$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8fbaa027-d7f6-3f07-813a-4869928c083c.roa File: 8fbaa027-d7f6-3f07-813a-4869928c083c.roa (raw, json) Hash identifier: wTFt4X1VChgHtHKhI+3QUZhYP53h3Y8p2BwKzPU34rg= Subject key identifier: 06:08:AF:1A:BF:4A:24:7C:94:87:77:33:22:5F:2B:0A:EC:15:22:8F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E0C1EE6227972463FCC1F1400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8fbaa027-d7f6-3f07-813a-4869928c083c.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 20940 IP address blocks: 23.220.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:e6:22:79:72:46:3f:cc:1f:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=f810b111-cdb7-404f-a973-330ce5708876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cf:5f:68:a8:11:40:3e:bc:76:6e:f7:2c:39: ea:b4:18:77:d4:05:c8:3e:7a:9e:ac:89:56:cb:69: bb:5f:c3:5f:32:d1:05:2d:63:8b:24:b8:af:16:7f: a4:28:63:63:39:81:53:92:a5:b0:33:73:7f:ed:12: 83:1b:ba:c5:c4:22:9b:1e:d2:06:84:d0:f5:4c:d9: ab:06:1a:55:97:39:16:3f:c1:8e:ca:c6:6e:5e:c7: 10:cf:34:58:5f:d7:a9:78:9e:ae:81:40:e9:cf:14: da:19:69:9f:77:1a:9b:9c:11:e3:a4:7d:cf:49:a4: ed:e0:36:a4:54:9a:55:42:5d:09:be:a8:f9:eb:e7: f9:fc:13:a4:bc:8b:ce:79:bc:42:0a:21:b6:16:ba: 88:b6:eb:c4:44:d8:57:c6:69:33:46:45:a2:72:6e: 0f:b9:6f:7f:58:a0:a9:ec:8e:2a:48:54:9f:cd:3b: b1:12:64:41:b5:d6:d5:5d:6e:1d:52:3a:74:86:ee: 9f:82:7a:3f:7b:81:0b:5e:b6:ed:e4:f0:4b:d5:6b: 58:11:9a:00:50:5d:23:70:96:27:86:68:72:3f:86: fd:cc:4a:68:08:46:9d:6b:a7:94:9b:6a:01:40:af: 82:48:7a:aa:92:d2:7c:65:a4:db:b0:73:cb:dc:a5: f0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:08:AF:1A:BF:4A:24:7C:94:87:77:33:22:5F:2B:0A:EC:15:22:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8fbaa027-d7f6-3f07-813a-4869928c083c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b7:26:a6:e1:80:83:a2:60:65:dd:2d:ea:e3:e6:16:8b:d3: 32:75:f5:7b:8f:08:02:21:06:12:55:19:7e:de:46:41:9d:61: 66:63:b0:28:00:5a:ad:51:b2:56:29:8f:c2:01:96:d0:23:bd: f7:d4:a5:d0:90:a6:d9:b7:7d:33:ea:2c:01:97:37:55:c4:0c: c5:16:17:3e:4f:94:92:26:73:c0:4f:01:8a:61:43:17:c8:a3: 0e:29:b0:1c:60:77:b9:26:5a:eb:51:7b:81:83:6b:f2:16:de: 58:40:8f:28:83:ae:bd:25:28:b5:8b:e7:09:12:c5:1b:31:e7: 34:fd:e8:25:f9:29:a9:b3:c6:eb:e0:13:4d:cd:c4:6a:71:0b: ca:4f:e3:ef:c8:4b:49:b4:06:a1:35:a8:ca:1f:c0:30:8e:6e: 74:9a:61:47:ad:bf:68:2a:28:d2:f1:e9:91:a6:44:41:43:40: 68:bc:b8:f4:20:31:79:95:93:cc:a3:5d:0b:0e:a8:43:e8:ad: 44:23:5e:37:39:4b:71:0d:a9:77:84:6e:fe:66:80:ac:58:2d: 11:6d:03:89:27:ea:03:fa:26:84:a1:36:59:46:6c:70:57:c6: 48:0f:d6:4f:1e:62:a9:5c:9b:40:11:1a:29:22:89:80:df:4a: 3f:60:5b:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHuYieXJGP8wfFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk ZjgxMGIxMTEtY2RiNy00MDRmLWE5NzMtMzMwY2U1NzA4ODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM9faKgRQD68dm73LDnqtBh31AXIPnqerIlW y2m7X8NfMtEFLWOLJLivFn+kKGNjOYFTkqWwM3N/7RKDG7rFxCKbHtIGhND1TNmr BhpVlzkWP8GOysZuXscQzzRYX9epeJ6ugUDpzxTaGWmfdxqbnBHjpH3PSaTt4Dak VJpVQl0Jvqj56+f5/BOkvIvOebxCCiG2FrqItuvERNhXxmkzRkWicm4PuW9/WKCp 7I4qSFSfzTuxEmRBtdbVXW4dUjp0hu6fgno/e4ELXrbt5PBL1WtYEZoAUF0jcJYn hmhyP4b9zEpoCEada6eUm2oBQK+CSHqqktJ8ZaTbsHPL3KXwcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYIrxq/SiR8lId3MyJfKwrsFSKPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGZiYWEwMjctZDdmNi0z ZjA3LTgxM2EtNDg2OTkyOGMwODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9zPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe3JqbhgIOiYGXdLerj5haL0zJ19XuPCAIhBhJVGX7eRkGdYWZjsCgA Wq1RslYpj8IBltAjvffUpdCQptm3fTPqLAGXN1XEDMUWFz5PlJImc8BPAYphQxfI ow4psBxgd7kmWutRe4GDa/IW3lhAjyiDrr0lKLWL5wkSxRsx5zT96CX5Kamzxuvg E03NxGpxC8pP4+/IS0m0BqE1qMofwDCObnSaYUetv2gqKNLx6ZGmREFDQGi8uPQg MXmVk8yjXQsOqEPorUQjXjc5S3ENqXeEbv5mgKxYLRFtA4kn6gP6JoShNllGbHBX xkgP1k8eYqlcm0ARGikiiYDfSj9gW7I= -----END CERTIFICATE-----Generated at Sat Jun 6 10:56:47 2026 by rpki-client