$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f00e4241-0f1d-3acd-bdf2-7ea798ffded2.roa File: f00e4241-0f1d-3acd-bdf2-7ea798ffded2.roa (raw, json) Hash identifier: 18G9GtpT5mUplXnteTBb/0XbaeKhdvKfJHzJ0zkcsuM= Subject key identifier: 1E:C2:24:1D:34:92:FF:55:6F:BB:EE:27:DC:1A:DD:4D:E7:59:FD:70 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E4559D9A0186382B18707EE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f00e4241-0f1d-3acd-bdf2-7ea798ffded2.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 35994 IP address blocks: 23.208.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:d9:a0:18:63:82:b1:87:07:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=5f10f4c7-7926-4750-8b0e-8f3d966d5ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8d:aa:9e:6f:40:43:e1:57:45:5c:64:42:5a: e6:0d:32:7d:c8:ba:06:c2:af:6a:2f:8f:55:d0:4a: 21:56:28:57:a5:a1:2b:4c:43:9b:28:b0:b3:f0:80: 02:72:d6:15:a2:ca:2a:73:8f:5a:b1:90:b6:81:0f: e0:6d:a8:a2:d7:91:6a:f0:56:7d:c5:ad:61:77:32: 84:ac:b6:96:db:47:5e:62:d2:73:b7:28:cc:72:ab: 9a:20:14:eb:f3:dc:7c:ec:c3:d7:47:89:9c:9a:40: b0:a6:d2:5b:94:62:b8:df:92:7e:c9:bd:35:e4:6e: 16:ab:a7:1c:14:03:19:c7:35:79:9d:74:62:b4:2f: bf:c6:c8:a1:88:f8:76:fd:0d:29:dd:55:05:5a:85: e1:d6:51:e9:84:88:ad:1f:72:0e:79:09:71:90:13: 98:04:74:d5:b1:6f:78:47:84:43:94:6d:87:d7:38: 91:77:66:ea:7c:bf:53:18:de:ec:48:e0:c3:0f:07: ec:f9:ec:d4:b4:76:e7:40:88:39:8a:1f:9b:7c:c9: e6:dc:14:1b:6e:84:28:07:02:aa:d5:44:d2:10:af: 28:6d:bd:cb:a7:9a:d4:1e:c0:4f:76:31:cf:50:7b: 0c:45:d1:85:68:dc:cf:21:78:00:8f:89:41:59:9e: 8f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C2:24:1D:34:92:FF:55:6F:BB:EE:27:DC:1A:DD:4D:E7:59:FD:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f00e4241-0f1d-3acd-bdf2-7ea798ffded2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:81:e4:ff:5d:a8:64:d0:7f:93:0c:44:8a:8d:64:10:df:7e: 11:3f:e2:64:c7:4b:76:23:66:8a:71:ee:46:31:9b:c5:3c:d0: 76:90:a7:3d:f9:dd:e6:e1:77:02:8e:2d:ae:99:b7:83:3c:37: dd:34:d2:dd:25:d0:28:b1:e9:c4:a9:d1:a7:a7:72:ca:b5:a1: bf:d8:6f:4f:69:bd:83:c5:d1:75:4a:86:a9:41:10:d9:8b:ae: 0f:b3:49:57:52:40:33:16:02:92:03:0f:ee:16:90:3a:76:d6: 43:6b:31:7e:cf:c7:bd:e1:8a:92:ba:c6:67:37:8a:c9:12:fc: c8:12:16:54:35:3f:3b:d8:b9:64:04:b1:2f:9e:93:3b:17:60: 95:bd:c2:56:e0:05:02:08:e3:49:76:a5:8f:64:ee:da:65:4a: 5f:dd:74:0c:cb:d0:2b:94:02:67:f5:68:b9:ef:57:4d:66:b3: 2e:90:c8:6d:8a:f6:e9:e5:1a:f7:b7:d9:a0:4b:35:83:4d:45: f3:31:32:83:37:07:bd:c3:92:c8:71:00:98:45:cb:5f:c1:2e: 45:bd:c3:b2:5f:38:fc:6f:ac:d6:7d:2a:9a:ef:13:64:63:6d: 4d:ea:7d:b2:21:86:75:75:d5:f1:66:70:c7:10:de:33:31:75: d9:bd:d2:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWdmgGGOCsYcH7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk NWYxMGY0YzctNzkyNi00NzUwLThiMGUtOGYzZDk2NmQ1ZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY2qnm9AQ+FXRVxkQlrmDTJ9yLoGwq9qL49V 0EohVihXpaErTEObKLCz8IACctYVosoqc49asZC2gQ/gbaii15Fq8FZ9xa1hdzKE rLaW20deYtJztyjMcquaIBTr89x87MPXR4mcmkCwptJblGK435J+yb015G4Wq6cc FAMZxzV5nXRitC+/xsihiPh2/Q0p3VUFWoXh1lHphIitH3IOeQlxkBOYBHTVsW94 R4RDlG2H1ziRd2bqfL9TGN7sSODDDwfs+ezUtHbnQIg5ih+bfMnm3BQbboQoBwKq 1UTSEK8obb3Lp5rUHsBPdjHPUHsMRdGFaNzPIXgAj4lBWZ6PKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7CJB00kv9Vb7vuJ9wa3U3nWf1wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjAwZTQyNDEtMGYxZC0z YWNkLWJkZjItN2VhNzk4ZmZkZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ARMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaB5P9dqGTQf5MMRIqNZBDffhE/4mTHS3YjZopx7kYxm8U80HaQpz35 3ebhdwKOLa6Zt4M8N9000t0l0Cix6cSp0aencsq1ob/Yb09pvYPF0XVKhqlBENmL rg+zSVdSQDMWApIDD+4WkDp21kNrMX7Px73hipK6xmc3iskS/MgSFlQ1PzvYuWQE sS+ekzsXYJW9wlbgBQII40l2pY9k7tplSl/ddAzL0CuUAmf1aLnvV01msy6QyG2K 9unlGve32aBLNYNNRfMxMoM3B73DkshxAJhFy1/BLkW9w7JfOPxvrNZ9KprvE2Rj bU3qfbIhhnV11fFmcMcQ3jMxddm90u0= -----END CERTIFICATE-----Generated at Tue Jul 21 21:44:17 2026 by rpki-client