$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2baa7a8-a8f6-36fa-8e75-3ecb8aca01b1.roa File: e2baa7a8-a8f6-36fa-8e75-3ecb8aca01b1.roa (raw, json) Hash identifier: cfdkvwpC92xJJY8r5Cl3NhHaxyq1M24IZPEewobcyrU= Subject key identifier: 60:DB:C4:76:72:88:21:5C:01:3D:CA:35:8E:69:48:CA:29:84:4F:09 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DFBD61AF3A2932B7B3B2FA2B0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2baa7a8-a8f6-36fa-8e75-3ecb8aca01b1.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 20940 IP address blocks: 23.209.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d6:1a:f3:a2:93:2b:7b:3b:2f:a2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=3d8c1568-d734-4417-b9a4-af6e10c80e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b6:b2:30:de:32:f1:85:41:31:94:9f:6f:79: 1e:ac:9b:d0:a5:46:94:76:0d:c8:1f:07:8b:f8:26: b2:51:a0:5d:5b:48:3e:bb:3d:04:41:7e:68:7e:ed: 40:43:24:5c:2a:56:b5:d4:80:f6:b5:d8:88:0f:ce: aa:3e:dd:1e:8f:dc:ca:24:a0:0e:4a:16:4a:64:45: f8:b1:8f:e1:88:42:2b:51:87:38:a7:40:e3:62:10: c0:25:98:bb:23:f2:b1:83:e3:02:0c:40:3a:e3:36: 89:95:f0:4f:aa:a8:cc:1a:58:1b:e1:a5:8b:07:1e: 89:c3:39:1c:8c:38:0f:4b:64:67:ac:aa:9f:b4:bb: 32:3c:01:e3:bd:99:5b:80:3f:04:eb:db:9e:17:e1: d6:e0:cb:30:e1:92:82:7b:52:62:20:92:af:fb:a4: 11:23:35:ff:81:49:4d:5d:95:75:78:e9:d8:8b:3d: e6:85:6a:c6:38:e7:10:78:4c:83:37:8b:a1:49:8a: 93:24:50:3d:66:6c:d4:c6:4d:d0:ac:64:02:05:60: 1a:97:96:05:a9:f1:a9:c6:e1:45:42:97:20:d1:9f: 53:77:76:3e:03:01:ae:df:37:76:41:b4:03:d5:fa: 17:e7:b5:ce:34:7a:3d:d3:13:b4:4a:fb:ac:70:2f: 08:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DB:C4:76:72:88:21:5C:01:3D:CA:35:8E:69:48:CA:29:84:4F:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2baa7a8-a8f6-36fa-8e75-3ecb8aca01b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:86:0a:e6:37:e9:80:33:41:0e:ca:32:72:42:36:6b:3a:ac: 28:e7:b4:af:66:2a:d7:2a:d9:fe:c0:ef:9b:12:ef:e7:5a:de: 7d:b1:72:01:2f:dc:ae:57:0a:35:d6:34:a6:71:2e:3d:0d:d8: 93:c0:dd:20:a3:9d:9e:6d:f2:d5:f4:44:37:f2:21:d8:b8:40: 2f:ae:b0:63:45:f3:04:ab:bc:47:03:72:a9:62:4b:aa:0b:e2: 36:69:26:8d:bc:d7:3f:0b:60:21:58:95:3c:39:2f:2f:62:c0: dd:78:05:11:a2:b9:66:eb:be:54:be:2a:94:96:d7:b6:27:0f: a1:47:71:3f:d7:3b:b1:2e:2a:32:34:00:a6:78:86:1d:b2:d7: 3f:66:ee:0b:5f:8d:ff:29:59:0d:d9:b2:40:cd:c8:7a:f1:2f: 31:a0:5d:29:80:91:e5:a2:72:6d:9d:a6:90:84:92:bc:ef:3a: ad:6c:5c:4b:3a:ab:e8:61:82:62:bf:26:1a:2f:48:8c:24:e8: fc:5a:f2:fc:58:17:5a:4e:c3:ed:3a:c4:20:6f:3e:70:d9:41: 06:a4:4c:75:31:81:80:e3:ea:3c:f0:be:4e:69:05:f3:ad:e8: 36:e6:b7:60:20:f2:c2:65:5a:29:04:5f:04:1b:72:4a:6e:41: 5a:d9:3b:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371hrzopMrezsvorAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk M2Q4YzE1NjgtZDczNC00NDE3LWI5YTQtYWY2ZTEwYzgwZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLayMN4y8YVBMZSfb3kerJvQpUaUdg3IHweL +CayUaBdW0g+uz0EQX5ofu1AQyRcKla11ID2tdiID86qPt0ej9zKJKAOShZKZEX4 sY/hiEIrUYc4p0DjYhDAJZi7I/Kxg+MCDEA64zaJlfBPqqjMGlgb4aWLBx6Jwzkc jDgPS2RnrKqftLsyPAHjvZlbgD8E69ueF+HW4Msw4ZKCe1JiIJKv+6QRIzX/gUlN XZV1eOnYiz3mhWrGOOcQeEyDN4uhSYqTJFA9ZmzUxk3QrGQCBWAal5YFqfGpxuFF Qpcg0Z9Td3Y+AwGu3zd2QbQD1foX57XONHo90xO0SvuscC8IJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDbxHZyiCFcAT3KNY5pSMophE8JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTJiYWE3YTgtYThmNi0z NmZhLThlNzUtM2VjYjhhY2EwMWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCGCuY36YAzQQ7KMnJCNms6rCjntK9mKtcq2f7A75sS7+da3n2xcgEv 3K5XCjXWNKZxLj0N2JPA3SCjnZ5t8tX0RDfyIdi4QC+usGNF8wSrvEcDcqliS6oL 4jZpJo281z8LYCFYlTw5Ly9iwN14BRGiuWbrvlS+KpSW17YnD6FHcT/XO7EuKjI0 AKZ4hh2y1z9m7gtfjf8pWQ3ZskDNyHrxLzGgXSmAkeWicm2dppCEkrzvOq1sXEs6 q+hhgmK/JhovSIwk6Pxa8vxYF1pOw+06xCBvPnDZQQakTHUxgYDj6jzwvk5pBfOt 6Dbmt2Ag8sJlWikEXwQbckpuQVrZO6o= -----END CERTIFICATE-----Generated at Sat Jun 6 10:51:10 2026 by rpki-client