$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa File: dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa (raw, json) Hash identifier: yH2jbAQMWcWhZfXDblfiu3/SX6RjwTK2I3KnoBSTP+4= Subject key identifier: 9A:A0:1F:AC:2D:44:52:8C:00:C7:70:F4:CA:BA:65:10:6E:10:AE:3E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DFA7088C6D1D87D640395FA40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 20940 IP address blocks: 23.204.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:88:c6:d1:d8:7d:64:03:95:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=397ea6e3-0890-4b98-adad-89f02773e14f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:26:72:96:77:ec:a0:80:5d:8a:12:0f:d3: 89:7d:a3:4d:9d:3b:45:1d:36:40:42:6d:4d:c2:f7: f7:5a:b3:4d:76:e2:26:bb:cc:71:af:a2:37:02:6d: ac:6b:d2:93:da:db:a2:a3:d9:0f:c3:08:ea:f3:d6: f1:f6:ca:bc:be:a9:d0:d4:aa:0c:4a:1e:92:e1:78: 13:0d:8a:57:84:5f:d2:05:08:9b:48:bf:31:82:4b: 26:09:02:2c:9f:25:ae:84:73:81:b0:54:21:65:5e: f3:43:c9:2a:ad:aa:58:6a:d3:01:c4:c8:9a:82:93: a1:5b:87:28:37:5c:5a:6e:90:fe:55:d6:28:7b:7e: 3b:c3:77:44:78:5f:45:ac:04:c1:a0:5e:38:69:69: db:a0:0c:43:78:53:13:00:7f:15:23:80:02:12:98: f5:e4:36:ca:f7:97:10:03:83:7c:86:45:a1:6e:13: 0d:f5:db:4b:d6:de:5b:e3:fb:be:ac:43:7a:75:df: 8c:4f:21:5e:76:da:f1:52:fe:bf:1f:42:6d:1f:02: b0:c3:0e:50:d8:37:05:b4:ab:34:60:f1:4a:ab:10: 24:e2:a5:06:db:80:f3:d9:a2:f9:fa:45:d2:c4:09: 49:c8:53:c4:6f:4b:a9:59:77:87:26:32:b6:7c:ae: 53:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A0:1F:AC:2D:44:52:8C:00:C7:70:F4:CA:BA:65:10:6E:10:AE:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:50:44:df:2e:7d:2e:66:9b:d1:28:6d:9c:e4:98:1f:0b:5e: 5b:e3:49:49:b4:58:b9:50:cf:c2:02:45:a9:b7:c3:49:5c:66: 66:b0:8c:6d:2a:47:df:72:28:53:82:3c:94:e6:47:05:73:27: a8:51:46:34:46:5d:6d:49:27:cc:ac:7e:01:e7:5d:67:f1:4b: 5b:bc:ac:3f:f9:b6:3d:22:fb:c4:0a:08:af:0f:46:cb:8f:9c: ed:b2:18:4b:a5:3f:5e:a0:7b:24:a1:44:29:6e:85:25:3f:77: b9:28:8b:f7:1d:3e:af:35:e0:ce:5e:dc:31:2d:c4:79:f4:ad: 39:64:94:d2:fe:0c:87:a9:4f:d4:a3:a7:7f:e3:66:4d:f0:68: ec:37:8d:ab:9a:d3:06:55:1f:0e:f1:ae:9f:ad:da:d3:47:19: 4f:14:b0:79:a2:64:e2:32:6c:af:d5:73:a5:b6:2d:41:f7:ea: bf:8e:0c:d2:01:d9:d0:d6:36:bb:f0:e7:7f:68:45:9e:ad:ad: 26:7d:bf:72:c3:f9:d1:59:70:2e:0d:32:76:49:64:ad:63:a6: 3f:a4:50:26:4e:20:89:7f:3f:17:1d:3c:49:49:ca:24:17:01: 65:1f:8c:86:7f:b1:fe:96:36:04:4b:06:8e:69:a1:6c:1d:31: e9:47:c3:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cIjG0dh9ZAOV+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk Mzk3ZWE2ZTMtMDg5MC00Yjk4LWFkYWQtODlmMDI3NzNlMTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrImcpZ37KCAXYoSD9OJfaNNnTtFHTZAQm1N wvf3WrNNduImu8xxr6I3Am2sa9KT2tuio9kPwwjq89bx9sq8vqnQ1KoMSh6S4XgT DYpXhF/SBQibSL8xgksmCQIsnyWuhHOBsFQhZV7zQ8kqrapYatMBxMiagpOhW4co N1xabpD+VdYoe347w3dEeF9FrATBoF44aWnboAxDeFMTAH8VI4ACEpj15DbK95cQ A4N8hkWhbhMN9dtL1t5b4/u+rEN6dd+MTyFedtrxUv6/H0JtHwKwww5Q2DcFtKs0 YPFKqxAk4qUG24Dz2aL5+kXSxAlJyFPEb0upWXeHJjK2fK5TgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqgH6wtRFKMAMdw9Mq6ZRBuEK4+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGFmY2FjMWEtMTRmMi0z YjFlLTk5NDMtMGI3ZjQ3YzQzMjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8yKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRQRN8ufS5mm9EobZzkmB8LXlvjSUm0WLlQz8ICRam3w0lcZmawjG0q R99yKFOCPJTmRwVzJ6hRRjRGXW1JJ8ysfgHnXWfxS1u8rD/5tj0i+8QKCK8PRsuP nO2yGEulP16geyShRCluhSU/d7koi/cdPq814M5e3DEtxHn0rTlklNL+DIepT9Sj p3/jZk3waOw3jaua0wZVHw7xrp+t2tNHGU8UsHmiZOIybK/Vc6W2LUH36r+ODNIB 2dDWNrvw539oRZ6trSZ9v3LD+dFZcC4NMnZJZK1jpj+kUCZOIIl/PxcdPElJyiQX AWUfjIZ/sf6WNgRLBo5poWwdMelHwzA= -----END CERTIFICATE-----Generated at Sat Jun 6 12:12:18 2026 by rpki-client