$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c85bad1-cb05-31c0-9e44-4272a7b78bb7.roa File: 8c85bad1-cb05-31c0-9e44-4272a7b78bb7.roa (raw, json) Hash identifier: B7GgD8Qx8r46+gzCLDog1/B1fMKEeGTLgxqe0i7hNUY= Subject key identifier: 57:68:07:FD:25:AE:6C:39:9E:CD:44:6E:5E:B9:87:56:35:EE:85:85 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E0A7005BF6BD6268586ED0D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c85bad1-cb05-31c0-9e44-4272a7b78bb7.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 16625 IP address blocks: 23.218.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:70:05:bf:6b:d6:26:85:86:ed:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=835bdd8d-96c6-4af4-b7c4-87df272fcc31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:75:c8:5a:35:8a:07:67:88:26:53:c2:fe:31: 07:8a:52:36:a5:61:ac:77:ba:84:19:c9:ea:8f:64: d7:f4:41:14:9b:f0:17:aa:1d:8f:57:1a:4b:e2:05: df:32:87:0d:40:a2:a8:0c:ff:95:78:27:e7:78:85: 77:76:b3:a6:f7:14:12:42:e2:9c:cb:cc:de:13:81: 51:4c:37:8a:73:4b:48:44:dc:a6:54:e7:39:85:32: 0e:e2:9b:95:d8:be:b8:7d:22:42:7a:c8:73:42:39: b2:7a:64:e0:20:d3:9d:a9:97:6d:96:d7:94:c4:dc: c1:68:f6:d8:f7:db:54:6c:53:ce:13:b3:11:97:23: 92:f3:8c:3b:bf:d2:8a:d1:16:22:72:29:60:e8:0f: 3c:3f:16:81:58:70:09:0e:fa:a5:0d:1e:c8:f2:15: 32:0b:e2:2c:3c:fa:70:a6:d5:76:84:e1:23:35:09: fd:c9:93:08:ee:4e:5a:ba:11:8f:8a:13:50:d2:20: 59:fb:24:f0:7b:4d:90:33:db:61:c1:cf:c3:9d:84: 27:18:8a:3c:e5:6c:7b:31:37:8e:a8:ff:dc:de:0f: 4d:22:9d:b5:2d:c8:83:67:1b:1d:43:aa:a9:2a:c5: 11:c3:5f:d6:02:f9:d5:e3:b9:a4:d0:13:b3:11:39: 50:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:68:07:FD:25:AE:6C:39:9E:CD:44:6E:5E:B9:87:56:35:EE:85:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c85bad1-cb05-31c0-9e44-4272a7b78bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:36:a0:3b:3d:9c:c1:94:c6:1f:db:34:de:cc:d5:33:5e:82: 2b:8c:27:f9:05:b7:fe:3f:ee:ea:49:05:2c:05:a1:be:fc:9a: c3:fe:d8:2b:f0:de:e3:a2:ba:8d:ce:63:68:03:cc:a5:7d:44: 90:11:4f:6c:f3:01:f1:87:ab:fa:a3:4f:2c:aa:1f:3e:54:ab: 79:cb:28:b8:0a:b1:13:64:1b:2b:6a:92:9b:86:57:c1:89:9b: cc:5c:63:26:69:3c:f4:94:a8:b4:65:28:be:9e:28:6b:a6:67: d6:c0:29:fb:f7:9a:6f:41:8e:b8:2b:8e:52:5e:a8:ad:9a:04: 67:1b:75:56:53:82:26:6d:af:4f:10:bd:f9:f7:b7:48:5f:53: b8:ba:c1:9e:57:1b:28:af:58:6e:b8:e2:ed:1c:d2:fe:a7:6e: b2:57:cd:b5:b7:8f:c1:58:65:55:0a:a9:ed:fd:4c:f5:78:a2: a9:3f:bb:17:24:cd:51:bd:45:ae:ed:76:a0:c4:d6:6f:eb:09: 0a:77:9a:4a:79:ec:cb:35:84:77:11:d7:a1:7a:19:df:d6:45: 37:17:21:5e:91:b5:1d:c3:c7:04:24:ea:58:d7:8b:f0:85:1b: c8:d6:f0:8c:0c:b5:bb:ef:86:35:86:8d:d8:1b:27:4d:13:19: 6b:28:7d:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4KcAW/a9YmhYbtDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk ODM1YmRkOGQtOTZjNi00YWY0LWI3YzQtODdkZjI3MmZjYzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonXIWjWKB2eIJlPC/jEHilI2pWGsd7qEGcnq j2TX9EEUm/AXqh2PVxpL4gXfMocNQKKoDP+VeCfneIV3drOm9xQSQuKcy8zeE4FR TDeKc0tIRNymVOc5hTIO4puV2L64fSJCeshzQjmyemTgINOdqZdtlteUxNzBaPbY 99tUbFPOE7MRlyOS84w7v9KK0RYicilg6A88PxaBWHAJDvqlDR7I8hUyC+IsPPpw ptV2hOEjNQn9yZMI7k5auhGPihNQ0iBZ+yTwe02QM9thwc/DnYQnGIo85Wx7MTeO qP/c3g9NIp21LciDZxsdQ6qpKsURw1/WAvnV47mk0BOzETlQ9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdoB/0lrmw5ns1Ebl65h1Y17oWFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGM4NWJhZDEtY2IwNS0z MWMwLTllNDQtNDI3MmE3Yjc4YmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9qAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI42oDs9nMGUxh/bNN7M1TNegiuMJ/kFt/4/7upJBSwFob78msP+2Cvw 3uOiuo3OY2gDzKV9RJART2zzAfGHq/qjTyyqHz5Uq3nLKLgKsRNkGytqkpuGV8GJ m8xcYyZpPPSUqLRlKL6eKGumZ9bAKfv3mm9BjrgrjlJeqK2aBGcbdVZTgiZtr08Q vfn3t0hfU7i6wZ5XGyivWG644u0c0v6nbrJXzbW3j8FYZVUKqe39TPV4oqk/uxck zVG9Ra7tdqDE1m/rCQp3mkp57Ms1hHcR16F6Gd/WRTcXIV6RtR3DxwQk6ljXi/CF G8jW8IwMtbvvhjWGjdgbJ00TGWsoffA= -----END CERTIFICATE-----Generated at Sat Jun 13 19:00:26 2026 by rpki-client