$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5e0f0dc-02b6-39e2-9e90-00e642aa1a8d.roa File: a5e0f0dc-02b6-39e2-9e90-00e642aa1a8d.roa (raw, json) Hash identifier: caJ3jvJeEHr3bAf+RObrvXuZ6rK4M0Po+2L44CZ8gRI= Subject key identifier: 4D:57:68:75:CB:56:66:38:0A:93:4D:20:FB:5B:D6:F6:DF:BE:C3:CB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DD8F070DCD50C722116C99D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5e0f0dc-02b6-39e2-9e90-00e642aa1a8d.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 20940 IP address blocks: 23.192.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:70:dc:d5:0c:72:21:16:c9:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=48ca6561-4037-46e2-a29b-2e4d51ae99cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f0:cf:09:82:0d:78:a3:28:e5:91:ae:64:32: 55:da:6d:a0:f0:e3:ca:eb:91:77:ce:1c:23:a3:ac: c2:47:fb:df:a5:5f:d6:84:01:48:a7:f7:86:a7:90: 44:57:c6:25:9c:83:af:59:fb:b4:c9:2b:13:1e:4b: c8:b6:b5:c7:3a:46:32:41:9c:e8:d1:98:75:7f:69: ff:c8:35:23:a7:34:3e:9b:13:7d:e4:d5:19:30:35: 7e:13:19:2b:71:c4:f0:a8:b9:8c:c5:63:94:ac:85: 21:32:29:10:13:1a:1a:01:dd:f4:e1:43:b9:f6:7b: 14:86:f3:4e:ff:99:7a:71:ea:15:8b:86:01:20:c6: 22:02:3a:fc:c4:7c:db:e0:1c:7c:38:90:f9:62:35: f1:e1:f2:f8:2c:05:54:27:9a:c8:d6:6b:d8:57:3c: c1:d5:31:93:32:c6:2c:2d:e7:16:a0:59:83:8a:d1: 50:24:73:bd:3a:98:ba:66:74:c5:f2:f3:97:9a:fe: ee:0e:87:78:ca:3f:45:33:10:be:41:7d:4b:1d:1b: a1:2e:52:3a:f2:75:f7:23:6b:da:b0:2b:06:76:2a: e9:00:c5:17:0f:62:5e:60:96:d0:03:9e:e9:fa:45: b9:e5:14:81:8b:60:7f:48:7b:04:32:82:92:1d:b6: 3f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:57:68:75:CB:56:66:38:0A:93:4D:20:FB:5B:D6:F6:DF:BE:C3:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5e0f0dc-02b6-39e2-9e90-00e642aa1a8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:85:f6:ea:0c:0b:db:5e:45:32:d2:bf:13:5a:77:1a:f4:f3: 1f:03:a1:56:2b:2b:15:57:3b:a7:c8:4d:94:74:b9:56:73:00: c8:28:88:f9:b4:a8:21:62:10:c3:58:64:27:58:e1:b3:3a:51: db:d8:4e:1a:96:16:32:02:e9:60:13:a8:a1:5d:74:fb:11:f0: 67:e5:cd:b7:a8:d7:30:4d:fd:71:ea:c6:59:67:8c:cd:92:e5: 23:f8:fd:a0:1b:11:5c:0f:6c:f3:d5:cb:b6:56:fa:a9:ea:a6: 24:50:9b:7b:ac:ec:b1:eb:02:81:44:ef:0f:d7:d3:3d:91:52: 1d:27:f9:6f:e2:48:d5:12:08:83:2e:c3:7d:70:d7:b8:3c:fa: 59:86:c7:f8:6e:86:bb:b1:b3:b6:07:e2:cf:fe:27:28:c8:cc: c9:d9:e7:c9:1b:1e:00:db:08:89:07:86:f6:8c:3a:36:26:5b: 46:a8:62:52:16:7b:2e:dc:23:b3:6b:40:6d:51:5e:e1:e1:d1: 41:0d:f7:a3:09:18:ac:0c:47:d1:df:c2:96:36:47:c8:3c:59: 5f:28:d2:22:c7:78:71:ab:f9:88:ff:90:a8:fd:0f:da:12:b3: aa:51:ef:f9:92:82:92:70:57:cd:7b:47:3c:99:5f:e4:b1:e7: 5e:b9:87:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8HDc1QxyIRbJnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk NDhjYTY1NjEtNDAzNy00NmUyLWEyOWItMmU0ZDUxYWU5OWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/DPCYINeKMo5ZGuZDJV2m2g8OPK65F3zhwj o6zCR/vfpV/WhAFIp/eGp5BEV8YlnIOvWfu0ySsTHkvItrXHOkYyQZzo0Zh1f2n/ yDUjpzQ+mxN95NUZMDV+ExkrccTwqLmMxWOUrIUhMikQExoaAd304UO59nsUhvNO /5l6ceoVi4YBIMYiAjr8xHzb4Bx8OJD5YjXx4fL4LAVUJ5rI1mvYVzzB1TGTMsYs LecWoFmDitFQJHO9Opi6ZnTF8vOXmv7uDod4yj9FMxC+QX1LHRuhLlI68nX3I2va sCsGdirpAMUXD2JeYJbQA57p+kW55RSBi2B/SHsEMoKSHbY/TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1XaHXLVmY4CpNNIPtb1vbfvsPLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTVlMGYwZGMtMDJiNi0z OWUyLTllOTAtMDBlNjQyYWExYThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8DlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaF9uoMC9teRTLSvxNadxr08x8DoVYrKxVXO6fITZR0uVZzAMgoiPm0 qCFiEMNYZCdY4bM6UdvYThqWFjIC6WATqKFddPsR8Gflzbeo1zBN/XHqxllnjM2S 5SP4/aAbEVwPbPPVy7ZW+qnqpiRQm3us7LHrAoFE7w/X0z2RUh0n+W/iSNUSCIMu w31w17g8+lmGx/huhruxs7YH4s/+JyjIzMnZ58kbHgDbCIkHhvaMOjYmW0aoYlIW ey7cI7NrQG1RXuHh0UEN96MJGKwMR9HfwpY2R8g8WV8o0iLHeHGr+Yj/kKj9D9oS s6pR7/mSgpJwV817RzyZX+Sx5165hzM= -----END CERTIFICATE-----Generated at Sat Jun 6 12:11:37 2026 by rpki-client