$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42d13559-d613-3bcb-8767-ea3ad90fe9a5.roa File: 42d13559-d613-3bcb-8767-ea3ad90fe9a5.roa (raw, json) Hash identifier: bmAyRmqYTq7j9RhnE/9C+K8rCLHNPsWAxLpRZzIwoS4= Subject key identifier: CA:AE:7D:F2:AE:00:93:CF:A1:38:5A:70:A3:AB:EF:78:6D:15:0B:85 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DCDC5B9CB3AC5EDD93F3D5A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42d13559-d613-3bcb-8767-ea3ad90fe9a5.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 16625 IP address blocks: 23.60.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:b9:cb:3a:c5:ed:d9:3f:3d:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=06d93ae9-04df-47c5-9f72-eaac4c351ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:80:5b:52:26:15:d2:e1:29:e7:c5:75:3a:e2: 24:8b:86:03:22:92:b6:98:79:8c:eb:c1:f2:81:86: 87:af:0f:ef:20:df:ac:98:37:cc:49:66:af:84:48: 4e:3f:ac:57:0d:a5:98:61:82:0a:2d:8f:db:22:28: 54:dd:c5:b2:55:49:82:56:01:7d:9a:0d:d6:9a:62: b8:d8:04:1a:3b:14:8f:c0:f5:42:e7:74:2c:b4:eb: 16:0a:cb:ef:95:c3:72:f5:ce:20:e9:60:4d:3c:7f: 94:31:91:43:31:62:ff:f6:72:b0:59:3f:28:91:0d: 7c:19:79:7c:50:f6:57:29:77:a1:c8:54:14:af:c3: cb:59:74:c3:e0:7f:ad:68:2b:e0:2d:50:de:d2:48: 33:ff:35:f2:da:33:ea:fd:e3:8c:83:bb:40:21:a0: 80:66:8a:73:18:12:b3:09:a5:c5:0d:5f:61:7c:19: c6:4e:0e:a1:53:14:9f:14:95:a4:95:a2:16:3b:ae: d0:25:ef:80:ca:25:a1:60:11:d4:78:72:47:2b:90: c4:d7:94:c8:72:32:20:97:2b:cd:c0:2e:6b:9f:da: 0f:55:4d:7d:d1:3c:a2:30:e8:67:51:5d:fc:c1:d0: 14:24:97:5b:83:4a:5f:b3:1d:52:6a:77:3e:1b:bb: b2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AE:7D:F2:AE:00:93:CF:A1:38:5A:70:A3:AB:EF:78:6D:15:0B:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42d13559-d613-3bcb-8767-ea3ad90fe9a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.60.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:3c:1c:41:d8:95:2f:6f:9f:5c:e8:ed:2f:bf:a9:7c:fa:8c: a0:e9:31:9f:4f:71:8c:05:72:01:6d:f0:ef:6e:27:eb:ed:12: d0:f5:5f:74:20:36:28:c0:6b:70:2a:d2:67:32:32:32:5d:7f: bb:a4:7b:92:21:1c:fe:6b:87:95:e6:e4:14:58:96:9a:7e:d2: 11:9b:da:5b:fb:db:44:11:7a:af:1f:7a:2e:3d:0a:9b:c2:74: b5:25:17:b9:b2:77:93:29:0b:b7:6e:16:04:9a:4c:b8:45:b2: 0a:a6:74:f7:29:b7:e5:eb:ac:bc:17:6f:f3:76:2c:2f:89:54: 1e:b1:1d:f8:af:4b:46:b5:ce:f6:5b:0b:85:9b:24:a8:65:29: 6d:26:19:e3:a8:e1:5e:f0:f2:b2:fe:4d:58:d9:c2:7a:c5:4a: cb:24:62:f9:fb:04:c0:3b:2c:87:4c:81:6a:b4:3a:6a:72:db: 69:aa:72:ed:c9:eb:eb:58:a5:43:9e:cc:a9:d9:92:7d:bb:14: b8:ac:39:85:2c:64:06:66:df:c2:ad:81:04:c9:3b:8d:5d:df: 79:95:83:57:03:33:98:e1:e3:ff:03:f7:ca:b1:43:c9:14:c1: 1b:cc:aa:79:90:15:13:f2:53:d5:68:2d:25:4c:7a:f4:c6:fc: b2:2f:40:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxbnLOsXt2T89WoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk MDZkOTNhZTktMDRkZi00N2M1LTlmNzItZWFhYzRjMzUxYWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IBbUiYV0uEp58V1OuIki4YDIpK2mHmM68Hy gYaHrw/vIN+smDfMSWavhEhOP6xXDaWYYYIKLY/bIihU3cWyVUmCVgF9mg3WmmK4 2AQaOxSPwPVC53QstOsWCsvvlcNy9c4g6WBNPH+UMZFDMWL/9nKwWT8okQ18GXl8 UPZXKXehyFQUr8PLWXTD4H+taCvgLVDe0kgz/zXy2jPq/eOMg7tAIaCAZopzGBKz CaXFDV9hfBnGTg6hUxSfFJWklaIWO67QJe+AyiWhYBHUeHJHK5DE15TIcjIglyvN wC5rn9oPVU190TyiMOhnUV38wdAUJJdbg0pfsx1Sanc+G7uynQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMquffKuAJPPoThacKOr73htFQuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDJkMTM1NTktZDYxMy0z YmNiLTg3NjctZWEzYWQ5MGZlOWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzxUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGI8HEHYlS9vn1zo7S+/qXz6jKDpMZ9PcYwFcgFt8O9uJ+vtEtD1X3Qg NijAa3Aq0mcyMjJdf7uke5IhHP5rh5Xm5BRYlpp+0hGb2lv720QReq8fei49CpvC dLUlF7myd5MpC7duFgSaTLhFsgqmdPcpt+XrrLwXb/N2LC+JVB6xHfivS0a1zvZb C4WbJKhlKW0mGeOo4V7w8rL+TVjZwnrFSsskYvn7BMA7LIdMgWq0Ompy22mqcu3J 6+tYpUOezKnZkn27FLisOYUsZAZm38KtgQTJO41d33mVg1cDM5jh4/8D98qxQ8kU wRvMqnmQFRPyU9VoLSVMevTG/LIvQFY= -----END CERTIFICATE-----Generated at Wed May 13 09:58:24 2026 by rpki-client