$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/421f59cb-e0a2-3bec-9337-1c49aa0e73ca.roa File: 421f59cb-e0a2-3bec-9337-1c49aa0e73ca.roa (raw, json) Hash identifier: 9J3KY/KiMV2hl50nM09zkAHp8uM+jjbVGjnBXkATXTs= Subject key identifier: 4D:E7:B0:98:9E:A2:EF:36:5C:AE:7A:E4:95:34:40:1E:F7:32:F9:85 Certificate issuer: /CN=9d5e8807-643a-46c3-a245-693c793610e4 Certificate serial: 010D0C9F4328584E2274486AF0D8EE9AC6226CC0 Authority key identifier: 11:4F:A0:4D:D4:E3:78:3B:8A:F0:63:E9:49:24:2C:99:63:83:3C:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/421f59cb-e0a2-3bec-9337-1c49aa0e73ca.roa Signing time: Thu 11 Jun 2026 09:00:12 +0000 ROA not before: Thu 11 Jun 2026 09:00:12 +0000 ROA not after: Wed 09 Sep 2026 09:00:12 +0000 asID: 7018 IP address blocks: 23.129.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:22:74:48:6a:f0:d8:ee:9a:c6:22:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5e8807-643a-46c3-a245-693c793610e4 Validity Not Before: Jun 11 09:00:12 2026 GMT Not After : Sep 9 09:00:12 2026 GMT Subject: CN=2930cb1b-bc3e-41d6-8019-3d2bf537fa9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9e:b4:da:ce:f3:e2:2c:8d:d4:fa:73:0f:ca: b2:ee:57:cd:8d:92:fb:cd:67:81:47:3c:f6:d6:8d: fa:6f:cc:47:09:f5:00:9c:6e:b0:69:2e:29:a6:32: c8:97:86:58:b2:43:92:d4:37:58:65:c7:ed:bc:10: 65:a9:ee:6a:c2:ac:a4:a6:8e:ee:93:5d:35:c2:7b: 87:e8:5f:6f:c8:0c:59:dd:a9:b0:f9:6c:5b:f1:26: 89:7f:9e:47:ec:24:cc:f8:6c:42:65:59:55:89:36: ca:70:35:9c:9f:73:5c:8a:f6:cf:98:4d:6e:05:09: 0b:84:77:50:04:69:bd:14:e4:06:69:e1:8b:48:cf: fa:26:77:b3:ab:fb:40:9f:1b:44:2a:32:1f:0c:cd: d2:ad:c3:29:b5:25:cc:41:72:49:7f:0f:25:f9:d4: 3f:60:fa:d4:89:b8:e3:ee:14:ca:30:96:0c:61:34: 16:39:23:44:7d:ab:c4:87:7d:81:dd:a9:99:db:9a: ec:07:de:5f:a6:60:0f:24:cc:55:57:d9:f6:e5:72: 3c:2f:a4:53:77:1f:2b:81:ca:c8:92:b3:e1:ea:aa: 90:e0:3f:9b:67:ed:be:b2:a4:64:cc:aa:8c:b0:b8: 38:4b:32:ab:e2:57:91:02:c6:f3:e2:2e:6e:52:00: c0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E7:B0:98:9E:A2:EF:36:5C:AE:7A:E4:95:34:40:1E:F7:32:F9:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/421f59cb-e0a2-3bec-9337-1c49aa0e73ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.crl X509v3 Authority Key Identifier: keyid:11:4F:A0:4D:D4:E3:78:3B:8A:F0:63:E9:49:24:2C:99:63:83:3C:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer sbgp-ipAddrBlock: critical IPv4: 23.129.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:8c:ba:14:0c:8f:d6:80:5e:bd:10:1a:d5:34:a3:15:85:45: 90:2e:c9:9f:23:90:5e:d7:bf:47:3c:51:1d:8c:3e:2c:d5:eb: f8:22:eb:26:43:c8:2e:65:23:33:b8:aa:57:46:02:2b:46:87: 11:f3:d1:48:82:78:8f:f7:6c:54:24:42:8f:df:66:a7:84:eb: 44:ca:21:de:b8:2e:07:a7:27:09:62:0b:1e:21:14:2a:3e:bf: 48:b7:6a:66:57:78:a5:50:5d:50:27:b4:33:ca:87:25:1e:d1: 6f:14:67:02:16:39:1b:03:af:38:5e:6b:2c:f1:f6:34:e9:70: 83:fa:b2:a1:f2:de:9e:d8:a5:c5:ba:be:57:fe:57:82:94:5a: 48:42:b6:61:d2:91:92:d3:1d:5c:0a:11:92:c7:fb:a3:26:6b: 04:3c:58:60:37:39:0d:02:86:a0:28:3b:19:ab:13:da:7d:b1: 8d:42:ae:79:5c:61:4c:0c:b6:41:5b:5f:43:99:11:35:05:7f: 38:03:cf:fd:b1:5f:6f:33:a1:16:bb:04:d3:92:67:69:31:8c: a3:9c:f7:08:bb:1e:e1:34:77:46:af:94:ab:ca:ca:df:b8:cd: 89:00:0f:55:cb:10:f3:03:3e:71:9c:09:b2:95:cc:6b:41:2d: 71:79:d3:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4idEhq8NjumsYibMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQ1ZTg4MDctNjQzYS00NmMzLWEyNDUtNjkzYzc5MzYx MGU0MB4XDTI2MDYxMTA5MDAxMloXDTI2MDkwOTA5MDAxMlowLzEtMCsGA1UEAxMk MjkzMGNiMWItYmMzZS00MWQ2LTgwMTktM2QyYmY1MzdmYTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp602s7z4iyN1PpzD8qy7lfNjZL7zWeBRzz2 1o36b8xHCfUAnG6waS4ppjLIl4ZYskOS1DdYZcftvBBlqe5qwqykpo7uk101wnuH 6F9vyAxZ3amw+Wxb8SaJf55H7CTM+GxCZVlViTbKcDWcn3NcivbPmE1uBQkLhHdQ BGm9FOQGaeGLSM/6Jnezq/tAnxtEKjIfDM3SrcMptSXMQXJJfw8l+dQ/YPrUibjj 7hTKMJYMYTQWOSNEfavEh32B3amZ25rsB95fpmAPJMxVV9n25XI8L6RTdx8rgcrI krPh6qqQ4D+bZ+2+sqRkzKqMsLg4SzKr4leRAsbz4i5uUgDAnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3nsJieou82XK565JU0QB73MvmFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZDVl ODgwNy02NDNhLTQ2YzMtYTI0NS02OTNjNzkzNjEwZTQvNDIxZjU5Y2ItZTBhMi0z YmVjLTkzMzctMWM0OWFhMGU3M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWQ1ZTg4MDctNjQzYS00NmMzLWEy NDUtNjkzYzc5MzYxMGU0LzlkNWU4ODA3LTY0M2EtNDZjMy1hMjQ1LTY5M2M3OTM2 MTBlNC5jcmwwHwYDVR0jBBgwFoAUEU+gTdTjeDuK8GPpSSQsmWODPMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZDVlODgwNy02NDNhLTQ2YzMtYTI0NS02OTNj NzkzNjEwZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4HcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSMuhQMj9aAXr0QGtU0oxWFRZAuyZ8jkF7Xv0c8UR2MPizV6/gi6yZD yC5lIzO4qldGAitGhxHz0UiCeI/3bFQkQo/fZqeE60TKId64LgenJwliCx4hFCo+ v0i3amZXeKVQXVAntDPKhyUe0W8UZwIWORsDrzheayzx9jTpcIP6sqHy3p7YpcW6 vlf+V4KUWkhCtmHSkZLTHVwKEZLH+6MmawQ8WGA3OQ0ChqAoOxmrE9p9sY1Crnlc YUwMtkFbX0OZETUFfzgDz/2xX28zoRa7BNOSZ2kxjKOc9wi7HuE0d0avlKvKyt+4 zYkAD1XLEPMDPnGcCbKVzGtBLXF50/U= -----END CERTIFICATE-----Generated at Sat Jun 13 06:55:55 2026 by rpki-client