$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b99d5d1-aeba-34ad-a71b-fa0ef2b00a52.roa File: 5b99d5d1-aeba-34ad-a71b-fa0ef2b00a52.roa (raw, json) Hash identifier: 7wO1Szam0DPEX9Cb8M4mL6600REPTydWiW4w9lWS8hY= Subject key identifier: 75:C3:6D:AA:36:58:43:E1:5B:46:0B:B1:96:91:7B:4F:F5:8C:09:A6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D5E1A7703CD720CDD36852E34 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b99d5d1-aeba-34ad-a71b-fa0ef2b00a52.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 16625 IP address blocks: 23.222.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:77:03:cd:72:0c:dd:36:85:2e:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=f32c28aa-e6c9-4d90-a18b-d550a8d76441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:99:23:64:7c:11:f8:8b:24:89:06:1f:26: 5d:e5:0c:21:1e:4b:69:b4:c1:68:30:c9:a7:72:0d: 0a:cd:28:75:9f:1e:fe:b8:fa:54:cd:b3:63:43:d0: d0:b2:e4:a2:0a:6a:40:d7:61:ce:dc:d3:ba:46:36: 44:fb:31:82:98:84:27:0e:8b:df:17:0d:4f:f8:d4: f0:f6:eb:50:05:66:59:52:60:0b:57:e3:73:6f:0f: 74:89:c1:72:34:2c:3b:66:27:15:1b:20:f4:4b:0e: af:09:02:08:44:73:53:59:32:76:05:df:86:8c:cd: 28:ab:2f:f6:cf:cd:8e:80:84:7a:c1:c3:81:75:12: ca:1a:6d:50:f3:af:3d:59:99:5a:79:9a:4e:89:76: c6:64:5b:4a:77:6d:3e:00:02:31:e1:96:7e:6d:27: 71:cf:58:8f:80:7b:ac:bc:38:96:79:8a:59:30:95: 22:4b:40:61:d2:e3:c0:c8:77:28:e2:0d:f5:03:39: e4:ac:5d:bc:56:c7:e3:40:52:b2:96:99:87:f1:35: c6:9a:83:a8:50:bc:69:e3:42:4b:96:a6:24:6b:6c: 30:f6:27:43:cf:fb:1a:80:f2:8c:0e:71:1b:8f:17: 57:fd:7d:a5:90:7b:87:18:4c:20:d4:0f:80:04:ba: 7c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C3:6D:AA:36:58:43:E1:5B:46:0B:B1:96:91:7B:4F:F5:8C:09:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b99d5d1-aeba-34ad-a71b-fa0ef2b00a52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f5:43:fe:87:7c:6f:8c:d6:4d:53:61:b0:b0:79:8c:0a:a9: b1:40:96:80:2c:c7:30:dc:cf:f0:d8:bd:78:90:85:c4:2c:a6: 6a:22:31:5b:53:e3:d2:ef:60:65:50:b1:8b:e4:20:c4:f0:3a: 71:64:27:17:9a:0c:d9:06:7e:47:b8:60:69:43:9f:19:9b:c4: 65:ee:ef:46:8a:30:22:6f:26:b6:d1:44:08:51:ea:73:5c:16: c0:c8:22:cf:0b:b0:3b:ef:2a:47:c9:05:f9:7e:be:6a:f4:f6: 32:16:51:3b:8c:a8:a0:d3:93:22:38:15:18:13:b2:e2:e0:01: f4:11:4d:24:95:9d:6c:4b:af:48:d8:28:ea:75:f8:3f:53:f3: c6:27:16:dc:0f:d0:91:51:e2:d9:a7:98:e8:fb:00:c4:50:1f: df:ea:f0:d4:3d:db:a0:13:d0:6a:e7:fb:45:93:0e:b2:e0:50: 89:1f:15:51:7b:b3:6c:94:d3:df:d8:8b:55:40:59:7c:7b:74: b3:43:08:0b:7a:4d:ce:81:04:9e:e1:0f:cd:24:56:46:01:23: bc:a4:42:9a:b0:a1:eb:71:48:f3:a5:6e:ba:23:1d:c3:19:11: 3f:b2:ea:65:b1:0d:2c:4b:d8:83:23:e3:b3:3e:6b:fa:0d:2b: 8c:f1:62:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGncDzXIM3TaFLjQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZjMyYzI4YWEtZTZjOS00ZDkwLWExOGItZDU1MGE4ZDc2NDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukSZI2R8EfiLJIkGHyZd5QwhHktptMFoMMmn cg0KzSh1nx7+uPpUzbNjQ9DQsuSiCmpA12HO3NO6RjZE+zGCmIQnDovfFw1P+NTw 9utQBWZZUmALV+Nzbw90icFyNCw7ZicVGyD0Sw6vCQIIRHNTWTJ2Bd+GjM0oqy/2 z82OgIR6wcOBdRLKGm1Q8689WZlaeZpOiXbGZFtKd20+AAIx4ZZ+bSdxz1iPgHus vDiWeYpZMJUiS0Bh0uPAyHco4g31AznkrF28VsfjQFKylpmH8TXGmoOoULxp40JL lqYka2ww9idDz/sagPKMDnEbjxdX/X2lkHuHGEwg1A+ABLp8twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXDbao2WEPhW0YLsZaRe0/1jAmmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWI5OWQ1ZDEtYWViYS0z NGFkLWE3MWItZmEwZWYyYjAwYTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF95oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz1Q/6HfG+M1k1TYbCweYwKqbFAloAsxzDcz/DYvXiQhcQspmoiMVtT 49LvYGVQsYvkIMTwOnFkJxeaDNkGfke4YGlDnxmbxGXu70aKMCJvJrbRRAhR6nNc FsDIIs8LsDvvKkfJBfl+vmr09jIWUTuMqKDTkyI4FRgTsuLgAfQRTSSVnWxLr0jY KOp1+D9T88YnFtwP0JFR4tmnmOj7AMRQH9/q8NQ926AT0Grn+0WTDrLgUIkfFVF7 s2yU09/Yi1VAWXx7dLNDCAt6Tc6BBJ7hD80kVkYBI7ykQpqwoetxSPOlbrojHcMZ ET+y6mWxDSxL2IMj47M+a/oNK4zxYt0= -----END CERTIFICATE-----Generated at Fri Apr 17 03:10:24 2026 by rpki-client