$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/861ccb56-bcc5-31e3-b2a3-420b4c0b32b2.roa File: 861ccb56-bcc5-31e3-b2a3-420b4c0b32b2.roa (raw, json) Hash identifier: wvdJidzkvJSY+12K3H1QU2uPSqqondPMVwMF/qJiaHI= Subject key identifier: 24:D8:21:79:E5:AE:78:4C:52:C6:69:C8:7E:8B:FA:42:E0:EC:D3:28 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E104F112B1CBBDC30CE7EEA40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/861ccb56-bcc5-31e3-b2a3-420b4c0b32b2.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 16625 IP address blocks: 23.43.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:11:2b:1c:bb:dc:30:ce:7e:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=2eab3e26-ef88-4670-9d0f-ec51c6573889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f0:21:e5:ce:d4:22:a4:89:0f:3f:cb:2a:c4: 2e:5e:df:2a:77:88:99:b7:49:e4:60:cb:cb:06:96: 5b:33:1a:57:c4:2c:20:af:54:cd:b7:4d:c2:a6:30: 0b:1b:8a:ca:e0:f1:44:f1:07:3e:80:41:52:a5:1d: 12:69:77:88:15:c1:b3:41:3a:63:97:ef:fe:ba:1c: 05:72:03:2d:0c:ea:91:07:2d:38:24:ca:54:66:be: 37:87:2f:3d:2f:af:6d:f4:32:0e:df:3f:90:cf:93: de:3b:05:a9:68:b5:ce:b0:1d:d0:4c:99:d1:34:f8: 96:87:43:5b:66:75:dc:0c:3b:1f:af:4f:89:9b:90: c8:71:6c:67:be:f5:47:cb:96:27:fb:51:94:d4:39: ef:6e:5b:14:63:a8:9b:1b:7f:88:3d:8d:e7:83:a6: 05:9b:06:03:d7:d9:99:06:cf:69:c5:af:ae:e2:fc: 04:b6:1f:c0:de:6c:82:4b:44:cb:34:04:a5:9f:6c: 69:54:07:97:3e:6b:7e:d8:49:b3:15:2d:60:b6:84: bf:15:24:6b:5e:a9:76:64:49:76:fb:d8:64:04:f6: 14:cf:38:f6:a0:ed:e2:9d:ef:9e:66:a9:ed:c1:80: ad:2b:5e:fd:63:46:af:52:34:66:29:4c:af:f7:ef: e7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D8:21:79:E5:AE:78:4C:52:C6:69:C8:7E:8B:FA:42:E0:EC:D3:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/861ccb56-bcc5-31e3-b2a3-420b4c0b32b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:1e:df:ff:2a:ba:45:c2:40:ea:81:ba:a5:32:2b:8b:66:9e: 03:2f:79:7d:80:1c:42:da:90:5e:34:3b:d3:a4:a4:f5:f3:3b: 97:75:e6:bc:9f:cb:68:43:ee:de:10:9c:91:59:ad:5e:cd:16: 61:66:ad:0f:6d:cf:1d:2a:49:bd:b3:bf:c9:ad:4b:a6:57:61: bb:c2:45:a6:88:01:db:dc:f1:e9:50:80:8c:7b:24:74:6e:21: 17:25:16:c4:35:50:ce:af:63:55:76:e5:b0:a9:2c:1a:a4:58: 21:be:55:cd:48:2b:fd:4b:ec:92:8c:d2:27:26:d6:e0:15:50: 54:4d:a7:f0:7d:34:9b:e9:79:51:3c:c6:88:d5:41:66:58:01: 16:db:dc:8c:3b:51:20:da:fd:37:0e:53:80:7b:29:dd:d4:6b: ab:4a:44:11:e2:bb:cc:e0:9d:4d:df:95:84:84:ff:a6:85:3d: 85:2f:4a:42:89:08:0a:ea:72:d5:4d:95:c2:80:94:cf:76:b3: 32:9d:b7:a2:9a:4f:46:59:0b:96:49:cd:b9:39:16:d3:70:29: 23:14:60:bd:96:89:80:1e:c2:02:43:25:21:ac:f8:f8:c7:f7: ad:c9:c0:d7:7b:e3:b8:e5:cf:57:95:2d:16:ab:62:d7:fe:32: bb:fd:46:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTxErHLvcMM5+6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MmVhYjNlMjYtZWY4OC00NjcwLTlkMGYtZWM1MWM2NTczODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PAh5c7UIqSJDz/LKsQuXt8qd4iZt0nkYMvL BpZbMxpXxCwgr1TNt03CpjALG4rK4PFE8Qc+gEFSpR0SaXeIFcGzQTpjl+/+uhwF cgMtDOqRBy04JMpUZr43hy89L69t9DIO3z+Qz5PeOwWpaLXOsB3QTJnRNPiWh0Nb ZnXcDDsfr0+Jm5DIcWxnvvVHy5Yn+1GU1DnvblsUY6ibG3+IPY3ng6YFmwYD19mZ Bs9pxa+u4vwEth/A3myCS0TLNASln2xpVAeXPmt+2EmzFS1gtoS/FSRrXql2ZEl2 +9hkBPYUzzj2oO3ine+eZqntwYCtK179Y0avUjRmKUyv9+/nBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTYIXnlrnhMUsZpyH6L+kLg7NMoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODYxY2NiNTYtYmNjNS0z MWUzLWIyYTMtNDIwYjRjMGIzMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFysAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIe3/8qukXCQOqBuqUyK4tmngMveX2AHELakF40O9OkpPXzO5d15ryf y2hD7t4QnJFZrV7NFmFmrQ9tzx0qSb2zv8mtS6ZXYbvCRaaIAdvc8elQgIx7JHRu IRclFsQ1UM6vY1V25bCpLBqkWCG+Vc1IK/1L7JKM0icm1uAVUFRNp/B9NJvpeVE8 xojVQWZYARbb3Iw7USDa/TcOU4B7Kd3Ua6tKRBHiu8zgnU3flYSE/6aFPYUvSkKJ CArqctVNlcKAlM92szKdt6KaT0ZZC5ZJzbk5FtNwKSMUYL2WiYAewgJDJSGs+PjH 963JwNd747jlz1eVLRarYtf+Mrv9Ruo= -----END CERTIFICATE-----Generated at Sat Jun 13 16:45:32 2026 by rpki-client