$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89c9aa17-84f3-37d8-8fd1-545625e958d8.roa File: 89c9aa17-84f3-37d8-8fd1-545625e958d8.roa (raw, json) Hash identifier: qkz3lqzZFe2/aryDKL7y7lvAx9fvI2mzcK7SNmyWT34= Subject key identifier: CD:8E:55:9C:B4:16:6D:DF:43:3C:DD:13:B8:E3:0C:D6:0A:53:E2:49 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DFA7088A17029F410FE9BB800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89c9aa17-84f3-37d8-8fd1-545625e958d8.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 20940 IP address blocks: 23.204.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:88:a1:70:29:f4:10:fe:9b:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=deded251-dce7-45da-942d-5f13f864bc62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4c:da:11:32:7c:1c:90:24:07:2a:d6:00:5d: 23:32:07:e1:a3:d2:63:a4:24:b8:f0:96:2b:33:d7: cf:b6:65:9e:d9:ef:21:3c:c0:e6:ee:b8:3f:c2:55: 67:77:b8:ce:80:0d:48:8d:7a:77:b9:13:18:72:11: 14:92:46:8c:c3:e5:87:61:86:21:42:37:c3:9c:d2: 02:9f:69:5c:a4:e7:0e:96:fd:80:76:0f:9b:a4:1a: c6:30:f7:99:44:0c:58:b9:f6:80:d1:5b:49:fe:5d: 1e:0e:8e:30:3c:e0:ca:f1:93:61:4c:8e:5a:2e:64: 4f:ab:e4:09:a7:44:0e:31:54:74:83:80:c2:b9:f6: 1e:db:92:c1:b7:6b:02:5f:b7:03:c0:e7:d3:4f:20: 10:ab:0f:de:45:0f:fa:e7:1d:51:40:59:76:41:bc: 19:2d:8d:b4:8c:2f:05:eb:50:53:1d:0b:35:65:e9: ae:93:ec:28:a1:6c:ad:37:5b:60:87:e5:a5:c3:81: b1:e0:5a:da:6b:7a:b4:c8:be:2a:c6:c3:cb:d6:45: 2b:86:b4:8f:b5:25:61:35:89:ec:e3:1d:88:6f:84: 71:b5:f0:8b:92:d2:33:c5:45:89:95:52:c1:cf:51: 8e:32:7b:ed:79:59:fc:bb:58:ee:63:eb:5e:23:a5: a6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8E:55:9C:B4:16:6D:DF:43:3C:DD:13:B8:E3:0C:D6:0A:53:E2:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89c9aa17-84f3-37d8-8fd1-545625e958d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:95:47:de:74:fc:6a:06:ba:0e:2d:e5:02:44:d5:2c:a7:92: a2:9e:7f:e9:cb:42:0c:71:38:5a:d3:64:f1:39:d1:78:e1:12: 5a:23:4b:89:31:94:65:a1:29:e0:2e:08:da:00:d3:74:c6:47: 86:3c:c1:f0:9f:58:1d:84:c7:7c:58:43:21:cb:81:ed:b7:36: 89:1b:65:48:18:7a:18:2a:28:12:02:79:24:5a:cc:50:11:9b: d4:d7:c9:06:c7:3f:b2:90:5a:d1:91:35:4e:78:99:54:de:5b: 3e:d7:dd:d5:de:42:a4:c9:73:cf:3d:a2:6b:a7:51:d8:ef:df: f8:21:3f:ae:1f:6b:78:a7:40:7c:e7:e3:b1:38:54:bb:59:05: 3e:02:89:a9:c8:2f:43:dc:ce:79:47:c7:63:73:7c:17:15:8e: 64:ac:b2:ac:96:d1:b9:8e:87:e8:5d:6e:5f:9f:67:99:01:e2: 57:af:a2:3f:86:d8:b6:c4:e6:84:ba:a2:10:50:1e:b3:b3:d3: 9c:12:f7:e1:1a:85:6a:a5:3a:d8:c6:7d:ca:55:62:8a:a1:5c: 4b:a8:b5:02:e6:b5:d6:c4:d3:65:c0:8b:37:be:97:bd:f7:77: 05:42:40:89:bb:d3:27:5a:f9:37:14:68:5d:3e:a3:1f:9c:68: bf:06:00:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cIihcCn0EP6buAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk ZGVkZWQyNTEtZGNlNy00NWRhLTk0MmQtNWYxM2Y4NjRiYzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UzaETJ8HJAkByrWAF0jMgfho9JjpCS48JYr M9fPtmWe2e8hPMDm7rg/wlVnd7jOgA1IjXp3uRMYchEUkkaMw+WHYYYhQjfDnNIC n2lcpOcOlv2Adg+bpBrGMPeZRAxYufaA0VtJ/l0eDo4wPODK8ZNhTI5aLmRPq+QJ p0QOMVR0g4DCufYe25LBt2sCX7cDwOfTTyAQqw/eRQ/65x1RQFl2QbwZLY20jC8F 61BTHQs1Zemuk+wooWytN1tgh+Wlw4Gx4Fraa3q0yL4qxsPL1kUrhrSPtSVhNYns 4x2Ib4RxtfCLktIzxUWJlVLBz1GOMnvteVn8u1juY+teI6WmpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2OVZy0Fm3fQzzdE7jjDNYKU+JJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODljOWFhMTctODRmMy0z N2Q4LThmZDEtNTQ1NjI1ZTk1OGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8x6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeVR950/GoGug4t5QJE1SynkqKef+nLQgxxOFrTZPE50XjhElojS4kx lGWhKeAuCNoA03TGR4Y8wfCfWB2Ex3xYQyHLge23NokbZUgYehgqKBICeSRazFAR m9TXyQbHP7KQWtGRNU54mVTeWz7X3dXeQqTJc889omunUdjv3/ghP64fa3inQHzn 47E4VLtZBT4CianIL0PcznlHx2NzfBcVjmSssqyW0bmOh+hdbl+fZ5kB4levoj+G 2LbE5oS6ohBQHrOz05wS9+EahWqlOtjGfcpVYoqhXEuotQLmtdbE02XAize+l733 dwVCQIm70yda+TcUaF0+ox+caL8GABA= -----END CERTIFICATE-----Generated at Sat Jun 6 10:56:28 2026 by rpki-client