$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3343d2c4-452b-3c95-ba79-a3d2c994fe8f.roa File: 3343d2c4-452b-3c95-ba79-a3d2c994fe8f.roa (raw, json) Hash identifier: QVg3U8EugwXLICN/RsONzGsgqUuQzqWvM3vP0Pa12lQ= Subject key identifier: 0E:D9:D5:58:1C:BD:99:3F:CD:D3:1D:D5:9D:4C:46:63:7F:F4:E1:5C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DCDC5B892783DDEC51DDDC480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3343d2c4-452b-3c95-ba79-a3d2c994fe8f.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 20940 IP address blocks: 23.59.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:b8:92:78:3d:de:c5:1d:dd:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=517f208a-2bc2-4b0a-b627-1ff5a0d3dc75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0c:e8:d8:21:54:f6:1f:7b:e6:c5:7c:64:be: 3a:45:4f:73:ac:56:a7:6d:2e:23:31:6b:6e:34:27: cc:48:e0:a9:4a:95:53:00:f8:d7:0f:47:b9:49:21: d5:a2:98:39:f4:8f:c6:5a:1f:68:66:d3:56:9f:38: cd:9a:08:0b:ad:c0:60:90:d7:35:1d:82:b1:fc:ed: ad:a0:a7:39:68:22:e8:e3:78:9c:8d:ea:2e:43:c0: 66:3f:44:54:4a:2a:98:7b:9c:1d:95:f2:42:8d:3e: 27:dc:0c:75:85:87:bf:6a:33:3e:e4:e1:bd:3c:e3: 94:a5:e6:76:7c:fd:4b:03:10:83:0e:ec:a8:7f:f3: 43:eb:b9:16:0a:ba:e5:58:e1:96:0e:41:92:7b:a2: e7:fa:f3:ed:d4:03:6a:7c:39:42:b6:3a:36:f9:99: 8c:95:da:c4:2a:05:42:bf:25:d1:93:0d:ae:71:3e: ea:6d:78:e0:21:97:2e:fd:4b:de:18:c6:7c:64:c2: f9:3b:f2:13:60:90:10:49:de:f2:88:3b:2e:db:84: 30:7b:d6:e5:7c:05:c9:d3:99:0c:58:6e:89:9d:2c: 0a:7e:84:47:11:18:dc:aa:45:99:60:7f:a1:22:5d: 57:51:0e:82:ce:1f:b9:27:96:6a:da:2e:0f:4d:a8: bb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D9:D5:58:1C:BD:99:3F:CD:D3:1D:D5:9D:4C:46:63:7F:F4:E1:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3343d2c4-452b-3c95-ba79-a3d2c994fe8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:8c:40:4f:ce:ac:05:65:f3:b1:a1:90:d7:a7:34:77:f6:4a: d5:a3:9e:81:0b:79:a0:79:71:7f:b4:55:de:ce:a9:af:9a:73: 46:a2:53:9c:59:4a:62:3a:1e:ef:7e:b3:a8:28:f9:ad:ab:a8: ec:e4:1a:25:f7:b3:1a:d1:32:a6:e3:48:4d:61:31:f9:12:19: 6b:3a:eb:8c:3d:dc:97:c6:78:65:90:84:05:9d:f4:84:6d:1c: a3:a6:5e:ec:77:24:15:b1:d3:3c:ac:47:81:f5:8f:16:5a:13: 2f:28:51:82:a3:c8:78:ce:c5:87:e6:7c:c7:21:49:f4:2d:d8: 61:40:57:32:15:f0:ff:93:b2:6a:97:e6:f1:78:b5:c9:66:39: 42:4a:a7:b1:b2:8b:9b:f0:0e:61:30:3a:66:ac:79:c9:18:af: 7d:d4:c3:0f:14:12:46:53:8a:0e:4e:fe:c7:a7:8c:90:7d:dc: 94:0b:0d:53:03:f5:9a:d4:74:b2:a3:aa:0e:04:06:e9:47:e3: b4:93:8c:35:71:88:9e:90:06:b3:37:2c:57:8f:9d:ff:84:12: 66:e7:99:e5:a3:62:30:d9:2d:f6:af:f7:65:9f:aa:4b:02:4e: 18:63:61:26:3c:e5:55:bc:56:84:c9:e2:db:2d:ca:be:5f:3a: ce:e8:c1:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxbiSeD3exR3dxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk NTE3ZjIwOGEtMmJjMi00YjBhLWI2MjctMWZmNWEwZDNkYzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQzo2CFU9h975sV8ZL46RU9zrFanbS4jMWtu NCfMSOCpSpVTAPjXD0e5SSHVopg59I/GWh9oZtNWnzjNmggLrcBgkNc1HYKx/O2t oKc5aCLo43icjeouQ8BmP0RUSiqYe5wdlfJCjT4n3Ax1hYe/ajM+5OG9POOUpeZ2 fP1LAxCDDuyof/ND67kWCrrlWOGWDkGSe6Ln+vPt1ANqfDlCtjo2+ZmMldrEKgVC vyXRkw2ucT7qbXjgIZcu/UveGMZ8ZML5O/ITYJAQSd7yiDsu24Qwe9blfAXJ05kM WG6JnSwKfoRHERjcqkWZYH+hIl1XUQ6Czh+5J5Zq2i4PTai7lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7Z1VgcvZk/zdMd1Z1MRmN/9OFcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzM0M2QyYzQtNDUyYi0z Yzk1LWJhNzktYTNkMmM5OTRmZThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzuoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+MQE/OrAVl87GhkNenNHf2StWjnoELeaB5cX+0Vd7Oqa+ac0aiU5xZ SmI6Hu9+s6go+a2rqOzkGiX3sxrRMqbjSE1hMfkSGWs664w93JfGeGWQhAWd9IRt HKOmXux3JBWx0zysR4H1jxZaEy8oUYKjyHjOxYfmfMchSfQt2GFAVzIV8P+TsmqX 5vF4tclmOUJKp7Gyi5vwDmEwOmaseckYr33Uww8UEkZTig5O/senjJB93JQLDVMD 9ZrUdLKjqg4EBulH47STjDVxiJ6QBrM3LFePnf+EEmbnmeWjYjDZLfav92WfqksC ThhjYSY85VW8VoTJ4tstyr5fOs7owRs= -----END CERTIFICATE-----Generated at Wed May 13 08:48:16 2026 by rpki-client