$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/731fc2ee-480b-3e64-8ef1-4301fe4dd333.roa File: 731fc2ee-480b-3e64-8ef1-4301fe4dd333.roa (raw, json) Hash identifier: Y0C0E7x74DJ8N+duCSymyAPZTSrCVFoB8Ju609uOSzY= Subject key identifier: 7A:A2:11:00:D8:6F:17:65:19:4C:D4:44:0F:87:52:9D:9C:EE:DA:07 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DD35B189E34EE5BF9D4321080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/731fc2ee-480b-3e64-8ef1-4301fe4dd333.roa Signing time: Thu 14 May 2026 01:00:25 +0000 ROA not before: Thu 14 May 2026 01:00:25 +0000 ROA not after: Wed 12 Aug 2026 01:00:25 +0000 asID: 20940 IP address blocks: 23.209.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:5b:18:9e:34:ee:5b:f9:d4:32:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 14 01:00:25 2026 GMT Not After : Aug 12 01:00:25 2026 GMT Subject: CN=cd359872-441a-4bd5-b591-8822e2695e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c5:ee:8d:f7:9d:bf:71:63:79:c0:7d:f5:67: a8:a6:8a:e8:2a:15:8a:65:be:df:9c:aa:e6:82:b2: ad:e9:56:d9:8b:05:24:e6:8d:fe:ae:44:d6:15:34: 42:3b:b1:a1:9e:6b:c1:09:09:2f:d8:8d:7a:3a:a2: 4b:fa:35:e1:e4:8f:d1:55:64:82:c0:13:18:5e:0f: 82:65:53:db:b7:52:2f:1e:cd:93:03:3a:86:fd:3d: f6:9f:9f:f9:69:1c:cd:17:68:dc:25:ef:7e:1b:60: 3c:9d:43:b7:e6:41:a6:cb:80:29:ff:14:94:94:9c: 91:63:ea:f3:95:48:52:03:c7:13:fd:92:ef:db:aa: 02:4e:0f:bf:44:9d:4f:a7:fd:00:47:14:61:8c:7f: 93:6c:b4:05:99:1e:d8:5d:ba:8c:64:e3:eb:bc:0d: 5b:1c:10:b6:51:22:9f:ee:52:4e:73:0d:ad:1a:77: af:44:e2:95:e8:09:f7:79:fe:98:94:91:22:91:3c: df:1a:d4:a0:d2:2e:79:94:5d:5b:9f:8e:09:c7:05: a7:18:75:bc:59:53:d3:7b:73:0d:94:a5:a8:2d:13: 61:07:af:93:f0:2f:eb:1c:d8:f0:d1:79:f7:d9:28: 5b:eb:6d:0d:f2:ae:fe:46:52:27:7b:46:38:44:35: 7c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A2:11:00:D8:6F:17:65:19:4C:D4:44:0F:87:52:9D:9C:EE:DA:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/731fc2ee-480b-3e64-8ef1-4301fe4dd333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:b3:2e:42:c2:09:49:12:42:6f:b7:21:2a:8b:d4:5e:bf:88: de:a2:35:01:58:3f:69:15:b6:7f:58:f3:ba:79:bd:85:cc:b7: 3e:db:16:c9:ea:5c:d7:67:49:de:f6:f5:2d:82:32:e9:5c:fd: b5:c6:5e:51:4c:67:ac:35:64:db:72:2b:05:20:f7:f3:cd:48: 98:f4:00:e7:3c:82:35:7f:36:c1:8e:63:28:c2:22:f7:5c:09: 79:48:50:10:bf:c6:2e:73:61:c4:70:5e:40:b3:ba:44:2b:7c: 50:2d:13:57:e5:f6:3d:dd:4a:c2:32:4e:eb:ce:bd:86:4f:5e: ca:35:b4:38:d7:8b:54:d0:f9:11:e8:f2:fa:0f:6d:1c:58:21: bd:f1:08:ac:0c:a1:f7:56:ad:a8:53:62:ea:9c:25:50:dd:a6: ab:3d:56:6f:14:94:19:3e:9c:e9:2f:7c:ce:3d:6e:d5:b8:db: cf:c1:ee:97:d2:33:cc:7e:55:df:61:51:b9:50:5a:96:4e:78: 6b:12:50:a3:c5:78:4f:8b:e6:ae:cb:6f:97:9f:99:23:3a:31: 18:82:29:ad:77:6b:fe:37:df:54:c5:48:82:7f:32:53:5a:ad: b6:10:88:74:29:7b:c9:d5:ad:a6:83:27:cf:be:5d:05:82:d4: 08:3d:3b:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3TWxieNO5b+dQyEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk Y2QzNTk4NzItNDQxYS00YmQ1LWI1OTEtODgyMmUyNjk1ZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8Xujfedv3FjecB99WeoporoKhWKZb7fnKrm grKt6VbZiwUk5o3+rkTWFTRCO7GhnmvBCQkv2I16OqJL+jXh5I/RVWSCwBMYXg+C ZVPbt1IvHs2TAzqG/T32n5/5aRzNF2jcJe9+G2A8nUO35kGmy4Ap/xSUlJyRY+rz lUhSA8cT/ZLv26oCTg+/RJ1Pp/0ARxRhjH+TbLQFmR7YXbqMZOPrvA1bHBC2USKf 7lJOcw2tGnevROKV6An3ef6YlJEikTzfGtSg0i55lF1bn44JxwWnGHW8WVPTe3MN lKWoLRNhB6+T8C/rHNjw0Xn32Shb620N8q7+RlIne0Y4RDV8xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqiEQDYbxdlGUzURA+HUp2c7toHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzMxZmMyZWUtNDgwYi0z ZTY0LThlZjEtNDMwMWZlNGRkMzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9GpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOzLkLCCUkSQm+3ISqL1F6/iN6iNQFYP2kVtn9Y87p5vYXMtz7bFsnq XNdnSd729S2CMulc/bXGXlFMZ6w1ZNtyKwUg9/PNSJj0AOc8gjV/NsGOYyjCIvdc CXlIUBC/xi5zYcRwXkCzukQrfFAtE1fl9j3dSsIyTuvOvYZPXso1tDjXi1TQ+RHo 8voPbRxYIb3xCKwMofdWrahTYuqcJVDdpqs9Vm8UlBk+nOkvfM49btW428/B7pfS M8x+Vd9hUblQWpZOeGsSUKPFeE+L5q7Lb5efmSM6MRiCKa13a/4331TFSIJ/MlNa rbYQiHQpe8nVraaDJ8++XQWC1Ag9Ozo= -----END CERTIFICATE-----Generated at Sat Jun 6 08:26:20 2026 by rpki-client