$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68d1382c-2880-3333-854c-fffec404a6d8.roa File: 68d1382c-2880-3333-854c-fffec404a6d8.roa (raw, json) Hash identifier: oVLA6KorGTgqVog4vfeRg4F4cZML/wmd9bVJZzeUwuI= Subject key identifier: B1:07:C4:78:1A:C7:B4:EF:67:E5:3F:CD:62:2F:81:0B:6F:75:6E:43 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DE9B0B4AF898E42AA3DC84480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68d1382c-2880-3333-854c-fffec404a6d8.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 16625 IP address blocks: 23.203.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:b4:af:89:8e:42:aa:3d:c8:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=85da8edc-d47f-457b-b033-6b19a8d7e67a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f1:9b:28:e3:4a:aa:57:93:6e:91:46:1d:07: 42:cd:ce:fb:97:00:8b:8a:23:3a:7c:a0:e0:53:17: fe:be:92:23:d8:35:35:7a:1b:83:6a:50:24:e2:ea: 49:c9:9a:78:75:5a:19:94:12:45:f8:e3:3d:de:56: 96:d9:a2:b3:95:af:fb:f2:69:66:66:20:01:95:7e: 7d:07:74:be:a3:15:23:a6:71:01:a6:ba:14:ce:d4: 0d:70:bc:da:81:5a:ed:66:e4:e9:70:19:04:02:34: 4b:bf:9a:95:03:ff:01:d7:06:71:1a:43:46:03:ee: 03:e3:bf:dd:26:b4:64:45:3f:65:19:9c:49:8b:f0: ac:ae:ce:0a:7d:26:5f:c8:63:27:d7:e0:00:f3:0b: c9:07:19:59:fb:5d:2f:20:31:5e:c0:c0:5a:a9:b1: 0a:df:65:eb:50:f9:7c:9f:2b:05:14:a8:40:94:8d: 77:ca:00:46:8e:b3:80:25:00:23:8e:37:7d:99:1a: c1:47:e4:20:ad:d2:09:62:a5:93:f6:51:c1:d7:3e: bc:3e:12:07:b6:b4:aa:35:1e:ac:57:57:ce:77:d8: eb:30:b7:63:53:dc:36:8f:c4:97:cb:4b:33:d0:87: 9b:2e:fe:cb:80:f0:72:e0:ba:c6:56:d0:b4:9e:08: ef:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:07:C4:78:1A:C7:B4:EF:67:E5:3F:CD:62:2F:81:0B:6F:75:6E:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68d1382c-2880-3333-854c-fffec404a6d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:f6:46:0f:d7:7f:b5:48:b3:c8:66:27:3d:a4:47:96:12:11: bd:36:52:6e:9b:5d:4a:57:22:53:67:d5:b4:20:1a:b6:54:5b: 1d:ba:85:1c:cf:50:bc:63:70:4e:51:da:12:68:09:c0:34:f7: 6d:a3:13:cc:6b:50:7c:e5:36:19:9f:d6:0d:a2:46:b0:77:95: 3f:8d:d9:31:99:97:b5:01:ac:25:c4:fe:74:89:d0:d4:e0:ed: a1:1d:92:79:ae:ae:75:78:12:0b:28:dc:3e:eb:bc:1e:4f:18: 76:e5:35:32:61:97:88:7d:4b:a2:c3:f1:17:92:7d:a3:a9:88: be:94:8c:b8:ab:b7:a7:d8:91:ca:f7:ab:3b:4f:db:fd:c8:b1: 59:7f:fe:47:b0:6c:9c:f6:e6:73:20:21:2b:13:a7:19:0b:10: e0:db:db:a2:9c:b2:63:5e:85:34:91:60:8d:6b:3a:1a:3d:eb: c1:96:fd:11:09:b4:8f:12:37:21:9a:fc:cb:b1:d9:22:32:f2: 91:6c:3f:d5:aa:a3:2f:31:e9:4d:c7:65:77:83:8d:6b:55:9a: cf:46:a1:9d:f6:54:6c:27:37:8f:a8:13:f5:14:be:ce:82:7e: 01:ce:5f:6b:eb:3c:be:9b:05:b9:0a:3c:82:fc:92:fe:f9:0f: 45:54:28:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psLSviY5Cqj3IRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk ODVkYThlZGMtZDQ3Zi00NTdiLWIwMzMtNmIxOWE4ZDdlNjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/GbKONKqleTbpFGHQdCzc77lwCLiiM6fKDg Uxf+vpIj2DU1ehuDalAk4upJyZp4dVoZlBJF+OM93laW2aKzla/78mlmZiABlX59 B3S+oxUjpnEBproUztQNcLzagVrtZuTpcBkEAjRLv5qVA/8B1wZxGkNGA+4D47/d JrRkRT9lGZxJi/Csrs4KfSZfyGMn1+AA8wvJBxlZ+10vIDFewMBaqbEK32XrUPl8 nysFFKhAlI13ygBGjrOAJQAjjjd9mRrBR+QgrdIJYqWT9lHB1z68PhIHtrSqNR6s V1fOd9jrMLdjU9w2j8SXy0sz0IebLv7LgPBy4LrGVtC0ngjvSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEHxHgax7TvZ+U/zWIvgQtvdW5DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjhkMTM4MmMtMjg4MC0z MzMzLTg1NGMtZmZmZWM0MDRhNmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8v0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADv2Rg/Xf7VIs8hmJz2kR5YSEb02Um6bXUpXIlNn1bQgGrZUWx26hRzP ULxjcE5R2hJoCcA0922jE8xrUHzlNhmf1g2iRrB3lT+N2TGZl7UBrCXE/nSJ0NTg 7aEdknmurnV4Egso3D7rvB5PGHblNTJhl4h9S6LD8ReSfaOpiL6UjLirt6fYkcr3 qztP2/3IsVl//kewbJz25nMgISsTpxkLEODb26KcsmNehTSRYI1rOho968GW/REJ tI8SNyGa/Mux2SIy8pFsP9Wqoy8x6U3HZXeDjWtVms9GoZ32VGwnN4+oE/UUvs6C fgHOX2vrPL6bBbkKPIL8kv75D0VUKEg= -----END CERTIFICATE-----Generated at Sat Jun 6 09:45:48 2026 by rpki-client