$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6397bff5-0b62-3783-ac88-9b29b5b17c04.roa File: 6397bff5-0b62-3783-ac88-9b29b5b17c04.roa (raw, json) Hash identifier: BdtfyGR3LUGsAsqUSA526M2xtSRGGNjMQN5ht9G0mUo= Subject key identifier: 4F:E3:74:0D:5F:8B:8F:BE:51:FD:95:37:AC:ED:CF:21:DA:AF:C9:84 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DFBD5F5B413B99CDDAFAE3600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6397bff5-0b62-3783-ac88-9b29b5b17c04.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 20940 IP address blocks: 23.212.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:f5:b4:13:b9:9c:dd:af:ae:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=3d1e2c24-e4cd-419b-ac36-8f7003acd0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:69:8b:3f:2d:1b:d1:de:95:31:40:39:e7:1b: 35:d5:6e:06:ca:ec:7d:fd:36:38:96:58:ff:9c:a0: de:77:dd:5f:7c:85:70:9a:ee:1c:e6:c6:7f:54:4a: 59:05:24:47:1d:23:22:c4:28:7e:0c:98:21:b5:d0: d6:2d:9a:ac:f3:75:86:8b:60:cc:db:57:47:9d:98: 6e:a7:46:29:44:2b:e3:06:00:59:aa:d8:e3:d8:53: cf:1f:b5:88:eb:b7:db:10:55:45:c6:c4:24:32:31: 9e:bc:f5:74:47:c5:39:cc:5e:ca:a1:6b:d7:cf:15: 61:9d:63:db:54:ab:c2:a7:80:ac:98:06:c6:6d:66: 01:81:b1:e6:8f:0f:91:70:df:50:f4:fe:fc:72:e3: 11:fd:bb:3f:ab:27:5f:e0:40:17:47:65:ae:01:dd: ca:56:1c:42:82:bd:44:86:78:11:02:40:f4:19:88: 92:85:ef:96:59:a6:c3:8e:ab:49:7c:10:0e:65:16: 16:f4:0b:65:2b:33:5f:07:2c:bd:8a:7f:83:3e:08: 6a:46:17:67:fe:6b:25:e5:1e:b1:a2:08:23:48:b2: c1:70:31:f8:6a:f3:8b:3a:ac:03:09:93:1d:78:64: 2d:a5:d3:6c:a9:e9:29:a5:55:51:bf:8b:cf:34:4b: e8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E3:74:0D:5F:8B:8F:BE:51:FD:95:37:AC:ED:CF:21:DA:AF:C9:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6397bff5-0b62-3783-ac88-9b29b5b17c04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:de:84:5c:0f:c1:4f:9b:48:0b:74:a3:c9:8a:76:08:ed:67: b0:66:48:3b:bb:d5:2c:93:89:6c:4d:c1:3f:bd:43:cd:f4:f0: ee:10:91:93:80:57:6c:7e:30:aa:4c:82:68:21:3d:4e:ba:23: 8f:1e:36:df:12:a3:51:d3:28:79:97:f4:33:62:ab:a4:59:a9: e7:fc:f7:50:fb:99:48:e6:3d:7a:d2:48:a3:a0:7d:18:51:d3: 41:d6:4e:6a:9a:0a:b5:af:bb:1c:7e:2b:bb:bf:11:1e:ce:44: de:a3:1c:15:45:c6:83:3c:4f:dd:41:50:0d:3f:f6:ce:f1:2e: 14:17:34:d5:66:0d:54:9c:63:78:bb:c9:87:4c:d8:77:b2:35: 49:eb:42:a2:56:83:d3:ae:88:81:cc:a1:54:e1:69:89:0c:1a: b6:77:4b:4b:22:7a:e1:41:10:4c:7e:17:20:9e:32:f3:18:e1: 06:69:0a:e8:ae:77:4c:74:37:97:f5:13:e0:24:00:b5:a0:89: f0:48:6c:3e:fe:3a:4c:46:c1:c6:1e:dc:4f:00:24:bf:9b:35: 48:ee:ec:ab:3a:47:99:b5:de:ef:2b:61:d3:3b:a8:93:1d:18: 18:1c:25:d5:19:86:c0:43:09:91:33:80:2e:5e:fa:1f:03:27: 71:55:dd:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371fW0E7mc3a+uNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk M2QxZTJjMjQtZTRjZC00MTliLWFjMzYtOGY3MDAzYWNkMGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+2mLPy0b0d6VMUA55xs11W4Gyux9/TY4llj/ nKDed91ffIVwmu4c5sZ/VEpZBSRHHSMixCh+DJghtdDWLZqs83WGi2DM21dHnZhu p0YpRCvjBgBZqtjj2FPPH7WI67fbEFVFxsQkMjGevPV0R8U5zF7KoWvXzxVhnWPb VKvCp4CsmAbGbWYBgbHmjw+RcN9Q9P78cuMR/bs/qydf4EAXR2WuAd3KVhxCgr1E hngRAkD0GYiShe+WWabDjqtJfBAOZRYW9AtlKzNfByy9in+DPghqRhdn/msl5R6x oggjSLLBcDH4avOLOqwDCZMdeGQtpdNsqekppVVRv4vPNEvoJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/jdA1fi4++Uf2VN6ztzyHar8mEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjM5N2JmZjUtMGI2Mi0z NzgzLWFjODgtOWIyOWI1YjE3YzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9T4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDehFwPwU+bSAt0o8mKdgjtZ7BmSDu71SyTiWxNwT+9Q8308O4QkZOA V2x+MKpMgmghPU66I48eNt8So1HTKHmX9DNiq6RZqef891D7mUjmPXrSSKOgfRhR 00HWTmqaCrWvuxx+K7u/ER7ORN6jHBVFxoM8T91BUA0/9s7xLhQXNNVmDVScY3i7 yYdM2HeyNUnrQqJWg9OuiIHMoVThaYkMGrZ3S0sieuFBEEx+FyCeMvMY4QZpCuiu d0x0N5f1E+AkALWgifBIbD7+OkxGwcYe3E8AJL+bNUju7Ks6R5m13u8rYdM7qJMd GBgcJdUZhsBDCZEzgC5e+h8DJ3FV3Vo= -----END CERTIFICATE-----Generated at Sat Jun 6 11:14:25 2026 by rpki-client