$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88e261f2-0409-3a26-819e-af1dbbec6cdb.roa File: 88e261f2-0409-3a26-819e-af1dbbec6cdb.roa (raw, json) Hash identifier: Uvm3+CqaOHlqUtgkqAcKa9MaDLxr0zbKgvLcRnblhjo= Subject key identifier: B8:5E:61:BB:06:F7:90:7A:B0:F0:5E:B1:8E:7E:CB:87:46:F1:47:63 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DFA7088B946E024CD385C1B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88e261f2-0409-3a26-819e-af1dbbec6cdb.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 20940 IP address blocks: 23.204.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:88:b9:46:e0:24:cd:38:5c:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=7f06b137-5098-4e1b-b887-64e79978c58e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7b:cf:d9:34:30:4e:ba:4a:cd:fc:3d:a5:bb: 12:4e:83:95:6f:8c:f1:4a:65:37:95:5a:0a:47:1f: 99:2a:eb:99:18:8c:12:d6:64:8f:b5:e7:7d:3f:80: f1:93:8f:06:2b:94:21:1d:22:01:fb:7d:bb:63:97: b2:e8:09:8d:1c:36:a4:71:8e:66:c3:d1:58:33:51: e5:24:5c:af:20:2d:12:d0:9a:f2:ad:91:43:98:ff: 6b:48:2b:35:1a:e4:f5:dc:33:91:fd:cc:f6:0a:43: 6a:9e:4d:3b:9e:1c:af:ef:bd:4f:40:0d:3b:b0:13: 73:fd:03:ab:d9:55:fe:90:ea:f5:ce:f6:32:c9:03: 1d:b5:9f:e2:70:cf:73:a8:9f:54:ad:29:f5:d0:7d: 24:c7:95:7e:c8:8e:c7:dd:80:f7:ce:52:0e:c7:21: 47:5c:ec:4a:05:64:b1:e2:67:da:b2:10:9e:3d:0d: df:1c:14:e5:58:6f:91:1d:42:6d:0b:bc:7e:bf:54: 4d:c7:c8:ee:d2:d9:df:99:97:c0:08:7d:59:08:73: 75:f2:0b:6e:cb:b2:3c:40:9f:cb:7e:99:89:3e:51: 02:4b:92:a3:0e:90:b7:88:d9:41:5f:6c:bb:7a:b2: ef:77:35:b0:44:1d:fd:63:b0:8a:ec:bc:f9:1c:a7: 03:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5E:61:BB:06:F7:90:7A:B0:F0:5E:B1:8E:7E:CB:87:46:F1:47:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88e261f2-0409-3a26-819e-af1dbbec6cdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:2a:4d:d2:00:e2:9d:3a:d1:9c:ee:20:99:d8:a1:fb:e2:ed: 90:5a:50:5f:5c:9a:35:0c:72:ed:76:98:fd:2e:f0:ba:4c:bf: e5:30:f3:d6:1f:3d:1d:25:02:0c:d5:96:9e:ec:51:56:21:c6: 8b:d4:37:45:a1:33:47:86:6a:27:43:10:3a:bf:38:81:73:e3: 10:51:e0:1c:1a:7d:82:0d:7b:90:cb:07:89:80:6b:6d:bd:a2: ac:46:ce:93:9e:b3:12:f9:49:20:28:e0:bd:b3:82:05:05:7c: 37:5d:6f:3a:a3:0d:3c:81:e0:29:2d:26:c0:36:e7:0a:3f:83: e0:60:e4:a3:ef:de:2f:18:c9:b8:33:9f:da:72:a5:3c:b7:1d: 67:82:dd:b8:62:8e:80:20:73:54:72:41:b8:e4:38:ba:84:18: a9:ff:ee:cc:25:23:30:e0:92:ec:ab:d1:ef:75:9b:b5:97:3a: 44:b6:89:0f:63:ca:e0:44:cf:30:ef:07:50:12:21:83:85:25: 2d:0c:9c:88:ce:22:fe:b2:83:40:3e:80:c2:19:de:79:21:e7: 48:ef:74:4e:e3:55:8f:15:b2:cf:de:e6:bb:a0:32:d9:9e:00: 23:a8:23:0b:a6:f8:0b:53:24:2b:ad:fc:f9:6c:34:30:0f:ab: 06:59:e5:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cIi5RuAkzThcGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk N2YwNmIxMzctNTA5OC00ZTFiLWI4ODctNjRlNzk5NzhjNThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXvP2TQwTrpKzfw9pbsSToOVb4zxSmU3lVoK Rx+ZKuuZGIwS1mSPted9P4Dxk48GK5QhHSIB+327Y5ey6AmNHDakcY5mw9FYM1Hl JFyvIC0S0JryrZFDmP9rSCs1GuT13DOR/cz2CkNqnk07nhyv771PQA07sBNz/QOr 2VX+kOr1zvYyyQMdtZ/icM9zqJ9UrSn10H0kx5V+yI7H3YD3zlIOxyFHXOxKBWSx 4mfashCePQ3fHBTlWG+RHUJtC7x+v1RNx8ju0tnfmZfACH1ZCHN18gtuy7I8QJ/L fpmJPlECS5KjDpC3iNlBX2y7erLvdzWwRB39Y7CK7Lz5HKcDsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLheYbsG95B6sPBesY5+y4dG8UdjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODhlMjYxZjItMDQwOS0z YTI2LTgxOWUtYWYxZGJiZWM2Y2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8yFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgqTdIA4p060ZzuIJnYofvi7ZBaUF9cmjUMcu12mP0u8LpMv+Uw89Yf PR0lAgzVlp7sUVYhxovUN0WhM0eGaidDEDq/OIFz4xBR4BwafYINe5DLB4mAa229 oqxGzpOesxL5SSAo4L2zggUFfDddbzqjDTyB4CktJsA25wo/g+Bg5KPv3i8Yybgz n9pypTy3HWeC3bhijoAgc1RyQbjkOLqEGKn/7swlIzDgkuyr0e91m7WXOkS2iQ9j yuBEzzDvB1ASIYOFJS0MnIjOIv6yg0A+gMIZ3nkh50jvdE7jVY8Vss/e5rugMtme ACOoIwum+AtTJCut/PlsNDAPqwZZ5bY= -----END CERTIFICATE-----Generated at Sat Jun 6 10:55:09 2026 by rpki-client