$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8df2023-da6c-3e61-bfd1-5b33c4b4f410.roa File: f8df2023-da6c-3e61-bfd1-5b33c4b4f410.roa (raw, json) Hash identifier: 7dMoBRoRV+AfBifaJVqxhX1ZfHA+mb1T6yIFEDw9onI= Subject key identifier: E5:45:95:C8:18:A7:BC:BC:60:BE:BB:0C:C1:6B:A3:CC:3C:8A:B7:60 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DFBD5F5764A314C137FCD9080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8df2023-da6c-3e61-bfd1-5b33c4b4f410.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 20940 IP address blocks: 23.212.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:f5:76:4a:31:4c:13:7f:cd:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=1c526831-db59-4e02-b487-3e5bac907d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:33:85:4b:f9:84:f6:09:a0:a5:13:a8:25:b4: 52:06:72:74:dc:1a:39:6c:86:d9:4f:69:f0:57:2b: 97:e3:bd:47:70:54:31:e7:c4:09:9b:96:7a:19:27: 9a:47:10:2f:11:cb:76:86:85:23:35:cf:ac:92:70: 48:b5:30:51:bf:f7:28:99:78:fa:6a:66:f7:1c:84: 5a:5c:99:b3:32:af:68:22:43:95:80:17:ac:59:05: 8e:4b:96:eb:0b:14:84:3f:f4:72:1b:6e:ea:55:0b: 72:ee:40:eb:54:e6:62:db:0a:23:bf:78:a5:0b:a1: f0:98:69:46:1b:7f:95:7e:5e:e7:70:7b:47:38:76: 1e:55:82:65:87:e0:e7:fe:66:b8:be:a7:81:78:31: 34:a0:17:b9:3f:97:c6:34:4a:69:9f:dc:0d:6e:02: 64:02:a9:39:33:3b:44:9c:a1:56:62:8f:c9:df:19: ab:c0:94:08:1f:2c:6f:94:ac:48:a0:b5:b1:52:64: cd:1c:92:00:dd:cd:e9:9d:57:b4:43:90:94:75:6e: 78:25:e5:a3:09:ba:dc:50:9e:2c:5d:03:7c:2c:76: 5b:6e:c0:a1:31:4f:db:3e:67:bf:1d:0c:8b:4d:b6: 58:46:bf:10:9b:87:c9:7d:2d:5f:fa:e4:90:76:c9: b0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:45:95:C8:18:A7:BC:BC:60:BE:BB:0C:C1:6B:A3:CC:3C:8A:B7:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8df2023-da6c-3e61-bfd1-5b33c4b4f410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:fd:43:75:b2:db:1b:d6:0d:78:e7:31:47:9b:30:5c:2f:16: 48:bc:6c:44:e5:89:74:51:3d:51:d4:1c:52:ce:15:51:8a:70: f4:af:3c:98:95:8d:6e:74:0f:47:12:8e:65:52:1a:ef:3f:cd: 12:6d:5d:ab:12:aa:5d:4e:64:8e:9a:9c:3c:ac:5a:99:2d:d2: 39:29:71:bd:e7:e0:fb:06:3c:54:9f:cc:57:b0:72:a5:57:21: a2:48:9e:14:53:21:75:af:20:ec:05:a8:26:f4:dc:d3:1d:32: 25:19:fc:d7:00:e2:c5:ea:d4:c4:8a:23:f8:06:2d:ee:5c:25: a4:dc:da:c4:85:ac:7f:58:44:4f:ea:5b:c3:e7:86:b4:5c:1e: de:72:b2:27:45:66:51:2e:cc:26:26:f4:f9:ed:aa:e5:a1:6d: af:79:6f:1d:ec:cf:35:92:36:58:a6:0c:e4:55:2b:35:fe:5b: 72:d0:ae:67:62:89:cf:db:bc:e0:3b:c7:3a:0d:70:8d:e3:62: 0c:7d:91:46:a7:2e:86:3f:26:a6:85:27:96:11:48:5c:75:2d: ac:04:16:3f:b4:55:01:a9:bc:b7:b2:2a:89:e8:88:aa:01:e9: c4:fc:f6:39:98:2a:f0:1b:49:26:3f:9e:30:d7:e1:b7:22:6d: 47:17:0b:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371fV2SjFME3/NkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk MWM1MjY4MzEtZGI1OS00ZTAyLWI0ODctM2U1YmFjOTA3ZDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDOFS/mE9gmgpROoJbRSBnJ03Bo5bIbZT2nw VyuX471HcFQx58QJm5Z6GSeaRxAvEct2hoUjNc+sknBItTBRv/comXj6amb3HIRa XJmzMq9oIkOVgBesWQWOS5brCxSEP/RyG27qVQty7kDrVOZi2wojv3ilC6HwmGlG G3+Vfl7ncHtHOHYeVYJlh+Dn/ma4vqeBeDE0oBe5P5fGNEppn9wNbgJkAqk5MztE nKFWYo/J3xmrwJQIHyxvlKxIoLWxUmTNHJIA3c3pnVe0Q5CUdW54JeWjCbrcUJ4s XQN8LHZbbsChMU/bPme/HQyLTbZYRr8Qm4fJfS1f+uSQdsmw0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVFlcgYp7y8YL67DMFro8w8irdgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjhkZjIwMjMtZGE2Yy0z ZTYxLWJmZDEtNWIzM2M0YjRmNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9S8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv9Q3Wy2xvWDXjnMUebMFwvFki8bETliXRRPVHUHFLOFVGKcPSvPJiV jW50D0cSjmVSGu8/zRJtXasSql1OZI6anDysWpkt0jkpcb3n4PsGPFSfzFewcqVX IaJInhRTIXWvIOwFqCb03NMdMiUZ/NcA4sXq1MSKI/gGLe5cJaTc2sSFrH9YRE/q W8PnhrRcHt5ysidFZlEuzCYm9PntquWhba95bx3szzWSNlimDORVKzX+W3LQrmdi ic/bvOA7xzoNcI3jYgx9kUanLoY/JqaFJ5YRSFx1LawEFj+0VQGpvLeyKonoiKoB 6cT89jmYKvAbSSY/njDX4bcibUcXCzk= -----END CERTIFICATE-----Generated at Sat Jun 6 10:55:12 2026 by rpki-client