$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a401b9ce-91c6-364d-bf85-56b1a59df6e8.roa File: a401b9ce-91c6-364d-bf85-56b1a59df6e8.roa (raw, json) Hash identifier: EoRySo2Vr1tFW6s5OwRSJ36B3T7QkGJg+Zg+8R3pCqw= Subject key identifier: 90:ED:55:ED:C6:BD:A7:D5:B6:36:CF:83:23:72:64:28:0B:7C:21:64 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DE6E5D21DBB1187E492624600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a401b9ce-91c6-364d-bf85-56b1a59df6e8.roa Signing time: Thu 21 May 2026 01:00:25 +0000 ROA not before: Thu 21 May 2026 01:00:25 +0000 ROA not after: Wed 19 Aug 2026 01:00:25 +0000 asID: 20940 IP address blocks: 23.199.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e6:e5:d2:1d:bb:11:87:e4:92:62:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 21 01:00:25 2026 GMT Not After : Aug 19 01:00:25 2026 GMT Subject: CN=6d5f7c45-e887-4acc-a717-97b6922db026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1e:1a:e3:7e:78:90:dc:00:df:16:bf:4f:92: 78:b8:53:7b:99:18:44:6b:82:b0:8a:c4:6f:9c:4c: 66:2a:d8:ec:a4:2b:d1:c4:d9:a7:37:8d:da:0c:d0: da:65:49:ed:90:93:d1:13:26:32:20:f2:70:ab:fa: ae:f4:f2:0e:52:e8:7a:ce:2a:8d:91:6f:33:68:3b: 31:27:8c:30:44:b6:42:9e:e0:30:1e:b9:b7:d4:71: 2f:d1:b2:d2:56:8c:d1:13:43:65:f3:c1:31:52:c4: 74:5b:58:1d:67:6f:9f:ec:f9:b7:48:57:15:ac:31: d0:b2:64:25:4e:1c:b1:a9:b3:00:21:0c:4b:42:fa: 61:16:b7:58:e4:08:3b:51:14:e0:ad:3c:86:47:30: 9f:4c:e4:a1:e8:47:8c:43:05:32:d0:28:db:8e:3a: dd:5e:e9:e1:6e:ed:67:bb:fc:dd:be:69:4e:df:29: 7d:59:9f:6c:2f:fe:92:75:9e:49:80:98:64:d5:9d: 6a:f7:fe:96:97:db:c5:ce:d3:7a:70:71:0e:45:e9: 93:cd:9a:62:39:3c:b7:7a:d9:cb:22:8e:0f:da:72: f8:3a:bc:01:36:7a:e2:f8:d4:62:bb:96:0e:d3:e0: f2:75:50:ec:08:7f:3a:f3:bb:aa:12:c0:be:fe:ec: 24:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:ED:55:ED:C6:BD:A7:D5:B6:36:CF:83:23:72:64:28:0B:7C:21:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a401b9ce-91c6-364d-bf85-56b1a59df6e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:f2:5f:69:6b:79:68:8b:0c:71:25:8c:44:50:3c:ba:cd:2b: 18:05:11:ad:46:f5:5b:01:15:9c:8d:c2:7f:c6:9e:93:9c:f5: 6e:8c:52:a9:c9:40:b3:17:45:cd:ae:b3:92:5d:38:df:85:e1: 51:85:65:ce:e5:cf:b8:1b:f8:9c:93:4f:68:3d:f6:ce:41:92: 59:6e:cf:5d:c8:0c:6a:cd:7f:37:cc:de:bb:90:e3:c6:42:d5: 17:0d:d8:c4:6d:ae:a5:e8:19:aa:a8:af:9e:b1:ac:01:f9:e9: 69:66:38:04:22:29:d0:2f:58:58:02:cc:8f:ac:42:31:37:64: 2d:81:6e:1d:f7:0e:fc:83:82:20:a4:46:ef:fd:a3:1c:a8:0f: d0:c0:4b:2e:35:88:75:74:78:1f:e0:20:14:51:90:a4:d5:75: 80:46:c1:1a:6e:11:e3:79:bc:73:ae:7d:40:7a:4f:ab:0b:70: a8:75:d9:7b:1d:6a:96:cd:f2:c6:19:f8:38:3f:41:54:eb:93: ce:fb:14:52:1c:f7:fc:8c:19:dd:a7:5d:95:b5:6e:ea:c2:a7: 08:25:4b:0d:a8:98:1c:32:39:f7:01:b3:d4:aa:fc:04:b3:99: dc:c1:25:d8:56:83:49:3c:ab:08:b0:7d:7b:e9:d1:be:3d:5f: 03:3d:10:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3m5dIduxGH5JJiRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyMTAxMDAyNVoXDTI2MDgxOTAxMDAyNVowLzEtMCsGA1UEAxMk NmQ1ZjdjNDUtZTg4Ny00YWNjLWE3MTctOTdiNjkyMmRiMDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB4a4354kNwA3xa/T5J4uFN7mRhEa4KwisRv nExmKtjspCvRxNmnN43aDNDaZUntkJPREyYyIPJwq/qu9PIOUuh6ziqNkW8zaDsx J4wwRLZCnuAwHrm31HEv0bLSVozRE0Nl88ExUsR0W1gdZ2+f7Pm3SFcVrDHQsmQl ThyxqbMAIQxLQvphFrdY5Ag7URTgrTyGRzCfTOSh6EeMQwUy0CjbjjrdXunhbu1n u/zdvmlO3yl9WZ9sL/6SdZ5JgJhk1Z1q9/6Wl9vFztN6cHEORemTzZpiOTy3etnL Io4P2nL4OrwBNnri+NRiu5YO0+DydVDsCH8687uqEsC+/uwklwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDtVe3GvafVtjbPgyNyZCgLfCFkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTQwMWI5Y2UtOTFjNi0z NjRkLWJmODUtNTZiMWE1OWRmNmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8foMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPyX2lreWiLDHEljERQPLrNKxgFEa1G9VsBFZyNwn/GnpOc9W6MUqnJ QLMXRc2us5JdON+F4VGFZc7lz7gb+JyTT2g99s5Bklluz13IDGrNfzfM3ruQ48ZC 1RcN2MRtrqXoGaqor56xrAH56WlmOAQiKdAvWFgCzI+sQjE3ZC2Bbh33DvyDgiCk Ru/9oxyoD9DASy41iHV0eB/gIBRRkKTVdYBGwRpuEeN5vHOufUB6T6sLcKh12Xsd apbN8sYZ+Dg/QVTrk877FFIc9/yMGd2nXZW1burCpwglSw2omBwyOfcBs9Sq/ASz mdzBJdhWg0k8qwiwfXvp0b49XwM9EME= -----END CERTIFICATE-----Generated at Sat Jun 6 12:10:33 2026 by rpki-client