$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ffde1f8-61fe-328f-8ef9-e2e063f99cd5.roa File: 9ffde1f8-61fe-328f-8ef9-e2e063f99cd5.roa (raw, json) Hash identifier: nK+Prq9S9JmUdCe+MRuZ2Co4B7e4OITdE0QGJSpRcQA= Subject key identifier: C4:03:50:FD:4D:D2:E0:DD:72:7D:33:88:3C:18:AD:15:3B:5B:F6:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E0C1EE509215E8BD2E90A2580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ffde1f8-61fe-328f-8ef9-e2e063f99cd5.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 55836 IP address blocks: 23.220.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:e5:09:21:5e:8b:d2:e9:0a:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=5a0aeddb-b8b4-46f2-84c6-17d5f373c43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:72:09:2a:c9:c1:d1:22:4c:c4:5d:bc:05:7c: 67:e7:3d:4e:cd:1c:2c:f8:3a:21:93:6b:ab:26:50: f3:4d:da:0b:ac:66:2c:aa:72:ae:e8:eb:1b:c7:dc: ba:7e:77:47:d7:2e:ac:81:01:bc:42:94:47:b1:6f: 76:fb:7b:bd:c4:ec:d5:ec:fb:cb:04:0a:84:d8:b9: 14:d6:3f:04:9b:a1:01:74:47:86:dd:a8:98:90:e4: c8:9b:b4:a6:6f:94:28:f9:b4:7e:ff:24:9a:f2:8a: e1:79:8a:17:c6:99:53:9e:f1:c8:70:e7:d5:a3:ab: 26:7c:28:3d:c9:c1:ab:7b:84:7b:70:e9:1b:42:54: 01:4f:b9:c1:a0:d3:d7:c9:c8:05:29:d6:b2:66:4b: 0d:af:70:a2:b5:f5:d9:ae:f2:16:de:a1:e0:f5:8a: 7f:d1:bc:08:db:6a:3e:96:af:22:d4:ab:3b:d0:ed: 75:6c:4d:27:c0:7e:28:d6:cc:96:f8:7e:ac:f7:32: ed:1d:07:6d:cc:bd:cb:1b:49:86:db:62:6f:ff:82: 0a:79:a2:24:ae:a8:fe:08:5d:9d:2f:f8:d6:63:58: 16:dd:a7:4e:ec:72:4c:a9:cc:f0:5b:00:75:b3:c2: da:35:1d:af:8c:47:24:80:96:87:ae:2d:71:71:fa: 0e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:03:50:FD:4D:D2:E0:DD:72:7D:33:88:3C:18:AD:15:3B:5B:F6:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ffde1f8-61fe-328f-8ef9-e2e063f99cd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:c4:65:2c:4c:c2:7e:85:89:2a:6b:7b:8b:c4:fd:70:b7:e2: 09:a0:27:ca:d4:3b:21:70:62:bf:70:0c:e0:50:18:a7:7b:2d: 78:dd:c1:95:51:24:26:66:3d:e8:68:3c:39:02:14:3e:eb:64: 0e:33:a4:3f:b6:6d:68:45:1b:23:58:04:a1:28:b3:7c:69:39: d7:6b:fc:88:e9:16:8e:0f:27:c8:23:b6:06:5f:66:41:d5:58: d5:b2:b5:d5:82:17:82:9b:bc:65:7e:70:37:91:62:ff:9a:6e: 0a:74:b5:ee:5c:83:43:d3:9c:01:1d:0d:82:ee:5d:70:df:73: db:86:c5:89:1a:bd:56:14:6c:1c:c2:b2:4f:64:57:83:fd:9d: 5a:de:b5:6f:4c:99:89:f1:5e:bd:16:6e:17:1f:8a:ca:c6:00: e0:4f:96:5a:c0:5c:2a:4e:a2:11:31:b1:bb:28:e2:4d:51:1c: 85:81:d0:3d:72:d7:6b:c0:43:33:83:a9:98:3e:53:8b:3c:4c: 7c:0c:67:6d:06:b2:dd:34:48:52:8e:8c:d2:b2:7e:4d:ef:be: aa:c3:a2:c2:72:39:57:b7:7e:9e:9d:d7:43:0f:02:94:7a:ad: 5c:84:07:d8:e9:3e:bd:c8:7b:02:b3:c0:89:d9:8e:79:2f:4d: 19:d7:a6:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHuUJIV6L0ukKJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk NWEwYWVkZGItYjhiNC00NmYyLTg0YzYtMTdkNWYzNzNjNDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3IJKsnB0SJMxF28BXxn5z1OzRws+Dohk2ur JlDzTdoLrGYsqnKu6Osbx9y6fndH1y6sgQG8QpRHsW92+3u9xOzV7PvLBAqE2LkU 1j8Em6EBdEeG3aiYkOTIm7Smb5Qo+bR+/ySa8orheYoXxplTnvHIcOfVo6smfCg9 ycGre4R7cOkbQlQBT7nBoNPXycgFKdayZksNr3CitfXZrvIW3qHg9Yp/0bwI22o+ lq8i1Ks70O11bE0nwH4o1syW+H6s9zLtHQdtzL3LG0mG22Jv/4IKeaIkrqj+CF2d L/jWY1gW3adO7HJMqczwWwB1s8LaNR2vjEckgJaHri1xcfoOCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQDUP1N0uDdcn0ziDwYrRU7W/aQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWZmZGUxZjgtNjFmZS0z MjhmLThlZjktZTJlMDYzZjk5Y2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9xYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfEZSxMwn6FiSpre4vE/XC34gmgJ8rUOyFwYr9wDOBQGKd7LXjdwZVR JCZmPehoPDkCFD7rZA4zpD+2bWhFGyNYBKEos3xpOddr/IjpFo4PJ8gjtgZfZkHV WNWytdWCF4KbvGV+cDeRYv+abgp0te5cg0PTnAEdDYLuXXDfc9uGxYkavVYUbBzC sk9kV4P9nVretW9MmYnxXr0WbhcfisrGAOBPllrAXCpOohExsbso4k1RHIWB0D1y 12vAQzODqZg+U4s8THwMZ20Gst00SFKOjNKyfk3vvqrDosJyOVe3fp6d10MPApR6 rVyEB9jpPr3IewKzwInZjnkvTRnXpjg= -----END CERTIFICATE-----Generated at Sat Jun 6 10:50:13 2026 by rpki-client