$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5293dfb7-161e-34a8-9965-6521fb787b0c.roa File: 5293dfb7-161e-34a8-9965-6521fb787b0c.roa (raw, json) Hash identifier: D0c2NDu7qCEiVTfNygbNNBaC0bpjfcduoO9ET3NbNfk= Subject key identifier: 61:69:CE:AF:49:BE:8F:55:5D:43:08:6E:7D:55:37:5D:D4:98:E1:43 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DAC4592DD33B5294FAB2BBBC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5293dfb7-161e-34a8-9965-6521fb787b0c.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 20940 IP address blocks: 23.208.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:92:dd:33:b5:29:4f:ab:2b:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=3c7a2b13-ec95-41c9-ac42-268b4ed0cb87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:f0:1f:a9:64:70:69:1e:95:58:a6:57:dc: 47:c1:f6:cb:a4:6b:c9:c5:70:d0:65:42:19:ef:c7: f9:35:68:98:07:e8:a5:65:43:20:df:d8:2e:e5:6a: 63:9f:80:7a:1f:61:2e:f2:2e:ec:b9:99:bd:24:f3: 59:4e:98:6a:aa:42:ab:64:74:8f:9d:73:61:1c:6f: 39:b2:56:67:5d:31:70:56:b4:1e:1d:02:49:eb:7e: ee:e1:32:b8:e9:6f:b1:8f:23:ad:5f:ac:ed:17:0a: 73:61:e5:30:c4:ff:a7:05:a2:b6:e2:56:2d:2e:a7: 02:35:5d:15:c7:2d:93:56:8d:c8:30:f7:99:70:5e: f1:ca:d3:6c:a3:b4:92:c0:40:eb:29:6d:41:7e:a7: 72:13:6e:b7:dc:1d:0a:fc:61:2b:d0:5d:12:76:e5: b1:c8:3a:71:23:fc:f2:44:05:98:4e:4f:52:cd:72: a6:ac:e4:33:59:2c:c4:a4:d3:32:3b:27:25:c7:16: ba:cd:1c:22:d2:ad:55:f4:c9:4d:66:02:f4:50:42: 6d:0f:ab:57:e9:f5:4c:4e:6c:88:e0:30:80:e4:73: 9d:52:e5:22:37:52:61:6d:7c:f3:89:e8:df:7e:1d: ed:49:ba:cc:71:5a:d9:6a:9c:7d:e2:62:29:49:75: 04:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:69:CE:AF:49:BE:8F:55:5D:43:08:6E:7D:55:37:5D:D4:98:E1:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5293dfb7-161e-34a8-9965-6521fb787b0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:f2:fe:53:23:37:00:99:b2:0f:a8:36:7c:49:f4:df:9d:82: e3:25:8f:0a:29:93:e7:91:88:1a:7a:d5:1d:84:9c:f2:37:c1: 04:c8:8e:81:35:f8:b4:03:1e:4e:64:df:3e:10:69:41:c3:22: 39:37:58:dc:32:0b:5a:7b:63:08:c0:94:f1:c0:94:f2:08:5c: 1e:42:68:d9:f2:85:e9:84:de:31:9e:9a:7a:04:0c:7b:0d:19: 05:c0:ab:e1:f0:45:ae:ef:62:91:ca:1f:62:c9:6d:9e:91:d5: 27:d1:e7:00:a4:18:a3:9a:f7:7c:79:55:fa:8b:01:22:dc:d3: 91:4a:c6:ee:8b:73:53:94:4e:06:5c:a2:2b:39:1e:7a:bd:bf: 2d:1f:c0:6b:1f:fe:47:cc:6e:ac:db:3a:99:45:68:a8:0f:27: 7c:c9:47:45:75:8d:88:4c:42:3c:7f:34:c9:01:cd:13:e7:fb: e7:7d:7b:4b:d1:b6:f5:05:3c:f5:9f:27:98:84:85:be:f9:da: 0d:8b:e9:15:cd:46:c4:5d:15:7a:4d:f3:5f:6c:01:bf:ef:ae: 41:6a:f3:ea:56:70:c2:d8:36:3c:db:8a:d7:bf:3b:8a:9b:35: 97:46:e3:ff:1e:d7:94:1b:9c:7c:57:7a:29:cc:b1:8c:0c:b4: 6e:f4:65:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRZLdM7UpT6sru8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk M2M3YTJiMTMtZWM5NS00MWM5LWFjNDItMjY4YjRlZDBjYjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsPwH6lkcGkelVimV9xHwfbLpGvJxXDQZUIZ 78f5NWiYB+ilZUMg39gu5Wpjn4B6H2Eu8i7suZm9JPNZTphqqkKrZHSPnXNhHG85 slZnXTFwVrQeHQJJ637u4TK46W+xjyOtX6ztFwpzYeUwxP+nBaK24lYtLqcCNV0V xy2TVo3IMPeZcF7xytNso7SSwEDrKW1BfqdyE2633B0K/GEr0F0SduWxyDpxI/zy RAWYTk9SzXKmrOQzWSzEpNMyOyclxxa6zRwi0q1V9MlNZgL0UEJtD6tX6fVMTmyI 4DCA5HOdUuUiN1JhbXzziejffh3tSbrMcVrZapx94mIpSXUElQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFpzq9Jvo9VXUMIbn1VN13UmOFDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTI5M2RmYjctMTYxZS0z NGE4LTk5NjUtNjUyMWZiNzg3YjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9DMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXy/lMjNwCZsg+oNnxJ9N+dguMljwopk+eRiBp61R2EnPI3wQTIjoE1 +LQDHk5k3z4QaUHDIjk3WNwyC1p7YwjAlPHAlPIIXB5CaNnyhemE3jGemnoEDHsN GQXAq+HwRa7vYpHKH2LJbZ6R1SfR5wCkGKOa93x5VfqLASLc05FKxu6Lc1OUTgZc ois5Hnq9vy0fwGsf/kfMbqzbOplFaKgPJ3zJR0V1jYhMQjx/NMkBzRPn++d9e0vR tvUFPPWfJ5iEhb752g2L6RXNRsRdFXpN819sAb/vrkFq8+pWcMLYNjzbite/O4qb NZdG4/8e15QbnHxXeinMsYwMtG70ZSo= -----END CERTIFICATE-----Generated at Wed May 13 10:38:54 2026 by rpki-client