:f1:6f:3e:e7:46:55:75: e2:34:fa:a7:e6:85:1d:4a:cb:72:74:a5:66:bf:25:55:ac:fd: b0:80:50:48:43:18:fc:0e:3f:ff:b1:7a:e7:1f:6b:1b:46:b9: 17:8b:41:0d:b6:7e:07:b9:df:21:23:eb:90:38:d7:7a:c6:d3: 69:93:64:1e:6c:2c:82:1a:ef:5f:d8:fe:c1:ad:6b:39:94:d0: ea:91:82:90:7c:7c:54:03:94:22:54:66:be:5f:9e:0b:19:0a: 80:c5:2e:16:06:ad:2f:91:4e:ea:f1:f9:ad:17:a4:f2:19:4e: 03:8c:2d:f0:6d:7b:9c:06:3e:e4:14:8a:be:0a:5c:ba:03:39: af:ea:a5:f7:f1:18:e9:0e:06:4d:36:c9:fd:b1:1d:69:50:02: 13:19:89:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371fDGo1E3XdpxmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk Y2ViOTc2N2QtZWU3MS00MmUzLWFlZTEtNzU1YTNjMzQyMzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM0BxpStdZHsznuYX4DEWcEZybtnoRIhSdaT AAu8K+37Ly/8P0OBnzdCH0RTiM/1CfKMGDyHRN95iBOr7+Jb5dAJuo4WvgWMfdrQ aJ17DDRdMnFrzj3sAxmoC9p9hBllmV0QQulOoXs43UdXzHco4PoIiK3/1ncjTATo pBkEcfSECUEh76ZWRMWg24PDbfKoDBbpYTnlmnyY90g9t9m5Yk+tnq+ZtdftZsuR kRsw502nXJbwWShD0dGB4I6HvkvjOGBxuFhG/r95ZZGajJL3QLYMteNJ9V9GplW9 IDlj+DRW5eMjyEbAGXwqQ1u0dSB0LfLW/B0+73SYB5kLQ2UmewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3hknsStOCsqU+S8F4wQvoGYYQ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjBjYzZhOTUtYTI2Ny0z ZjcxLTllNjMtZmY5YWE1NTRkMzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5H68HndwlxG/eOIbIo2G2srB7ToRQxraQiyEuw151FVVXKbVi1QnMP bJT3Qb86X5FVufV9hz5h6HZPOWgRMEk2DB8pknJsvG9XjoMXy3hwzm6i+DCvATcr TZGkSoFTUX/QZXOe8W8+50ZVdeI0+qfmhR1Ky3J0pWa/JVWs/bCAUEhDGPwOP/+x eucfaxtGuReLQQ22fge53yEj65A413rG02mTZB5sLIIa71/Y/sGtazmU0OqRgpB8 fFQDlCJUZr5fngsZCoDFLhYGrS+RTurx+a0XpPIZTgOMLfBte5wGPuQUir4KXLoD Oa/qpffxGOkOBk02yf2xHWlQAhMZiZ0= -----END CERTIFICATE-----Generated at Sat Jun 6 09:41:59 2026 by rpki-client