$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b8b3992-9a88-3cca-b9f2-0ee0cf92a19c.roa File: 7b8b3992-9a88-3cca-b9f2-0ee0cf92a19c.roa (raw, json) Hash identifier: v3RblkbsRqou/rY82dvGSWleRUzJ0ZOWW17jpRRS1SU= Subject key identifier: B0:D7:F2:38:D3:5A:9C:F4:02:44:70:B0:39:6A:0D:87:86:B1:2B:98 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DD35B174C79B98B2F424DA080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b8b3992-9a88-3cca-b9f2-0ee0cf92a19c.roa Signing time: Thu 14 May 2026 01:00:25 +0000 ROA not before: Thu 14 May 2026 01:00:25 +0000 ROA not after: Wed 12 Aug 2026 01:00:25 +0000 asID: 18403 IP address blocks: 23.202.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:5b:17:4c:79:b9:8b:2f:42:4d:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 14 01:00:25 2026 GMT Not After : Aug 12 01:00:25 2026 GMT Subject: CN=a3de737b-8444-4a72-88a2-3e66b1462e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7d:25:4f:e6:35:f9:80:cc:57:db:7e:0e:e9: 75:25:ac:68:9e:fc:f3:41:67:df:ed:fa:0e:ad:6a: 7e:8d:f6:ce:cb:8c:ce:4d:dc:85:aa:d7:56:45:10: 2c:e2:75:52:11:e9:d7:39:3c:a2:a6:99:40:0f:36: 0c:e1:2b:c7:09:c0:73:5b:af:2e:bb:b7:78:d5:65: d2:cd:89:07:22:00:ba:b8:58:e7:c9:4b:ca:d1:29: d6:c5:ea:40:43:bb:21:5c:12:5a:11:c8:f3:db:0e: e2:c5:a3:cd:97:60:c9:15:a0:5b:37:fb:34:e5:06: 39:c6:4e:f6:df:80:95:c0:c6:fa:90:58:36:66:36: 85:e1:ca:a1:ab:94:4c:7c:30:95:7e:c2:f9:83:99: 82:b7:84:49:71:54:c9:32:53:cd:8d:5e:ed:a4:26: 27:26:da:83:10:cb:13:56:cb:b7:60:f2:7a:0c:05: 43:63:8f:42:86:b7:50:6d:e2:3a:7f:97:f9:f5:af: 44:a3:47:02:d4:ad:66:e4:d8:99:25:65:55:ba:29: af:04:43:e1:fb:15:5e:e6:e5:94:86:10:94:70:16: 3b:b6:01:28:b1:22:ca:86:fc:4f:4c:eb:28:df:de: 22:c3:ed:80:b1:c2:59:83:ec:76:d5:ff:c6:e2:a0: 02:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D7:F2:38:D3:5A:9C:F4:02:44:70:B0:39:6A:0D:87:86:B1:2B:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b8b3992-9a88-3cca-b9f2-0ee0cf92a19c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:7a:30:3c:66:80:a8:1f:b3:00:75:c3:11:ce:22:cc:22:e4: b6:cf:a9:bf:5b:07:61:27:3e:2d:d5:57:8c:b1:00:02:ff:c7: b1:50:fe:14:c6:a7:93:3f:01:34:c1:ba:3c:09:04:0b:06:22: a3:e3:e8:16:a8:e4:3e:9f:b5:8e:a3:65:89:ce:a0:16:75:38: 06:05:85:12:fa:cd:85:2e:7a:fb:b5:c6:13:08:0e:8b:fa:b8: 58:86:6e:5a:36:1f:9b:13:2b:28:42:4a:04:fb:53:31:6f:65: a4:d7:a7:20:ac:1c:0d:0e:21:ba:cd:25:7d:d3:ed:0c:c8:77: 30:33:91:12:68:86:b6:c4:ce:2d:9c:23:ed:60:c4:71:a4:0e: ac:73:a8:e8:e3:02:3c:2d:79:92:c2:27:85:c3:94:f9:a7:f6: d4:dd:6e:2e:22:bb:36:b3:09:64:b1:cf:7d:df:7e:13:d9:0e: 11:84:f2:a8:eb:a8:5c:c5:bb:dc:4b:ab:fd:08:29:16:dd:b6: f9:bb:fa:db:86:b5:b0:6b:c7:64:b7:ac:9a:85:1e:1b:83:1e: d9:ba:99:29:e9:21:69:34:ce:d6:ec:e1:78:00:cc:83:1a:25: 09:d2:7e:2e:48:db:a6:56:90:c8:a3:e1:4c:d5:e0:18:f5:52: f6:55:9e:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3TWxdMebmLL0JNoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk YTNkZTczN2ItODQ0NC00YTcyLTg4YTItM2U2NmIxNDYyZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu30lT+Y1+YDMV9t+Dul1JaxonvzzQWff7foO rWp+jfbOy4zOTdyFqtdWRRAs4nVSEenXOTyipplADzYM4SvHCcBzW68uu7d41WXS zYkHIgC6uFjnyUvK0SnWxepAQ7shXBJaEcjz2w7ixaPNl2DJFaBbN/s05QY5xk72 34CVwMb6kFg2ZjaF4cqhq5RMfDCVfsL5g5mCt4RJcVTJMlPNjV7tpCYnJtqDEMsT Vsu3YPJ6DAVDY49ChrdQbeI6f5f59a9Eo0cC1K1m5NiZJWVVuimvBEPh+xVe5uWU hhCUcBY7tgEosSLKhvxPTOso394iw+2AscJZg+x21f/G4qAC3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDX8jjTWpz0AkRwsDlqDYeGsSuYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2I4YjM5OTItOWE4OC0z Y2NhLWI5ZjItMGVlMGNmOTJhMTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8pZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF56MDxmgKgfswB1wxHOIswi5LbPqb9bB2EnPi3VV4yxAAL/x7FQ/hTG p5M/ATTBujwJBAsGIqPj6Bao5D6ftY6jZYnOoBZ1OAYFhRL6zYUuevu1xhMIDov6 uFiGblo2H5sTKyhCSgT7UzFvZaTXpyCsHA0OIbrNJX3T7QzIdzAzkRJohrbEzi2c I+1gxHGkDqxzqOjjAjwteZLCJ4XDlPmn9tTdbi4iuzazCWSxz33ffhPZDhGE8qjr qFzFu9xLq/0IKRbdtvm7+tuGtbBrx2S3rJqFHhuDHtm6mSnpIWk0ztbs4XgAzIMa JQnSfi5I26ZWkMij4UzV4Bj1UvZVnow= -----END CERTIFICATE-----Generated at Sat Jun 6 09:39:50 2026 by rpki-client