$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de2f9392-114b-3d8f-8d0a-fa6cc60ded25.roa File: de2f9392-114b-3d8f-8d0a-fa6cc60ded25.roa (raw, json) Hash identifier: +OzHN7iEhrmd2XgqHrZPDChjxh1uLWpXPldVIyB0oAw= Subject key identifier: 0A:86:80:98:D6:62:90:87:00:CE:54:AE:D0:FB:84:09:62:75:13:57 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DE41B45CDD7A1136AE7887440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de2f9392-114b-3d8f-8d0a-fa6cc60ded25.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 20940 IP address blocks: 23.195.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:45:cd:d7:a1:13:6a:e7:88:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=1299c8dc-84c0-44e7-8ba5-3faa823a3316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:aa:9c:e3:db:ff:d2:5e:31:e5:c0:47:ef:17: 5c:f5:2c:3b:6f:99:5f:51:8b:f2:1f:44:df:90:e2: 4b:04:fd:aa:d0:97:74:0d:07:0e:cb:7a:9b:dd:0d: d5:b2:4c:59:8f:53:60:01:bd:04:9e:9e:32:54:9e: ef:31:4e:9a:fc:df:6a:43:72:c9:c7:e6:e4:b3:e4: 00:7d:c6:cc:c2:9d:d5:e3:57:f4:6f:ee:c2:e4:23: 90:6b:04:66:81:2a:77:f7:4e:a9:3e:cb:48:ae:51: 46:9c:04:73:3d:34:8d:bf:e4:80:34:86:17:03:5b: 5d:24:e5:56:39:f8:9b:33:62:43:8a:c3:0d:51:0a: ef:c2:55:84:26:ad:3c:98:83:9a:4d:c3:6f:9d:bc: 87:98:78:f7:b2:b3:6c:fd:21:9a:40:ff:35:c5:29: 94:bf:62:4b:a0:c7:60:6b:14:cf:da:96:f7:c1:eb: 79:93:d0:e5:d3:6f:18:28:72:70:b7:d9:b8:73:3d: fd:f2:ea:29:0c:c2:6a:16:42:d2:d8:bb:d3:14:f7: 25:58:ad:0a:e5:d1:41:2a:40:02:af:c0:ef:85:41: 9b:59:3b:ab:25:f2:ad:9b:41:fa:83:b0:5b:4f:10: 01:58:6b:74:9a:37:06:83:93:cd:fd:e5:7f:03:7a: 38:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:86:80:98:D6:62:90:87:00:CE:54:AE:D0:FB:84:09:62:75:13:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de2f9392-114b-3d8f-8d0a-fa6cc60ded25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:7b:55:b4:a5:ff:79:7b:26:7b:66:77:93:b2:43:04:cb:2b: f9:77:37:7b:8b:53:c3:98:80:83:63:8d:01:56:a1:cd:a2:6b: 48:8b:90:ec:47:0e:3f:af:70:f4:04:37:c5:24:df:ed:fc:15: 21:50:94:a1:fd:68:a1:7e:3c:58:5b:32:b4:ad:e0:20:3b:7e: 2c:42:44:27:0c:b0:e7:db:6a:a7:f5:0d:9f:75:15:8c:cf:9b: 1e:b9:bc:5f:e5:82:cb:b7:65:df:13:36:0b:ff:5b:2b:5b:62: 44:37:8e:59:a8:e2:df:bb:0b:19:f2:16:6c:f2:73:31:b9:98: f0:39:cb:e7:d2:1a:f4:06:8d:3e:5e:70:48:86:e5:5f:be:28: ba:da:6c:64:c2:66:55:55:c7:88:f9:ba:cb:6d:e5:72:16:90: f1:a5:a7:9c:2b:2d:9f:6d:53:23:74:95:39:0c:bd:4b:86:f6: 82:99:b7:aa:93:3a:8d:b7:52:06:da:f7:2c:c5:a3:b5:93:04: 7a:e9:a8:7e:55:2d:0c:f9:cd:ac:a4:ed:e7:e7:42:18:16:13: d7:19:a1:da:7e:a8:0b:cc:64:85:66:48:af:1b:31:c7:27:8f: 68:90:4d:37:b4:b4:b2:f2:b7:f9:3a:93:02:c0:51:c1:0d:3a: b9:8b:13:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG0XN16ETaueIdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk MTI5OWM4ZGMtODRjMC00NGU3LThiYTUtM2ZhYTgyM2EzMzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6qc49v/0l4x5cBH7xdc9Sw7b5lfUYvyH0Tf kOJLBP2q0Jd0DQcOy3qb3Q3VskxZj1NgAb0Enp4yVJ7vMU6a/N9qQ3LJx+bks+QA fcbMwp3V41f0b+7C5COQawRmgSp3906pPstIrlFGnARzPTSNv+SANIYXA1tdJOVW OfibM2JDisMNUQrvwlWEJq08mIOaTcNvnbyHmHj3srNs/SGaQP81xSmUv2JLoMdg axTP2pb3wet5k9Dl028YKHJwt9m4cz398uopDMJqFkLS2LvTFPclWK0K5dFBKkAC r8DvhUGbWTurJfKtm0H6g7BbTxABWGt0mjcGg5PN/eV/A3o4MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqGgJjWYpCHAM5UrtD7hAlidRNXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGUyZjkzOTItMTE0Yi0z ZDhmLThkMGEtZmE2Y2M2MGRlZDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8McMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABR7VbSl/3l7Jntmd5OyQwTLK/l3N3uLU8OYgINjjQFWoc2ia0iLkOxH Dj+vcPQEN8Uk3+38FSFQlKH9aKF+PFhbMrSt4CA7fixCRCcMsOfbaqf1DZ91FYzP mx65vF/lgsu3Zd8TNgv/WytbYkQ3jlmo4t+7CxnyFmzyczG5mPA5y+fSGvQGjT5e cEiG5V++KLrabGTCZlVVx4j5ustt5XIWkPGlp5wrLZ9tUyN0lTkMvUuG9oKZt6qT Oo23Ugba9yzFo7WTBHrpqH5VLQz5zayk7efnQhgWE9cZodp+qAvMZIVmSK8bMccn j2iQTTe0tLLyt/k6kwLAUcENOrmLE9A= -----END CERTIFICATE-----Generated at Sat Jun 6 10:53:06 2026 by rpki-client