$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66587dfe-a159-348d-be4a-3b8e7a89a9da.roa File: 66587dfe-a159-348d-be4a-3b8e7a89a9da.roa (raw, json) Hash identifier: DwG6jw6hTvCjRy/0qrev0ddi3rVArK5qRrS8B9OTpaE= Subject key identifier: CB:67:C4:AC:D6:E6:BE:75:E5:9D:1D:C3:1D:95:15:33:03:5E:FF:2D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DF210ACCF1053F23E22467880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66587dfe-a159-348d-be4a-3b8e7a89a9da.roa Signing time: Mon 25 May 2026 01:00:24 +0000 ROA not before: Mon 25 May 2026 01:00:24 +0000 ROA not after: Sun 23 Aug 2026 01:00:24 +0000 asID: 20940 IP address blocks: 23.211.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:10:ac:cf:10:53:f2:3e:22:46:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 25 01:00:24 2026 GMT Not After : Aug 23 01:00:24 2026 GMT Subject: CN=3caac138-52a0-429d-8f12-861723c82b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:66:08:21:d9:ef:63:04:f0:e6:a7:07:61:b3: 64:4a:07:b2:7b:d2:0e:2f:36:e9:cc:73:d0:25:79: 61:52:c2:ed:49:9c:04:cb:03:6c:80:5d:02:66:f5: 18:3f:86:b0:a7:6d:96:a8:b0:39:15:1c:df:54:04: ca:09:d6:e2:2f:b5:fb:f2:1b:aa:25:27:da:39:5f: c4:66:7d:e5:0a:3f:c4:58:ac:87:79:97:2b:42:64: c8:dc:53:d0:1e:b8:6f:cf:92:2b:cd:37:f9:8b:de: d4:d8:64:3f:83:67:21:30:bd:09:44:35:b3:12:47: b0:ab:3a:f0:82:3a:cc:bf:63:7d:9e:c3:3b:f1:ac: 1b:6f:d4:df:bd:4a:b6:0c:aa:8b:4f:9c:b7:10:5f: 09:08:e6:37:78:5b:4f:73:43:2a:3c:08:41:7b:f0: 0e:b8:ac:20:a9:da:ea:6e:78:45:e4:cc:95:0e:c6: 84:a9:3e:28:8e:e5:70:8a:7f:f1:57:50:13:98:43: 3a:7f:31:fb:0c:66:7b:06:05:9e:8e:ee:1a:5b:92: c6:8f:ee:e3:05:9f:59:4a:05:7a:38:04:ec:b6:91: 0b:b4:81:92:43:43:d9:74:70:9c:68:15:96:71:fe: 61:0c:80:07:f3:51:cb:1e:29:ed:99:87:fc:be:7c: 09:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:67:C4:AC:D6:E6:BE:75:E5:9D:1D:C3:1D:95:15:33:03:5E:FF:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66587dfe-a159-348d-be4a-3b8e7a89a9da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:56:86:d3:00:25:c6:a5:4f:81:b7:d5:f8:8a:c9:7d:f7:dd: 2c:a4:b3:5a:33:68:ca:68:1b:c9:b2:af:5f:3c:02:f1:df:5c: 8c:32:7c:46:4a:ed:f3:1d:67:5c:28:a4:58:a5:fc:d3:cb:fe: 15:06:54:e8:4b:33:b3:2b:c8:20:92:71:ad:03:b8:c3:7e:c8: 47:fa:63:6f:d4:a3:59:fb:b3:00:bc:d8:37:1a:ca:e4:96:6e: a8:8d:ca:2f:30:74:ee:cf:04:73:1c:87:37:fb:2e:19:d7:0f: 52:71:19:0e:a5:c1:5e:c6:d7:a7:37:f6:90:c0:31:95:a9:a7: a3:fe:7d:b5:89:43:47:ac:bf:9d:fd:76:81:0f:b4:24:1b:bd: d0:dd:e9:e7:98:4c:09:75:7b:a7:48:7f:69:db:da:18:ab:f3: e6:ac:9a:df:a2:27:02:a6:bd:d4:91:81:5c:c5:cf:c3:91:d4: a1:44:d6:56:8b:08:2d:6d:01:0d:51:25:22:25:9c:44:90:17: 1d:e8:f6:6b:e4:80:a8:67:0a:19:16:9c:09:58:ea:cb:24:65: c9:c0:9c:78:d8:0c:ce:be:d5:22:95:e7:b5:19:98:b4:77:69: 07:9e:c4:80:53:b6:39:2c:4a:83:78:1b:c8:d5:e3:aa:42:16: b6:bf:39:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yEKzPEFPyPiJGeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk M2NhYWMxMzgtNTJhMC00MjlkLThmMTItODYxNzIzYzgyYjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GYIIdnvYwTw5qcHYbNkSgeye9IOLzbpzHPQ JXlhUsLtSZwEywNsgF0CZvUYP4awp22WqLA5FRzfVATKCdbiL7X78huqJSfaOV/E Zn3lCj/EWKyHeZcrQmTI3FPQHrhvz5IrzTf5i97U2GQ/g2chML0JRDWzEkewqzrw gjrMv2N9nsM78awbb9TfvUq2DKqLT5y3EF8JCOY3eFtPc0MqPAhBe/AOuKwgqdrq bnhF5MyVDsaEqT4ojuVwin/xV1ATmEM6fzH7DGZ7BgWeju4aW5LGj+7jBZ9ZSgV6 OATstpELtIGSQ0PZdHCcaBWWcf5hDIAH81HLHintmYf8vnwJEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtnxKzW5r515Z0dwx2VFTMDXv8tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjY1ODdkZmUtYTE1OS0z NDhkLWJlNGEtM2I4ZTdhODlhOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9P/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpWhtMAJcalT4G31fiKyX333Syks1ozaMpoG8myr188AvHfXIwyfEZK 7fMdZ1wopFil/NPL/hUGVOhLM7MryCCSca0DuMN+yEf6Y2/Uo1n7swC82DcayuSW bqiNyi8wdO7PBHMchzf7LhnXD1JxGQ6lwV7G16c39pDAMZWpp6P+fbWJQ0esv539 doEPtCQbvdDd6eeYTAl1e6dIf2nb2hir8+asmt+iJwKmvdSRgVzFz8OR1KFE1laL CC1tAQ1RJSIlnESQFx3o9mvkgKhnChkWnAlY6sskZcnAnHjYDM6+1SKV57UZmLR3 aQeexIBTtjksSoN4G8jV46pCFra/OZc= -----END CERTIFICATE-----Generated at Sat Jun 6 08:24:10 2026 by rpki-client