$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a9e5468-acac-34c4-a1eb-dccb1eefc724.roa File: 7a9e5468-acac-34c4-a1eb-dccb1eefc724.roa (raw, json) Hash identifier: j+LLrmUFDSXtGAS8YojN2cVQuScNvbvb6vo/JDC1Cmc= Subject key identifier: 44:DE:26:1B:12:A9:7C:A9:F3:7F:14:7D:80:AE:40:36:1C:83:38:4F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E1E44917363FE1AE76C3D4220 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a9e5468-acac-34c4-a1eb-dccb1eefc724.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 21342 IP address blocks: 23.40.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:91:73:63:fe:1a:e7:6c:3d:42:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=3eb80d3c-562b-4f35-85ff-f2fb782a970a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c3:ae:d6:21:50:63:04:4d:fd:1e:e7:92:8b: 64:29:69:a0:6c:8d:4b:12:a4:be:f5:27:cc:3f:84: a3:5c:a3:11:27:e0:11:e1:cb:73:f2:16:97:9c:75: 91:fc:d9:66:45:01:f8:1f:67:bb:30:e8:07:78:85: 3b:2b:48:a3:5f:d2:cd:44:a3:45:52:66:a4:e9:44: 37:92:b2:be:ef:6f:be:f5:9b:88:d1:cc:90:19:87: 69:80:88:81:6b:b8:53:40:7d:f4:e7:87:19:27:6a: 49:9c:59:e2:87:ed:24:ea:ab:26:bc:f4:7d:af:aa: 43:8d:f7:ff:59:3c:cc:6c:37:b0:89:b2:12:fe:7f: 35:8a:be:19:a2:d1:07:30:a6:14:f1:f8:63:e4:85: 55:6d:98:27:cb:90:88:4d:4e:04:66:0d:a2:13:06: ed:71:e9:43:7c:b6:62:6a:47:0f:66:81:25:c3:9c: 4c:13:03:9a:63:01:c5:05:77:8e:52:78:4b:60:5d: 4d:32:4f:f3:f8:96:02:c8:36:fc:40:03:4e:33:04: 65:3e:d7:c0:1e:fc:34:11:59:5e:3a:e0:2f:5f:33: 3c:e5:8e:d5:9c:9b:80:af:74:91:4e:42:67:ac:d0: e0:9f:d1:60:d5:f3:9b:46:a6:d2:b0:c5:15:a6:2d: f6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DE:26:1B:12:A9:7C:A9:F3:7F:14:7D:80:AE:40:36:1C:83:38:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a9e5468-acac-34c4-a1eb-dccb1eefc724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:4f:4b:e7:90:ba:3d:eb:7c:28:80:8c:06:a7:b9:e9:c6:86: f5:fb:01:f4:03:45:db:ee:dd:3c:68:cc:34:c0:3e:77:40:da: 2d:10:1c:bf:04:4b:4d:f5:b3:ff:c5:50:3f:bc:be:19:bc:53: c5:53:d5:5f:7a:a5:91:3f:a9:8d:73:f8:45:62:5c:fb:d3:28: 84:19:3d:f8:9c:61:4c:ef:02:3a:47:3a:7a:b7:32:d8:6c:28: 73:4b:27:e1:0c:14:e4:8b:12:1b:b3:66:91:dc:a7:95:1e:40: f0:a4:e6:f8:be:27:72:67:7b:20:95:48:b1:56:e9:da:12:ca: 05:c9:f5:b1:72:86:1d:09:12:0d:44:84:6d:4f:0b:ad:92:dd: 43:ca:92:10:22:6e:67:c2:27:7b:90:c3:c2:df:34:7f:6f:78: 35:e9:ef:57:31:a2:15:d2:0f:2f:35:f4:e1:18:74:20:05:98: ce:ce:2f:28:c7:e0:af:ae:ca:51:c4:b3:a2:71:43:01:69:fd: 8e:37:a6:5b:aa:c9:bd:ff:23:7d:c7:2b:69:82:bd:86:1f:27: 55:59:b6:72:c0:d2:7c:68:83:a0:04:df:a2:82:03:3c:6c:22: 0c:67:75:7a:a2:05:4e:b2:6c:f7:93:8e:95:ed:dd:b7:08:5c: 86:2f:41:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRJFzY/4a52w9QiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk M2ViODBkM2MtNTYyYi00ZjM1LTg1ZmYtZjJmYjc4MmE5NzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcOu1iFQYwRN/R7nkotkKWmgbI1LEqS+9SfM P4SjXKMRJ+AR4ctz8haXnHWR/NlmRQH4H2e7MOgHeIU7K0ijX9LNRKNFUmak6UQ3 krK+72++9ZuI0cyQGYdpgIiBa7hTQH3054cZJ2pJnFnih+0k6qsmvPR9r6pDjff/ WTzMbDewibIS/n81ir4ZotEHMKYU8fhj5IVVbZgny5CITU4EZg2iEwbtcelDfLZi akcPZoElw5xMEwOaYwHFBXeOUnhLYF1NMk/z+JYCyDb8QANOMwRlPtfAHvw0EVle OuAvXzM85Y7VnJuAr3SRTkJnrNDgn9Fg1fObRqbSsMUVpi32rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETeJhsSqXyp838UfYCuQDYcgzhPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2E5ZTU0NjgtYWNhYy0z NGM0LWExZWItZGNjYjFlZWZjNzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyhDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNPS+eQuj3rfCiAjAanuenGhvX7AfQDRdvu3TxozDTAPndA2i0QHL8E S031s//FUD+8vhm8U8VT1V96pZE/qY1z+EViXPvTKIQZPficYUzvAjpHOnq3Mths KHNLJ+EMFOSLEhuzZpHcp5UeQPCk5vi+J3JneyCVSLFW6doSygXJ9bFyhh0JEg1E hG1PC62S3UPKkhAibmfCJ3uQw8LfNH9veDXp71cxohXSDy819OEYdCAFmM7OLyjH 4K+uylHEs6JxQwFp/Y43pluqyb3/I33HK2mCvYYfJ1VZtnLA0nxog6AE36KCAzxs IgxndXqiBU6ybPeTjpXt3bcIXIYvQQY= -----END CERTIFICATE-----Generated at Sat Jun 13 10:08:48 2026 by rpki-client