$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf453dc6-328a-3fb8-afca-a2387c2e7d47.roa File: cf453dc6-328a-3fb8-afca-a2387c2e7d47.roa (raw, json) Hash identifier: fGOqe1nxYeXdnUMDYU8QeYxMPNJjcst/VChO7aoRY8w= Subject key identifier: E3:33:5C:7B:9B:32:DC:20:60:97:29:AB:4C:6F:EB:77:ED:28:D2:00 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E46BF2A7F0DF940C22783E1E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf453dc6-328a-3fb8-afca-a2387c2e7d47.roa Signing time: Wed 24 Jun 2026 09:00:12 +0000 ROA not before: Wed 24 Jun 2026 09:00:12 +0000 ROA not after: Tue 22 Sep 2026 09:00:12 +0000 asID: 16625 IP address blocks: 23.223.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:46:bf:2a:7f:0d:f9:40:c2:27:83:e1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 09:00:12 2026 GMT Not After : Sep 22 09:00:12 2026 GMT Subject: CN=759d1fcb-ec71-4838-9212-0ac01bc25e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1c:46:7c:60:4c:54:ca:65:0b:7f:ab:f2:cd: 57:41:40:c9:51:9b:31:53:17:c9:a0:ad:28:d4:2d: f1:a5:ad:dd:1c:47:f6:ab:d5:04:7c:2a:fb:7e:c7: 45:00:ff:82:8b:ea:fe:6d:27:a0:80:8f:58:58:44: bf:e5:7f:8e:d3:9c:d7:6f:1a:5c:41:40:72:2f:91: 76:61:3f:d2:dd:1c:dc:6a:af:00:76:e1:70:81:f3: f1:f2:43:3e:de:4d:73:5f:56:ce:7d:aa:45:3c:60: 26:61:ca:98:d7:b0:61:f5:ff:1a:04:6a:22:42:28: 71:ec:58:5b:f6:41:05:76:b7:60:fa:6e:81:58:81: 5a:a7:4e:cb:57:7b:b0:22:96:95:d0:2e:81:bc:f7: 7d:df:4f:4d:08:0a:17:ea:20:06:43:2b:36:f6:d7: 1f:78:3b:03:10:4e:35:7d:f6:2e:82:07:bf:7d:44: 81:47:39:da:fd:3c:af:56:7c:31:5a:12:22:dd:3f: e2:a7:b1:d9:aa:32:f8:46:53:f8:1f:c1:5c:7c:f3: 0c:2f:09:b0:4e:6a:e4:cb:43:dd:13:d3:0d:0f:5a: 6f:79:f8:36:6f:24:cf:4e:a6:fb:44:0c:79:bf:4a: d0:bd:29:a9:d0:cc:96:96:f5:3d:30:82:1e:60:e4: 8f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:33:5C:7B:9B:32:DC:20:60:97:29:AB:4C:6F:EB:77:ED:28:D2:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf453dc6-328a-3fb8-afca-a2387c2e7d47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:13:8f:2a:d1:22:9a:ce:64:40:41:32:0b:ef:ef:bf:93:63: 11:0d:45:25:be:41:5f:37:88:bb:97:0a:e5:4a:6a:50:52:35: 67:b7:07:0d:16:53:3e:a7:3c:b1:5e:d9:a3:6f:25:bb:76:cb: a5:2c:42:61:ff:ac:36:a8:20:2c:3e:dd:31:77:5b:2e:23:85: f3:3e:0c:f6:8b:f7:19:a4:da:1a:a0:1b:81:17:62:ae:8f:b9: 6b:f8:62:9d:50:31:9b:c2:3c:d0:23:89:71:a8:d2:d6:24:b5: 6f:09:ca:9a:10:21:eb:b8:4e:57:1a:19:9a:56:11:65:71:fd: f5:35:ff:26:6d:45:59:e1:34:32:fa:64:7d:1c:74:1e:2e:07: 73:d2:58:f5:71:29:07:d3:6e:ef:49:23:fd:14:2f:a9:96:a8: 4c:10:5e:96:80:b3:1b:b3:73:ba:18:68:f1:21:46:7c:ec:13: 25:d8:a0:49:7d:11:e5:dc:78:81:65:fc:86:07:af:d9:e9:fa: b2:e5:67:b9:ce:60:c3:e8:5e:5b:62:4e:e9:06:63:3d:37:04: aa:fc:ec:1a:2f:29:49:18:c9:77:65:8b:06:68:d3:41:a0:eb: a9:c8:17:73:6e:27:9b:46:db:fd:bc:9c:00:61:6a:a6:1a:ef: 25:11:c1:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Gvyp/DflAwieD4eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyNDA5MDAxMloXDTI2MDkyMjA5MDAxMlowLzEtMCsGA1UEAxMk NzU5ZDFmY2ItZWM3MS00ODM4LTkyMTItMGFjMDFiYzI1ZTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhxGfGBMVMplC3+r8s1XQUDJUZsxUxfJoK0o 1C3xpa3dHEf2q9UEfCr7fsdFAP+Ci+r+bSeggI9YWES/5X+O05zXbxpcQUByL5F2 YT/S3Rzcaq8AduFwgfPx8kM+3k1zX1bOfapFPGAmYcqY17Bh9f8aBGoiQihx7Fhb 9kEFdrdg+m6BWIFap07LV3uwIpaV0C6BvPd9309NCAoX6iAGQys29tcfeDsDEE41 ffYugge/fUSBRzna/TyvVnwxWhIi3T/ip7HZqjL4RlP4H8FcfPMMLwmwTmrky0Pd E9MND1pvefg2byTPTqb7RAx5v0rQvSmp0MyWlvU9MIIeYOSP7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMzXHubMtwgYJcpq0xv63ftKNIAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2Y0NTNkYzYtMzI4YS0z ZmI4LWFmY2EtYTIzODdjMmU3ZDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkTjyrRIprOZEBBMgvv77+TYxENRSW+QV83iLuXCuVKalBSNWe3Bw0W Uz6nPLFe2aNvJbt2y6UsQmH/rDaoICw+3TF3Wy4jhfM+DPaL9xmk2hqgG4EXYq6P uWv4Yp1QMZvCPNAjiXGo0tYktW8JypoQIeu4TlcaGZpWEWVx/fU1/yZtRVnhNDL6 ZH0cdB4uB3PSWPVxKQfTbu9JI/0UL6mWqEwQXpaAsxuzc7oYaPEhRnzsEyXYoEl9 EeXceIFl/IYHr9np+rLlZ7nOYMPoXltiTukGYz03BKr87BovKUkYyXdliwZo00Gg 66nIF3NuJ5tG2/28nABhaqYa7yURwfs= -----END CERTIFICATE-----Generated at Tue Jun 30 22:19:54 2026 by rpki-client