$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71ae3d76-bff5-341b-a97c-6814fc5b7dbe.roa File: 71ae3d76-bff5-341b-a97c-6814fc5b7dbe.roa (raw, json) Hash identifier: D7rfxU5dhjgVYntpqypoxHIUa1xp6zvmSQlJacmqhGw= Subject key identifier: BA:55:47:31:21:E3:DB:41:FD:C7:51:49:06:ED:F5:49:48:A8:25:07 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DD625C054DAE7533ABF592480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71ae3d76-bff5-341b-a97c-6814fc5b7dbe.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 16625 IP address blocks: 23.223.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:c0:54:da:e7:53:3a:bf:59:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=2afd0d6e-a3e4-4051-909b-7dbdcf07d1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1a:67:c4:ed:65:07:89:58:21:59:25:5d:49: 30:85:ed:43:ff:1e:d2:4e:d1:30:df:84:08:42:08: c4:7a:b6:28:37:49:72:13:a2:d4:a4:ba:12:91:3e: 92:f9:0c:11:b1:ea:2e:dc:06:dc:d0:94:f4:75:f2: 04:4e:6c:ab:27:96:e4:88:a7:44:74:d3:3e:cd:cf: 1d:ea:af:fb:ef:78:6c:f6:f2:85:4d:33:ae:69:7b: 6e:9a:b5:8d:0c:5b:bd:10:51:e6:ed:23:b5:69:02: a7:f3:c1:75:95:ad:10:81:72:72:8b:df:46:5c:9c: c8:71:55:8f:30:9c:20:01:48:5c:02:29:5b:6a:db: 8d:5b:2b:72:ea:6d:8f:d1:e7:2e:2d:c4:31:76:08: 19:34:7c:9c:3a:18:49:71:ae:95:07:00:e7:72:94: 33:bb:74:a0:a6:41:2f:9d:e1:76:1c:ad:e2:d6:3b: fb:20:78:7f:81:c8:70:fa:c7:db:8f:64:29:8d:4e: 1a:81:9e:86:b6:42:3b:7c:a2:17:38:8f:cb:e2:48: ed:54:0b:9c:a1:5b:7d:55:83:a3:03:ec:55:dc:6a: 21:83:4b:0c:74:fd:8d:dc:de:53:5b:e2:c9:c9:84: c2:9d:24:04:f7:60:51:3a:a6:7e:4a:ca:75:d9:e6: 3e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:55:47:31:21:E3:DB:41:FD:C7:51:49:06:ED:F5:49:48:A8:25:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71ae3d76-bff5-341b-a97c-6814fc5b7dbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:67:56:a5:7c:e7:36:2b:43:28:ab:32:58:af:cb:00:df:ca: 62:b2:c1:d8:4e:79:37:92:ea:f0:bc:d4:82:12:4d:89:99:95: e9:40:d2:0f:22:43:b0:97:8f:3d:5f:7e:7f:d2:d6:50:e7:27: f1:ae:2e:a9:91:c2:74:aa:fa:50:30:68:38:16:eb:50:5a:f6: a5:63:a8:8b:48:64:60:8c:f3:cc:71:96:40:3a:33:0b:5f:5e: f2:61:dd:14:a7:0a:90:04:80:10:6d:55:da:5a:ba:31:b0:b6: 8c:60:e7:49:13:f9:99:ac:71:17:10:1a:6c:58:f6:6b:ba:76: 1d:bb:2c:2e:59:bd:97:08:05:49:65:33:9b:16:ef:ad:9c:30: 8a:8a:ac:9d:6a:fa:48:42:69:ac:a4:79:00:fc:4f:7b:de:0e: 9a:86:5a:04:d9:78:cd:b4:e8:46:29:52:0a:44:5e:bc:5b:17: a3:d9:75:7f:69:c9:91:5d:97:63:55:d4:0f:01:0d:5f:63:81: 3e:cf:61:eb:95:7a:92:7b:10:3f:db:22:01:9f:b5:db:dd:81: 73:ca:d8:63:54:86:56:88:ce:2c:fe:31:84:a2:3c:97:3c:f6: 36:ea:7e:4b:4f:da:8a:09:32:74:1e:b5:8b:8d:26:c0:63:d4: fc:5a:e6:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WJcBU2udTOr9ZJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk MmFmZDBkNmUtYTNlNC00MDUxLTkwOWItN2RiZGNmMDdkMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hpnxO1lB4lYIVklXUkwhe1D/x7STtEw34QI QgjEerYoN0lyE6LUpLoSkT6S+QwRseou3Abc0JT0dfIETmyrJ5bkiKdEdNM+zc8d 6q/773hs9vKFTTOuaXtumrWNDFu9EFHm7SO1aQKn88F1la0QgXJyi99GXJzIcVWP MJwgAUhcAilbatuNWyty6m2P0ecuLcQxdggZNHycOhhJca6VBwDncpQzu3SgpkEv neF2HK3i1jv7IHh/gchw+sfbj2QpjU4agZ6GtkI7fKIXOI/L4kjtVAucoVt9VYOj A+xV3Gohg0sMdP2N3N5TW+LJyYTCnSQE92BROqZ+Ssp12eY+NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpVRzEh49tB/cdRSQbt9UlIqCUHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzFhZTNkNzYtYmZmNS0z NDFiLWE5N2MtNjgxNGZjNWI3ZGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVnVqV85zYrQyirMlivywDfymKywdhOeTeS6vC81IISTYmZlelA0g8i Q7CXjz1ffn/S1lDnJ/GuLqmRwnSq+lAwaDgW61Ba9qVjqItIZGCM88xxlkA6Mwtf XvJh3RSnCpAEgBBtVdpaujGwtoxg50kT+ZmscRcQGmxY9mu6dh27LC5ZvZcIBUll M5sW762cMIqKrJ1q+khCaaykeQD8T3veDpqGWgTZeM206EYpUgpEXrxbF6PZdX9p yZFdl2NV1A8BDV9jgT7PYeuVepJ7ED/bIgGftdvdgXPK2GNUhlaIziz+MYSiPJc8 9jbqfktP2ooJMnQetYuNJsBj1Pxa5g4= -----END CERTIFICATE-----Generated at Sat Jun 6 08:25:25 2026 by rpki-client