$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ef5da3d-d143-344b-84e4-dbb013ca14da.roa File: 8ef5da3d-d143-344b-84e4-dbb013ca14da.roa (raw, json) Hash identifier: RULrOBFDj4vNtYinmSN0vgV8Nkt9jrI++cj32vFzC3c= Subject key identifier: 36:5E:AD:74:32:EF:06:82:3B:3A:8E:BE:94:B1:2C:A6:A0:C8:6F:4E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DFA7097FFFA7FEE14F8D46600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ef5da3d-d143-344b-84e4-dbb013ca14da.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 20940 IP address blocks: 23.208.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:97:ff:fa:7f:ee:14:f8:d4:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=1afba22a-daba-45bd-8041-e0b85ef0890e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d2:25:69:53:ae:22:d3:dc:4a:e6:95:56:95: 89:32:83:0e:01:57:de:e3:f0:cd:36:62:b1:c6:75: 0b:d4:13:4f:a9:f4:66:3d:de:cf:90:ed:a6:6c:53: 48:8f:50:5f:9d:a2:a1:4a:03:fe:9b:8f:75:ae:57: f7:cb:87:b8:c5:c3:8c:65:14:b9:66:b7:f6:8b:3f: 16:4d:69:e3:ab:c1:9e:ba:a8:89:2f:a3:63:a9:5a: 96:ea:81:84:1d:08:06:9c:4d:d6:77:5e:87:b0:11: 90:a2:24:d2:91:84:10:7b:fe:37:10:b8:89:96:0b: 02:c6:7c:48:7b:3a:81:56:9c:fc:2f:9f:5e:f5:30: c7:01:de:fb:87:2e:7d:41:aa:e8:de:77:f3:3e:56: 23:2a:05:d0:3d:4d:74:e4:c0:b9:59:89:e5:3d:28: 28:a9:99:1b:9d:cc:b8:80:4d:df:b5:c0:12:01:e6: 6f:bf:fc:cf:dd:d7:9b:14:69:28:10:8c:43:f5:bb: d8:15:fb:49:77:db:7a:4a:ac:fb:a2:ac:5b:70:9d: eb:1a:7f:17:0b:d3:df:73:03:38:2e:43:5c:0c:a0: 42:b1:b5:4b:9c:1c:ad:bf:45:10:5b:8e:18:38:89: 12:b9:a4:ee:ba:1d:f6:be:1c:42:71:82:3a:d3:03: 22:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:5E:AD:74:32:EF:06:82:3B:3A:8E:BE:94:B1:2C:A6:A0:C8:6F:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ef5da3d-d143-344b-84e4-dbb013ca14da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:1d:92:7f:27:5c:0e:7a:b7:72:7b:43:5d:61:46:e8:1f:7d: 8b:3a:23:d0:ba:81:69:e3:8f:20:52:f5:2b:7b:86:82:96:05: 2e:5a:bb:72:e9:55:18:e0:b1:ab:0d:e4:79:c3:eb:17:17:d1: 04:48:e2:fc:74:3b:c8:ea:e6:2d:93:53:c8:79:5b:53:c7:9e: 65:df:6e:e4:10:11:d5:94:49:44:42:e7:b2:a5:64:b0:4e:f5: af:60:d0:2f:f6:48:e0:7e:63:4f:63:d1:ea:55:e4:09:6f:98: 48:c8:86:b6:04:30:24:c5:55:14:a8:ee:8f:9d:32:47:20:62: 58:ec:22:1c:8e:6f:d2:ae:f8:11:96:07:2a:5e:71:a6:8d:e7: 94:6d:ef:0c:bb:0b:10:97:8a:e0:72:41:d3:e3:9e:5b:dd:13: c5:ea:15:67:f7:aa:2c:6c:58:76:f8:f9:51:fc:bc:9c:5f:fc: 20:5a:11:88:07:e0:96:34:3d:46:8b:8e:6a:0a:4b:f9:79:c2: c2:10:54:d7:86:ca:68:f7:1c:f0:7f:d8:11:64:b1:b2:51:ea: 12:6e:a9:81:a7:69:33:76:ab:d5:f8:5b:ae:a2:15:01:2e:13: 4c:33:18:7a:3c:60:47:f2:ff:f0:0a:5e:8f:01:11:22:45:da: ee:e9:4c:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cJf/+n/uFPjUZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk MWFmYmEyMmEtZGFiYS00NWJkLTgwNDEtZTBiODVlZjA4OTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtIlaVOuItPcSuaVVpWJMoMOAVfe4/DNNmKx xnUL1BNPqfRmPd7PkO2mbFNIj1BfnaKhSgP+m491rlf3y4e4xcOMZRS5Zrf2iz8W TWnjq8GeuqiJL6NjqVqW6oGEHQgGnE3Wd16HsBGQoiTSkYQQe/43ELiJlgsCxnxI ezqBVpz8L59e9TDHAd77hy59Qaro3nfzPlYjKgXQPU105MC5WYnlPSgoqZkbncy4 gE3ftcASAeZvv/zP3debFGkoEIxD9bvYFftJd9t6Sqz7oqxbcJ3rGn8XC9PfcwM4 LkNcDKBCsbVLnBytv0UQW44YOIkSuaTuuh32vhxCcYI60wMi+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZerXQy7waCOzqOvpSxLKagyG9OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGVmNWRhM2QtZDE0My0z NDRiLTg0ZTQtZGJiMDEzY2ExNGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9CPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEdkn8nXA56t3J7Q11hRugffYs6I9C6gWnjjyBS9St7hoKWBS5au3Lp VRjgsasN5HnD6xcX0QRI4vx0O8jq5i2TU8h5W1PHnmXfbuQQEdWUSURC57KlZLBO 9a9g0C/2SOB+Y09j0epV5AlvmEjIhrYEMCTFVRSo7o+dMkcgYljsIhyOb9Ku+BGW BypecaaN55Rt7wy7CxCXiuByQdPjnlvdE8XqFWf3qixsWHb4+VH8vJxf/CBaEYgH 4JY0PUaLjmoKS/l5wsIQVNeGymj3HPB/2BFksbJR6hJuqYGnaTN2q9X4W66iFQEu E0wzGHo8YEfy//AKXo8BESJF2u7pTIg= -----END CERTIFICATE-----Generated at Sat Jun 6 10:52:15 2026 by rpki-client