$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/653bd028-0607-38ae-a733-d6a6d1c52cd2.roa File: 653bd028-0607-38ae-a733-d6a6d1c52cd2.roa (raw, json) Hash identifier: eLdH7D+W3ztSsJ7btN0T7Kuy0of3Qk6o7tJRehzOTG0= Subject key identifier: 1B:6A:6D:A8:F0:7D:54:A1:7B:07:74:B3:DB:7B:CE:34:3C:FD:15:75 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DE9B0BAD1FC14C5E56AC388F8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/653bd028-0607-38ae-a733-d6a6d1c52cd2.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 20940 IP address blocks: 23.203.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:ba:d1:fc:14:c5:e5:6a:c3:88:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=a5c4115d-afc3-4362-9cb8-682ed61ab14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:18:88:18:5f:56:57:ee:39:9a:6f:03:79:a9: 8e:d7:2b:f9:e6:d7:0f:be:2b:4c:67:fa:91:9e:c8: 0b:63:bb:d5:21:eb:b3:f8:6c:c4:95:1f:8c:6c:ab: 79:49:5a:0c:0d:ce:f6:11:58:4a:98:14:10:e2:fa: a6:b3:9f:3e:54:39:9f:76:d5:24:3e:a4:67:03:df: aa:c4:20:87:4c:4c:87:04:c9:9d:37:8c:21:a4:14: 31:2c:38:a6:ad:5d:a0:92:a5:10:48:e4:77:13:1e: fd:a5:7f:cf:e8:ab:94:bc:c4:33:49:d1:8f:16:45: c2:6d:f1:6c:c6:f4:19:27:4d:27:7e:32:67:5b:f1: 43:bc:58:5d:7a:91:6c:71:e2:db:26:73:6f:c1:a8: 8f:c4:2b:a3:fd:fe:39:76:1e:c4:cc:97:86:f2:e4: 92:78:c6:c7:8c:de:cc:60:7d:74:72:30:4d:87:f8: 28:4c:ab:8f:62:02:27:56:cb:9a:52:8c:15:51:da: fa:da:af:35:05:4a:0f:5e:db:cd:be:96:43:6a:10: 03:22:9f:ed:d5:68:86:20:65:13:37:37:88:54:30: 71:5d:cf:fa:de:b3:3f:7f:eb:b3:71:61:2b:69:10: 7e:58:b1:2f:26:64:ee:56:00:c2:a0:bd:78:e9:21: a1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6A:6D:A8:F0:7D:54:A1:7B:07:74:B3:DB:7B:CE:34:3C:FD:15:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/653bd028-0607-38ae-a733-d6a6d1c52cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:39:81:2e:73:9f:ca:e1:1b:a2:71:bf:52:ec:9a:da:dd:cc: f1:39:c6:cc:21:5b:18:23:04:ad:21:15:38:32:ee:55:38:ef: e7:2b:e0:73:e6:6a:34:13:cc:1a:d8:5f:4b:f6:74:10:c1:50: bf:37:50:90:3a:48:81:83:50:67:33:f6:1c:c0:43:e0:97:0c: 34:6a:b6:e3:9d:54:73:d1:e7:3d:f5:32:7c:c6:2f:ee:35:d3: c4:e7:bb:f5:69:2c:89:aa:07:e8:0c:39:ac:cf:53:04:bf:9d: 00:31:89:81:1e:a6:c4:6b:07:36:c2:22:92:38:8a:b9:1d:18: 98:f8:d8:4c:23:78:9f:9e:63:9f:d9:68:08:6d:64:d7:2a:cd: 35:13:27:11:56:c8:42:0c:13:be:c9:57:08:0b:3b:97:4f:45: c6:75:a7:6a:c1:54:ab:e0:ae:3b:59:ac:5c:9e:96:15:15:b6: 28:88:12:ac:30:d8:7f:bb:8b:9d:d1:36:1b:92:05:d5:26:bb: 72:b9:33:3d:dc:d1:ea:80:1f:40:8a:2a:5b:9b:c9:93:40:ab: a8:72:7c:d4:e0:c4:f5:67:3e:da:72:73:b2:72:ee:62:76:db: 53:1a:da:02:10:3d:d3:2e:de:25:ff:3f:d9:dd:3a:5a:8e:47: 70:5e:b0:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psLrR/BTF5WrDiPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk YTVjNDExNWQtYWZjMy00MzYyLTljYjgtNjgyZWQ2MWFiMTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxiIGF9WV+45mm8DeamO1yv55tcPvitMZ/qR nsgLY7vVIeuz+GzElR+MbKt5SVoMDc72EVhKmBQQ4vqms58+VDmfdtUkPqRnA9+q xCCHTEyHBMmdN4whpBQxLDimrV2gkqUQSOR3Ex79pX/P6KuUvMQzSdGPFkXCbfFs xvQZJ00nfjJnW/FDvFhdepFsceLbJnNvwaiPxCuj/f45dh7EzJeG8uSSeMbHjN7M YH10cjBNh/goTKuPYgInVsuaUowVUdr62q81BUoPXtvNvpZDahADIp/t1WiGIGUT NzeIVDBxXc/63rM/f+uzcWEraRB+WLEvJmTuVgDCoL146SGhVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtqbajwfVShewd0s9t7zjQ8/RV1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjUzYmQwMjgtMDYwNy0z OGFlLWE3MzMtZDZhNmQxYzUyY2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8unMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABc5gS5zn8rhG6Jxv1LsmtrdzPE5xswhWxgjBK0hFTgy7lU47+cr4HPm ajQTzBrYX0v2dBDBUL83UJA6SIGDUGcz9hzAQ+CXDDRqtuOdVHPR5z31MnzGL+41 08Tnu/VpLImqB+gMOazPUwS/nQAxiYEepsRrBzbCIpI4irkdGJj42EwjeJ+eY5/Z aAhtZNcqzTUTJxFWyEIME77JVwgLO5dPRcZ1p2rBVKvgrjtZrFyelhUVtiiIEqww 2H+7i53RNhuSBdUmu3K5Mz3c0eqAH0CKKlubyZNAq6hyfNTgxPVnPtpyc7Jy7mJ2 21Ma2gIQPdMu3iX/P9ndOlqOR3BesFg= -----END CERTIFICATE-----Generated at Sat Jun 6 08:27:27 2026 by rpki-client