$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3496fb5c-d759-3391-aae8-b67efe932177.roa File: 3496fb5c-d759-3391-aae8-b67efe932177.roa (raw, json) Hash identifier: KRN/pGZHcOJgCedwWxXc0fAtFWtk2VSCv6fZuEQMmb8= Subject key identifier: 0D:2F:BB:7E:24:57:E0:27:79:A1:D0:C6:7F:2B:E5:CA:BD:C8:50:12 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DBBA05E4D58FCABD0D753E980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3496fb5c-d759-3391-aae8-b67efe932177.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 20940 IP address blocks: 23.39.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:5e:4d:58:fc:ab:d0:d7:53:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=f256464e-5ceb-46ca-93fc-372556aae78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8a:f8:2c:b8:56:ab:37:9e:8a:b1:6a:51:16: 5b:46:d2:b2:32:f4:97:4c:1f:24:f3:03:60:e9:7e: 07:f4:a2:57:fa:c5:88:07:1f:0c:b6:14:e7:9c:26: 83:8a:34:94:8a:61:f8:e0:45:55:3d:aa:78:7b:5c: d7:e7:f1:ea:b2:ca:7c:7b:0b:4c:7e:be:70:67:38: e2:1e:a6:4e:1b:46:c4:47:e9:e8:f0:80:3e:2f:8d: fe:a1:11:30:14:57:3d:b6:97:45:d2:e9:fa:cd:44: ff:89:79:0b:91:c0:20:85:a3:a4:e9:75:9a:4d:35: 0b:bc:4b:79:e0:e3:b0:3e:f4:53:99:37:7e:2e:ac: 8c:11:cd:97:95:bd:f8:5b:c4:41:a8:d4:09:99:3c: fa:9d:09:03:8c:ef:2f:b8:d7:0e:00:b4:39:d9:a2: 91:e6:53:37:25:47:02:92:c5:fa:b4:a9:f1:4e:d1: 10:67:63:c7:05:24:f2:54:e7:a7:d0:79:3d:56:20: 6d:c5:6f:c2:88:83:47:a0:34:88:4e:62:25:2f:90: be:14:b7:cc:01:e7:67:91:fe:be:5a:7a:87:17:82: 6a:a0:eb:7d:5f:9c:80:f4:d2:6a:aa:17:8f:5e:2d: 91:fe:53:d0:a7:a4:3f:c5:cf:3d:9f:bd:47:cb:9e: b8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2F:BB:7E:24:57:E0:27:79:A1:D0:C6:7F:2B:E5:CA:BD:C8:50:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3496fb5c-d759-3391-aae8-b67efe932177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:7a:b1:ae:ee:38:86:3e:2c:00:9c:55:8d:fa:5a:77:cb:38: d1:89:8a:30:b0:7a:66:e1:11:cc:4f:56:8f:df:70:2e:05:06: 92:80:95:b3:57:80:9b:c1:48:41:8c:9c:16:db:45:2b:f9:76: cd:fc:ab:79:c7:81:a3:67:cb:52:ea:a5:8e:97:a2:5f:37:c0: c7:99:cf:0d:76:54:5d:5c:da:e4:a8:f4:00:bb:09:46:70:24: 5b:92:d9:3e:30:a6:81:35:b7:bd:f3:81:8f:62:26:63:01:b7: 3d:25:55:79:0e:45:f4:64:46:cf:61:c6:2b:34:98:7e:68:b4: f6:43:9c:53:fe:8a:d8:06:4b:de:d2:13:58:0c:be:19:9a:4c: e3:a4:a4:4a:79:15:19:c6:8e:c5:5e:eb:34:a0:9c:37:76:20: 28:33:89:d4:bd:a3:48:0b:e8:34:c5:4e:50:4d:a2:4b:37:5a: 9c:76:25:ad:7e:2e:36:9f:98:31:f2:57:70:c1:ab:93:37:3b: 8c:2f:9f:b0:f3:c2:06:90:16:69:b7:b9:1c:37:e4:ed:34:10: 32:8a:c4:45:f8:c3:65:38:6f:aa:20:b6:20:26:9c:cf:8b:44: 3f:5f:b3:59:e0:c5:79:d9:45:09:63:5f:86:56:b6:15:5b:c2: a3:9a:e8:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oF5NWPyr0NdT6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk ZjI1NjQ2NGUtNWNlYi00NmNhLTkzZmMtMzcyNTU2YWFlNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoor4LLhWqzeeirFqURZbRtKyMvSXTB8k8wNg 6X4H9KJX+sWIBx8MthTnnCaDijSUimH44EVVPap4e1zX5/Hqssp8ewtMfr5wZzji HqZOG0bER+no8IA+L43+oREwFFc9tpdF0un6zUT/iXkLkcAghaOk6XWaTTULvEt5 4OOwPvRTmTd+LqyMEc2Xlb34W8RBqNQJmTz6nQkDjO8vuNcOALQ52aKR5lM3JUcC ksX6tKnxTtEQZ2PHBSTyVOen0Hk9ViBtxW/CiINHoDSITmIlL5C+FLfMAednkf6+ WnqHF4JqoOt9X5yA9NJqqhePXi2R/lPQp6Q/xc89n71Hy564JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0vu34kV+AneaHQxn8r5cq9yFASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzQ5NmZiNWMtZDc1OS0z MzkxLWFhZTgtYjY3ZWZlOTMyMTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyffMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAV6sa7uOIY+LACcVY36WnfLONGJijCwembhEcxPVo/fcC4FBpKAlbNX gJvBSEGMnBbbRSv5ds38q3nHgaNny1LqpY6Xol83wMeZzw12VF1c2uSo9AC7CUZw JFuS2T4wpoE1t73zgY9iJmMBtz0lVXkORfRkRs9hxis0mH5otPZDnFP+itgGS97S E1gMvhmaTOOkpEp5FRnGjsVe6zSgnDd2ICgzidS9o0gL6DTFTlBNoks3Wpx2Ja1+ LjafmDHyV3DBq5M3O4wvn7DzwgaQFmm3uRw35O00EDKKxEX4w2U4b6ogtiAmnM+L RD9fs1ngxXnZRQljX4ZWthVbwqOa6BI= -----END CERTIFICATE-----Generated at Wed May 13 11:33:55 2026 by rpki-client