$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d7912ed-bdfa-3f4c-8d81-e989c50e2a8b.roa File: 8d7912ed-bdfa-3f4c-8d81-e989c50e2a8b.roa (raw, json) Hash identifier: MJQKlEFJe7RjhrTK1VW263rvqwNmM+x8+L4t+n5WUek= Subject key identifier: F6:A9:D8:DD:0A:47:AC:22:16:2B:70:7D:1B:74:CE:77:13:6D:39:29 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DFBD5F7DE201D87454FB5CE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d7912ed-bdfa-3f4c-8d81-e989c50e2a8b.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 20940 IP address blocks: 23.213.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:f7:de:20:1d:87:45:4f:b5:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=ed05e008-c42d-44fa-8cae-fb7ea9a1f89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0e:43:c6:68:90:78:07:b0:33:9c:65:15:ff: 11:af:6b:51:e8:74:d7:49:2c:08:b6:c9:39:4d:8c: 0a:b2:37:63:30:2c:68:01:77:03:85:e5:1d:8c:72: 0d:ff:16:14:c3:78:65:68:ac:54:71:ae:68:a3:98: 7d:6a:31:c9:70:4b:7a:d9:b1:04:58:01:24:35:6b: e3:f6:11:c0:58:ff:1b:e3:78:97:b6:c5:0b:a6:ce: 0f:a2:17:6f:46:08:95:30:35:b4:91:63:74:58:b1: c9:a2:8e:81:38:a4:56:0c:6e:9d:cf:95:af:63:b7: b9:ba:ac:5d:13:69:6e:ff:ea:45:f6:fd:00:0e:bf: 0f:58:12:a2:8d:e4:1a:71:06:71:f8:c3:b4:68:58: e9:e6:13:15:81:4f:4a:f4:77:c7:59:e2:4e:10:79: ff:41:16:84:b2:7b:7c:f5:ac:65:d2:2c:2e:5f:da: 58:22:8b:f5:a9:88:3d:77:02:2e:82:de:94:eb:cf: 7b:cb:9c:60:ea:9e:8a:d9:a5:30:32:d1:23:45:93: 3e:2a:f1:74:87:2b:43:25:ef:9a:ab:2e:29:b7:a4: 4e:20:ec:a1:6d:cc:01:b6:00:c5:cc:15:25:d4:c8: 91:28:42:3a:0d:9f:66:1d:aa:ed:d7:1b:84:16:7c: ac:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A9:D8:DD:0A:47:AC:22:16:2B:70:7D:1B:74:CE:77:13:6D:39:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d7912ed-bdfa-3f4c-8d81-e989c50e2a8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:92:c3:19:c3:ea:44:f3:11:e8:fe:d8:c7:da:8b:14:60:10: 9e:1d:6d:51:f8:8e:e6:6c:5c:fa:d1:07:35:3b:2b:3a:85:87: a9:67:98:ee:4f:de:13:86:87:32:dc:0f:6b:73:be:c2:f9:06: 01:42:39:62:60:93:09:19:10:8c:e5:c8:3d:e8:92:f2:dc:6a: a3:71:cd:6c:21:46:28:44:11:06:74:5a:90:a9:cb:e5:af:04: 54:ec:15:1f:bf:34:97:ed:93:c7:ab:ba:42:bc:c8:fb:2f:2b: e7:a5:d4:ec:ee:67:ab:65:85:56:ae:8c:ee:1a:3e:c8:16:f9: a8:52:c0:03:7a:d0:98:3f:fa:57:ec:63:d6:ac:a6:d6:1b:5a: fc:b1:dc:6a:dc:47:bf:80:16:84:bd:bf:e0:ab:34:7d:e8:57: 77:b0:8f:04:90:e7:f3:3d:d8:0c:0c:68:e6:54:e6:9e:a4:9f: d2:63:7c:70:41:dc:fd:74:ba:a5:b1:c2:64:f1:52:cd:69:b7: e2:b9:b1:6f:7c:7e:55:83:a6:0f:49:87:90:4d:43:cc:59:8b: 87:9c:ba:c9:f0:04:89:1a:85:f4:4b:99:97:45:f6:6a:06:88: 03:2d:1c:03:20:84:bb:27:00:2f:64:b2:a3:a6:23:b0:8e:d8: df:2a:38:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371ffeIB2HRU+1zgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk ZWQwNWUwMDgtYzQyZC00NGZhLThjYWUtZmI3ZWE5YTFmODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg5DxmiQeAewM5xlFf8Rr2tR6HTXSSwItsk5 TYwKsjdjMCxoAXcDheUdjHIN/xYUw3hlaKxUca5oo5h9ajHJcEt62bEEWAEkNWvj 9hHAWP8b43iXtsULps4PohdvRgiVMDW0kWN0WLHJoo6BOKRWDG6dz5WvY7e5uqxd E2lu/+pF9v0ADr8PWBKijeQacQZx+MO0aFjp5hMVgU9K9HfHWeJOEHn/QRaEsnt8 9axl0iwuX9pYIov1qYg9dwIugt6U6897y5xg6p6K2aUwMtEjRZM+KvF0hytDJe+a qy4pt6ROIOyhbcwBtgDFzBUl1MiRKEI6DZ9mHart1xuEFnysWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPap2N0KR6wiFitwfRt0zncTbTkpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGQ3OTEyZWQtYmRmYS0z ZjRjLThkODEtZTk4OWM1MGUyYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9XzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWSwxnD6kTzEej+2MfaixRgEJ4dbVH4juZsXPrRBzU7KzqFh6lnmO5P 3hOGhzLcD2tzvsL5BgFCOWJgkwkZEIzlyD3okvLcaqNxzWwhRihEEQZ0WpCpy+Wv BFTsFR+/NJftk8erukK8yPsvK+el1OzuZ6tlhVaujO4aPsgW+ahSwAN60Jg/+lfs Y9asptYbWvyx3GrcR7+AFoS9v+CrNH3oV3ewjwSQ5/M92AwMaOZU5p6kn9JjfHBB 3P10uqWxwmTxUs1pt+K5sW98flWDpg9Jh5BNQ8xZi4ecusnwBIkahfRLmZdF9moG iAMtHAMghLsnAC9ksqOmI7CO2N8qOEg= -----END CERTIFICATE-----Generated at Sat Jun 6 10:50:19 2026 by rpki-client