$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d96d7b2e-fba2-392f-89a6-b3544d82800d.roa File: d96d7b2e-fba2-392f-89a6-b3544d82800d.roa (raw, json) Hash identifier: fTcZQ0fHR2bgq5Sl9edpT4dU02W6rhjnvPM8Th2j8ds= Subject key identifier: C5:29:78:36:47:D8:EA:29:A6:6F:7F:53:30:2F:D9:02:85:49:CA:80 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E0C1EE9AAB0D47164B0798300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d96d7b2e-fba2-392f-89a6-b3544d82800d.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 20940 IP address blocks: 23.223.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:e9:aa:b0:d4:71:64:b0:79:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=18af0370-e70d-404c-8173-c7fb7c4d0192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e6:76:60:86:4f:f7:e0:c9:e7:ba:cc:50:42: e3:9a:9e:b0:fd:76:1e:52:0a:81:33:b4:45:35:b6: 6f:fc:9d:40:c1:e4:c6:ff:d1:9a:82:73:97:61:4e: 21:75:22:17:e7:4f:2b:bb:cc:aa:36:07:a2:1a:75: 58:6b:58:75:aa:44:b5:2f:a0:3f:95:14:a9:1e:e8: a5:15:93:c5:4b:a9:ad:99:5b:5b:43:10:cd:e5:c1: 08:67:ce:d5:9d:08:d6:39:b0:b8:a0:20:50:75:10: c2:c6:bc:42:f5:e8:be:62:a3:96:17:0c:d2:4d:7b: f9:f5:ae:52:dd:96:34:66:ae:c7:70:75:10:4c:3a: a0:d5:2b:50:1b:21:52:4e:71:be:cd:a5:76:6e:35: 72:14:59:b8:8c:63:1b:28:cc:8f:03:c0:d9:99:2c: 09:94:f9:c3:51:cc:ff:27:93:2b:c3:df:f2:f2:c1: 9b:fd:b2:36:55:d5:a5:bf:e5:52:e4:4f:6a:1e:bf: aa:ff:59:d7:45:ea:fa:53:ac:3d:0c:2c:3c:cf:70: fd:16:19:38:12:82:78:4a:6d:25:f1:11:9c:f6:08: 3f:2c:74:66:a9:82:1b:ba:4a:4b:60:3a:07:99:f0: 8c:13:93:8a:9b:e2:5c:af:94:a8:2c:fe:e7:37:4a: 0b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:29:78:36:47:D8:EA:29:A6:6F:7F:53:30:2F:D9:02:85:49:CA:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d96d7b2e-fba2-392f-89a6-b3544d82800d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:09:ae:01:dc:ff:06:76:30:db:db:5d:63:65:49:96:9f:3b: 06:b9:67:b8:64:31:6e:8f:63:62:85:59:c0:36:8b:56:3b:23: 4f:07:21:5c:62:34:e7:24:4a:85:0d:58:0f:d0:cf:63:66:13: 6f:34:62:2e:00:c1:a2:84:7d:7d:6a:48:9b:61:9a:88:85:d4: fb:1d:34:73:83:bf:73:a7:a4:99:27:a8:6a:18:bf:64:02:35: e5:9c:9f:a2:5a:07:15:68:07:05:3f:3f:f3:9a:49:8b:2b:23: 34:15:61:9d:c4:12:4f:2d:ed:22:06:68:1f:09:a5:ec:59:aa: 84:54:92:33:be:c0:4f:06:53:a2:e2:c6:bf:d8:1c:a9:3a:b7: 17:43:d5:ae:c3:12:cc:5f:4e:59:d0:e8:7a:3b:23:15:89:78: 4a:9b:7e:38:12:ac:ce:96:d8:cf:0d:c0:bf:79:6c:60:2d:ee: c2:c2:2e:7d:b5:0e:ab:6d:29:de:b4:e3:00:04:64:22:3a:ec: 51:29:1d:c5:66:c4:fa:99:1e:2a:4d:8c:3c:ce:5b:9d:6e:0b: 60:9d:1d:86:22:74:ee:4c:28:ea:0a:29:9d:7e:21:94:0c:5f: 60:4c:46:97:68:69:37:e1:9e:d3:78:9c:65:84:09:76:9b:e0: 7a:be:bc:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHumqsNRxZLB5gwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk MThhZjAzNzAtZTcwZC00MDRjLTgxNzMtYzdmYjdjNGQwMTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquZ2YIZP9+DJ57rMUELjmp6w/XYeUgqBM7RF NbZv/J1AweTG/9GagnOXYU4hdSIX508ru8yqNgeiGnVYa1h1qkS1L6A/lRSpHuil FZPFS6mtmVtbQxDN5cEIZ87VnQjWObC4oCBQdRDCxrxC9ei+YqOWFwzSTXv59a5S 3ZY0Zq7HcHUQTDqg1StQGyFSTnG+zaV2bjVyFFm4jGMbKMyPA8DZmSwJlPnDUcz/ J5Mrw9/y8sGb/bI2VdWlv+VS5E9qHr+q/1nXRer6U6w9DCw8z3D9Fhk4EoJ4Sm0l 8RGc9gg/LHRmqYIbukpLYDoHmfCME5OKm+Jcr5SoLP7nN0oLBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUpeDZH2Ooppm9/UzAv2QKFScqAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDk2ZDdiMmUtZmJhMi0z OTJmLTg5YTYtYjM1NDRkODI4MDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9/TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQJrgHc/wZ2MNvbXWNlSZafOwa5Z7hkMW6PY2KFWcA2i1Y7I08HIVxi NOckSoUNWA/Qz2NmE280Yi4AwaKEfX1qSJthmoiF1PsdNHODv3OnpJknqGoYv2QC NeWcn6JaBxVoBwU/P/OaSYsrIzQVYZ3EEk8t7SIGaB8JpexZqoRUkjO+wE8GU6Li xr/YHKk6txdD1a7DEsxfTlnQ6Ho7IxWJeEqbfjgSrM6W2M8NwL95bGAt7sLCLn21 DqttKd604wAEZCI67FEpHcVmxPqZHipNjDzOW51uC2CdHYYidO5MKOoKKZ1+IZQM X2BMRpdoaTfhntN4nGWECXab4Hq+vIU= -----END CERTIFICATE-----Generated at Sat Jun 6 10:56:52 2026 by rpki-client