$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87929612-bcbe-3cd7-b635-f1d289884be4.roa File: 87929612-bcbe-3cd7-b635-f1d289884be4.roa (raw, json) Hash identifier: 35iduIs+Z4YfT1O6PX8S2SdzHiUIfPfJlzP4Kjypq3k= Subject key identifier: 83:3C:E6:D1:48:37:A4:71:4A:97:47:80:31:63:91:B3:6A:31:09:45 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DD625C07BDC8F44875E47FDF8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87929612-bcbe-3cd7-b635-f1d289884be4.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 20940 IP address blocks: 23.223.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:c0:7b:dc:8f:44:87:5e:47:fd:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=cd8c7e17-492d-4c07-b580-7ff8c67f0d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ad:e9:7e:b7:06:03:68:39:d6:f2:22:92:8e: 5c:5a:e9:d3:51:e3:27:02:7d:d5:cf:cf:c7:d9:f2: 21:31:0d:ff:84:39:55:3d:f4:19:83:f7:e5:f3:ad: ca:97:09:de:dd:e5:fe:42:04:8d:ad:ed:a3:b5:3b: 6c:a0:fb:92:a3:31:33:e8:d4:4b:c8:9c:10:b5:a2: 8e:5a:eb:91:67:bc:13:98:d2:26:26:3b:c1:cf:f3: 7d:e4:a9:bd:a0:94:b6:4d:7d:b1:ae:0d:26:99:3c: e6:19:e6:ee:3d:c3:06:cf:7b:d0:22:75:69:8f:62: 42:b7:5c:72:38:9e:42:e9:f1:69:71:b3:84:f3:8f: dd:f7:99:09:7e:2e:d0:7d:74:c3:f5:6f:3b:29:3b: 30:b6:ba:52:98:f1:c3:a8:3f:e5:d0:b7:c7:cb:b2: a5:5b:06:76:47:d4:d8:af:89:8e:be:1d:56:07:45: a1:15:86:d4:82:7f:12:e0:92:cd:9c:31:c9:88:76: 08:07:1e:94:48:52:8e:ae:b0:a0:7c:19:9c:27:b0: 9a:b3:fb:1d:a7:c2:8a:cf:e3:01:aa:20:92:0f:f0: 55:de:f9:78:17:39:a8:1e:86:61:2c:d7:fd:89:55: fd:38:16:b0:d3:a4:58:12:69:5b:0f:09:56:e0:cf: 5c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3C:E6:D1:48:37:A4:71:4A:97:47:80:31:63:91:B3:6A:31:09:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87929612-bcbe-3cd7-b635-f1d289884be4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c4:af:87:36:d1:9e:b0:4d:27:8a:60:97:2e:4b:ee:11:3a: 43:5c:5a:25:51:d5:8f:a0:2f:59:f9:a9:20:46:69:ae:f6:3e: 90:c0:7a:c7:a8:9b:26:44:da:18:b0:3f:a7:15:e0:34:35:1a: c7:61:8a:d7:f2:a3:fd:8e:53:52:8f:3d:53:da:ed:d9:29:63: 00:98:a3:7f:97:3d:4d:91:a0:c6:2f:6b:56:f8:41:b1:f1:f6: 63:4b:53:7c:03:c2:6d:ed:4b:5e:0d:47:05:66:5a:55:e8:8b: e5:04:81:35:a4:29:f9:81:91:a5:ae:1f:91:c7:fc:0c:01:be: 94:45:b3:e2:52:4e:00:1e:cb:ab:a6:42:b2:ab:1a:fa:79:d4: b7:e6:b6:5f:9d:2c:a4:73:23:3e:46:29:32:c6:fa:8a:8d:10: c4:90:35:42:83:69:97:7c:ff:f2:3d:5b:f8:59:2d:0a:eb:74: 87:0f:09:bf:e4:4f:60:fe:90:75:0a:05:bb:44:22:73:db:8f: 4a:af:49:7f:9b:28:89:ed:cc:db:f4:33:ff:1d:3e:37:3b:e8: 9c:34:9b:87:eb:b8:e5:54:55:73:79:8a:a5:80:52:a4:5e:43: ef:53:94:57:63:e1:60:14:aa:75:e4:de:17:01:f9:51:41:c3: 36:3e:70:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WJcB73I9Eh15H/fgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk Y2Q4YzdlMTctNDkyZC00YzA3LWI1ODAtN2ZmOGM2N2YwZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK3pfrcGA2g51vIiko5cWunTUeMnAn3Vz8/H 2fIhMQ3/hDlVPfQZg/fl863Klwne3eX+QgSNre2jtTtsoPuSozEz6NRLyJwQtaKO WuuRZ7wTmNImJjvBz/N95Km9oJS2TX2xrg0mmTzmGebuPcMGz3vQInVpj2JCt1xy OJ5C6fFpcbOE84/d95kJfi7QfXTD9W87KTswtrpSmPHDqD/l0LfHy7KlWwZ2R9TY r4mOvh1WB0WhFYbUgn8S4JLNnDHJiHYIBx6USFKOrrCgfBmcJ7Cas/sdp8KKz+MB qiCSD/BV3vl4FzmoHoZhLNf9iVX9OBaw06RYEmlbDwlW4M9cCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIM85tFIN6RxSpdHgDFjkbNqMQlFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODc5Mjk2MTItYmNiZS0z Y2Q3LWI2MzUtZjFkMjg5ODg0YmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfEr4c20Z6wTSeKYJcuS+4ROkNcWiVR1Y+gL1n5qSBGaa72PpDAeseo myZE2hiwP6cV4DQ1Gsdhitfyo/2OU1KPPVPa7dkpYwCYo3+XPU2RoMYva1b4QbHx 9mNLU3wDwm3tS14NRwVmWlXoi+UEgTWkKfmBkaWuH5HH/AwBvpRFs+JSTgAey6um QrKrGvp51Lfmtl+dLKRzIz5GKTLG+oqNEMSQNUKDaZd8//I9W/hZLQrrdIcPCb/k T2D+kHUKBbtEInPbj0qvSX+bKIntzNv0M/8dPjc76Jw0m4fruOVUVXN5iqWAUqRe Q+9TlFdj4WAUqnXk3hcB+VFBwzY+cCE= -----END CERTIFICATE-----Generated at Sat Jun 6 10:58:22 2026 by rpki-client