$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88a88dee-7ef3-3120-a55d-2cad1a93571f.roa File: 88a88dee-7ef3-3120-a55d-2cad1a93571f.roa (raw, json) Hash identifier: /CnrV7tR1N2qfDaSOtOgPAyku+0Yr2dk0VihJHEZn9w= Subject key identifier: F4:E3:00:DE:7F:05:DF:A2:4B:1F:C0:A3:EB:E0:F9:D6:A9:CF:67:DB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E0A7005ECF16AA1455A143100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88a88dee-7ef3-3120-a55d-2cad1a93571f.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 20940 IP address blocks: 23.218.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:70:05:ec:f1:6a:a1:45:5a:14:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=7298a368-12e3-4de5-87ae-9993101bb5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ba:0c:92:af:3b:b2:37:49:80:e9:1a:21:fb: e9:9e:cb:24:27:92:ec:d4:c3:d6:ea:a5:3d:f0:55: 0a:74:ad:34:8f:39:a1:3d:bf:cc:c1:42:55:2d:ab: 66:32:62:93:49:1e:e1:c4:08:cc:1d:24:23:08:d8: bf:ef:58:b9:83:3e:ef:85:02:d8:0c:a7:92:6e:f8: 24:56:0a:62:0a:df:f1:7e:70:08:aa:47:98:2a:68: 5f:d7:ef:9f:4c:3f:22:5b:af:a8:f5:98:b4:f9:39: 86:5c:d2:8b:8b:4b:02:54:ae:2e:fd:0d:24:bd:02: 8a:c6:8f:e1:7e:f4:cc:78:d0:0c:af:05:7c:ff:bc: 4f:09:92:ab:f9:d9:15:73:4d:2f:2d:fd:7e:1a:5a: 81:6f:99:cc:2c:37:f8:58:d2:d4:e1:56:a7:d6:aa: 28:01:db:c9:89:66:5a:f7:2f:c6:cc:25:3f:4c:dc: 31:c8:97:47:df:5b:78:16:8c:ee:2d:58:98:c3:16: e7:59:23:79:d7:31:f0:1b:d1:14:3a:66:9c:db:26: 6f:9f:59:7e:09:c3:15:4d:f4:fe:5b:10:05:0b:93: b6:79:8e:56:2a:4d:2b:7c:1e:5c:ba:00:8b:0f:47: 10:ce:d0:04:26:ca:fc:a4:4f:ff:0e:bc:af:63:79: 95:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E3:00:DE:7F:05:DF:A2:4B:1F:C0:A3:EB:E0:F9:D6:A9:CF:67:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88a88dee-7ef3-3120-a55d-2cad1a93571f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:db:b8:36:80:a8:ed:cc:94:dc:64:11:bd:5b:c1:17:78:db: 6e:d4:11:95:8d:82:fa:83:4b:39:2b:cf:45:53:96:f7:fd:f3: 98:1d:df:a2:81:17:1a:90:3f:ff:f4:a8:01:44:67:55:6c:22: 3e:c6:55:f3:ef:e6:fb:6a:5f:ad:fd:06:f0:93:5c:7e:85:27: a3:d7:e8:73:b4:60:36:3c:21:12:a3:f1:3e:45:bd:6a:53:11: 3d:90:29:15:0c:25:11:6d:1a:b6:b7:95:bf:f7:b5:43:08:d4: 71:0d:fe:e0:c9:9b:35:29:8b:b7:13:c9:91:d7:cf:f8:05:ea: 5a:49:e5:d8:35:b4:f7:c7:01:bf:23:0b:d6:62:8c:cc:ab:9d: 38:61:21:37:17:e1:62:7d:b9:55:7a:2e:06:7e:88:8c:42:f7: 59:2e:f0:98:ee:69:8c:35:2c:ce:1f:2d:ff:32:98:6f:6b:42: d2:fe:c3:43:97:96:3d:a2:fa:26:2c:47:cc:03:99:d5:8d:25: b8:20:53:e7:80:d5:06:6d:e2:b5:2b:43:49:99:2f:f8:dd:b8: 89:a7:14:09:99:b9:8c:3c:fc:4f:ac:2c:a8:cd:df:83:34:da: 2f:f0:6a:c1:e4:91:93:28:71:84:fa:be:55:9a:3a:17:fd:56: b3:f7:bf:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4KcAXs8WqhRVoUMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk NzI5OGEzNjgtMTJlMy00ZGU1LTg3YWUtOTk5MzEwMWJiNWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5boMkq87sjdJgOkaIfvpnsskJ5Ls1MPW6qU9 8FUKdK00jzmhPb/MwUJVLatmMmKTSR7hxAjMHSQjCNi/71i5gz7vhQLYDKeSbvgk VgpiCt/xfnAIqkeYKmhf1++fTD8iW6+o9Zi0+TmGXNKLi0sCVK4u/Q0kvQKKxo/h fvTMeNAMrwV8/7xPCZKr+dkVc00vLf1+GlqBb5nMLDf4WNLU4Van1qooAdvJiWZa 9y/GzCU/TNwxyJdH31t4FozuLViYwxbnWSN51zHwG9EUOmac2yZvn1l+CcMVTfT+ WxAFC5O2eY5WKk0rfB5cugCLD0cQztAEJsr8pE//DryvY3mVWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTjAN5/Bd+iSx/Ao+vg+dapz2fbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODhhODhkZWUtN2VmMy0z MTIwLWE1NWQtMmNhZDFhOTM1NzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9qfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbbuDaAqO3MlNxkEb1bwRd4227UEZWNgvqDSzkrz0VTlvf985gd36KB FxqQP//0qAFEZ1VsIj7GVfPv5vtqX639BvCTXH6FJ6PX6HO0YDY8IRKj8T5FvWpT ET2QKRUMJRFtGra3lb/3tUMI1HEN/uDJmzUpi7cTyZHXz/gF6lpJ5dg1tPfHAb8j C9ZijMyrnThhITcX4WJ9uVV6LgZ+iIxC91ku8JjuaYw1LM4fLf8ymG9rQtL+w0OX lj2i+iYsR8wDmdWNJbggU+eA1QZt4rUrQ0mZL/jduImnFAmZuYw8/E+sLKjN34M0 2i/wasHkkZMocYT6vlWaOhf9VrP3v+M= -----END CERTIFICATE-----Generated at Sat Jun 6 12:12:50 2026 by rpki-client