$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bf23004-36d4-3d51-b88e-c1b3e2f919c5.roa File: 8bf23004-36d4-3d51-b88e-c1b3e2f919c5.roa (raw, json) Hash identifier: 9t2vYIHhV3K9F833Gc3+mgnUmLjxkYqDBRGS5eEi5uI= Subject key identifier: D6:0D:42:8F:2B:2A:F5:C6:A4:3F:62:FC:66:36:5E:F1:BD:DC:40:5F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DFA7088AD59EA0AEED6D0A240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bf23004-36d4-3d51-b88e-c1b3e2f919c5.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 16625 IP address blocks: 23.204.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:88:ad:59:ea:0a:ee:d6:d0:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=0094725e-225b-4de1-a3f2-e7cdf7ceac83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:b7:bb:56:90:5a:20:1f:a0:82:a2:dc:c2: bd:89:0d:73:c5:c6:c6:f5:78:c5:60:33:0d:9b:b1: 03:81:f2:18:f6:d6:2f:3a:ae:00:8e:c3:a9:f6:89: 4e:e5:50:3e:3c:01:8d:f4:2a:68:b9:56:55:70:a1: ee:57:30:6e:80:a2:c6:83:43:7d:2b:5f:11:94:3b: 9b:ba:63:44:61:53:4d:10:11:c4:e8:49:34:3a:54: 30:aa:b0:10:c9:40:bf:6b:62:38:0a:44:50:b8:7c: 0f:11:6e:b6:45:f6:c0:23:c2:9b:9c:88:29:4c:d3: b0:77:c8:a7:28:ae:0e:41:a1:85:03:8f:39:f7:5b: 02:59:31:41:7f:53:f7:9b:22:cc:a2:40:f6:17:27: aa:50:7a:ea:ff:1e:fe:e5:b7:b1:55:c1:40:d6:07: e7:6d:f2:2b:08:12:08:6a:f7:97:ea:75:b1:35:b2: 61:26:09:b0:91:60:5b:1b:fa:77:93:b8:da:f5:87: 7b:9e:57:bc:49:86:ce:60:ca:27:7c:33:82:86:72: d4:87:2c:2c:a0:5f:2f:ce:e7:1c:0c:44:7e:1e:1e: 99:0b:c3:37:8c:c4:0d:f2:a5:e1:4c:ec:ed:b6:50: d7:48:97:46:8c:63:aa:4b:31:75:2d:28:e4:28:cc: d9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0D:42:8F:2B:2A:F5:C6:A4:3F:62:FC:66:36:5E:F1:BD:DC:40:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bf23004-36d4-3d51-b88e-c1b3e2f919c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:75:67:1b:1a:2c:e3:ef:b8:87:d5:01:e8:78:6d:60:e1:d8: 82:18:bc:2e:0f:14:f0:15:a9:f8:44:f4:48:4f:0a:d7:6f:6e: 77:ea:01:aa:a5:83:80:6c:21:0a:1e:c7:0c:ed:28:3d:04:83: b5:63:c8:73:8c:1a:fb:24:ae:34:7b:5f:09:03:9d:24:1f:80: 52:09:b0:3d:28:c8:86:85:71:a3:6b:b9:43:d6:98:b8:02:51: ee:73:0c:20:cc:dd:8e:04:15:96:5f:51:77:9f:8f:e9:15:3b: 4b:ab:05:76:82:7c:7c:24:b4:e3:87:6d:90:22:da:1e:17:e1: b2:5a:5a:8c:3b:4c:62:a1:88:9e:7e:e0:06:a1:9a:b7:f7:5b: bb:67:9a:93:13:c3:8d:ca:30:78:2b:e3:12:a3:29:87:df:18: 08:b6:b4:66:63:b4:89:23:65:7b:1b:91:e2:75:d5:7d:48:c6: cd:89:45:48:83:aa:44:7d:91:c6:ba:5c:75:01:35:eb:d3:31: 7f:9a:a3:fa:2e:d7:a0:f5:9c:c6:80:d8:6a:eb:ca:11:97:15: 34:82:c7:30:67:f6:a5:cc:b5:02:57:c1:c2:4c:71:4f:20:80: 8c:2a:1f:b8:92:cf:82:81:3a:fc:48:ae:4e:6d:65:c8:d7:a3: 6a:2c:06:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cIitWeoK7tbQokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk MDA5NDcyNWUtMjI1Yi00ZGUxLWEzZjItZTdjZGY3Y2VhYzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3+3u1aQWiAfoIKi3MK9iQ1zxcbG9XjFYDMN m7EDgfIY9tYvOq4AjsOp9olO5VA+PAGN9CpouVZVcKHuVzBugKLGg0N9K18RlDub umNEYVNNEBHE6Ek0OlQwqrAQyUC/a2I4CkRQuHwPEW62RfbAI8KbnIgpTNOwd8in KK4OQaGFA48591sCWTFBf1P3myLMokD2FyeqUHrq/x7+5bexVcFA1gfnbfIrCBII aveX6nWxNbJhJgmwkWBbG/p3k7ja9Yd7nle8SYbOYMonfDOChnLUhywsoF8vzucc DER+Hh6ZC8M3jMQN8qXhTOzttlDXSJdGjGOqSzF1LSjkKMzZdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYNQo8rKvXGpD9i/GY2XvG93EBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGJmMjMwMDQtMzZkNC0z ZDUxLWI4OGUtYzFiM2UyZjkxOWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ1ZxsaLOPvuIfVAeh4bWDh2IIYvC4PFPAVqfhE9EhPCtdvbnfqAaql g4BsIQoexwztKD0Eg7VjyHOMGvskrjR7XwkDnSQfgFIJsD0oyIaFcaNruUPWmLgC Ue5zDCDM3Y4EFZZfUXefj+kVO0urBXaCfHwktOOHbZAi2h4X4bJaWow7TGKhiJ5+ 4Aahmrf3W7tnmpMTw43KMHgr4xKjKYffGAi2tGZjtIkjZXsbkeJ11X1Ixs2JRUiD qkR9kca6XHUBNevTMX+ao/ou16D1nMaA2GrryhGXFTSCxzBn9qXMtQJXwcJMcU8g gIwqH7iSz4KBOvxIrk5tZcjXo2osBiw= -----END CERTIFICATE-----Generated at Sat Jun 13 15:37:20 2026 by rpki-client