$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c4eb6de-c2e5-3933-b80e-2579c1d02ae3.roa File: 9c4eb6de-c2e5-3933-b80e-2579c1d02ae3.roa (raw, json) Hash identifier: zvU1YBoPrCJfr0MVKvF/V1P5YbYUd0tiTHutIOlY13s= Subject key identifier: DD:90:AC:2A:F1:B9:9F:A0:40:48:97:90:0D:21:62:A2:3D:30:3D:8A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DFBD61D05D70252C7D7F01800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c4eb6de-c2e5-3933-b80e-2579c1d02ae3.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 20940 IP address blocks: 23.211.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d6:1d:05:d7:02:52:c7:d7:f0:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=1a791d16-a74a-4974-b0d6-2a2e3002303c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:58:63:5c:89:67:f5:1c:a6:f9:f2:81:e9:46: d2:64:46:5a:31:c1:a5:c9:11:b2:89:95:32:80:f6: e2:26:c5:1d:ba:72:b7:5e:7b:d4:c1:25:dd:81:97: 99:95:ff:81:31:c3:f0:62:89:7c:c4:35:84:22:dd: a6:1a:de:d9:2c:b5:ac:8f:62:fe:b8:d0:ce:3e:ae: 5d:13:4b:d0:d1:43:f1:e5:2a:47:60:4e:45:bb:df: c0:4d:c2:98:b4:78:6b:6e:92:11:f6:0d:d3:37:84: 9f:4e:3b:5d:5a:12:18:33:40:5a:f4:37:61:0a:af: 86:36:19:71:b6:aa:71:fe:48:37:00:91:f0:4a:56: 6a:c2:90:2a:b7:54:36:b9:13:33:b8:f8:bd:14:fd: 3f:68:37:c4:5a:ef:f2:aa:a8:2c:15:71:f0:63:4b: 5d:c1:2e:71:b2:14:40:61:f5:a1:dd:5c:61:ab:32: e9:eb:1e:13:e2:de:28:73:0a:6c:ff:c6:1c:bf:46: 7d:85:c2:97:cd:4a:96:1f:30:93:67:61:63:7d:75: 06:f7:2f:b6:e7:a0:6d:72:cd:73:d7:71:97:26:42: 20:f3:16:45:03:ff:d5:5d:54:90:cd:a1:6f:9d:8e: 95:5d:b8:57:4c:49:97:fb:36:35:0e:4f:f9:09:27: 8c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:90:AC:2A:F1:B9:9F:A0:40:48:97:90:0D:21:62:A2:3D:30:3D:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c4eb6de-c2e5-3933-b80e-2579c1d02ae3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:49:68:3f:83:dd:c6:84:4a:da:71:15:7a:1d:8a:25:4e:e3: 40:2d:7c:32:5a:a1:4c:1a:f9:a7:06:b5:38:e4:51:45:45:f6: 37:50:3d:98:ba:02:b3:38:db:56:ce:07:22:3a:2a:66:87:35: 01:1f:09:44:1b:2e:6b:f0:b8:39:13:80:43:04:8d:3d:44:b1: a2:cb:e9:a9:0b:5f:cf:c3:21:f2:07:1d:92:91:3a:c4:0a:c5: 69:3c:f7:0d:28:a9:c4:c9:f6:77:af:44:6c:11:36:c8:7b:3c: 24:31:50:62:ce:5e:3d:28:94:32:6f:25:d1:73:1c:df:45:d1: 9e:57:98:4c:71:bc:ff:54:74:cc:56:5b:d3:1c:c6:27:82:b7: 66:24:31:9b:6f:f4:1a:2c:ae:e0:45:7b:ae:a7:ff:72:a7:9c: b3:19:c6:14:b0:bb:62:af:e0:8a:d6:ac:a3:33:3c:4e:2c:e3: 83:f8:ac:82:e6:e0:54:98:6b:27:79:70:c7:f7:cf:e7:8b:33: 82:b5:c8:e4:3c:cb:ea:9c:22:91:aa:c4:86:5d:d8:00:07:4e: e0:ab:75:b4:f7:95:43:ec:e2:c7:44:b3:40:a6:e1:38:12:36: 68:55:ae:a0:79:e4:d8:25:e2:e1:52:d8:b4:3a:ba:af:38:3e: a2:8c:00:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371h0F1wJSx9fwGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk MWE3OTFkMTYtYTc0YS00OTc0LWIwZDYtMmEyZTMwMDIzMDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFhjXIln9Rym+fKB6UbSZEZaMcGlyRGyiZUy gPbiJsUdunK3XnvUwSXdgZeZlf+BMcPwYol8xDWEIt2mGt7ZLLWsj2L+uNDOPq5d E0vQ0UPx5SpHYE5Fu9/ATcKYtHhrbpIR9g3TN4SfTjtdWhIYM0Ba9DdhCq+GNhlx tqpx/kg3AJHwSlZqwpAqt1Q2uRMzuPi9FP0/aDfEWu/yqqgsFXHwY0tdwS5xshRA YfWh3VxhqzLp6x4T4t4ocwps/8Ycv0Z9hcKXzUqWHzCTZ2FjfXUG9y+256Btcs1z 13GXJkIg8xZFA//VXVSQzaFvnY6VXbhXTEmX+zY1Dk/5CSeMlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2QrCrxuZ+gQEiXkA0hYqI9MD2KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWM0ZWI2ZGUtYzJlNS0z OTMzLWI4MGUtMjU3OWMxZDAyYWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9N3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtJaD+D3caEStpxFXodiiVO40AtfDJaoUwa+acGtTjkUUVF9jdQPZi6 ArM421bOByI6KmaHNQEfCUQbLmvwuDkTgEMEjT1EsaLL6akLX8/DIfIHHZKROsQK xWk89w0oqcTJ9nevRGwRNsh7PCQxUGLOXj0olDJvJdFzHN9F0Z5XmExxvP9UdMxW W9McxieCt2YkMZtv9BosruBFe66n/3KnnLMZxhSwu2Kv4IrWrKMzPE4s44P4rILm 4FSYayd5cMf3z+eLM4K1yOQ8y+qcIpGqxIZd2AAHTuCrdbT3lUPs4sdEs0Cm4TgS NmhVrqB55Ngl4uFS2LQ6uq84PqKMAEo= -----END CERTIFICATE-----Generated at Sat Jun 6 12:11:30 2026 by rpki-client